Skip to content
OpenAdvisories

Archive

November 2016

Vulnerabilities first published in this month (UTC), newest first.

← October 2016 2016 / November December 2016 →
  1. 11
  2. 21
  3. 322
  4. 421
  5. 5 
  6. 6 
  7. 72
  8. 835
  9. 9 
  10. 1075
  11. 119
  12. 122
  13. 13 
  14. 147
  15. 155
  16. 1613
  17. 175
  18. 186
  19. 1913
  20. 20 
  21. 21 
  22. 2210
  23. 236
  24. 2411
  25. 2578
  26. 26 
  27. 27 
  28. 2815
  29. 299
  30. 3040
All Critical High Medium Low Exploited only Public exploit

386 results · Feed

  • Unscored —
    CVE-2016-2881

    IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 and QRadar Incident Forensics 7.2 before 7.2.7 allow remot…

  • Unscored —
    CVE-2016-2917

    The notifications component in IBM TRIRIGA Applications 10.4 and 10.5 before 10.5.1 allows remote authenticated users t…

  • Unscored —
    CVE-2016-2887

    IBM IMS Enterprise Suite Data Provider before 3.2.0.1 for Microsoft .NET allows remote authenticated users to obtain se…

  • Unscored —
    CVE-2016-2884

    Cross-site request forgery (CSRF) vulnerability in IBM Forms Experience Builder 8.5.x and 8.6.x before 8.6.3.1, in an u…

  • Unscored —
    CVE-2016-2878

    Multiple cross-site request forgery (CSRF) vulnerabilities in IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.…

  • Unscored —
    CVE-2016-2877

    IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 uses weak permissions for unspecified directories under th…

  • Unscored —
    CVE-2016-2874

    IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 mishandles authorization, which allows remote authenticate…

  • Unscored —
    CVE-2016-2869

    Multiple cross-site scripting (XSS) vulnerabilities in the UI in IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before…

  • Unscored —
    CVE-2016-2876

    IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 executes unspecified processes at an incorrect privilege l…

  • Unscored —
    CVE-2016-2871

    IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 uses cleartext storage for unspecified passwords, which al…

  • Unscored —
    CVE-2016-2873

    SQL injection vulnerability in IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 allows remote authenticated…

  • Unscored —
    CVE-2016-8222

    A vulnerability has been identified in a signed kernel driver for the BIOS of some ThinkPad systems that can allow an a…

    Lenovo Group ThinkPad systems
  • Unscored —
    CVE-2016-3057

    Cross-site scripting (XSS) vulnerability in IBM Sterling B2B Integrator 5.2 before 5020500_14 and 5.2 06 before 5020602…

  • Unscored —
    CVE-2016-3014

    Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 4.0 before 4.0.7 iFix11 and…

  • Unscored —
    CVE-2016-3002

    IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows physically proximate attackers to obtain se…

  • Unscored —
    CVE-2016-3004

    Cross-site request forgery (CSRF) vulnerability in IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4…

  • Unscored —
    CVE-2016-3009

    Cross-site request forgery (CSRF) vulnerability in IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4…

  • Unscored —
    CVE-2016-2952

    IBM BigFix Remote Control before 9.1.3 does not enable the HSTS protection mechanism, which makes it easier for remote …

  • Unscored —
    CVE-2016-2934

    Cross-site scripting (XSS) vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote attackers to inject ar…

  • Unscored —
    CVE-2016-2963

    Cross-site request forgery (CSRF) vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote attackers to hi…

  • Unscored —
    CVE-2016-2944

    IBM BigFix Remote Control before 9.1.3 does not properly restrict failed login attempts, which makes it easier for remo…

  • Unscored —
    CVE-2016-2943

    IBM BigFix Remote Control before 9.1.3 allows local users to obtain sensitive information by leveraging unspecified pri…

  • Unscored —
    CVE-2016-2936

    IBM BigFix Remote Control before 9.1.3 uses cleartext storage for unspecified passwords, which allows local users to ob…

  • Unscored —
    CVE-2016-2940

    Multiple unspecified vulnerabilities in IBM BigFix Remote Control before 9.1.3 allow remote attackers to obtain sensiti…

  • Unscored —
    CVE-2016-2933

    Directory traversal vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote authenticated administrators …

  • Unscored —
    CVE-2016-2949

    IBM BigFix Remote Control before 9.1.3 allows local users to obtain sensitive information by reading cached web pages f…

  • Unscored —
    CVE-2016-2935

    The broker application in IBM BigFix Remote Control before 9.1.3 allows remote attackers to cause a denial of service v…

  • Unscored —
    CVE-2016-2932

    IBM BigFix Remote Control before 9.1.3 allows remote attackers to conduct XML injection attacks via unspecified vectors.

  • Unscored —
    CVE-2016-2953

    IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 does not require SSL, which allows remote attacker…

  • Unscored —
    CVE-2016-2937

    IBM BigFix Remote Control before 9.1.3 allows remote attackers to obtain sensitive information or spoof e-mail transmis…

  • Unscored —
    CVE-2016-2957

    IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows remote authenticated users to obtain sensit…

  • Unscored —
    CVE-2016-2950

    SQL injection vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote authenticated users to execute arbi…

  • Unscored —
    CVE-2016-2951

    IBM BigFix Remote Control before 9.1.3 does not properly set the default encryption strength, which makes it easier for…

  • Unscored —
    CVE-2016-2948

    IBM BigFix Remote Control before 9.1.3 allows local users to discover hardcoded credentials via unspecified vectors.

  • Unscored —
    CVE-2016-2958

    IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows remote authenticated users to obtain sensit…

  • Unscored —
    CVE-2016-2931

    IBM BigFix Remote Control before 9.1.3 allows remote attackers to obtain sensitive cleartext information by sniffing th…

  • Unscored —
    CVE-2016-9564

    Buffer overflow in send_redirect() in Boa Webserver 0.92r allows remote attackers to DoS via an HTTP GET request reques…

  • Unscored —
    CVE-2016-5905

    Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.5 before 7.5.0.10 IF3 and 7.6 before 7.6.0.5 …

  • Unscored —
    CVE-2016-5890

    IBM Sterling B2B Integrator 5.2 before 5020500_14 and 5.2 06 before 5020602_1 allows remote authenticated users to chan…

  • Unscored —
    CVE-2016-5987

    IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5 before 7.5.0.10 IF4, and 7.6 before 7.6.0.5 IF3 allows remote att…