Skip to content
OpenAdvisories

Archive

2 July 2016

Vulnerabilities first published on this day (UTC), newest first.

← June 2016 2016 / July /2 August 2016 →
  1. 15
  2. 221
  3. 346
  4. 412
  5. 58
  6. 66
  7. 77
  8. 812
  9. 9 
  10. 10 
  11. 11100
  12. 1217
  13. 13131
  14. 14 
  15. 1527
  16. 16 
  17. 175
  18. 18 
  19. 1910
  20. 20 
  21. 21192
  22. 2268
  23. 2318
  24. 24 
  25. 2510
  26. 264
  27. 27 
  28. 2810
  29. 29 
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

21 results · Feed

  • Unscored —
    CVE-2016-0391

    The IBM Watson Developer Cloud services on Bluemix platforms do not properly generate random numbers for service-instan…

  • Unscored —
    CVE-2016-0386

    Cross-site request forgery (CSRF) vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.…

  • Unscored —
    CVE-2016-0399

    Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5 before 7.5.0.9 IFIX00…

  • Unscored —
    CVE-2016-0387

    Cross-site scripting (XSS) vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, an…

  • Unscored —
    CVE-2016-0400 Public exploit

    CRLF injection vulnerability in IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3, 7.1.1 before 7.1.1.1, 8.5 before 8.5.…

  • Unscored —
    CVE-2016-0398

    IBM Cognos Analytics (CA) 11.0 before 11.0.2 allows remote attackers to conduct content-spoofing attacks via a crafted …

  • Unscored —
    CVE-2016-1408

    Cisco Prime Infrastructure 1.2 through 3.1 and Evolved Programmable Network Manager (EPNM) 1.2 and 2.0 allow remote aut…

  • Unscored —
    CVE-2016-1416

    Cisco Prime Collaboration Provisioning 10.6 SP2 (aka 10.6.0.10602) mishandles LDAP authentication, which allows remote …

  • Unscored —
    CVE-2016-1289

    The API in Cisco Prime Infrastructure 1.2 through 3.0 and Evolved Programmable Network Manager (EPNM) 1.2 allows remote…

  • Unscored —
    CVE-2016-1440

    The proxy process on Cisco Web Security Appliance (WSA) devices through 9.1.0-070 allows remote attackers to cause a de…

  • Unscored —
    CVE-2016-4560

    Untrusted search path vulnerability in Flexera InstallAnywhere allows local users to gain privileges via a Trojan horse…

  • High —
    CVE-2016-3956

    npm Token Leak in npm

    The CLI in npm before 2.15.1 and 3.x before 3.8.3, as used in Node.js 0.10 before 0.10.44, 0.12 before 0.12.13, 4 before 4.4.2, and 5 before 5.10.0, includes bearer tokens with arbitrary requests, which allows remote HTTP servers to obtain sensitive informati…

    npm npm npm Debian Ubuntu npm
  • Unscored —
    CVE-2016-2961

    The integration server in IBM Integration Bus 9 before 9.0.0.6 and 10 before 10.0.0.5 and WebSphere Message Broker 8 be…

  • Unscored —
    CVE-2016-2861

    IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3, 7.1.1 before 7.1.1.1, 8.5 before 8.5.0.3, and 8.6 before 8.6.0.8 does…

  • Unscored —
    CVE-2016-2868

    IBM Security QRadar SIEM 7.2.x before 7.2.7 allows remote authenticated administrators to read arbitrary files via XML …

  • Unscored —
    CVE-2016-2968

    IBM Security QRadar Incident Forensics 7.2.x before 7.2.7 allows remote attackers to bypass authentication, and obtain …

  • Unscored —
    CVE-2016-2872

    Directory traversal vulnerability in IBM Security QRadar SIEM 7.2.x before 7.2.7 and QRadar Incident Forensics 7.2.x be…

  • Unscored —
    CVE-2016-2867

    IBM InfoSphere Streams before 4.0.1.2 and IBM Streams before 4.1.1.1 do not properly implement the runAsUser feature, w…

  • Unscored —
    CVE-2016-2883

    Cross-site scripting (XSS) vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, an…

  • Unscored —
    CVE-2016-2882

    IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authentic…

  • Unscored —
    CVE-2016-2870

    Buffer overflow in the CLI on IBM WebSphere DataPower XC10 appliances 2.1 and 2.5 allows remote authenticated users to …