Archive
October 2016
Vulnerabilities first published in this month (UTC), newest first.
40 results · Clear filters · Feed
-
Unscored —
A persistent XSS vulnerability exists in the User-Agent header of the login process of AlienVault OSSIM and USM before …
-
Unscored —
A vulnerability exists in gauge.php of AlienVault OSSIM and USM before 5.3.2 that allows an attacker to execute an arbi…
-
Unscored —CVE-2016-8580 Public exploit
PHP object injection vulnerabilities exist in multiple widget files in AlienVault OSSIM and USM before 5.3.2. These vul…
-
Unscored —CVE-2016-9018 Public exploit
Improper handling of a repeating VRAT chunk in qcpfformat.dll allows attackers to cause a Null pointer dereference and …
-
Unscored —CVE-2016-5764 Public exploit
Micro Focus Rumba FTP 4.X client buffer overflow makes it possible to corrupt the stack and allow arbitrary code execut…
-
Unscored —
Unspecified vulnerability in the BI Publisher (formerly XML Publisher) component in Oracle Fusion Middleware 11.1.1.7.0…
-
Unscored —CVE-2003-0584 Public exploit
Format string vulnerability in Backup and Restore Utility for Unix (BRU) 17.0 and earlier, when running setuid, allows …
-
Unscored —CVE-2003-0590 Public exploit
Cross-site scripting (XSS) vulnerability in Splatt Forum allows remote attackers to insert arbitrary HTML and web scrip…
-
Unscored —CVE-2003-0586 Public exploit
Brooky eStore 1.0.1 through 1.0.2b allows remote attackers to obtain sensitive path information via a direct HTTP reque…
-
Unscored —CVE-2016-6828 Public exploit
The tcp_check_send_head function in include/net/tcp.h in the Linux kernel before 4.7.5 does not properly maintain certa…
-
Unscored —CVE-2016-0079 Public exploit
The kernel in Microsoft Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application…
-
Unscored —CVE-2016-0073 Public exploit
The kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 16…
-
Unscored —
The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Serv…
-
Unscored —CVE-2016-0075 Public exploit
The kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 16…
-
High 7.5
ChakraCore RCE Vulnerability
The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CV…
-
High 7.5
ChakraCore RCE Vulnerability
The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CV…
-
High 7.5
ChakraCore RCE Vulnerability
The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via a crafted web site, aka "Scripting Engine Remote Code Execution Vulnerability."
-
Unscored —
The Graphics component in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; …
-
Unscored —CVE-2016-7188 Public exploit
The Standard Collector Service in Windows Diagnostics Hub in Microsoft Windows 10 Gold, 1511, and 1607 mishandles libra…
-
Unscored —CVE-2016-7185 Public exploit
The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1,…
-
Unscored —
Microsoft Internet Explorer 10 and 11 and Microsoft Edge do not properly restrict access to private namespaces, which a…
-
High 7.5
ChakraCore RCE Vulnerability
The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CV…
-
Unscored —
The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1,…
-
Unscored —
Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows…
-
Unscored —
Microsoft Internet Explorer 10 and 11 and Microsoft Edge do not properly restrict access to private namespaces, which a…
-
Unscored —
Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.63…
-
Unscored —
The JMX servlet in Red Hat JBoss Enterprise Application Platform (EAP) 4 and 5 allows remote authenticated users to cau…
-
Unscored —CVE-2016-5425 Public exploit
The Tomcat package on Red Hat Enterprise Linux (RHEL) 7, Fedora, CentOS, Oracle Linux, and possibly other Linux distrib…
-
Unscored —CVE-2016-6689 Public exploit
Binder in the kernel in Android before 2016-10-05 on Nexus devices allows attackers to obtain sensitive information via…
-
Unscored —CVE-2016-5348 Public exploit
The GPS component in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 b…
-
High 7.5
Jetty vulnerable to exposure of sensitive information to unauthenticated remote users
The exception handling code in Eclipse Jetty before 9.2.9.v20150224 allows remote attackers to obtain sensitive information from process memory via illegal characters in an HTTP header, aka JetLeak.
-
Unscored —CVE-2016-1000123 Public exploit
Unauthenticated SQL Injection in Huge-IT Video Gallery v1.0.9 for Joomla
-
Unscored —CVE-2016-1000125 Public exploit
Unauthenticated SQL Injection in Huge-IT Catalog v1.0.7 for Joomla
-
Unscored —CVE-2016-1000124 Public exploit
Unauthenticated SQL Injection in Huge-IT Portfolio Gallery Plugin v1.0.6
-
Unscored —CVE-2016-6434 Public exploit
Cisco Firepower Management Center 6.0.1 has hardcoded database credentials, which allows local users to obtain sensitiv…
-
Unscored —
The web console in Cisco Firepower Management Center 6.0.1 allows remote authenticated users to read arbitrary files vi…
-
Unscored —
The Threat Management Console in Cisco Firepower Management Center 5.2.0 through 6.0.1 allows remote authenticated user…
-
Unscored —CVE-2016-5983 Public exploit
IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.43, 8.0 before 8.0.0.13, 8.5 before 8.5.5.11, 9.0 before 9.0.0.…
-
Unscored —CVE-2016-5180 Public exploit
Heap-based buffer overflow in the ares_create_query function in c-ares 1.x before 1.12.0 allows remote attackers to cau…
-
Unscored —CVE-2016-1240 Public exploit
The Tomcat init script in the tomcat7 package before 7.0.56-3+deb8u4 and tomcat8 package before 8.0.14-1+deb8u3 on Debi…