CVEs published August 10, 2016
6 CVEs were published on August 10, 2016: 0 critical, 0 high. Browse them by severity, product and exploitation status.
- Published
- 6
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 6
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 6
- CVE-2013-7458linenoise, as used in Redis before 3.2.3, uses world-readable permissions for .rediscli_history, which allows local users to obtain…
- CVE-2016-5408Stack-based buffer overflow in the munge_other_line function in cachemgr.cgi in the squid package before 3.1.23-16.el6_8.6 in Red Hat…
- CVE-2016-5419curl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate has changed, which allows remote…
- CVE-2016-5420curl and libcurl before 7.50.1 do not check the client certificate when choosing the TLS connection to reuse, which might allow remote…
- CVE-2016-5421Use-after-free vulnerability in libcurl before 7.50.1 allows attackers to control which connection is used or possibly have unspecified…
- CVE-2016-6597Sophos EAS Proxy before 6.2.0 for Sophos Mobile Control, when Lotus Traveler is enabled, allows remote attackers to access arbitrary…