Archive

6 October 2016

Vulnerabilities first published on this day (UTC), newest first.

← September 2016 2016 / October /6 November 2016 →

All Critical High Medium Low Exploited only Public exploit

42 results · Feed

Unscored —

CVE-2015-1000008

Path Disclosure Vulnerability in wordpress plugin MP3-jPlayer v2.3.2

Web / CMS

Oct 6, 2016
Unscored —

CVE-2015-1000007

Remote file download vulnerability in wptf-image-gallery v1.03

Oct 6, 2016
Unscored —

CVE-2015-1000011

Blind SQL Injection in wordpress plugin dukapress v2.5.9

Web / CMS

Oct 6, 2016
Unscored —

CVE-2015-1000001

Remote file upload vulnerability in fast-image-adder v1.1 Wordpress plugin

Web / CMS

Oct 6, 2016
Unscored —

CVE-2015-1000009

Open proxy in Wordpress plugin google-adsense-and-hotel-booking v1.05

Web / CMS

Oct 6, 2016
Unscored —

CVE-2015-1000013

Remote file upload vulnerability in wordpress plugin csv2wpec-coupon v1.1

Web / CMS

Oct 6, 2016
Unscored —

CVE-2015-1000002

Open Proxy in filedownload v1.4 wordpress plugin

Web / CMS

Oct 6, 2016
Unscored —

CVE-2015-1000000

Remote file upload vulnerability in mailcwp v1.99 wordpress plugin

Web / CMS

Oct 6, 2016
Unscored —

CVE-2015-1000010 Scanner template

Remote file download in simple-image-manipulator v1.0 wordpress plugin

Web / CMS

Oct 6, 2016
Unscored —

CVE-2015-1000006

Remote file download vulnerability in recent-backups v0.7 wordpress plugin

Web / CMS

Oct 6, 2016
Unscored —

CVE-2015-1000012 Scanner template

Local File Inclusion Vulnerability in mypixs v0.3 wordpress plugin

Web / CMS

Oct 6, 2016
Unscored —

CVE-2015-1000005 Scanner template

Remote file download vulnerability in candidate-application-form v1.0 wordpress plugin

Web / CMS

Oct 6, 2016
Unscored —

CVE-2015-1000004

XSS in filedownload v1.4 wordpress plugin

Web / CMS

Oct 6, 2016
Unscored —

CVE-2015-1000003

Blind SQL Injection in filedownload v1.4 wordpress plugin

Web / CMS

Oct 6, 2016
Unscored —

CVE-2016-1000009

TP-LINK lost control of two domains, www.tplinklogin.net and tplinkextender.net. Please note that these domains are phy…

Oct 6, 2016
Unscored —

CVE-2016-1000113

XSS and SQLi in huge IT gallery v1.1.5 for Joomla

Oct 6, 2016
Unscored —

CVE-2016-1000217

Zotpress plugin for WordPress SQLi in zp_get_account()

Web / CMS

Oct 6, 2016
Unscored —

CVE-2016-1000000

Ipswitch WhatsUp Gold 16.4.1 WrFreeFormText.asp sUniqueID Parameter Blind SQL Injection

Oct 6, 2016
Unscored —

CVE-2016-1000123 Public exploit

Unauthenticated SQL Injection in Huge-IT Video Gallery v1.0.9 for Joomla

Oct 6, 2016
Unscored —

CVE-2016-1000112

Unauthenticated remote .jpg file upload in contus-video-comments v1.0 wordpress plugin

Web / CMS

Oct 6, 2016
Unscored —

CVE-2016-1000125 Public exploit

Unauthenticated SQL Injection in Huge-IT Catalog v1.0.7 for Joomla

Oct 6, 2016
Unscored —

CVE-2016-1000114

XSS in huge IT gallery v1.1.5 for Joomla

Oct 6, 2016
Unscored —

CVE-2016-1000124 Public exploit

Unauthenticated SQL Injection in Huge-IT Portfolio Gallery Plugin v1.0.6

Oct 6, 2016
Unscored —

CVE-2015-0721

Cisco NX-OS 4.0 through 7.3 on Multilayer Director and Nexus 1000V, 2000, 3000, 3500, 4000, 5000, 5500, 5600, 6000, 700…

Oct 6, 2016
Unscored —

CVE-2015-6393

Cisco NX-OS 4.1 through 7.3 and 11.0 through 11.2 on Nexus 2000, 3000, 3500, 5000, 5500, 5600, 6000, 7000, 7700, and 90…

Oct 6, 2016
Unscored —

CVE-2016-1453

Buffer overflow in the Overlay Transport Virtualization (OTV) GRE feature in Cisco NX-OS 5.0 through 7.3 on Nexus 7000 …

Oct 6, 2016
Unscored —

CVE-2016-1454

Cisco NX-OS 4.0 through 7.3 and 11.0 through 11.2 on 1000v, 2000, 3000, 3500, 5000, 5500, 5600, 6000, 7000, 7700, and 9…

Oct 6, 2016
Unscored —

CVE-2016-6422

Cisco IOS 12.2(33)SXJ9 on Supervisor Engine 32 and 720 modules for 6500 and 7600 devices mishandles certain operators, …

Oct 6, 2016
Unscored —

CVE-2016-6023

Directory traversal vulnerability in the Configuration Manager in IBM Sterling Secure Proxy (SSP) 3.4.2 before 3.4.2.0 …

Oct 6, 2016
Unscored —

CVE-2016-6434 Public exploit

Cisco Firepower Management Center 6.0.1 has hardcoded database credentials, which allows local users to obtain sensitiv…

Oct 6, 2016
Unscored —

CVE-2016-6025

The Configuration Manager in IBM Sterling Secure Proxy (SSP) 3.4.2 before 3.4.2.0 iFix 8 and 3.4.3 before 3.4.3.0 iFix …

Oct 6, 2016
Unscored —

CVE-2016-6425

Cross-site scripting (XSS) vulnerability in Cisco Unified Intelligence Center (CUIC) 8.5.4 through 9.1(1), as used in U…

Oct 6, 2016
Unscored —

CVE-2016-6653

The MariaDB audit_plugin component in Pivotal Cloud Foundry (PCF) cf-mysql-release 27 and 28 allows remote attackers to…

Oct 6, 2016
Unscored —

CVE-2016-6424

The DHCP Relay implementation in Cisco Adaptive Security Appliance (ASA) Software 8.4.7.29 and 9.1.7.4 allows remote at…

Oct 6, 2016
Unscored —

CVE-2016-6435 Public exploit EPSS 37%

The web console in Cisco Firepower Management Center 6.0.1 allows remote authenticated users to read arbitrary files vi…

Oct 6, 2016
Unscored —

CVE-2016-6433 Public exploit EPSS 81%

The Threat Management Console in Cisco Firepower Management Center 5.2.0 through 6.0.1 allows remote authenticated user…

Oct 6, 2016
Unscored —

CVE-2016-6027

The Configuration Manager in IBM Sterling Secure Proxy (SSP) 3.4.2 before 3.4.2.0 iFix 8 and 3.4.3 before 3.4.3.0 iFix …

Oct 6, 2016
Unscored —

CVE-2016-6427

Cross-site request forgery (CSRF) vulnerability in Cisco Unified Intelligence Center (CUIC) 8.5.4 through 9.1(1), as us…

Oct 6, 2016
Unscored —

CVE-2016-6436

Cross-site scripting (XSS) vulnerability in HostScan Engine 3.0.08062 through 3.1.14018 in the Cisco Host Scan package,…

Oct 6, 2016
Unscored —

CVE-2016-6428

Cisco IOS XR 6.1.1 allows local users to execute arbitrary OS commands as root by leveraging admin privileges, aka Bug …

Oct 6, 2016