Archive
8 August 2016
Vulnerabilities first published on this day (UTC), newest first.
27 results · Feed
-
Unscored —
The mustendd driver in IBM AIX 5.3, 6.1, 7.1, and 7.2 and VIOS 2.2.x, when the jumbo_frames feature is not enabled, all…
-
Unscored —
IBM AIX 5.3, 6.1, 7.1, and 7.2 and VIOS 2.2.x do not default to the latest TLS version, which makes it easier for man-i…
-
Unscored —
IBM Sterling Connect:Direct for Unix 4.1.0 before 4.1.0.4 iFix073 and 4.2.0 before 4.2.0.4 iFix003 uses default file pe…
-
Unscored —
Cross-site scripting (XSS) vulnerability in IBM Information Server Framework 8.5, Information Server Framework and Info…
-
Unscored —
IBM General Parallel File System (GPFS) 3.5 before 3.5.0.29 efix 6 and 4.1.1 before 4.1.1.4 efix 9, when the Spectrum S…
-
Unscored —
IBM Tivoli Storage Manager for Databases: Data Protection for Microsoft SQL Server (aka IBM Spectrum Protect for Databa…
-
Unscored —
Cross-site scripting (XSS) vulnerability in IBM FileNet Workplace 4.0.2 allows remote authenticated users to inject arb…
-
Unscored —
IBM Security QRadar SIEM 7.1.x and 7.2.x before 7.2.7 allows remote authenticated users to execute arbitrary OS command…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Document Builder in IBM Rational Publishing Engine (aka RPENG) 2.0.1 be…
-
Unscored —CVE-2016-2960 EPSS 40%
IBM WebSphere Application Server (WAS) 7.x before 7.0.0.43, 8.0.0.x before 8.0.0.13, 8.5.0.x before 8.5.5.10, 8.5.0.x a…
-
Unscored —
Open redirect vulnerability in the Connections Portlets component 5.x before 5.0.2 for IBM WebSphere Portal allows remo…
-
Unscored —
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 …
-
Unscored —
Unrestricted file upload vulnerability in the Document Builder in IBM Rational Publishing Engine (aka RPENG) 2.0.1 befo…
-
Unscored —
CRLF injection vulnerability in VMware vCenter Server 6.0 before U2 and ESXi 6.0 allows remote attackers to inject arbi…
-
Unscored —
Untrusted search path vulnerability in the HGFS (aka Shared Folders) feature in VMware Tools 10.0.5 in VMware ESXi 5.0 …
-
Unscored —
Open redirect vulnerability in IBM FileNet Workplace 4.0.2 before 4.0.2.14 allows remote authenticated users to redirec…
-
Unscored —CVE-2015-6396 Public exploit
The CLI command parser on Cisco RV110W, RV130W, and RV215W devices allows local users to execute arbitrary shell comman…
-
Unscored —
Cisco RV110W, RV130W, and RV215W devices have an incorrect RBAC configuration for the default account, which allows rem…
-
Unscored —
Cisco RV180 and RV180W devices allow remote authenticated users to execute arbitrary commands as root via a crafted HTT…
-
Unscored —
Cisco Prime Infrastructure 2.2(2) does not properly restrict use of IFRAME elements, which makes it easier for remote a…
-
Unscored —
The administrative web interface in Cisco TelePresence Video Communication Server Expressway X8.5.2 allows remote authe…
-
Unscored —
Cisco Unified Communications Manager IM and Presence Service 9.1(1) SU6, 9.1(1) SU6a, 9.1(1) SU7, 10.5(2) SU2, 10.5(2) …
-
Unscored —
Directory traversal vulnerability in the web interface on Cisco RV180 and RV180W devices allows remote attackers to rea…
-
Unscored —
Cisco IOS 15.5(3)S3, 15.6(1)S2, 15.6(2)S1, and 15.6(2)T1 does not properly dequeue invalid NTP packets, which allows re…
-
Unscored —
HPE Release Control (RC) 9.13, 9.20, and 9.21 before 9.21.0005 p4 allows remote authenticated users to conduct server-s…
-
Unscored —
Siemens SINEMA Server uses weak permissions for the application folder, which allows local users to gain privileges via…
-
Unscored —
SQL injection vulnerability in Moxa SoftCMS before 1.5 allows remote attackers to execute arbitrary SQL commands via un…