Skip to content
OpenAdvisories

Archive

18 March 2016

Vulnerabilities first published on this day (UTC), newest first.

11 results · Feed

  • Unscored —

    SQL injection vulnerability in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6-MP4 allows remote authentica…

  • Unscored —

    The SysPlant.sys driver in the Application and Device Control (ADC) component in the client in Symantec Endpoint Protec…

  • Unscored —

    Cross-site request forgery (CSRF) vulnerability in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6-MP4 allo…

  • Unscored —

    IBM Tivoli NetView Access Services (NVAS) allows remote authenticated users to gain privileges by entering the ADM comm…

  • Unscored —

    Siemens APOGEE Insight uses weak permissions for the application folder, which allows local users to obtain sensitive i…

  • Unscored —

    Untrusted search path vulnerability in ABB Panel Builder 800 5.1 allows local users to gain privileges via a Trojan hor…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Novell Filr 1.2 before Hot Patch 4 allows remote attackers to inject arbitr…

  • Unscored —
    CVE-2016-1995 EPSS 10%

    HPE System Management Homepage before 7.5.4 allows remote attackers to execute arbitrary code via unspecified vectors.

  • Unscored —

    HPE System Management Homepage before 7.5.4 allows remote authenticated users to obtain sensitive information via unspe…

  • Unscored —

    HPE System Management Homepage before 7.5.4 allows local users to obtain sensitive information or modify data via unspe…

  • Unscored —

    HPE System Management Homepage before 7.5.4 allows remote authenticated users to obtain sensitive information or modify…