cve.nowby Sazabi

CVEs published April 8, 2016

31 CVEs were published on April 8, 2016: 0 critical, 0 high. Browse them by severity, product and exploitation status.

Published: 31
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 31
Now in CISA KEV: 0
Fix available: 2

Most affected products

django: 2

Medium, low and unrated 31

CVE-2015-5158Stack-based buffer overflow in hw/scsi/scsi-bus.c in QEMU, when built with SCSI-device emulation support, allows guest OS users with…UnratedApr 8, 2016
CVE-2015-8108The management interface in LenovoEMC EZ Media & Backup (hm3), ix2/ix2-dl, ix4-300d, px12-400r/450r, px6-300d, px2-300d, px4-300r…UnratedApr 8, 2016
CVE-2015-8833Use-after-free vulnerability in the create_smp_dialog function in gtk-dialog.c in the Off-the-Record Messaging (OTR) pidgin-otr plugin…UnratedApr 8, 2016
CVE-2015-8841Heap-based buffer overflow in the Archive support module in ESET NOD32 before update 11861 allows remote attackers to execute arbitrary…UnratedApr 8, 2016
CVE-2016-1568Use-after-free vulnerability in hw/ide/ahci.c in QEMU, when built with IDE AHCI Emulation support, allows guest OS users to cause a denial…UnratedApr 8, 2016
CVE-2016-1885Integer signedness error in the amd64_set_ldt function in sys/amd64/amd64/sys_machdep.c in FreeBSD 9.3 before p39, 10.1 before p31, and…UnratedApr 8, 2016
CVE-2016-2857The net_checksum_calculate function in net/checksum.c in QEMU allows local guest OS users to cause a denial of service (out-of-bounds heap…UnratedApr 8, 2016
CVE-2016-3985The Terminal Services Remote Desktop Protocol (RDP) client session restrictions feature in Pulse Connect Secure (aka PCS) 8.1R7 and 8.2R1…UnratedApr 8, 2016
CVE-2016-3986Avast allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via a crafted PE file…UnratedApr 8, 2016
CVE-2016-3987The HTTP server in Trend Micro Password Manager allows remote web servers to execute arbitrary commands via the url parameter to (1)…UnratedApr 8, 2016
CVE-2015-5229The calloc function in the glibc package in Red Hat Enterprise Linux (RHEL) 6.7 and 7.2 does not properly initialize memory areas, which…UnratedApr 8, 2016
CVE-2015-5969The mysql-systemd-helper script in the mysql-community-server package before 5.6.28-2.17.1 in openSUSE 13.2 and before 5.6.28-13.1 in…UnratedApr 8, 2016
CVE-2016-1180Cross-site scripting (XSS) vulnerability in the Cyber-Will Social-button Premium plugin before 1.1 for EC-CUBE 2.13.x allows remote…UnratedApr 8, 2016
CVE-2016-1375Cross-site scripting (XSS) vulnerability in Cisco IP Interoperability and Collaboration System 4.10(1) allows remote attackers to inject…UnratedApr 8, 2016
CVE-2016-2381Perl might allow context-dependent attackers to bypass the taint protection mechanism in a child process via duplicate environment…UnratedApr 8, 2016
CVE-2016-2512The utils.http.is_safe_url function in Django before 1.8.10 and 1.9.x before 1.9.3 allows remote attackers to redirect users to arbitrary…djangoUnratedFix availableApr 8, 2016
CVE-2016-2513The password hasher in contrib/auth/hashers.py in Django before 1.8.10 and 1.9.x before 1.9.3 allows remote attackers to enumerate users…djangoUnratedFix availableApr 8, 2016
CVE-2016-3963Siemens SCALANCE S613 allows remote attackers to cause a denial of service (web-server outage) via traffic to TCP port 443.UnratedApr 8, 2016
CVE-2016-3983McAfee Advanced Threat Defense (ATD) before 3.4.8.178 might allow remote attackers to bypass malware detection by leveraging information…UnratedApr 8, 2016
CVE-2016-3984The McAfee VirusScan Console (mcconsol.exe) in McAfee Active Response (MAR) before 1.1.0.161, Agent (MA) 5.x before 5.0.2 Hotfix 1110392…UnratedApr 8, 2016
CVE-2015-6541Multiple cross-site request forgery (CSRF) vulnerabilities in the Mail interface in Zimbra Collaboration Server (ZCS) before 8.5 allow…UnratedApr 8, 2016
CVE-2016-2315revision.c in git before 2.7.4 uses an incorrect integer data type, which allows remote attackers to execute arbitrary code via a (1) long…UnratedApr 8, 2016
CVE-2016-2324Integer overflow in Git before 2.7.4 allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees…UnratedApr 8, 2016
CVE-2016-3153SPIP 2.x before 2.1.19, 3.0.x before 3.0.22, and 3.1.x before 3.1.1 allows remote attackers to execute arbitrary PHP code by adding…UnratedApr 8, 2016
CVE-2016-3154The encoder_contexte_ajax function in ecrire/inc/filtres.php in SPIP 2.x before 2.1.19, 3.0.x before 3.0.22, and 3.1.x before 3.1.1 allows…UnratedApr 8, 2016

Show all 31 entriesShow fewer entries