CVEs published June 1, 2016
17 CVEs were published on June 1, 2016: 1 critical, 0 high. 1 is now in CISA KEV.
- Published
- 17
- Critical
- 1
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 16
- Now in CISA KEV
- 1
- Fix available
- 7
Most affected products
- github.com/opencontainers/runc
- 1
- org.apache.activemq:activemq-client
- 1
- org.apache.pdfbox:pdfbox
- 1
- org.apache.qpid:qpid-broker
- 1
- org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol · org…
- 1
- symfony/security-core · symfony/security +1
- 1
- symfony/security-http · symfony/security +1
- 1
Critical 1
Medium, low and unrated 16
- CVE-2015-8875Multiple integer overflows in the (1) pixops_composite_nearest, (2) pixops_composite_color_nearest, and (3) pixops_process functions in pixo
- CVE-2016-1902The nextBytes function in the SecureRandom class in Symfony before 2.3.37, 2.6.x before 2.6.13, and 2.7.x before 2.7.9 does not properly gensymfony/security-core · symfony/security +1
- CVE-2016-4423The attemptAuthentication function in Component/Security/Http/Firewall/UsernamePasswordFormAuthenticationListener.php in Symfony before 2.3.symfony/security-http · symfony/security +1
- CVE-2016-4453The vmsvga_fifo_run function in hw/display/vmware_vga.c in QEMU allows local guest OS administrators to cause a denial of service (infinite
- CVE-2016-4454The vmsvga_fifo_read_raw function in hw/display/vmware_vga.c in QEMU allows local guest OS administrators to obtain sensitive host memory in
- CVE-2016-4810Citrix Studio before 7.6.1000, Citrix XenDesktop 7.x before 7.6 LTSR Cumulative Update 1 (CU1), and Citrix XenApp 7.5 and 7.6 allow attacker
- CVE-2016-4945Cross-site scripting (XSS) vulnerability in vpn/js/gateway_login_form_view.js in Citrix NetScaler Gateway 11.0 before Build 66.11 allows rem
- CVE-2016-5126Heap-based buffer overflow in the iscsi_aio_ioctl function in block/iscsi.c in QEMU allows local guest OS users to cause a denial of service
- CVE-2016-1234Stack-based buffer overflow in the glob implementation in GNU C Library (aka glibc) before 2.24, when GLOB_ALTDIRFUNC is used, allows contex
- CVE-2016-2175Apache PDFBox before 1.8.12 and 2.x before 2.0.1 does not properly initialize the XML parsers, which allows context-dependent attackers to corg.apache.pdfbox:pdfbox
- CVE-2016-3075Stack-based buffer overflow in the nss_dns implementation of the getnetbyname function in GNU C Library (aka glibc) before 2.24 allows conte
- CVE-2016-3094PlainSaslServer.java in Apache Qpid Java before 6.0.3, when the broker is configured to allow plaintext passwords, allows remote attackers torg.apache.qpid:qpid-broker
- CVE-2016-3697libcontainer/user/user.go in runC before 0.1.0, as used in Docker before 1.11.2, improperly treats a numeric UID as a potential username, whgithub.com/opencontainers/runc
- CVE-2016-4432The AMQP 0-8, 0-9, 0-91, and 0-10 connection handling in Apache Qpid Java before 6.0.3 might allow remote attackers to bypass authenticationorg.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol · org…
- CVE-2016-0288IBM Security AppScan Standard 8.7.x, 8.8.x, and 9.x before 9.0.3.2 and Security AppScan Enterprise allow remote authenticated users to read
- CVE-2016-4500Moxa UC-7408 LX-Plus devices allow remote authenticated users to write to the firmware, and consequently render a device unusable, by levera