1 February 2017

143 results · Feed

• Unscored —
  CVE-2016-5951

  IBM Kenexa LCMS Premier on Cloud is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitr…

  IBM Kenexa LCMS Premier on Cloud
  Feb 1, 2017
• Unscored —
  CVE-2016-5937

  IBM Kenexa LCMS Premier on Cloud is vulnerable to cross-site request forgery which could allow an attacker to execute m…

  IBM Kenexa LCMS Premier on Cloud
  Feb 1, 2017
• Unscored —
  CVE-2016-5964

  IBM Security Privileged Identity Manager Virtual Appliance version 2.0.2 uses an inadequate account lockout setting tha…

  IBM Privileged Identity Manager
  Feb 1, 2017
• Unscored —
  CVE-2016-5985

  The IBM Tivoli Storage Manager (IBM Spectrum Protect) AIX client is vulnerable to a buffer overflow when Journal-Based …

  IBM Tivoli Storage Manager
  Feb 1, 2017
• Unscored —
  CVE-2016-5988

  IBM Security Privileged Identity Manager Virtual Appliance could disclose sensitive information in generated error mess…

  IBM Privileged Identity Manager
  Feb 1, 2017
• Unscored —
  CVE-2016-5949

  IBM Kenexa LCMS Premier on Cloud could allow an authenticated user to obtain sensitive user data with a specially craft…

  IBM Kenexa LCMS Premier on Cloud
  Feb 1, 2017
• Unscored —
  CVE-2016-5948

  IBM Kenexa LCMS Premier on Cloud is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitr…

  IBM Kenexa LCMS Premier on Cloud
  Feb 1, 2017
• Unscored —
  CVE-2016-5952

  IBM Kenexa LCMS Premier on Cloud is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL sta…

  IBM Kenexa LCMS Premier on Cloud
  Feb 1, 2017
• Unscored —
  CVE-2016-5980

  IBM TRIRIGA Application Platform is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitr…

  IBM TRIRIGA Application Platform
  Feb 1, 2017
• Unscored —
  CVE-2016-5897

  IBM Jazz Reporting Service (JRS) is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, w…

  IBM Jazz Reporting Service
  Feb 1, 2017
• Unscored —
  CVE-2016-5899

  IBM Jazz Reporting Service (JRS) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitr…

  IBM Jazz Reporting Service
  Feb 1, 2017
• Unscored —
  CVE-2016-5884

  IBM iNotes is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in…

  Feb 1, 2017
• Unscored —
  CVE-2016-9225

  A vulnerability in the data plane IP fragment handler of the Cisco Adaptive Security Appliance (ASA) CX Context-Aware S…

  Feb 1, 2017
• Unscored —
  CVE-2016-10079 Public exploit

  SAPlpd through 7400.3.11.33 in SAP GUI 7.40 on Windows has a Denial of Service vulnerability (service crash) with a lon…

  Feb 1, 2017
• Unscored —
  CVE-2017-3792

  A vulnerability in a proprietary device driver in the kernel of Cisco TelePresence Multipoint Control Unit (MCU) Softwa…

  Feb 1, 2017
• Unscored —
  CVE-2017-3791

  A vulnerability in the web-based GUI of Cisco Prime Home could allow an unauthenticated, remote attacker to bypass auth…

  Feb 1, 2017
• Unscored —
  CVE-2017-3790

  A vulnerability in the received packet parser of Cisco Expressway Series and Cisco TelePresence Video Communication Ser…

  Feb 1, 2017
• Unscored —
  CVE-2016-8491

  The presence of a hardcoded account named 'core' in Fortinet FortiWLC allows attackers to gain unauthorized read/write …

  Fortinet Fortinet FortiWLC Network devices
  Feb 1, 2017
• Unscored —
  CVE-2016-4038

  Array index error in the msm_sensor_config function in kernel/SM-G9008V_CHN_KK_Opensource/Kernel/drivers/media/platform…

  Feb 1, 2017
• Unscored —
  CVE-2016-9963

  Exim before 4.87.1 might allow remote attackers to obtain the private DKIM signing key via vectors related to log files…

  exim4 exim4 Debian Ubuntu
  Feb 1, 2017
• Unscored —
  CVE-2016-10164

  Multiple integer overflows in libXpm before 3.5.12, when a program requests parsing XPM extensions on a 64-bit platform…

  libxpm libxpm libxpm Debian Ubuntu Alpine
  Feb 1, 2017
• High 7.5
  CVE-2016-10173

  archive-tar-minitar and minitar vulnerable to Path Traversal

  Directory traversal vulnerability in the minitar before 0.6 and archive-tar-minitar 0.5.2 gems for Ruby allows remote attackers to write to arbitrary files via a .. (dot dot) in a TAR archive entry.

  archive-tar-minitar ruby-minitar minitar ruby-minitar Debian Ubuntu RubyGems
  Feb 1, 2017
• Unscored —
  CVE-2017-3823 Public exploit EPSS 27%

  An issue was discovered in the Cisco WebEx Extension before 1.0.7 on Google Chrome, the ActiveTouch General Plugin Cont…

  Feb 1, 2017