# CVEs published 2016-04-19

14 CVEs were published on April 19, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2014-9761](https://cve.now/CVE-2014-9761.md): Multiple stack-based buffer overflows in the GNU C Library (aka glibc or libc6) before 2.23 allow context-dependent attackers to cause a… (no CVSS)
- [CVE-2014-9765](https://cve.now/CVE-2014-9765.md): Buffer overflow in the main\_get\_appheader function in xdelta3-main.h in xdelta3 before 3.0.9 allows remote attackers to execute arbitrary… (no CVSS)
- [CVE-2015-1776](https://cve.now/CVE-2015-1776.md): Apache Hadoop 2.6.x encrypts intermediate data generated by a MapReduce job and stores it along with the encryption key in a credentials… (no CVSS, org.apache.hadoop:hadoop-common)
- [CVE-2015-7511](https://cve.now/CVE-2015-7511.md): Libgcrypt before 1.6.5 does not properly perform elliptic-point curve multiplication during decryption, which makes it easier for… (no CVSS)
- [CVE-2015-8776](https://cve.now/CVE-2015-8776.md): The strftime function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of… (no CVSS)
- [CVE-2015-8778](https://cve.now/CVE-2015-8778.md): Integer overflow in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service… (no CVSS)
- [CVE-2015-8779](https://cve.now/CVE-2015-8779.md): Stack-based buffer overflow in the catopen function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent… (no CVSS)
- [CVE-2016-0741](https://cve.now/CVE-2016-0741.md): slapd/connection.c in 389 Directory Server (formerly Fedora Directory Server) 1.3.4.x before 1.3.4.7 allows remote attackers to cause a… (no CVSS)
- [CVE-2016-2390](https://cve.now/CVE-2016-2390.md): The FwdState::connectedToPeer method in FwdState.cc in Squid before 3.5.14 and 4.0.x before 4.0.6 does not properly handle SSL handshake… (no CVSS)
- [CVE-2015-5479](https://cve.now/CVE-2015-5479.md): The ff\_h263\_decode\_mba function in libavcodec/ituh263dec.c in Libav before 11.5 allows remote attackers to cause a denial of service… (no CVSS)
- [CVE-2016-3186](https://cve.now/CVE-2016-3186.md): Buffer overflow in the readextension function in gif2tiff.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service… (no CVSS)
- [CVE-2016-3688](https://cve.now/CVE-2016-3688.md): SQL injection vulnerability in dotCMS before 3.5 allows remote administrators to execute arbitrary SQL commands via the c0-e3 parameter to… (no CVSS)
- [CVE-2016-3960](https://cve.now/CVE-2016-3960.md): Integer overflow in the x86 shadow pagetable code in Xen allows local guest OS users to cause a denial of service (host crash) or possibly… (no CVSS)
- [CVE-2016-4040](https://cve.now/CVE-2016-4040.md): SQL injection vulnerability in the Workflow Screen in dotCMS before 3.3.2 allows remote administrators to execute arbitrary SQL commands… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2016-04-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.