Archive
June 2016
Vulnerabilities first published in this month (UTC), newest first.
510 results · Feed
-
Unscored —
KMC Controls BAC-5051E devices with firmware before E0.2.0.2 allow remote attackers to bypass intended access restricti…
-
Unscored —
ABB PCM600 before 2.7 improperly stores the main application password after a password change, which allows local users…
-
Unscored —
The Chef Manage (formerly opscode-manage) add-on before 1.12.0 for Chef allows remote attackers to execute arbitrary co…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability on KMC Controls BAC-5051E devices with firmware before E0.2.0.2 allows …
-
Unscored —
ABB PCM600 before 2.7 improperly stores PCM600 authentication credentials, which allows local users to obtain sensitive…
-
Unscored —
ABB PCM600 before 2.7 uses an improper hash algorithm for the main application password, which makes it easier for loca…
-
Unscored —
The smartcard interaction in SPICE allows remote attackers to cause a denial of service (QEMU-KVM process crash) or pos…
-
Unscored —
LXD before 2.0.2 uses world-readable permissions for /var/lib/lxd/zfs.img when setting up a loop based ZFS pool, which …
-
Unscored —
LXD before 2.0.2 does not properly set permissions when switching an unprivileged container into privileged mode, which…
-
Unscored —
Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string speci…
-
Unscored —CVE-2016-4447 EPSS 14%
The xmlParseElementDecl function in parser.c in libxml2 before 2.9.4 allows context-dependent attackers to cause a deni…
-
Unscored —
XML external entity (XXE) vulnerability in the xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.4,…
-
Unscored —
SPICE allows local guest OS users to read from or write to arbitrary host memory locations via crafted primary surface …
-
Unscored —CVE-2016-4532 EPSS 28%
Directory traversal vulnerability in the WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2…
-
Unscored —CVE-2016-4510 EPSS 20%
The WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to bypass…
-
Unscored —
HPE Project and Portfolio Management Center (PPM) 9.2x and 9.3x before 9.32.0002 allows remote authenticated users to e…
-
High 7.5
The WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to cause …
KEV Apr 15, 2022 -
Unscored —
General Electric (GE) Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware before 5.5.0 and ML810, ML3000…
-
Unscored —
Red Hat OpenShift Enterprise 3.2 does not properly restrict access to STI builds, which allows remote authenticated use…
-
Unscored —
Red Hat OpenShift Enterprise 3.2 and 3.1 do not properly validate the origin of a request when anonymous access is gran…
-
Unscored —
Red Hat OpenShift Enterprise 3.2, when multi-tenant SDN is enabled and a build is run in a namespace that would normall…
-
Unscored —
HAproxy in Red Hat OpenShift Enterprise 3.2 and OpenShift Origin allows local users to obtain the internal IP address o…
-
Unscored —
Red Hat OpenShift Enterprise 3.1 uses world-readable permissions on the /etc/origin/master/master-config.yaml configura…
-
Unscored —
Red Hat OpenShift Enterprise 3.2 and OpenShift Origin allow remote authenticated users to execute commands with root pr…
-
Unscored —
Red Hat OpenShift Enterprise 3.2 allows remote authenticated users to read log files from another namespace by using th…
-
Unscored —
Directory traversal vulnerability in the Management Server in Symantec Embedded Security: Critical System Protection (S…
-
Unscored —
Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, Embedded Security: Critical Syst…
-
Unscored —
SQL injection vulnerability in the Management Server in Symantec Embedded Security: Critical System Protection (SES:CSP…
-
Unscored —
Directory traversal vulnerability in the Management Server in Symantec Embedded Security: Critical System Protection (S…
-
Unscored —
Cisco Aironet Access Point Software 8.2(100.0) on 1830e, 1830i, 1850e, 1850i, 2800, and 3800 access points allows local…
-
Unscored —
libclamav in ClamAV (aka Clam AntiVirus), as used in Advanced Malware Protection (AMP) on Cisco Email Security Applianc…
-
Unscored —
HPE Matrix Operating Environment before 7.5.1 allows remote attackers to obtain sensitive information or modify data vi…
-
Unscored —
HPE Universal CMDB 10.0 through 10.21, Universal CMDB Configuration Manager 10.0 through 10.21, and Universal Discovery…
-
Unscored —
HPE Discovery and Dependency Mapping Inventory (DDMi) 9.30, 9.31, 9.32, 9.32 update 1, 9.32 update 2, and 9.32 update 3…
-
Unscored —
HPE Insight Control server deployment allows local users to gain privileges via unspecified vectors.
-
Unscored —
web/admin/data.js in the Performance Center Virtual Table Server (VTS) component in HPE LoadRunner 11.52 through patch …
-
Unscored —
The Universal Discovery component in HPE Universal CMDB 10.0, 10.01, 10.10, 10.11, 10.20, and 10.21 allows remote attac…
-
Unscored —CVE-2016-4359 EPSS 16%
Stack-based buffer overflow in mchan.dll in the agent in HPE LoadRunner 11.52 through patch 3, 12.00 through patch 1, 1…
-
Unscored —
HPE Systems Insight Manager (SIM) before 7.5.1 allows remote attackers to obtain sensitive information, modify data, or…
-
Unscored —
HPE Insight Control server deployment allows remote authenticated users to obtain sensitive information or modify data …