CVEs published June 7, 2016
21 CVEs were published on June 7, 2016: 1 critical, 0 high. 1 is now in CISA KEV.
- Published
- 21
- Critical
- 1
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 20
- Now in CISA KEV
- 1
- Fix available
- 7
Most affected products
- doctrine/annotations · doctrine/cache +9
- 1
- katello
- 1
- org.apache.james:james-server
- 1
- org.apache.shiro:shiro-core
- 1
- org.apache.struts:struts2-core
- 1
- org.apache.struts:struts2-core · ognl:ognl
- 1
- zendframework/zendframework1
- 1
Critical 1
Medium, low and unrated 20
- CVE-2013-7440The ssl.match_hostname function in CPython (aka Python) before 2.7.9 and 3.x before 3.3.3 does not properly handle wildcards in hostnames, w
- CVE-2016-3072Multiple SQL injection vulnerabilities in the scoped_search function in app/controllers/katello/api/v2/api_controller.rb in Katello allow rekatello
- CVE-2016-3087Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attackerorg.apache.struts:struts2-core
- CVE-2016-3093Apache Struts 2.0.0 through 2.3.24.1 does not properly cache method references when used with OGNL before 3.0.12, which allows remote attackorg.apache.struts:struts2-core · ognl:ognl
- CVE-2016-4545Virtual servers in F5 BIG-IP 11.5.4, when SSL profiles are enabled, allow remote attackers to cause a denial of service (resource consumptio
- CVE-2014-8177The Red Hat gluster-swift package, as used in Red Hat Gluster Storage (formerly Red Hat Storage Server), allows remote authenticated users t
- CVE-2014-9746The (1) t1_parse_font_matrix function in type1/t1load.c, (2) cid_parse_font_matrix function in cid/cidload.c, (3) t42_parse_font_matrix func
- CVE-2014-9747The t42_parse_encoding function in type42/t42parse.c in FreeType before 2.5.4 does not properly update the current position for immediates-o
- CVE-2015-5228The service daemon in CRIU creates log and dump files insecurely, which allows local users to create arbitrary files and take ownership of e
- CVE-2015-5231The service daemon in CRIU does not properly restrict access to non-dumpable processes, which allows local users to obtain sensitive informa
- CVE-2015-5260Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to cause a denial of service (heap-based memory corruption and QEMU-
- CVE-2015-5261Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to read and write to arbitrary memory locations on the host via gues
- CVE-2015-5723Doctrine Annotations before 1.2.7, Cache before 1.3.2 and 1.4.x before 1.4.2, Common before 2.4.3 and 2.5.x before 2.5.1, ORM before 2.4.8 odoctrine/annotations · doctrine/cache +9
- CVE-2015-7611Apache James Server 2.3.2, when configured with file-based user repositories, allows attackers to execute arbitrary system commands via unsporg.apache.james:james-server
- CVE-2015-7695The PDO adapters in Zend Framework before 1.12.16 do not filer null bytes in SQL statements, which allows remote attackers to execute arbitrzendframework/zendframework1
- CVE-2016-2335The CInArchive::ReadFileItem method in Archive/Udf/UdfIn.cpp in 7zip 9.20 and 15.05 beta and p7zip allows remote attackers to cause a denial
- CVE-2016-4450os/unix/ngx_files.c in nginx before 1.10.1 and 1.11.x before 1.11.1 allows remote attackers to cause a denial of service (NULL pointer deref
- CVE-2016-4962The libxl device-handling in Xen 4.6.x and earlier allows local OS guest administrators to cause a denial of service (resource consumption o
- CVE-2016-4963The libxl device-handling in Xen through 4.6.x allows local guest OS users with access to the driver domain to cause a denial of service (ma
- CVE-2016-5242The p2m_teardown function in arch/arm/p2m.c in Xen 4.4.x through 4.6.x allows local guest OS users with access to the driver domain to cause