22 April 2016

29 results · Feed

• Unscored —
  CVE-2015-8823

  Use-after-free vulnerability in the TextField object implementation in Adobe Flash Player before 18.0.0.268 and 19.x an…

  Apr 22, 2016
• Unscored —
  CVE-2016-1916

  Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (BES) 12 before 12.4…

  Apr 22, 2016
• Unscored —
  CVE-2016-1917

  Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (BES) 12 before 12.4…

  Apr 22, 2016
• Unscored —
  CVE-2016-1918

  Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (BES) 12 before 12.4…

  Apr 22, 2016
• Unscored —
  CVE-2016-1036

  Cross-site scripting (XSS) vulnerability in Adobe Analytics AppMeasurement for Flash Library before 4.0.1, when debugTr…

  Apr 22, 2016
• Unscored —
  CVE-2016-3126

  Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (BES) 12 before 12.4…

  Apr 22, 2016
• Unscored —
  CVE-2016-2203 Public exploit

  The management console on Symantec Messaging Gateway (SMG) Appliance devices before 10.6.1 allows local users to discov…

  Apr 22, 2016
• Unscored —
  CVE-2016-2204

  The management console on Symantec Messaging Gateway (SMG) Appliance devices before 10.6.1 allows local users to obtain…

  Apr 22, 2016
• Unscored —
  CVE-2016-4062

  Foxit Reader and PhantomPDF before 7.3.4 on Windows improperly report format errors recursively, which allows remote at…

  Apr 22, 2016
• Unscored —
  CVE-2016-4060

  Use-after-free vulnerability in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to cause a …

  Apr 22, 2016
• Unscored —
  CVE-2016-4059

  Use-after-free vulnerability in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to execute …

  Apr 22, 2016
• Unscored —
  CVE-2016-4064

  Use-after-free vulnerability in the XFA forms handling functionality in Foxit Reader and PhantomPDF before 7.3.4 on Win…

  Apr 22, 2016
• Unscored —
  CVE-2016-4063

  Use-after-free vulnerability in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to execute …

  Apr 22, 2016
• Unscored —
  CVE-2016-4065

  The ConvertToPDF plugin in Foxit Reader and PhantomPDF before 7.3.4 on Windows, when the gflags app is enabled, allows …

  Apr 22, 2016
• Unscored —
  CVE-2016-4061

  Foxit Reader and PhantomPDF before 7.3.4 on Windows allow remote attackers to cause a denial of service (application cr…

  Apr 22, 2016
• Unscored —
  CVE-2016-1593 Public exploit EPSS 64%

  Directory traversal vulnerability in the import users feature in Micro Focus Novell Service Desk before 7.2 allows remo…

  Apr 22, 2016
• Unscored —
  CVE-2016-1595 Public exploit

  LiveTime/WebObjects/LiveTime.woa/wa/DownloadAction/downloadFile in Micro Focus Novell Service Desk before 7.2 allows re…

  Apr 22, 2016
• Unscored —
  CVE-2016-1596 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in Micro Focus Novell Service Desk before 7.2 allow remote authenti…

  Apr 22, 2016
• Unscored —
  CVE-2016-1594 Public exploit

  Micro Focus Novell Service Desk before 7.2 allows remote authenticated users to read arbitrary attachments via a reques…

  Apr 22, 2016
• Unscored —
  CVE-2016-3145

  Lexmark printers with firmware ATL before ATL.021.063, CB before CB.021.063, PP before PP.021.063, and YK before YK.021…

  Apr 22, 2016
• Unscored —
  CVE-2016-2305

  Cross-site scripting (XSS) vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to inject ar…

  Apr 22, 2016
• Unscored —
  CVE-2016-2299

  SQL injection vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to execute arbitrary SQL …

  Apr 22, 2016
• Unscored —
  CVE-2016-2304

  Ecava IntegraXor before 5.0 build 4522 does not include the HTTPOnly flag in a Set-Cookie header for the session cookie…

  Apr 22, 2016
• Unscored —
  CVE-2016-2354

  The Bluetooth functionality in Lemur Vehicle Monitors BlueDriver before 2016-04-07 supports unrestricted pairing withou…

  Apr 22, 2016
• Unscored —
  CVE-2016-2303

  CRLF injection vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to inject arbitrary HTTP…

  Apr 22, 2016
• Unscored —
  CVE-2016-2301

  SQL injection vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote authenticated users to execute arbi…

  Apr 22, 2016
• Unscored —
  CVE-2016-2306

  The HMI web server in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to obtain sensitive cleartext info…

  Apr 22, 2016
• Unscored —
  CVE-2016-2300

  Ecava IntegraXor before 5.0 build 4522 allows remote attackers to bypass authentication and access unspecified web page…

  Apr 22, 2016
• Unscored —
  CVE-2016-2302

  Ecava IntegraXor before 5.0 build 4522 allows remote attackers to obtain sensitive information by reading detailed erro…

  Apr 22, 2016