Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

7.4

HIGH

CVE-2016-1392

Open redirect vulnerability in Cisco Prime Collaboration Assurance Software 10.5 through 11.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCuu34121....

Affected Products : prime_collaboration_assurance
Published: May. 05, 2016

Modified: Apr. 12, 2025
9.8

CRITICAL

CVE-2016-1387

The XML API in TelePresence Codec (TC) 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.3.2, 7.3.3, 7.3.4, and 7.3.5 and Collaboration Endpoint (CE) 8.0.0, 8.0.1, and 8.1.0 in Cisco TelePresence Software mishandles authentication, which allows remote attackers to execute co...

Affected Products : telepresence_tc_software
Published: May. 05, 2016

Modified: Apr. 12, 2025
8.6

HIGH

CVE-2016-1373

The gadgets-integration API in Cisco Finesse 8.5(1) through 8.5(5), 8.6(1), 9.0(1), 9.0(2), 9.1(1), 9.1(1)SU1, 9.1(1)SU1.1, 9.1(1)ES1 through 9.1(1)ES5, 10.0(1), 10.0(1)SU1, 10.0(1)SU1.1, 10.5(1), 10.5(1)ES1 through 10.5(1)ES4, 10.5(1)SU1, 10.5(1)SU1.1, 1...

Affected Products : finesse
Published: May. 05, 2016

Modified: Apr. 12, 2025
7.8

HIGH

CVE-2016-1369

The Adaptive Security Appliance (ASA) 5585-X FirePOWER Security Services Processor (SSP) module for Cisco ASA with FirePOWER Services 5.3.1 through 6.0.0 misconfigures kernel logging, which allows remote attackers to cause a denial of service (resource co...

Affected Products : asa_with_firepower_services
Published: May. 05, 2016

Modified: Apr. 12, 2025
7.8

HIGH

CVE-2016-1368

Cisco FirePOWER System Software 5.3.x through 5.3.0.6 and 5.4.x through 5.4.0.3 on FirePOWER 7000 and 8000 appliances, and on the Advanced Malware Protection (AMP) for Networks component on these appliances, allows remote attackers to cause a denial of se...

Affected Products : firesight_system_software
Published: May. 05, 2016

Modified: Apr. 12, 2025
7.8

HIGH

CVE-2016-4535

Integer signedness error in the AV engine before DAT 8145, as used in McAfee LiveSafe 14.0, allows remote attackers to cause a denial of service (memory corruption and crash) via a crafted packed executable....

Affected Products : livesafe
Published: May. 05, 2016

Modified: Apr. 12, 2025
3.0

LOW

CVE-2016-4534

The McAfee VirusScan Console (mcconsol.exe) in McAfee VirusScan Enterprise 8.8.0 before Hotfix 1123565 (8.8.0.1546) on Windows allows local administrators to bypass intended self-protection rules and unlock the console window by closing registry handles....

Affected Products : virusscan_enterprise windows
Published: May. 05, 2016

Modified: Apr. 12, 2025
9.8

CRITICAL

CVE-2016-4351

SQL injection vulnerability in the authentication functionality in Trend Micro Email Encryption Gateway (TMEEG) 5.5 before build 1107 allows remote attackers to execute arbitrary SQL commands via unspecified vectors....

Affected Products : email_encryption_gateway
Published: May. 05, 2016

Modified: Apr. 12, 2025
5.9

MEDIUM

CVE-2016-4008

The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.8, when used without the ASN1_DECODE_FLAG_STRICT_DER flag, allows remote attackers to cause a denial of service (infinite recursion) via a crafted certificate....

Affected Products : ubuntu_linux fedora opensuse libtasn1
Published: May. 05, 2016

Modified: Apr. 12, 2025
5.5

MEDIUM

CVE-2016-3718

The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image....

Affected Products : ubuntu_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation leap enterprise_linux_server_aus enterprise_linux_server_eus enterprise_linux_server_tus enterprise_linux_eus imagemagick +21 more products
Actively Exploited

Published: May. 05, 2016

Modified: Apr. 12, 2025
7.1

HIGH

CVE-2016-3717

The LABEL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to read arbitrary files via a crafted image....

Affected Products : ubuntu_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation enterprise_linux_server_aus enterprise_linux_server_eus imagemagick enterprise_linux_hpc_node enterprise_linux_server_supplementary_eus enterprise_linux_hpc_node_eus
Published: May. 05, 2016

Modified: Apr. 12, 2025
4.3

MEDIUM

CVE-2016-3716

The MSL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to move arbitrary files via a crafted image....

Affected Products : ubuntu_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation enterprise_linux_server_aus enterprise_linux_server_eus imagemagick enterprise_linux_hpc_node enterprise_linux_server_supplementary_eus enterprise_linux_hpc_node_eus
Published: May. 05, 2016

Modified: Apr. 12, 2025
5.8

MEDIUM

CVE-2016-3715

The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image....

Affected Products : ubuntu_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation leap enterprise_linux_server_aus enterprise_linux_server_eus enterprise_linux_server_tus enterprise_linux_eus imagemagick +21 more products
Actively Exploited

Published: May. 05, 2016

Modified: Apr. 12, 2025
10.0

HIGH

CVE-2016-3714

The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to execute arbitrary code via shell metacharacters in a crafted image, aka "ImageT...

Affected Products : ubuntu_linux debian_linux leap imagemagick opensuse linux_enterprise_server suse_linux_enterprise_server ubuntu_linux
Actively Exploited

Published: May. 05, 2016

Modified: Apr. 12, 2025
6.5

MEDIUM

CVE-2016-2168

The req_check_access function in the mod_authz_svn module in the httpd server in Apache Subversion before 1.8.16 and 1.9.x before 1.9.4 allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) via a crafted heade...

Affected Products : subversion
Published: May. 05, 2016

Modified: Apr. 12, 2025
6.8

MEDIUM

CVE-2016-2167

The canonicalize_username function in svnserve/cyrus_auth.c in Apache Subversion before 1.8.16 and 1.9.x before 1.9.4, when Cyrus SASL authentication is used, allows remote attackers to authenticate and bypass intended access restrictions via a realm stri...

Affected Products : subversion
Published: May. 05, 2016

Modified: Apr. 12, 2025
8.2

HIGH

CVE-2016-2176

The X509_NAME_oneline function in crypto/x509/x509_obj.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to obtain sensitive information from process stack memory or cause a denial of service (buffer over-read) via crafted EBCDIC ...

Affected Products : openssl
Published: May. 05, 2016

Modified: Apr. 12, 2025
7.8

HIGH

CVE-2016-2109

The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in the ASN.1 BIO implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (memory consumption) via a short invalid encoding....

Affected Products : enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation enterprise_linux_server_aus enterprise_linux_server_eus openssl enterprise_linux_hpc_node enterprise_linux_hpc_node_eus
Published: May. 05, 2016

Modified: Apr. 12, 2025
10.0

HIGH

CVE-2016-2108

The ASN.1 implementation in OpenSSL before 1.0.1o and 1.0.2 before 1.0.2c allows remote attackers to execute arbitrary code or cause a denial of service (buffer underflow and memory corruption) via an ANY field in crafted serialized data, aka the "negativ...

Affected Products : android enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation enterprise_linux_server_aus enterprise_linux_server_eus openssl enterprise_linux_hpc_node enterprise_linux_hpc_node_eus
Published: May. 05, 2016

Modified: Apr. 12, 2025
5.9

MEDIUM

CVE-2016-2107

The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a certain padding check, which allows remote attackers to obtain sensitive cleartext information via a padding-oracle attack against an A...

Affected Products : android ubuntu_linux debian_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation leap enterprise_linux_server_aus enterprise_linux_server_eus openssl +5 more products
Published: May. 05, 2016

Modified: Apr. 12, 2025

Showing 20 of 292811 Results

Browse by Apps

Latest CVE Feed

7.4

9.8

8.6

7.8

7.8

7.8

3.0

9.8

5.9

5.5

7.1

4.3

5.8

10.0

6.5

6.8

8.2

7.8

10.0

5.9

Theme Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable