Skip to content
OpenAdvisories

Archive

12 September 2016

Vulnerabilities first published on this day (UTC), newest first.

← August 2016 2016 / September /12 October 2016 →
  1. 116
  2. 219
  3. 38
  4. 4 
  5. 5 
  6. 66
  7. 737
  8. 84
  9. 914
  10. 101
  11. 1161
  12. 1224
  13. 13 
  14. 1476
  15. 15 
  16. 1615
  17. 1716
  18. 1828
  19. 199
  20. 2022
  21. 2143
  22. 2230
  23. 23 
  24. 2411
  25. 2577
  26. 2657
  27. 279
  28. 283
  29. 296
  30. 305
All Critical High Medium Low Exploited only Public exploit

24 results · Feed

  • Unscored —
    CVE-2016-0331

    Cross-site scripting (XSS) vulnerability in IBM Rational Team Concert 6.0.1 and 6.0.2 before 6.0.2 iFix2 and Rational C…

  • Unscored —
    CVE-2016-4852

    YoruFukurou (NightOwl) before 2.85 relies on support for emoji skin-tone modifiers even though this support is missing …

  • Unscored —
    CVE-2016-6394

    Session fixation vulnerability in Cisco Firepower Management Center and Cisco FireSIGHT System Software through 6.1.0 a…

  • Unscored —
    CVE-2016-6370

    Directory traversal vulnerability in the web interface in Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) 10.6…

  • Unscored —
    CVE-2016-6395

    Cross-site scripting (XSS) vulnerability in the web-based management interface in Cisco Firepower Management Center bef…

  • Unscored —
    CVE-2016-6399

    Cisco ACE30 Application Control Engine Module through A5 3.3 and ACE 4700 Application Control Engine appliances through…

  • Unscored —
    CVE-2016-6371

    Directory traversal vulnerability in the web interface in Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) 10.6…

  • Unscored —
    CVE-2016-6398

    The PPTP server in Cisco IOS 15.5(3)M does not properly initialize packet buffers, which allows remote attackers to obt…

  • Unscored —
    CVE-2016-6396

    Cisco Firepower Management Center before 6.1 and FireSIGHT System Software before 6.1, when certain malware blocking op…

  • Unscored —
    CVE-2016-5954

    IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF30, 8.0.0 through …

  • Unscored —
    CVE-2016-5927

    IBM Tivoli Storage Manager for Space Management (aka Spectrum Protect for Space Management) 6.3.x before 6.3.2.6, 6.4.x…

  • Unscored —
    CVE-2016-7127

    The imagegammacorrect function in ext/gd/gd.c in PHP before 5.6.25 and 7.x before 7.0.10 does not properly validate gam…

    php5 php7.0 Ubuntu
  • Unscored —
    CVE-2016-7133

    Zend/zend_alloc.c in PHP 7.x before 7.0.10, when open_basedir is enabled, mishandles huge realloc operations, which all…

    php7.0 Ubuntu
  • Unscored —
    CVE-2016-7134

    ext/curl/interface.c in PHP 7.x before 7.0.10 does not work around a libcurl integer overflow, which allows remote atta…

    php7.0 Ubuntu
  • Unscored —
    CVE-2016-7124 EPSS 16%

    ext/standard/var_unserializer.c in PHP before 5.6.25 and 7.x before 7.0.10 mishandles certain invalid objects, which al…

    php5 php7.0 Ubuntu
  • Unscored —
    CVE-2016-7126

    The imagetruecolortopalette function in ext/gd/gd.c in PHP before 5.6.25 and 7.x before 7.0.10 does not properly valida…

  • Unscored —
    CVE-2016-7125

    ext/session/session.c in PHP before 5.6.25 and 7.x before 7.0.10 skips invalid session names in a way that triggers inc…

    php5 php7.0 Ubuntu
  • Unscored —
    CVE-2016-7131

    ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a denial of service (NULL p…

    php5 php7.0 Ubuntu
  • Unscored —
    CVE-2016-7132

    ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a denial of service (NULL p…

    php5 php7.0 Ubuntu
  • Unscored —
    CVE-2016-7130

    The php_wddx_pop_element function in ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers…

    php5 php7.0 Ubuntu
  • Unscored —
    CVE-2016-7128

    The exif_process_IFD_in_TIFF function in ext/exif/exif.c in PHP before 5.6.25 and 7.x before 7.0.10 mishandles the case…

    php5 php7.0 Ubuntu
  • Unscored —
    CVE-2016-7129

    The php_wddx_process_data function in ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attacker…

    php5 php7.0 Ubuntu
  • Unscored —
    CVE-2016-1469

    The HTTP framework on Cisco SPA300, SPA500, and SPA51x devices allows remote attackers to cause a denial of service (de…

  • Unscored —
    CVE-2016-6375

    Cisco Wireless LAN Controller (WLC) devices before 8.0.140.0, 8.1.x and 8.2.x before 8.2.121.0, and 8.3.x before 8.3.10…