# CVEs published 2016-04-19

14 CVEs were published on April 19, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2014-9761](https://cve.now/CVE-2014-9761.md): Multiple stack-based buffer overflows in the GNU C Library (aka glibc or libc6) before 2.23 allow context-dependent attackers to cause a den (no CVSS)
- [CVE-2014-9765](https://cve.now/CVE-2014-9765.md): Buffer overflow in the main\_get\_appheader function in xdelta3-main.h in xdelta3 before 3.0.9 allows remote attackers to execute arbitrary co (no CVSS)
- [CVE-2015-1776](https://cve.now/CVE-2015-1776.md): Apache Hadoop 2.6.x encrypts intermediate data generated by a MapReduce job and stores it along with the encryption key in a credentials fil (no CVSS, org.apache.hadoop:hadoop-common)
- [CVE-2015-7511](https://cve.now/CVE-2015-7511.md): Libgcrypt before 1.6.5 does not properly perform elliptic-point curve multiplication during decryption, which makes it easier for physically (no CVSS)
- [CVE-2015-8776](https://cve.now/CVE-2015-8776.md): The strftime function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (no CVSS)
- [CVE-2015-8778](https://cve.now/CVE-2015-8778.md): Integer overflow in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (appl (no CVSS)
- [CVE-2015-8779](https://cve.now/CVE-2015-8779.md): Stack-based buffer overflow in the catopen function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers (no CVSS)
- [CVE-2016-0741](https://cve.now/CVE-2016-0741.md): slapd/connection.c in 389 Directory Server (formerly Fedora Directory Server) 1.3.4.x before 1.3.4.7 allows remote attackers to cause a deni (no CVSS)
- [CVE-2016-2390](https://cve.now/CVE-2016-2390.md): The FwdState::connectedToPeer method in FwdState.cc in Squid before 3.5.14 and 4.0.x before 4.0.6 does not properly handle SSL handshake err (no CVSS)
- [CVE-2015-5479](https://cve.now/CVE-2015-5479.md): The ff\_h263\_decode\_mba function in libavcodec/ituh263dec.c in Libav before 11.5 allows remote attackers to cause a denial of service (divide (no CVSS)
- [CVE-2016-3186](https://cve.now/CVE-2016-3186.md): Buffer overflow in the readextension function in gif2tiff.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (applicati (no CVSS)
- [CVE-2016-3688](https://cve.now/CVE-2016-3688.md): SQL injection vulnerability in dotCMS before 3.5 allows remote administrators to execute arbitrary SQL commands via the c0-e3 parameter to d (no CVSS)
- [CVE-2016-3960](https://cve.now/CVE-2016-3960.md): Integer overflow in the x86 shadow pagetable code in Xen allows local guest OS users to cause a denial of service (host crash) or possibly g (no CVSS)
- [CVE-2016-4040](https://cve.now/CVE-2016-4040.md): SQL injection vulnerability in the Workflow Screen in dotCMS before 3.3.2 allows remote administrators to execute arbitrary SQL commands via (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-04-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.