Archive
September 2016
Vulnerabilities first published in this month (UTC), newest first.
597 results · Feed
-
Unscored —
Apple iOS before 10, when Handoff for Messages is used, does not ensure that a Messages signin has occurred before disp…
-
Unscored —
The Assets component in Apple iOS before 10 allows man-in-the-middle attackers to block software updates via vectors re…
-
Unscored —
UCS Manager and UCS 6200 Fabric Interconnects in Cisco Unified Computing System (UCS) through 3.0(2d) allow local users…
-
Unscored —
Cisco Fog Director 1.0(0) for IOx allows remote authenticated users to bypass intended access restrictions and write to…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the web framework in Cisco IOx Local Manager in IOS 15.5(2)T and IOS XE all…
-
Unscored —
The Data in Motion (DMo) application in Cisco IOS 15.6(1)T and IOS XE, when the IOx feature set is enabled, allows remo…
-
Unscored —
Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.34 and 1.7.x before 1.7.12 places 169.254.0.0/16 in the all_open…
-
Unscored —
The client in EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.9 and 4.1.x before 4.1.5 places the weakest algo…
-
Unscored —
Multiple open redirect vulnerabilities in Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.30 and 1.7.x before 1.…
-
Unscored —
EMC ViPR SRM before 3.7.2 does not restrict the number of password-authentication attempts, which makes it easier for r…
-
Unscored —
Pivotal Cloud Foundry (PCF) Ops Manager before 1.6.17 and 1.7.x before 1.7.8, when vCloud or vSphere is used, does not …
-
Unscored —
Pivotal Cloud Foundry (PCF) Ops Manager before 1.5.14 and 1.6.x before 1.6.9 uses the same cookie-encryption key across…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Apps Manager in Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.32 a…
-
Unscored —
The metrics-collection component in RabbitMQ for Pivotal Cloud Foundry (PCF) 1.6.x before 1.6.4 logs command lines of f…
-
Unscored —
Pivotal Cloud Foundry (PCF) Ops Manager before 1.6.19 and 1.7.x before 1.7.10, when vCloud or vSphere is used, has a de…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Pivotal Cloud Foundry (PCF) Ops Manager before 1.6.17 allows remote attacke…
-
Unscored —
Cross-site scripting (XSS) vulnerability in EMC ViPR SRM before 3.7.2 allows remote authenticated users to inject arbit…
-
Unscored —
Cross-site scripting (XSS) vulnerability in EMC ViPR SRM before 3.7.2 allows remote attackers to inject arbitrary web s…
-
Unscored —
Cloud Foundry PHP Buildpack (aka php-buildpack) before 4.3.18 and PHP Buildpack Cf-release before 242, as used in Pivot…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in EMC ViPR SRM before 3.7.2 allows remote attackers to hijack the auth…
-
Unscored —CVE-2016-7418 EPSS 11%
The php_wddx_push_element function in ext/wddx/wddx.c in PHP before 5.6.26 and 7.x before 7.0.11 allows remote attacker…
-
Unscored —
ext/mysqlnd/mysqlnd_wireprotocol.c in PHP before 5.6.26 and 7.x before 7.0.11 does not verify that a BIT field has the …
-
Unscored —
ext/spl/spl_array.c in PHP before 5.6.26 and 7.x before 7.0.11 proceeds with SplArray unserialization without validatin…
-
Unscored —
The ZIP signature-verification feature in PHP before 5.6.26 and 7.x before 7.0.11 does not ensure that the uncompressed…
-
Unscored —
ext/standard/var_unserializer.re in PHP before 5.6.26 mishandles object-deserialization failures, which allows remote a…
-
Unscored —
Stack-based buffer overflow in the Locale class in common/locid.cpp in International Components for Unicode (ICU) throu…
-
Unscored —
ext/intl/msgformat/msgformat_format.c in PHP before 5.6.26 and 7.x before 7.0.11 does not properly restrict the locale …
-
Unscored —
Cross-site scripting (XSS) vulnerability in share.js in the gallery application in ownCloud Server before 9.0.4 and Nex…
-
Unscored —
Use-after-free vulnerability in the wddx_stack_destroy function in ext/wddx/wddx.c in PHP before 5.6.26 and 7.x before …
-
Unscored —
Cisco WebEx Meetings Server 2.6 allows remote attackers to execute arbitrary commands by injecting these commands into …
-
Unscored —
EMC Documentum D2 4.5 before patch 15 and 4.6 before patch 03 allows remote attackers to read arbitrary Docbase documen…
-
Unscored —
Cisco Carrier Routing System (CRS) 5.1 and 5.1.4, as used in CRS Carrier Grade Services for CRS-1 and CRS-3 devices, al…
-
Unscored —
Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 1…
-
Unscored —
Cisco AsyncOS through 9.5.0-444 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of se…
-
Unscored —
Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acr…
-
Unscored —
Multiple SQL injection vulnerabilities in the FAQ package 2.x before 2.3.6, 4.x before 4.0.5, and 5.x before 5.0.5 in O…
-
Unscored —
Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of service (memory cor…
-
Unscored —
Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of service (memory cor…
-
Unscored —
Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of service (memory cor…
-
Unscored —
Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of service (memory cor…