15 April 2016

19 results · Feed

• High 7.5
  CVE-2015-5271

  TripleO Heat templates might allow remote attackers to obtain sensitive information from private containers

  The TripleO Heat templates (tripleo-heat-templates) do not properly order the Identity Service (keystone) before the OpenStack Object Storage (Swift) staticweb middleware in the swiftproxy pipeline when the staticweb middleware is enabled, which might allow r…

  tripleo-heat-templates PyPI
  Apr 15, 2016
• Unscored —
  CVE-2015-7676

  Ipswitch MOVEit File Transfer (formerly DMZ) 8.1 and earlier, when configured to support file view on download, allows …

  Apr 15, 2016
• High 8.1
  CVE-2015-5348

  Apache Camel can allow remote attackers to execute arbitrary commands

  Apache Camel 2.6.x through 2.14.x, 2.15.x before 2.15.5, and 2.16.x before 2.16.1, when using (1) camel-jetty or (2) camel-servlet as a consumer in Camel routes, allow remote attackers to execute arbitrary commands via a crafted serialized Java object in an H…

  org.apache.camel:camel-ahc org.apache.camel:camel-jetty org.apache.camel:camel-http org.apache.camel:camel-http4 Maven
  Apr 15, 2016
• Unscored —
  CVE-2016-3144

  Cross-site scripting (XSS) vulnerability in the Block Class module 7.x-2.x before 7.x-2.2 for Drupal allows remote auth…

  Apr 15, 2016
• Unscored —
  CVE-2016-0889

  An HTTP servlet in vApp Manager in EMC Unisphere for VMAX Virtual Appliance before 8.2.0 allows remote attackers to wri…

  Apr 15, 2016
• Unscored —
  CVE-2016-1268

  The administrative web services interface in Juniper ScreenOS before 6.3.0r21 allows remote attackers to cause a denial…

  Apr 15, 2016
• Unscored —
  CVE-2016-1271

  Juniper Junos OS before 12.1X46-D45, 12.1X47 before 12.1X47-D30, 12.3 before 12.3R11, 12.3X48 before 12.3X48-D25, 13.2 …

  Apr 15, 2016
• Unscored —
  CVE-2016-1264

  Race condition in the Op command in Juniper Junos OS before 12.1X44-D55, 12.1X46 before 12.1X46-D40, 12.1X47 before 12.…

  Apr 15, 2016
• Unscored —
  CVE-2016-1267

  Race condition in the RPC functionality in Juniper Junos OS before 12.1X44-D55, 12.1X46 before 12.1X46-D40, 12.1X47 bef…

  Apr 15, 2016
• Unscored —
  CVE-2016-1269

  Juniper Junos OS before 12.1X44-D60, 12.1X46 before 12.1X46-D40, 12.1X47 before 12.1X47-D30, 12.3 before 12.3R11, 12.3X…

  Apr 15, 2016
• Unscored —
  CVE-2016-1270

  The rpd daemon in Juniper Junos OS before 12.1X44-D60, 12.1X46 before 12.1X46-D45, 12.1X47 before 12.1X47-D30, 12.3 bef…

  Apr 15, 2016
• Unscored —
  CVE-2016-1273

  Juniper Junos OS before 13.2X51-D40, 14.x before 14.1X53-D30, and 15.x before 15.1X53-D20 on QFX5100 and QFX10002 switc…

  Apr 15, 2016
• Unscored —
  CVE-2016-1274

  Juniper Junos OS 14.1X53 before 14.1X53-D30 on QFX Series switches allows remote attackers to cause a denial of service…

  Apr 15, 2016
• Unscored —
  CVE-2016-3961

  Xen and the Linux kernel through 4.5.x do not properly suppress hugetlbfs support in x86 PV guests, which allows local …

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Apr 15, 2016
• Unscored —
  CVE-2016-2076

  Client Integration Plugin (CIP) in VMware vCenter Server 5.5 U3a, U3b, and U3c and 6.0 before U2; vCloud Director 5.5.5…

  Apr 15, 2016
• Unscored —
  CVE-2016-2146

  The am_read_post_data function in mod_auth_mellon before 0.11.1 does not limit the amount of data read, which allows re…

  libapache2-mod-auth-mellon Debian
  Apr 15, 2016
• Unscored —
  CVE-2016-2145

  The am_read_post_data function in mod_auth_mellon before 0.11.1 does not check if the ap_get_client_block function retu…

  libapache2-mod-auth-mellon Debian
  Apr 15, 2016
• Unscored —
  CVE-2016-2212

  The getOrderByStatusUrlKey function in the Mage_Rss_Helper_Order class in app/code/core/Mage/Rss/Helper/Order.php in Ma…

  Apr 15, 2016
• Unscored —
  CVE-2010-5325

  Heap-based buffer overflow in the unhtmlify function in foomatic-rip in foomatic-filters before 4.0.6 allows remote att…

  foomatic-filters Debian
  Apr 15, 2016