cve.nowby Sazabi

CVEs published April 22, 2016

29 CVEs were published on April 22, 2016: 0 critical, 0 high. Browse them by severity, product and exploitation status.

Published: 29
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 29
Now in CISA KEV: 0
Fix available: 0

Medium, low and unrated 29

CVE-2015-8823Use-after-free vulnerability in the TextField object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before…UnratedApr 22, 2016
CVE-2016-1036Cross-site scripting (XSS) vulnerability in Adobe Analytics AppMeasurement for Flash Library before 4.0.1, when debugTracking is enabled…UnratedApr 22, 2016
CVE-2016-1916Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (BES) 12 before 12.4.1 allows remote…UnratedApr 22, 2016
CVE-2016-1917Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (BES) 12 before 12.4.1 allows remote…UnratedApr 22, 2016
CVE-2016-1918Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (BES) 12 before 12.4.1 allows remote…UnratedApr 22, 2016
CVE-2016-2203The management console on Symantec Messaging Gateway (SMG) Appliance devices before 10.6.1 allows local users to discover an encrypted AD…UnratedApr 22, 2016
CVE-2016-2204The management console on Symantec Messaging Gateway (SMG) Appliance devices before 10.6.1 allows local users to obtain root-shell access…UnratedApr 22, 2016
CVE-2016-3126Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (BES) 12 before 12.4.1 allows remote…UnratedApr 22, 2016
CVE-2016-4059Use-after-free vulnerability in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to execute arbitrary code via…UnratedApr 22, 2016
CVE-2016-4060Use-after-free vulnerability in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to cause a denial of service…UnratedApr 22, 2016
CVE-2016-4061Foxit Reader and PhantomPDF before 7.3.4 on Windows allow remote attackers to cause a denial of service (application crash) via a crafted…UnratedApr 22, 2016
CVE-2016-4062Foxit Reader and PhantomPDF before 7.3.4 on Windows improperly report format errors recursively, which allows remote attackers to cause a…UnratedApr 22, 2016
CVE-2016-4063Use-after-free vulnerability in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to execute arbitrary code via…UnratedApr 22, 2016
CVE-2016-4064Use-after-free vulnerability in the XFA forms handling functionality in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote…UnratedApr 22, 2016
CVE-2016-4065The ConvertToPDF plugin in Foxit Reader and PhantomPDF before 7.3.4 on Windows, when the gflags app is enabled, allows remote attackers to…UnratedApr 22, 2016
CVE-2016-1593Directory traversal vulnerability in the import users feature in Micro Focus Novell Service Desk before 7.2 allows remote authenticated…UnratedApr 22, 2016
CVE-2016-1594Micro Focus Novell Service Desk before 7.2 allows remote authenticated users to read arbitrary attachments via a request to a LiveTime.woa…UnratedApr 22, 2016
CVE-2016-1595LiveTime/WebObjects/LiveTime.woa/wa/DownloadAction/downloadFile in Micro Focus Novell Service Desk before 7.2 allows remote authenticated…UnratedApr 22, 2016
CVE-2016-1596Multiple cross-site scripting (XSS) vulnerabilities in Micro Focus Novell Service Desk before 7.2 allow remote authenticated users to…UnratedApr 22, 2016
CVE-2016-2299SQL injection vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to execute arbitrary SQL commands via…UnratedApr 22, 2016
CVE-2016-2300Ecava IntegraXor before 5.0 build 4522 allows remote attackers to bypass authentication and access unspecified web pages via unknown…UnratedApr 22, 2016
CVE-2016-2301SQL injection vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote authenticated users to execute arbitrary SQL commands…UnratedApr 22, 2016
CVE-2016-2302Ecava IntegraXor before 5.0 build 4522 allows remote attackers to obtain sensitive information by reading detailed error messages.UnratedApr 22, 2016
CVE-2016-2303CRLF injection vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to inject arbitrary HTTP headers and…UnratedApr 22, 2016
CVE-2016-2304Ecava IntegraXor before 5.0 build 4522 does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it…UnratedApr 22, 2016

Show all 29 entriesShow fewer entries