cve.nowby Sazabi

CVEs published April 18, 2016

55 CVEs were published on April 18, 2016: 0 critical, 0 high. Browse them by severity, product and exploitation status.

Published: 55
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 55
Now in CISA KEV: 0
Fix available: 0

Medium, low and unrated 55

CVE-2015-7378Panda Security URL Filtering before 4.3.1.9 uses a weak ACL for the "Panda Security URL Filtering" directory and installed files, which…UnratedApr 18, 2016
CVE-2016-3941Buffer overflow in the AStreamPeekStream function in input/stream.c in VideoLAN VLC media player before 2.2.0 allows remote attackers to…UnratedApr 18, 2016
CVE-2016-3943Panda Endpoint Administration Agent before 7.50.00, as used in Panda Security for Business products for Windows, uses a weak ACL for the…UnratedApr 18, 2016
CVE-2016-3971Cross-site scripting (XSS) vulnerability in lucene_search.jsp in dotCMS before 3.5.1 allows remote attackers to inject arbitrary web…UnratedApr 18, 2016
CVE-2016-3972Directory traversal vulnerability in the dotTailLogServlet in dotCMS before 3.5.1 allows remote authenticated administrators to read…UnratedApr 18, 2016
CVE-2015-7552Heap-based buffer overflow in the gdk_pixbuf_flip function in gdk-pixbuf-scale.c in gdk-pixbuf 2.30.x allows remote attackers to cause a…UnratedApr 18, 2016
CVE-2015-8106Format string vulnerability in the CmdKeywords function in funct1.c in latex2rtf before 2.3.10 allows remote attackers to execute…UnratedApr 18, 2016
CVE-2016-3071Libreswan 3.16 might allow remote attackers to cause a denial of service (daemon restart) via an IKEv2 aes_xcbc transform.UnratedApr 18, 2016
CVE-2016-3950Huawei AR3200 routers with software before V200R006C10SPC300 allow remote authenticated users to cause a denial of service (restart) via…UnratedApr 18, 2016
CVE-2016-4036The quagga package before 0.99.23-2.6.1 in openSUSE and SUSE Linux Enterprise Server 11 SP 1 uses weak permissions for /etc/quagga, which…UnratedApr 18, 2016
CVE-2016-1651fxcodec/codec/fx_codec_jpx_opj.cpp in PDFium, as used in Google Chrome before 50.0.2661.75, does not properly implement the sycc420_to_rgb…UnratedApr 18, 2016
CVE-2016-1652Cross-site scripting (XSS) vulnerability in the ModuleSystem::RequireForJsInner function in extensions/renderer/module_system.cc in the…UnratedApr 18, 2016
CVE-2016-1653The LoadBuffer implementation in Google V8, as used in Google Chrome before 50.0.2661.75, mishandles data types, which allows remote…UnratedApr 18, 2016
CVE-2016-1654The media subsystem in Google Chrome before 50.0.2661.75 does not initialize an unspecified data structure, which allows remote attackers…UnratedApr 18, 2016
CVE-2016-1655Google Chrome before 50.0.2661.75 does not properly consider that frame removal may occur during callback execution, which allows remote…UnratedApr 18, 2016
CVE-2016-1656The download implementation in Google Chrome before 50.0.2661.75 on Android allows remote attackers to bypass intended pathname…UnratedApr 18, 2016
CVE-2016-1657The WebContentsImpl::FocusLocationBarByDefault function in content/browser/web_contents/web_contents_impl.cc in Google Chrome before…UnratedApr 18, 2016
CVE-2016-1658The Extensions subsystem in Google Chrome before 50.0.2661.75 incorrectly relies on GetOrigin method calls for origin comparisons, which…UnratedApr 18, 2016
CVE-2016-1659Multiple unspecified vulnerabilities in Google Chrome before 50.0.2661.75 allow attackers to cause a denial of service or possibly have…UnratedApr 18, 2016
CVE-2016-0834An unspecified media codec in mediaserver in Android 6.x before 2016-04-01 allows remote attackers to execute arbitrary code or cause a…UnratedApr 18, 2016
CVE-2016-0835decoder/impeg2d_dec_hdr.c in mediaserver in Android 6.x before 2016-04-01 allows remote attackers to execute arbitrary code or cause a…UnratedApr 18, 2016
CVE-2016-0836Stack-based buffer overflow in decoder/impeg2d_vld.c in mediaserver in Android 6.x before 2016-04-01 allows remote attackers to execute…UnratedApr 18, 2016
CVE-2016-0837MPEG4Extractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before…UnratedApr 18, 2016
CVE-2016-0838Sonivox in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not check for a…UnratedApr 18, 2016
CVE-2016-0839post_proc/volume_listener.c in mediaserver in Android 6.x before 2016-04-01 mishandles deleted effect context, which allows remote…UnratedApr 18, 2016

Show all 55 entriesShow fewer entries