Archive
9 June 2016
Vulnerabilities first published on this day (UTC), newest first.
12 results · Feed
-
Unscored —
The smartcard interaction in SPICE allows remote attackers to cause a denial of service (QEMU-KVM process crash) or pos…
-
Unscored —
LXD before 2.0.2 uses world-readable permissions for /var/lib/lxd/zfs.img when setting up a loop based ZFS pool, which …
-
Unscored —
LXD before 2.0.2 does not properly set permissions when switching an unprivileged container into privileged mode, which…
-
Unscored —
Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string speci…
-
Unscored —CVE-2016-4447 EPSS 14%
The xmlParseElementDecl function in parser.c in libxml2 before 2.9.4 allows context-dependent attackers to cause a deni…
-
Unscored —
XML external entity (XXE) vulnerability in the xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.4,…
-
Unscored —
SPICE allows local guest OS users to read from or write to arbitrary host memory locations via crafted primary surface …
-
Unscored —CVE-2016-4532 EPSS 28%
Directory traversal vulnerability in the WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2…
-
Unscored —CVE-2016-4510 EPSS 20%
The WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to bypass…
-
Unscored —
HPE Project and Portfolio Management Center (PPM) 9.2x and 9.3x before 9.32.0002 allows remote authenticated users to e…
-
High 7.5
The WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to cause …
KEV Apr 15, 2022 -
Unscored —
General Electric (GE) Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware before 5.5.0 and ML810, ML3000…