Skip to content
OpenAdvisories

Archive

31 August 2016

Vulnerabilities first published on this day (UTC), newest first.

← July 2016 2016 / August /31 September 2016 →
  1. 114
  2. 214
  3. 39
  4. 4 
  5. 584
  6. 673
  7. 750
  8. 827
  9. 932
  10. 106
  11. 11 
  12. 127
  13. 13 
  14. 14 
  15. 15 
  16. 16 
  17. 17 
  18. 186
  19. 1917
  20. 20 
  21. 21 
  22. 2211
  23. 235
  24. 247
  25. 258
  26. 2619
  27. 27 
  28. 28 
  29. 291
  30. 306
  31. 3113
All Critical High Medium Low Exploited only Public exploit

13 results · Feed

  • Unscored —
    CVE-2016-5679 Public exploit EPSS 14%

    cgi-bin/cgi_main in NUUO NVRmini 2 1.7.6 through 3.0.0 and NETGEAR ReadyNAS Surveillance 1.1.2 allows remote authentica…

  • Unscored —
    CVE-2016-5674 Public exploit EPSS 95%

    __debugging_center_utils___.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.7.5 through 3.0.0, and NETGEAR Re…

  • Unscored —
    CVE-2016-5680 Public exploit EPSS 17%

    Stack-based buffer overflow in cgi-bin/cgi_main in NUUO NVRmini 2 1.7.6 through 3.0.0 and NETGEAR ReadyNAS Surveillance…

  • Unscored —
    CVE-2016-5675 Public exploit EPSS 71%

    handle_daylightsaving.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, NUUO Crystal 2.2.1 t…

  • Unscored —
    CVE-2016-5678 Public exploit

    NUUO NVRmini 2 1.0.0 through 3.0.0 and NUUO NVRsolo 1.0.0 through 3.0.0 have hardcoded root credentials, which allows r…

  • Unscored —
    CVE-2016-5677 Public exploit EPSS 12%

    NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1…

  • Unscored —
    CVE-2016-5676 Public exploit EPSS 54%

    cgi-bin/cgi_system in NUUO NVRmini 2 1.7.5 through 2.x, NUUO NVRsolo 1.7.5 through 2.x, and NETGEAR ReadyNAS Surveillan…

  • Medium 5.4
    CVE-2016-7119

    Cross-site scripting (XSS) vulnerability in the user-profile biography section in DotNetNuke (DNN)

    Cross-site scripting (XSS) vulnerability in the user-profile biography section in DotNetNuke (DNN) before 8.0.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted onclick attribute in an IMG element.

    DotNetNuke.Core NuGet
  • Unscored —
    CVE-2016-7118

    fs/fcntl.c in the "aufs 3.2.x+setfl-debian" patch in the linux-image package 3.2.0-4 (kernel 3.2.81-1) in Debian wheezy…

  • Unscored —
    CVE-2016-5333

    VMware Photos OS OVA 1.0 before 2016-08-14 has a default SSH public key in an authorized_keys file, which allows remote…

  • Unscored —
    CVE-2016-5336

    VMware vRealize Automation 7.0.x before 7.1 allows remote attackers to execute arbitrary code via unspecified vectors.

  • Unscored —
    CVE-2016-5332

    Directory traversal vulnerability in VMware vRealize Log Insight 2.x and 3.x before 3.6.0 allows remote attackers to re…

  • Unscored —
    CVE-2016-5335

    VMware Identity Manager 2.x before 2.7 and vRealize Automation 7.0.x before 7.1 allow local users to obtain root access…