Skip to content
OpenAdvisories

Archive

9 June 2016

Vulnerabilities first published on this day (UTC), newest first.

12 results · Feed

  • Unscored —

    The smartcard interaction in SPICE allows remote attackers to cause a denial of service (QEMU-KVM process crash) or pos…

  • Unscored —

    LXD before 2.0.2 uses world-readable permissions for /var/lib/lxd/zfs.img when setting up a loop based ZFS pool, which …

  • Unscored —

    LXD before 2.0.2 does not properly set permissions when switching an unprivileged container into privileged mode, which…

  • Unscored —

    Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string speci…

  • Unscored —
    CVE-2016-4447 EPSS 14%

    The xmlParseElementDecl function in parser.c in libxml2 before 2.9.4 allows context-dependent attackers to cause a deni…

  • Unscored —

    XML external entity (XXE) vulnerability in the xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.4,…

  • Unscored —

    SPICE allows local guest OS users to read from or write to arbitrary host memory locations via crafted primary surface …

  • Unscored —
    CVE-2016-4532 EPSS 28%

    Directory traversal vulnerability in the WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2…

  • Unscored —
    CVE-2016-4510 EPSS 20%

    The WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to bypass…

  • Unscored —

    HPE Project and Portfolio Management Center (PPM) 9.2x and 9.3x before 9.32.0002 allows remote authenticated users to e…

  • High 7.5
    CVE-2016-4523 Exploited EPSS 31%

    The WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to cause …

    KEV Apr 15, 2022
  • Unscored —

    General Electric (GE) Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware before 5.5.0 and ML810, ML3000…