Archive
October 2016
Vulnerabilities first published in this month (UTC), newest first.
688 results · Feed
-
Unscored —
In Bitcoin Knots v0.11.0.ljr20150711 through v0.13.0.knots20160814 (fixed in v0.13.1.knots20161027), the debug console …
-
Medium 4.0
Denial of Service in docker2aci
docker2aci <= 0.12.3 has an infinite loop when handling local images with cyclic dependency chain.
-
Unscored —
A vulnerability exists in gauge.php of AlienVault OSSIM and USM before 5.3.2 that allows an attacker to execute an arbi…
-
Unscored —
Buffer overflow in the csp_can_process_frame in csp_if_can.c in the libcsp library v1.4 and earlier allows hostile comp…
-
Unscored —CVE-2016-8580 Public exploit
PHP object injection vulnerabilities exist in multiple widget files in AlienVault OSSIM and USM before 5.3.2. These vul…
-
Unscored —
Unauthorized redirect vulnerability in Citrix NetScaler ADC before 10.1 135.8, 10.5 61.11, 11.0 65.31/65.35F and 11.1 4…
-
Unscored —CVE-2016-9018 Public exploit
Improper handling of a repeating VRAT chunk in qcpfformat.dll allows attackers to cause a Null pointer dereference and …
-
Unscored —
Artifex Software, Inc. MuJS before a5c747f1d40e8d6659a37a8d25f13fb5acf8e767 allows context-dependent attackers to obtai…
-
Medium 6.6CVE-2016-8339 EPSS 15%
A buffer overflow in Redis 3.2.x prior to 3.2.4 causes arbitrary code execution when a crafted command is sent. An out …
-
High 7.5
A buffer overflow in OpenJPEG 2.1.1 causes arbitrary code execution when parsing a crafted image. An exploitable code e…
-
Unscored —
A vulnerability in the email attachment scanning functionality of the Advanced Malware Protection (AMP) feature of Cisc…
-
Unscored —
A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email S…
-
Unscored —
A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliances co…
-
Unscored —
A vulnerability in the display of email messages in the Messages in Quarantine (MIQ) view in Cisco AsyncOS for Cisco Em…
-
Unscored —
A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliances co…
-
Unscored —
A vulnerability in the interdevice communications interface of the Cisco IP Interoperability and Collaboration System (…
-
Unscored —
A vulnerability in the configured security policies, including drop email filtering, in Cisco AsyncOS for Cisco Email S…
-
Unscored —
A vulnerability in Advanced Malware Protection (AMP) for Cisco Email Security Appliances (ESA) and Web Security Applian…
-
Unscored —
A vulnerability in the email message and content filtering for malformed Multipurpose Internet Mail Extensions (MIME) h…
-
Unscored —
A vulnerability in local FTP to the Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacke…
-
Unscored —
XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension
-
Unscored —
SQLi and XSS in Huge IT catalog extension v1.0.4 for Joomla
-
Unscored —
XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension
-
Unscored —
A vulnerability in Web Bridge for Cisco Meeting Server could allow an unauthenticated, remote attacker to retrieve memo…
-
Unscored —
The Cisco Unified Communications Manager (CUCM) may be vulnerable to data that can be displayed inside an iframe within…
-
Unscored —
A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) service of the Cisco Meeting Server (CMS) befo…
-
Unscored —
A vulnerability in Cisco IOS XE Software running on Cisco cBR-8 Converged Broadband Routers could allow an unauthentica…
-
Unscored —
A vulnerability in the local Certificate Authority (CA) feature of Cisco ASA Software before 9.6(1.5) could allow an un…
-
Unscored —
A vulnerability in the Cisco Prime Infrastructure and Evolved Programmable Network Manager SQL database interface could…
-
Unscored —
A vulnerability in Cisco Meeting Server could allow an unauthenticated, remote attacker to conduct a cross-site request…
-
Unscored —
A vulnerability in Cisco Finesse Agent and Supervisor Desktop Software could allow an unauthenticated, remote attacker …
-
Unscored —
A vulnerability in the SSL session cache management of Cisco Wide Area Application Services (WAAS) could allow an unaut…
-
Unscored —
A vulnerability in the Identity Firewall feature of Cisco ASA Software before 9.6(2.1) could allow an unauthenticated, …
-
Unscored —
A vulnerability in the detection engine reassembly of HTTP packets for Cisco Firepower System Software before 6.0.1 cou…
-
Unscored —
XSS in NetIQ Designer for Identity Manager before 4.5.3 allows remote attackers to inject arbitrary HTML code via the a…
-
Unscored —
XSS in NetIQ Designer for Identity Manager before 4.5.3 allows remote attackers to inject arbitrary HTML code via the n…
-
Unscored —
XSS in NetIQ IDM 4.5 Identity Applications before 4.5.4 allows attackers able to change their username to inject arbitr…
-
Unscored —CVE-2016-5764 Public exploit
Micro Focus Rumba FTP 4.X client buffer overflow makes it possible to corrupt the stack and allow arbitrary code execut…
-
Unscored —
Yandex Protect Anti-phishing warning in Yandex Browser for desktop from version 15.12.0 to 16.2 could be used by remote…
-
Unscored —
CSRF of synchronization form in Yandex Browser for desktop before version 16.6 could be used by remote attacker to stea…