Skip to content
OpenAdvisories

Archive

October 2016

Vulnerabilities first published in this month (UTC), newest first.

  1. 13
  2. 2 
  3. 345
  4. 4 
  5. 552
  6. 642
  7. 713
  8. 8 
  9. 91
  10. 10108
  11. 11 
  12. 12 
  13. 1399
  14. 1438
  15. 15 
  16. 1614
  17. 178
  18. 18 
  19. 19 
  20. 20 
  21. 2110
  22. 229
  23. 23 
  24. 24 
  25. 25162
  26. 266
  27. 2718
  28. 2835
  29. 296
  30. 306
  31. 3113

688 results · Feed

  • Unscored —

    Unspecified vulnerability in the Oracle Commerce Service Center component in Oracle Commerce 10.0.3.5 and 10.2.0.5 allo…

  • Unscored —

    Unspecified vulnerability in the Oracle Hospitality OPERA 5 Property Services component in Oracle Hospitality Applicati…

  • Unscored —

    Unspecified vulnerability in the Oracle Advanced Pricing component in Oracle E-Business Suite 12.1.1 through 12.1.3 and…

  • Unscored —

    Unspecified vulnerability in Oracle Java SE 6u121, 7u111, and 8u102 allows remote attackers to affect confidentiality, …

  • Unscored —

    Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allow…

  • Unscored —

    Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, and 1…

  • Unscored —

    IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 bef…

  • Unscored —

    IBM Rational Quality Manager (RQM) and Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.x before 4.0…

  • Unscored —

    IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 bef…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in IBM Security Guardium 8.2 before p310, 9.x through 9.5 before p700, and 10.…

  • Unscored —

    The Administrative Console in IBM WebSphere Application Server (WAS) 7.x before 7.0.0.43, 8.0.x before 8.0.0.13, and 8.…

  • Unscored —

    IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 bef…

  • Unscored —

    IBM Security Guardium 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows local user…

  • Unscored —

    IBM Security Guardium 10.x through 10.1 before p100 allows remote authenticated users to obtain sensitive information b…

  • Unscored —

    IBM Security Guardium Database Activity Monitor 9.x through 9.5 before p700 and 10.x through 10.0.1 before p100 allows …

  • Unscored —

    IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 bef…

  • Unscored —

    Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acr…

  • Unscored —

    Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acr…

  • Unscored —

    Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acr…

  • Unscored —

    Huge-IT Portfolio Gallery manager v1.1.0 SQL Injection and XSS

  • Unscored —

    XSS & SQLi in HugeIT slideshow v1.0.4

  • Unscored —

    XSS & SQLi in HugeIT slideshow v1.0.4

  • Unscored —

    Huge-IT Portfolio Gallery manager v1.1.0 SQL Injection and XSS

  • Unscored —

    SQLi and XSS in Huge IT catalog extension v1.0.4 for Joomla

  • Unscored —
    CVE-2016-2848 EPSS 26%

    ISC BIND 9.1.0 through 9.8.4-P2 and 9.9.0 through 9.9.2-P2 allows remote attackers to cause a denial of service (assert…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Infopop Ultimate Bulletin Board (UBB) 6.x allows remote authenticated users…

  • Unscored —

    admin.php in Digi-ads 1.1 allows remote attackers to bypass authentication via a cookie with the username set to the na…

  • Unscored —

    admin.php in Digi-news 1.1 allows remote attackers to bypass authentication via a cookie with the username set to the n…

  • Unscored —
    CVE-2003-0584 Public exploit

    Format string vulnerability in Backup and Restore Utility for Unix (BRU) 17.0 and earlier, when running setuid, allows …

  • Unscored —

    Buffer overflow in Backup and Restore Utility for Unix (BRU) 17.0 and earlier, when running setuid, allows local users …

  • Unscored —

    SQL injection vulnerability in login.asp of Brooky eStore 1.0.1 through 1.0.2b allows remote attackers to bypass authen…

  • Unscored —
    CVE-2003-0590 Public exploit

    Cross-site scripting (XSS) vulnerability in Splatt Forum allows remote attackers to insert arbitrary HTML and web scrip…

  • Unscored —
    CVE-2003-0586 Public exploit

    Brooky eStore 1.0.1 through 1.0.2b allows remote attackers to obtain sensitive path information via a direct HTTP reque…

  • Unscored —

    mm/memory.c in the Linux kernel before 4.1.4 mishandles anonymous pages, which allows local users to gain privileges or…

  • Unscored —

    The mbcache feature in the ext2 and ext4 filesystem implementations in the Linux kernel before 4.6 mishandles xattr blo…

  • Unscored —

    fs/overlayfs/copy_up.c in the Linux kernel before 4.2.6 uses an incorrect cleanup code path, which allows local users t…

  • Unscored —

    Open redirect vulnerability in IBM Cloud Orchestrator 2.4.x before 2.4.0 FP3 allows remote authenticated users to redir…

  • Unscored —

    SQL injection vulnerability in IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before …

  • Unscored —

    The IP stack in the Linux kernel through 4.8.2 allows remote attackers to cause a denial of service (stack consumption …

  • Unscored —

    The arcmsr_iop_message_xfer function in drivers/scsi/arcmsr/arcmsr_hba.c in the Linux kernel through 4.8.2 does not res…