CVE & Exploit Intelligence Database

CVE-2016-2499 5.5 MEDIUM EPSS 0.00

AudioSource.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not initialize certain data, which allows attackers to obtain sensitive information via a crafted application, aka internal bug 27855172.

CWE-200 Jun 13, 2016

CVE-2016-2498 5.5 MEDIUM EPSS 0.00

The Qualcomm Wi-Fi driver in Android before 2016-06-01 on Nexus 7 (2013) devices allows attackers to bypass intended data-access restrictions via a crafted application, aka internal bug 27777162.

CWE-200 Jun 13, 2016

CVE-2016-2495 5.5 MEDIUM EPSS 0.00

SampleTable.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 allows remote attackers to cause a denial of service (device hang or reboot) via a crafted file, aka internal bug 28076789.

CWE-20 Jun 13, 2016

CVE-2016-4429 5.9 MEDIUM EPSS 0.02

Stack-based buffer overflow in the clntudp_call function in sunrpc/clnt_udp.c in the GNU C Library (aka glibc or libc6) allows remote servers to cause a denial of service (crash) or possibly unspecified other impact via a flood of crafted ICMP and UDP packets.

CWE-787 Jun 10, 2016

CVE-2016-3085 6.5 MEDIUM EPSS 0.00

Apache CloudStack 4.5.x before 4.5.2.1, 4.6.x before 4.6.2.1, 4.7.x before 4.7.1.1, and 4.8.x before 4.8.0.1, when SAML-based authentication is enabled and used, allow remote attackers to bypass authentication and access the user interface via vectors related to the SAML plugin.

CWE-287 Jun 10, 2016

CVE-2016-4524 6.5 MEDIUM EPSS 0.00

ABB PCM600 before 2.7 improperly stores OPC Server IEC61850 passwords in unspecified temporary circumstances, which allows local users to obtain sensitive information via unknown vectors.

CWE-284 Jun 10, 2016

CVE-2016-4495 5.3 MEDIUM EPSS 0.00

KMC Controls BAC-5051E devices with firmware before E0.2.0.2 allow remote attackers to bypass intended access restrictions and read a configuration file via unspecified vectors.

CWE-284 Jun 10, 2016

CVE-2016-1582 5.5 MEDIUM EPSS 0.00

LXD before 2.0.2 does not properly set permissions when switching an unprivileged container into privileged mode, which allows local users to access arbitrary world readable paths in the container directory via unspecified vectors.

CWE-200 Jun 09, 2016

CVE-2016-1581 5.5 MEDIUM EPSS 0.00

LXD before 2.0.2 uses world-readable permissions for /var/lib/lxd/zfs.img when setting up a loop based ZFS pool, which allows local users to copy and read data from arbitrary containers via unspecified vectors.

CWE-284 Jun 09, 2016

CVE-2016-3703 5.3 MEDIUM EPSS 0.00

Red Hat OpenShift Enterprise 3.2 and 3.1 do not properly validate the origin of a request when anonymous access is granted to a service/proxy or pod/proxy API for a specific pod, which allows remote attackers to access API credentials in the web browser localStorage via an access_token in the query parameter.

CWE-284 Jun 08, 2016

CVE-2016-2149 6.5 MEDIUM EPSS 0.00

Red Hat OpenShift Enterprise 3.2 allows remote authenticated users to read log files from another namespace by using the same name as a previously deleted namespace when creating a new namespace.

CWE-200 Jun 08, 2016

CVE-2016-2142 5.5 MEDIUM EPSS 0.00

Red Hat OpenShift Enterprise 3.1 uses world-readable permissions on the /etc/origin/master/master-config.yaml configuration file, which allows local users to obtain Active Directory credentials by reading the file.

CWE-200 Jun 08, 2016

CVE-2016-4363 6.1 MEDIUM EPSS 0.01

HPE Insight Control server deployment allows remote attackers to modify data via unspecified vectors.

CWE-79 Jun 08, 2016

CVE-2016-2078 6.1 MEDIUM EPSS 0.00

Cross-site scripting (XSS) vulnerability in the Web Client in VMware vCenter Server 5.1 before update 3d, 5.5 before update 3d, and 6.0 before update 2 on Windows allows remote attackers to inject arbitrary web script or HTML via the flashvars parameter.

CWE-79 Jun 08, 2016

CVE-2016-3093 5.3 MEDIUM EPSS 0.06

Apache Struts 2.0.0 through 2.3.24.1 does not properly cache method references when used with OGNL before 3.0.12, which allows remote attackers to cause a denial of service (block access to a web site) via unspecified vectors.

CWE-20 Jun 07, 2016

CVE-2013-7440 5.9 MEDIUM EPSS 0.00

The ssl.match_hostname function in CPython (aka Python) before 2.7.9 and 3.x before 3.3.3 does not properly handle wildcards in hostnames, which might allow man-in-the-middle attackers to spoof servers via a crafted certificate.

CWE-19 Jun 07, 2016

CVE-2016-5242 5.6 MEDIUM EPSS 0.00

The p2m_teardown function in arch/arm/p2m.c in Xen 4.4.x through 4.6.x allows local guest OS users with access to the driver domain to cause a denial of service (NULL pointer dereference and host OS crash) by creating concurrent domains and holding references to them, related to VMID exhaustion.

Jun 07, 2016

CVE-2016-4963 4.7 MEDIUM EPSS 0.00

The libxl device-handling in Xen through 4.6.x allows local guest OS users with access to the driver domain to cause a denial of service (management tool confusion) by manipulating information in the backend directories in xenstore.

CWE-284 Jun 07, 2016

CVE-2016-4962 6.7 MEDIUM EPSS 0.00

The libxl device-handling in Xen 4.6.x and earlier allows local OS guest administrators to cause a denial of service (resource consumption or management facility confusion) or gain host OS privileges by manipulating information in guest controlled areas of xenstore.

CWE-264 Jun 07, 2016

CVE-2015-5231 5.5 MEDIUM EPSS 0.00

The service daemon in CRIU does not properly restrict access to non-dumpable processes, which allows local users to obtain sensitive information via (1) process dumps or (2) ptrace access.

CWE-200 Jun 07, 2016