Skip to content
OpenAdvisories

Archive

3 March 2016

Vulnerabilities first published on this day (UTC), newest first.

← February 2016 2016 / March /3 April 2016 →
  1. 16
  2. 24
  3. 319
  4. 414
  5. 5 
  6. 616
  7. 7 
  8. 8 
  9. 953
  10. 10 
  11. 11 
  12. 1249
  13. 1347
  14. 145
  15. 152
  16. 165
  17. 174
  18. 1811
  19. 194
  20. 20 
  21. 211
  22. 224
  23. 23 
  24. 2462
  25. 251
  26. 267
  27. 27 
  28. 284
  29. 298
  30. 302
  31. 312
All Critical High Medium Low Exploited only Public exploit

19 results · Feed

  • Unscored —
    CVE-2015-0718

    Cisco NX-OS 4.0 through 6.1 on Nexus 1000V 3000, 4000, 5000, 6000, and 7000 devices and Unified Computing System (UCS) …

  • Unscored —
    CVE-2015-7490

    IBM InfoSphere Information Server 8.5 through FP3, 8.7 through FP2, 9.1 through 9.1.2.0, 11.3 through 11.3.1.2, and 11.…

  • Unscored —
    CVE-2015-6260

    Cisco NX-OS 7.1(1)N1(1) on Nexus 5500, 5600, and 6000 devices does not properly validate PDUs in SNMP packets, which al…

  • Unscored —
    CVE-2016-0227

    Cross-site scripting (XSS) vulnerability in the document-list control implementation in IBM Business Process Manager (B…

  • Unscored —
    CVE-2016-1357

    The password-management administration component in Cisco Policy Suite (CPS) 7.0.1.3, 7.0.2, 7.0.2-att, 7.0.3-att, 7.0.…

  • Unscored —
    CVE-2016-1288

    The HTTPS Proxy feature in Cisco AsyncOS before 8.5.3-051 and 9.x before 9.0.0-485 on Web Security Appliance (WSA) devi…

  • Unscored —
    CVE-2016-1158

    Cross-site request forgery (CSRF) vulnerability on Corega CG-WLBARGMH and CG-WLBARGNL devices allows remote attackers t…

  • Unscored —
    CVE-2016-1358

    Cisco Prime Infrastructure 2.2, 3.0, and 3.1(0.0) allows remote authenticated users to read arbitrary files or cause a …

  • Unscored —
    CVE-2016-1356

    Cisco FireSIGHT System Software 6.1.0 does not use a constant-time algorithm for verifying credentials, which makes it …

  • Unscored —
    CVE-2016-1359

    Cisco Prime Infrastructure 3.0 allows remote authenticated users to execute arbitrary code via a crafted HTTP request t…

  • Unscored —
    CVE-2016-2842 EPSS 54%

    The doapr_outch function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not verify…

    openssl openssl Debian Ubuntu
  • Unscored —
    CVE-2016-1355

    Cross-site scripting (XSS) vulnerability in the Device Management UI in the management interface in Cisco FireSIGHT Sys…

  • Unscored —
    CVE-2016-1354

    Cross-site scripting (XSS) vulnerability in Cisco Unified Communications Domain Manager (UCDM) 8.x before 8.1.1 allows …

  • Unscored —
    CVE-2016-1329

    Cisco NX-OS 6.0(2)U6(1) through 6.0(2)U6(5) on Nexus 3000 devices and 6.0(2)A6(1) through 6.0(2)A6(5) and 6.0(2)A7(1) o…

  • Unscored —
    CVE-2016-0702 Public exploit

    The MOD_EXP_CTIME_COPY_FROM_PREBUF function in crypto/bn/bn_exp.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2…

    openssl openssl Debian Ubuntu
  • Unscored —
    CVE-2016-0797 EPSS 27%

    Multiple integer overflows in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allow remote attackers to cause a den…

    openssl openssl Debian Ubuntu
  • Unscored —
    CVE-2016-0705 EPSS 26%

    Double free vulnerability in the dsa_priv_decode function in crypto/dsa/dsa_ameth.c in OpenSSL 1.0.1 before 1.0.1s and …

    openssl openssl Debian Ubuntu
  • Unscored —
    CVE-2016-0799 EPSS 32%

    The fmtstr function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g improperly calculate…

    openssl openssl Debian Ubuntu
  • Unscored —
    CVE-2016-0798 EPSS 24%

    Memory leak in the SRP_VBASE_get_by_user implementation in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows r…

    openssl openssl Debian Ubuntu