Archive
25 November 2016
Vulnerabilities first published on this day (UTC), newest first.
78 results · Feed
-
Unscored —
Lifecycle Query Engine (LQE) in IBM Jazz Reporting Service 6.0 and 6.0.1 before 6.0.1 iFix006 allows remote attackers t…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Lifecycle Query Engine (LQE) in IBM Jazz Reporting Service 6.0 and 6.0.1 be…
-
Unscored —
The XML parser in Lifecycle Query Engine (LQE) in IBM Jazz Reporting Service 6.0 and 6.0.1 before 6.0.1 iFix006 allows …
-
Unscored —
Lifecycle Query Engine (LQE) in IBM Jazz Reporting Service 6.0 and 6.0.1 before 6.0.1 iFix006 does not destroy a Sessio…
-
Unscored —
IBM BigFix Remote Control before 9.1.3 does not properly restrict the set of available encryption algorithms, which mak…
-
Unscored —
IBM BigFix Remote Control before 9.1.3 allows remote authenticated users to obtain sensitive information by reading err…
-
Unscored —
Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 4.0 before 4.0.7 iFix11, 5.…
-
Unscored —
IBM BigFix Remote Control before 9.1.3 does not properly restrict password choices, which makes it easier for remote at…
-
High 7.5
Drupal Incorrect cache context on password reset page
The user password reset form in Drupal 8.x before 8.2.3 allows remote attackers to conduct cache poisoning attacks by leveraging failure to specify a correct cache context.
-
Medium 6.8
Drupal Open Redirect
Confirmation forms in Drupal 7.x before 7.52 make it easier for remote authenticated users to conduct open redirect attacks via unspecified vectors.
-
Medium 6.5
Drupal Denial of service via transliterate mechanism
The transliterate mechanism in Drupal 8.x before 8.2.3 allows remote attackers to cause a denial of service via a crafted URL.
-
Medium 4.3
Drupal sensitive information disclosure
The taxonomy module in Drupal 7.x before 7.52 and 8.x before 8.2.3 might allow remote authenticated users to obtain sensitive information about taxonomy terms by leveraging inconsistent naming of access query tags.
-
Unscored —
A denial of service vulnerability in Mediaserver in Android before 2016-11-05 could enable an attacker to use a special…
-
Unscored —
An elevation of privilege vulnerability in the NVIDIA GPU driver in Android before 2016-11-05 could enable a local mali…
-
Unscored —
An elevation of privilege vulnerability in Mediaserver in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 20…
-
Unscored —
A remote code execution vulnerability in libskia in Android 7.0 before 2016-11-01 could enable an attacker using a spec…
-
Unscored —
An elevation of privilege vulnerability in the Synaptics touchscreen driver in Android before 2016-11-05 could enable a…
-
Unscored —
An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Po…
-
Unscored —
An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Po…
-
Unscored —
A denial of service vulnerability in the Input Manager Service in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x b…
-
Unscored —
A denial of service vulnerability in Proxy Auto Config in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.…
-
Unscored —CVE-2016-6754 Public exploit
A remote code execution vulnerability in Webview in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016…
-
Unscored —
An elevation of privilege vulnerability in the Synaptics touchscreen driver in Android before 2016-11-05 could enable a…
-
Unscored —
An information disclosure vulnerability in kernel components, including the process-grouping subsystem and the networki…
-
Unscored —
An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Po…
-
Unscored —
A remote code execution vulnerability in the Qualcomm crypto driver in Android before 2016-11-05 could enable a remote …
-
Unscored —
An elevation of privilege vulnerability in the Synaptics touchscreen driver in Android before 2016-11-05 could enable a…
-
Unscored —
An elevation of privilege vulnerability in the NVIDIA GPU driver in Android before 2016-11-05 could enable a local mali…
-
Unscored —
An elevation of privilege vulnerability in the AOSP Launcher in Android 7.0 before 2016-11-01 could allow a local malic…
-
Unscored —
An elevation of privilege vulnerability in the Synaptics touchscreen driver in Android before 2016-11-05 could enable a…
-
Unscored —
A remote code execution vulnerability in libjpeg in Android 4.x before 4.4.4, 5.0.x before 5.0.2, and 5.1.x before 5.1.…
-
Unscored —
An elevation of privilege vulnerability in the Bluetooth component in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1…
-
Unscored —CVE-2016-6707 Public exploit
An elevation of privilege vulnerability in System Server in Android 6.x before 2016-11-01 and 7.0 before 2016-11-01 cou…
-
Unscored —
A remote denial of service vulnerability in Mediaserver in Android 6.x before 2016-11-01 and 7.0 before 2016-11-01 coul…
-
Unscored —
An information disclosure vulnerability in Conscrypt and BoringSSL in Android 6.x before 2016-11-01 and 7.0 before 2016…
-
Unscored —
A remote code execution vulnerability in an Android runtime library in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.…
-
Unscored —
An elevation of privilege vulnerability in Mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.…
-
Unscored —
An elevation of privilege vulnerability in the Qualcomm crypto engine driver in Android before 2016-11-05 could enable …
-
Unscored —
An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Po…
-
Unscored —
An elevation of privilege vulnerability in the Account Manager Service in Android 7.0 before 2016-11-01 could enable a …