fedoraproject

CVE-2016-3071 HIGH

Libreswan 3.16 - Denial of Service via IKEv2 aes_xcbc Transform

Apr 18, 2016

CVSS 7.5

EPSS 0.03

CVE-2016-3144 MEDIUM

Block Class module 7.x-2.x < 7.x-2.2 - Authenticated Cross-Site Scripting via Class Name

Apr 15, 2016

CVSS 5.4

EPSS 0.01

CVE-2016-2146 HIGH

Fedora < 0.11.0 - Memory Corruption

Apr 15, 2016

CVSS 7.5

EPSS 0.03

CVE-2016-2145 HIGH

Fedora < 0.11.0 - Improper Input Validation

Apr 15, 2016

CVSS 7.5

EPSS 0.03

CVE-2016-0787 MEDIUM

libssh2 <1.7.0 - Info Disclosure

Apr 13, 2016

CVSS 5.9

EPSS 0.03

CVE-2016-0739 MEDIUM

libssh <0.7.3 - Info Disclosure

Apr 13, 2016

CVSS 5.9

EPSS 0.02

CVE-2016-3630 HIGH

Mercurial <3.7.3 - Remote Code Execution

Apr 13, 2016

CVSS 8.8

EPSS 0.05

CVE-2016-3159 LOW

Oracle VM Server - Information Disclosure via FPU Register Handling

Apr 13, 2016

CVSS 3.8

EPSS 0.00

CVE-2016-3158 LOW

Xen < 4.4.0 - Unauthorized Sensitive Information Exposure via xrstor Function

Apr 13, 2016

CVSS 3.8

EPSS 0.00

CVE-2016-3069 HIGH

Mercurial < 3.7.3 - Remote Code Execution via Git Repository Conversion

Apr 13, 2016

CVSS 8.8

EPSS 0.05

CVE-2016-3068 HIGH

Debian Linux < 3.7.2 - Improper Input Validation

Apr 13, 2016

CVSS 8.8

EPSS 0.05

CVE-2016-2228 MEDIUM

Debian Linux < 5.2.11 - XSS

Apr 13, 2016

CVSS 6.1

EPSS 0.02

CVE-2016-2166 MEDIUM

Apache Qpid Proton < 0.12.1 - Unencrypted Connection for AMQPS URI Scheme

Apr 12, 2016

CVSS 6.5

EPSS 0.04

CVE-2016-2216 HIGH

Node.js HTTP Response Splitting via UTF-8 Encoded Unicode Characters

Apr 07, 2016

CVSS 7.5

EPSS 0.07

CVE-2016-2086 HIGH

Node.js 0.10.x < 0.10.42, 0.12.x < 0.12.10, 4.x < 4.3.0, 5.x < 5.6.0 - HTTP Request Smuggling via Content-Length Header

Apr 07, 2016

CVSS 7.5

EPSS 0.06

CVE-2016-0729 CRITICAL

Apache Xerces-C <3.1.3 - Buffer Overflow

Apr 07, 2016

CVSS 9.8

EPSS 0.09

CVE-2016-3125 HIGH

ProFTPD < 1.3.5b and 1.3.6 < 1.3.6rc2 - Weak Diffie-Hellman Key via TLSDHParamFile Directive

Apr 05, 2016

CVSS 7.5

EPSS 0.07

CVE-2016-1286 HIGH

ISC BIND 9.x <9.9.8-P4/9.10.x <9.10.3-P4 - DoS

Mar 09, 2016

CVSS 8.6

EPSS 0.62

CVE-2016-1285 MEDIUM

ISC BIND 9.x <9.9.8-P4,9.10.x <9.10.3-P4 - DoS

Mar 09, 2016

CVSS 6.8

EPSS 0.59

CVE-2016-2316 MEDIUM

Fedora - Integer Underflow

Feb 22, 2016

CVSS 5.9

EPSS 0.05

CVE-2016-0725 MEDIUM

Moodle <2.8.10-3.0.2 - XSS

Feb 22, 2016

CVSS 6.1

EPSS 0.02

CVE-2016-0724 MEDIUM

Moodle < 2.6.11, 2.7.x < 2.7.12, 2.8.x < 2.8.10, 2.9.x < 2.9.4, 3.0.x < 3.0.2 - Information Disclosure

Feb 22, 2016

CVSS 4.3

EPSS 0.02

CVE-2016-2045 MEDIUM

phpMyAdmin 4.5.x < 4.5.4 - Authenticated Cross-Site Scripting via SQL Editor

Feb 20, 2016

CVSS 5.4

EPSS 0.02

CVE-2016-2044 MEDIUM

phpMyAdmin <4.5.4 - Info Disclosure

Feb 20, 2016

CVSS 5.3

EPSS 0.02

CVE-2016-2043 MEDIUM

phpMyAdmin <4.4.15.3, <4.5.4 - XSS

Feb 20, 2016

CVSS 5.4

EPSS 0.01