Skip to content
OpenAdvisories

Archive

8 June 2016

Vulnerabilities first published on this day (UTC), newest first.

40 results · Feed

  • Unscored —

    Red Hat OpenShift Enterprise 3.2 does not properly restrict access to STI builds, which allows remote authenticated use…

  • Unscored —

    Red Hat OpenShift Enterprise 3.2 and 3.1 do not properly validate the origin of a request when anonymous access is gran…

  • Unscored —

    Red Hat OpenShift Enterprise 3.2, when multi-tenant SDN is enabled and a build is run in a namespace that would normall…

  • Unscored —

    HAproxy in Red Hat OpenShift Enterprise 3.2 and OpenShift Origin allows local users to obtain the internal IP address o…

  • Unscored —

    Red Hat OpenShift Enterprise 3.1 uses world-readable permissions on the /etc/origin/master/master-config.yaml configura…

  • Unscored —

    Red Hat OpenShift Enterprise 3.2 and OpenShift Origin allow remote authenticated users to execute commands with root pr…

  • Unscored —

    Red Hat OpenShift Enterprise 3.2 allows remote authenticated users to read log files from another namespace by using th…

  • Unscored —

    Directory traversal vulnerability in the Management Server in Symantec Embedded Security: Critical System Protection (S…

  • Unscored —

    Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, Embedded Security: Critical Syst…

  • Unscored —

    SQL injection vulnerability in the Management Server in Symantec Embedded Security: Critical System Protection (SES:CSP…

  • Unscored —

    Directory traversal vulnerability in the Management Server in Symantec Embedded Security: Critical System Protection (S…

  • Unscored —

    Cisco Aironet Access Point Software 8.2(100.0) on 1830e, 1830i, 1850e, 1850i, 2800, and 3800 access points allows local…

  • Unscored —

    libclamav in ClamAV (aka Clam AntiVirus), as used in Advanced Malware Protection (AMP) on Cisco Email Security Applianc…

  • Unscored —

    HPE Matrix Operating Environment before 7.5.1 allows remote attackers to obtain sensitive information or modify data vi…

  • Unscored —

    HPE Universal CMDB 10.0 through 10.21, Universal CMDB Configuration Manager 10.0 through 10.21, and Universal Discovery…

  • Unscored —

    HPE Discovery and Dependency Mapping Inventory (DDMi) 9.30, 9.31, 9.32, 9.32 update 1, 9.32 update 2, and 9.32 update 3…

  • Unscored —

    HPE Insight Control server deployment allows local users to gain privileges via unspecified vectors.

  • Unscored —

    web/admin/data.js in the Performance Center Virtual Table Server (VTS) component in HPE LoadRunner 11.52 through patch …

  • Unscored —

    The Universal Discovery component in HPE Universal CMDB 10.0, 10.01, 10.10, 10.11, 10.20, and 10.21 allows remote attac…

  • Unscored —
    CVE-2016-4359 EPSS 16%

    Stack-based buffer overflow in mchan.dll in the agent in HPE LoadRunner 11.52 through patch 3, 12.00 through patch 1, 1…

  • Unscored —

    HPE Systems Insight Manager (SIM) before 7.5.1 allows remote attackers to obtain sensitive information, modify data, or…

  • Unscored —

    HPE Insight Control server deployment allows remote authenticated users to obtain sensitive information or modify data …

  • Unscored —

    HPE Insight Control server deployment allows remote attackers to modify data via unspecified vectors.

  • Unscored —

    HPE LoadRunner 11.52 through patch 3, 12.00 through patch 1, 12.01 through patch 3, 12.02 through patch 2, and 12.50 th…

  • Unscored —

    HPE Matrix Operating Environment before 7.5.1 allows remote authenticated users to obtain sensitive information or modi…

  • Unscored —

    HPE Insight Control server deployment allows remote attackers to obtain sensitive information via unspecified vectors.

  • Unscored —

    HPE Matrix Operating Environment before 7.5.1 allows remote attackers to obtain sensitive information via unspecified v…

  • Unscored —

    HPE Matrix Operating Environment before 7.5.1 allows remote attackers to obtain sensitive information or modify data vi…

  • Unscored —

    HPE Systems Insight Manager (SIM) before 7.5.1 allows remote authenticated users to obtain sensitive information or mod…

  • Unscored —

    HPE Systems Insight Manager (SIM) before 7.5.1 allows remote authenticated users to obtain sensitive information or mod…

  • Unscored —

    HPE Systems Insight Manager (SIM) before 7.5.1 allows remote authenticated users to obtain sensitive information or mod…

  • Unscored —

    HPE Systems Insight Manager (SIM) before 7.5.1 allows remote attackers to obtain sensitive information or modify data v…

  • Unscored —

    HPE Systems Insight Manager (SIM) before 7.5.1 allows remote authenticated users to obtain sensitive information or mod…

  • Unscored —

    HPE Insight Control before 7.5.1 allow remote attackers to obtain sensitive information, modify data, or cause a denial…

  • Unscored —

    HPE Systems Insight Manager (SIM) before 7.5.1 allows remote authenticated users to obtain sensitive information or mod…

  • Unscored —

    HPE Matrix Operating Environment before 7.5.1 allows remote attackers to obtain sensitive information via unspecified v…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the Web Client in VMware vCenter Server 5.1 before update 3d, 5.5 before up…

  • Unscored —

    HPE Systems Insight Manager (SIM) before 7.5.1 allows remote authenticated users to obtain sensitive information or mod…

  • Unscored —

    HPE Matrix Operating Environment before 7.5.1 allows remote authenticated users to obtain sensitive information or modi…

  • Unscored —
    CVE-2016-5108 Public exploit EPSS 25%

    Buffer overflow in the DecodeAdpcmImaQT function in modules/codec/adpcm.c in VideoLAN VLC media player before 2.2.4 all…