Archive
September 2016
Vulnerabilities first published in this month (UTC), newest first.
597 results · Feed
-
Unscored —
Unspecified vulnerability in the kernel-uek component in Oracle Linux 6 allows local users to affect availability via u…
-
Unscored —
Cross-site scripting (XSS) vulnerability in EMC ViPR SRM before 4.0.1 allows remote authenticated users to inject arbit…
-
Critical 9.6
Cloud Foundry vulnerable to Cross-Site Request Forgery
Multiple cross-site request forgery (CSRF) vulnerabilities in Pivotal Cloud Foundry (PCF) before 242; UAA 2.x before 2.7.4.7, 3.x before 3.3.0.5, and 3.4.x before 3.4.4; UAA BOSH before 11.5 and 12.x before 12.5; Elastic Runtime before 1.6.40, 1.7.x before 1.…
-
Unscored —
The UAA /oauth/token endpoint in Pivotal Cloud Foundry (PCF) before 243; UAA 2.x before 2.7.4.8, 3.x before 3.3.0.6, an…
-
Unscored —
The OAuth authorization implementation in Pivotal Cloud Foundry (PCF) before 242; UAA 2.x before 2.7.4.7, 3.x before 3.…
-
Unscored —
HPE Network Automation Software 10.10 allows local users to write to arbitrary files via unspecified vectors.
-
Unscored —
The RMI service in HP Network Automation Software 9.1x, 9.2x, 10.0x before 10.00.02.01, and 10.1x before 10.11.00.01 al…
-
Unscored —
The integrated web server on Siemens SCALANCE M-800 and S615 modules with firmware before 4.02 does not set the secure …
-
Unscored —
Google Chrome before 53.0.2785.113 allows remote attackers to bypass the SafeBrowsing protection mechanism via unspecif…
-
Unscored —
The web server in Aternity before 9.0.1 does not require authentication for getMBeansFromURL loading of Java MBeans, wh…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the web server in Aternity before 9.0.1 allow remote attackers t…
-
High 8.1CVE-2016-7191 EPSS 29%
Authentication Bypass in passport-azure-ad
The Microsoft Azure Active Directory Passport (aka Passport-Azure-AD) library 1.x before 1.4.6 and 2.x before 2.0.1 for Node.js does not recognize the validateIssuer setting, which allows remote attackers to bypass authentication via a crafted token.
-
Unscored —
Integer overflow in the gdImageWebpCtx function in gd_webp.c in the GD Graphics Library (aka libgd) through 2.2.3, as u…
-
Unscored —
buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly…
-
Unscored —
The unformat_24bit_color function in the format parsing code in Irssi before 0.8.20, when compiled with true-color enab…
-
Unscored —
OpenStack Compute (nova) 13.0.0 does not properly delete instances from compute nodes, which allows remote authenticate…
-
Unscored —
The gnutls_ocsp_resp_check_crt function in lib/x509/ocsp.c in GnuTLS before 3.4.15 and 3.5.x before 3.5.4 does not veri…
-
Unscored —
The format_send_to_gui function in the format parsing code in Irssi before 0.8.20 allows remote attackers to cause a de…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Huawei Policy Center before V100R003C10SPC020 allows remote authenticated u…
-
High 7.2
Apache ActiveMQ Artemis RCE Via Deserialization Gadget Chain
The getObject method of the javax.jms.ObjectMessage class in the (1) JMS Core client, (2) Artemis broker, and (3) Artemis REST component in Apache ActiveMQ Artemis before 1.4.0 might allow remote authenticated users with permission to send messages to the Art…
-
Unscored —
An unspecified function in SAP TREX 7.10 Revision 63 allows remote attackers to execute arbitrary OS commands via unkno…
-
Unscored —
The NameServer in SAP TREX 7.10 Revision 63 allows remote attackers to obtain sensitive TNS information via an unspecif…
-
Unscored —CVE-2016-6330 EPSS 11%
The server in Red Hat JBoss Operations Network (JON), when SSL authentication is not configured for JON server / agent …
-
Unscored —CVE-2016-7052 EPSS 29%
crypto/x509/x509_vfy.c in OpenSSL 1.0.2i allows remote attackers to cause a denial of service (NULL pointer dereference…
-
Unscored —CVE-2016-6309 EPSS 70%
statem/statem.c in OpenSSL 1.1.0a does not consider memory-block movement after a realloc call, which allows remote att…
-
Unscored —
Use-after-free vulnerability in Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code via unsp…
-
Unscored —
Directory traversal vulnerability in Eclipse Help in IBM Tivoli Lightweight Infrastructure (aka LWI), as used in AIX 5.…
-
Critical 9.8
OpenStack Murano Code Execution
OpenStack Murano before 1.0.3 (liberty) and 2.x before 2.0.1 (mitaka), Murano-dashboard before 1.0.3 (liberty) and 2.x before 2.0.1 (mitaka), and python-muranoclient before 0.7.3 (liberty) and 0.8.x before 0.8.5 (mitaka) improperly use loaders inherited from …
-
Unscored —
Format string vulnerability in Huawei AR100, AR120, AR150, AR200, AR500, AR550, AR1200, AR2200, AR2500, AR3200, and AR3…
-
Unscored —
SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allows remote attackers to inject arbitrary audit trail fields into the SY…
-
Unscored —
Cross-site scripting (XSS) vulnerability in AlienVault OSSIM before 5.3 and USM before 5.3 allows remote attackers to i…
-
Unscored —
Huawei AnyMail before 2.6.0301.0060 allows remote attackers to cause a denial of service (application crash) via a craf…
-
Unscored —
PowerDNS (aka pdns) Authoritative Server before 4.0.1 allows remote primary DNS servers to cause a denial of service (m…
-
Unscored —
Huawei FusionCompute before V100R005C10CP7002 stores cleartext AES keys in a file, which allows remote authenticated us…
-
Unscored —
SAP HANA DB 1.00.091.00.1418659308 allows remote attackers to obtain sensitive topology information via an unspecified …
-
Unscored —
The _g_file_remove_directory function in file-utils.c in File Roller 3.5.4 through 3.20.2 allows remote attackers to de…
-
Unscored —
The m_sasl module in InspIRCd before 2.0.23, when used with a service that supports SASL_EXTERNAL authentication, allow…
-
Unscored —
Memory leak in Huawei S9300, S5300, S5700, S6700, S7700, S9700, and S12700 devices allows remote attackers to cause a d…
-
Unscored —
libstorage, libstorage-ng, and yast-storage improperly store passphrases for encrypted storage devices in a temporary f…
-
Unscored —CVE-2016-7098 Public exploit
Race condition in wget 1.17 and earlier, when used in recursive or mirroring mode to download a single file, might allo…