Skip to content
OpenAdvisories

Archive

30 January 2016

Vulnerabilities first published on this day (UTC), newest first.

← December 2015 2016 / January /30 February 2016 →
  1. 112
  2. 227
  3. 316
  4. 433
  5. 510
  6. 613
  7. 7 
  8. 847
  9. 916
  10. 105
  11. 1110
  12. 1224
  13. 1328
  14. 1420
  15. 1540
  16. 167
  17. 177
  18. 188
  19. 1911
  20. 2013
  21. 21216
  22. 2215
  23. 232
  24. 24 
  25. 2511
  26. 2612
  27. 2715
  28. 281
  29. 2919
  30. 3015
  31. 3116
All Critical High Medium Low Exploited only Public exploit

15 results · Feed

  • Unscored —
    CVE-2016-0867

    CAREL PlantVisorEnhanced allows remote attackers to bypass intended access restrictions via a direct file request.

  • Unscored —
    CVE-2016-1985

    HPE Operations Manager 8.x and 9.0 on Windows allows remote attackers to execute arbitrary commands via a crafted seria…

  • Unscored —
    CVE-2016-1136

    Cross-site scripting (XSS) vulnerability on KDDI HOME SPOT CUBE devices before 2 allows remote authenticated users to i…

  • Unscored —
    CVE-2016-1140

    KDDI HOME SPOT CUBE devices before 2 allow remote attackers to conduct clickjacking attacks via unspecified vectors.

  • Unscored —
    CVE-2016-1139

    Cross-site request forgery (CSRF) vulnerability on KDDI HOME SPOT CUBE devices before 2 allows remote attackers to hija…

  • Unscored —
    CVE-2016-1145

    Directory traversal vulnerability in WebManager in NEC EXPRESSCLUSTER X through 3.3 11.31 on Windows and through 3.3 3.…

  • Unscored —
    CVE-2016-1143

    Cross-site scripting (XSS) vulnerability in main.rb in Vine MV before 2015-11-08 allows remote attackers to inject arbi…

  • Unscored —
    CVE-2016-1141

    KDDI HOME SPOT CUBE devices before 2 allow remote authenticated users to execute arbitrary OS commands via unspecified …

  • Unscored —
    CVE-2016-1138

    CRLF injection vulnerability on KDDI HOME SPOT CUBE devices before 2 allows remote attackers to inject arbitrary HTTP h…

  • Unscored —
    CVE-2016-1144

    Cross-site scripting (XSS) vulnerability in JOB-CUBE -JOB WEB SYSTEM before 1.2.2 and -JOB WEB SYSTEM High Income 1.0.6…

  • Unscored —
    CVE-2016-1137

    Open redirect vulnerability on KDDI HOME SPOT CUBE devices before 2 allows remote attackers to redirect users to arbitr…

  • Unscored —
    CVE-2015-7923

    Westermo WeOS before 4.19.0 uses the same SSL private key across different customers' installations, which makes it eas…

  • Unscored —
    CVE-2016-1304

    Cross-site scripting (XSS) vulnerability in Cisco Unity Connection 10.5(2.3009) allows remote attackers to inject arbit…

  • Unscored —
    CVE-2016-1303

    The web GUI on Cisco Small Business 500 devices 1.2.0.92 allows remote attackers to cause a denial of service via a cra…

  • Unscored —
    CVE-2016-1488

    Cross-site scripting (XSS) vulnerability in the login form in the integrated web server on Siemens OZW OZW672 devices b…