Archive
March 2016
Vulnerabilities first published in this month (UTC), newest first.
330 results · Feed
-
Unscored —
FontParser in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows remote attacker…
-
Unscored —CVE-2016-1769 Public exploit
QuickTime in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (…
-
Unscored —
Use-after-free vulnerability in the kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS b…
-
Unscored —CVE-2016-1743 Public exploit
The Intel driver in the Graphics Drivers subsystem in Apple OS X before 10.11.4 allows attackers to execute arbitrary c…
-
Unscored —
Messages in Apple iOS before 9.3, OS X before 10.11.4, and watchOS before 2.2 does not properly implement a cryptograph…
-
Unscored —
Apple Safari before 9.1 allows remote attackers to spoof the user interface via a web page that places text in a crafte…
-
Unscored —
HPE Operations Orchestration 10.x before 10.51 and Operations Orchestration content before 1.7.0 allow remote attackers…
-
Unscored —
HPE Service Manager (SM) 9.3x before 9.35 P4 and 9.4x before 9.41.P2 allows remote attackers to execute arbitrary comma…
-
Medium 6.4
Multiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH before 7.2p2 allow remote authenticated users t…
-
Unscored —
CRLF injection vulnerability in Dropbear SSH before 2016.72 allows remote authenticated users to bypass intended shell-…
-
Unscored —
Business Space in IBM WebSphere Process Server 6.1.2.0 through 7.0.0.5 and Business Process Manager Advanced 7.5.x thro…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the OpenID Connect (OIDC) client web application in IBM WebSphere Applicati…
-
Unscored —
HP Support Assistant before 8.1.52.1 allows remote attackers to bypass authentication via unspecified vectors.
-
Unscored —
lms/templates/footer-edx-new.html in Open edX edx-platform before 2015-01-29 does not properly restrict links on the pa…
-
Unscored —
Cross-site scripting (XSS) vulnerability in XZERES 442SR OS on 442SR wind turbines allows remote attackers to inject ar…
-
Unscored —
SQL injection vulnerability in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6-MP4 allows remote authentica…
-
Unscored —
The SysPlant.sys driver in the Application and Device Control (ADC) component in the client in Symantec Endpoint Protec…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6-MP4 allo…
-
Unscored —
IBM Tivoli NetView Access Services (NVAS) allows remote authenticated users to gain privileges by entering the ADM comm…
-
Unscored —
Siemens APOGEE Insight uses weak permissions for the application folder, which allows local users to obtain sensitive i…
-
Unscored —
Untrusted search path vulnerability in ABB Panel Builder 800 5.1 allows local users to gain privileges via a Trojan hor…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Novell Filr 1.2 before Hot Patch 4 allows remote attackers to inject arbitr…
-
Unscored —CVE-2016-1995 EPSS 10%
HPE System Management Homepage before 7.5.4 allows remote attackers to execute arbitrary code via unspecified vectors.
-
Unscored —
HPE System Management Homepage before 7.5.4 allows remote authenticated users to obtain sensitive information via unspe…
-
Unscored —
HPE System Management Homepage before 7.5.4 allows local users to obtain sensitive information or modify data via unspe…
-
Unscored —
HPE System Management Homepage before 7.5.4 allows remote authenticated users to obtain sensitive information or modify…
-
Unscored —
The compile_branch function in pcre_compile.c in PCRE 8.x before 8.39 and pcre2_compile.c in PCRE2 before 10.22 mishand…
-
Unscored —
Stack-based buffer overflow in dwrcs.exe in the dwmrcs daemon in SolarWinds DameWare Mini Remote Control 12.0 allows re…
-
Unscored —
HPE ArcSight ESM before 6.8c, and ArcSight ESM Express before 6.9.1, allows remote authenticated users to obtain sensit…
-
Unscored —CVE-2016-2342 EPSS 13%
The bgp_nlri_parse_vpnv4 function in bgp_mplsvpn.c in the VPNv4 NLRI parser in bgpd in Quagga before 1.0.20160309, when…
-
Unscored —
Cross-site scripting (XSS) vulnerability in VMware vRealize Automation 6.x before 6.2.4 on Linux allows remote authenti…
-
Unscored —
HPE ArcSight ESM 5.x before 5.6, 6.0, 6.5.x before 6.5C SP1 Patch 2, and 6.8c before P1, and ArcSight ESM Express befor…
-
Unscored —
HPE ArcSight ESM 5.x before 5.6, 6.0, 6.5.x before 6.5C SP1 Patch 2, and 6.8c before P1, and ArcSight ESM Express befor…
-
Unscored —
Cross-site scripting (XSS) vulnerability in VMware vRealize Business Advanced and Enterprise 8.x before 8.2.5 on Linux …
-
Unscored —
Siemens SIMATIC S7-1200 CPU devices before 4.0 allow remote attackers to bypass a "user program block" protection mecha…
-
Unscored —CVE-2016-1988 EPSS 11%
HPE Network Automation 9.22 through 9.22.02 and 10.x before 10.00.02 allows remote attackers to execute arbitrary code …
-
Unscored —CVE-2016-1989 EPSS 11%
HPE Network Automation 9.22 through 9.22.02 and 10.x before 10.00.02 allows remote attackers to execute arbitrary code …
-
Unscored —
IBM WebSphere Commerce 6.x through 6.0.0.11, 7.x through 7.0.0.9, and 8.x before 8.0.0.3 allows remote attackers to cau…
-
Unscored —
IBM Maximo Asset Management 7.6 before 7.6.0.3 IFIX001 allows remote authenticated users to bypass intended access rest…
-
Unscored —
Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1.1 through 7.1.1.3, 7.5.0 before 7.5.0.9 IFI…