28 July 2016

10 results · Feed

• Unscored —
  CVE-2016-4469 Public exploit

  Multiple cross-site request forgery (CSRF) vulnerabilities in Apache Archiva 1.3.9 and earlier allow remote attackers t…

  Jul 28, 2016
• Medium 4.8
  CVE-2016-5005

  Apache Archiva vulnerable to Cross-site Scripting

  Cross-site scripting (XSS) vulnerability in Apache Archiva 1.3.9 and earlier allows remote authenticated administrators to inject arbitrary web script or HTML via the connector.sourceRepoId parameter to admin/addProxyConnector_commit.action.

  org.apache.archiva:archiva Maven
  Jul 28, 2016
• Unscored —
  CVE-2016-1467

  Cisco Videoscape Session Resource Manager (VSRM) allows remote attackers to cause a denial of service (device restart) …

  Jul 28, 2016
• Unscored —
  CVE-2016-1374

  The web framework in Cisco Unified Computing System (UCS) Performance Manager 2.0.0 and earlier allows remote authentic…

  Jul 28, 2016
• Unscored —
  CVE-2016-1465

  Cisco Nexus 1000v Application Virtual Switch (AVS) devices before 5.2(1)SV3(1.5i) allow remote attackers to cause a den…

  Jul 28, 2016
• Unscored —
  CVE-2016-1460

  Cisco Wireless LAN Controller (WLC) devices 7.4(121.0) and 8.0(0.30220.385) allow remote attackers to cause a denial of…

  Jul 28, 2016
• Unscored —
  CVE-2016-1463

  Cisco FireSIGHT System Software 5.3.0, 5.3.1, 5.4.0, 6.0, and 6.0.1 allows remote attackers to bypass Snort rules via c…

  Jul 28, 2016
• Unscored —
  CVE-2016-1462

  Cross-site scripting (XSS) vulnerability in the web-based management interface in Cisco Prime Service Catalog (PSC) 11.…

  Jul 28, 2016
• Unscored —
  CVE-2016-4522

  SQL injection vulnerability in Rockwell Automation FactoryTalk EnergyMetrix before 2.20.00 allows remote attackers to e…

  Jul 28, 2016
• Unscored —
  CVE-2016-4531

  Rockwell Automation FactoryTalk EnergyMetrix before 2.20.00 does not invalidate credentials upon a logout action, which…

  Jul 28, 2016