Skip to content
OpenAdvisories

Archive

18 September 2016

Vulnerabilities first published on this day (UTC), newest first.

28 results · Feed

  • Unscored —

    Cisco IOS XR 6.0 and 6.0.1 on NCS 6000 devices allows remote attackers to cause a denial of service (OSPFv3 process rel…

  • Unscored —

    Mail in Apple iOS before 10 mishandles certificates, which makes it easier for man-in-the-middle attackers to discover …

  • Unscored —

    The Keyboards component in Apple iOS before 10 does not properly use a cache for auto-correct suggestions, which allows…

  • Unscored —

    The Sandbox Profiles component in Apple iOS before 10 does not properly restrict access to directory metadata for SMS d…

  • Unscored —

    The GeoServices component in Apple iOS before 10 and watchOS before 3 does not properly restrict access to PlaceData in…

  • Unscored —

    Printing UIKit in Apple iOS before 10 mishandles environment variables, which allows local users to discover cleartext …

  • Unscored —

    otool in Apple Xcode before 8 allows local users to gain privileges or cause a denial of service (memory corruption and…

  • Unscored —

    otool in Apple Xcode before 8 allows local users to gain privileges or cause a denial of service (memory corruption and…

  • Unscored —

    Apple iOS before 10, when Handoff for Messages is used, does not ensure that a Messages signin has occurred before disp…

  • Unscored —

    The Assets component in Apple iOS before 10 allows man-in-the-middle attackers to block software updates via vectors re…

  • Unscored —

    UCS Manager and UCS 6200 Fabric Interconnects in Cisco Unified Computing System (UCS) through 3.0(2d) allow local users…

  • Unscored —

    Cisco Fog Director 1.0(0) for IOx allows remote authenticated users to bypass intended access restrictions and write to…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the web framework in Cisco IOx Local Manager in IOS 15.5(2)T and IOS XE all…

  • Unscored —

    The Data in Motion (DMo) application in Cisco IOS 15.6(1)T and IOS XE, when the IOx feature set is enabled, allows remo…

  • Unscored —

    Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.34 and 1.7.x before 1.7.12 places 169.254.0.0/16 in the all_open…

  • Unscored —

    The client in EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.9 and 4.1.x before 4.1.5 places the weakest algo…

  • Unscored —

    Multiple open redirect vulnerabilities in Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.30 and 1.7.x before 1.…

  • Unscored —

    EMC ViPR SRM before 3.7.2 does not restrict the number of password-authentication attempts, which makes it easier for r…

  • Unscored —

    Pivotal Cloud Foundry (PCF) Ops Manager before 1.6.17 and 1.7.x before 1.7.8, when vCloud or vSphere is used, does not …

  • Unscored —

    Pivotal Cloud Foundry (PCF) Ops Manager before 1.5.14 and 1.6.x before 1.6.9 uses the same cookie-encryption key across…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Apps Manager in Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.32 a…

  • Unscored —

    The metrics-collection component in RabbitMQ for Pivotal Cloud Foundry (PCF) 1.6.x before 1.6.4 logs command lines of f…

  • Unscored —

    Pivotal Cloud Foundry (PCF) Ops Manager before 1.6.19 and 1.7.x before 1.7.10, when vCloud or vSphere is used, has a de…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Pivotal Cloud Foundry (PCF) Ops Manager before 1.6.17 allows remote attacke…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in EMC ViPR SRM before 3.7.2 allows remote authenticated users to inject arbit…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in EMC ViPR SRM before 3.7.2 allows remote attackers to inject arbitrary web s…

  • Unscored —

    Cloud Foundry PHP Buildpack (aka php-buildpack) before 4.3.18 and PHP Buildpack Cf-release before 242, as used in Pivot…

  • Unscored —

    Cross-site request forgery (CSRF) vulnerability in EMC ViPR SRM before 3.7.2 allows remote attackers to hijack the auth…