21 February 2017

21 results · Feed

• Critical 9.8
  CVE-2016-9053

  An exploitable out-of-bounds indexing vulnerability exists within the RW fabric message particle type of Aerospike Data…

  Aerospike Database Server
  Feb 21, 2017
• Critical 9.8
  CVE-2016-9051

  An exploitable out-of-bounds write vulnerability exists in the batch transaction field parsing functionality of Aerospi…

  Aerospike Database Server
  Feb 21, 2017
• High 7.5
  CVE-2016-9049

  An exploitable denial-of-service vulnerability exists in the fabric-worker component of Aerospike Database Server 3.10.…

  Aerospike Database Server
  Feb 21, 2017
• Unscored —
  CVE-2017-6127

  Multiple cross-site request forgery (CSRF) vulnerabilities in the access portal on the DIGISOL DG-HR1400 Wireless Route…

  Feb 21, 2017
• Unscored —
  CVE-2015-4057

  The "Plug-in for VMware vCenter" in VCE Vision Intelligent Operations before 2.6.5 sends a cleartext HTTP response upon…

  Feb 21, 2017
• Unscored —
  CVE-2015-4056

  The System Library in VCE Vision Intelligent Operations before 2.6.5 does not properly implement cryptography, which ma…

  Feb 21, 2017
• Unscored —
  CVE-2016-9314 Public exploit

  Sensitive Information Disclosure in com.trend.iwss.gui.servlet.ConfigBackup in Trend Micro InterScan Web Security Virtu…

  Feb 21, 2017
• Unscored —
  CVE-2016-9316 Public exploit

  Multiple stored Cross-Site-Scripting (XSS) vulnerabilities in com.trend.iwss.gui.servlet.updateaccountadministration in…

  Feb 21, 2017
• Unscored —
  CVE-2016-9269 Public exploit EPSS 13%

  Remote Command Execution in com.trend.iwss.gui.servlet.ManagePatches in Trend Micro Interscan Web Security Virtual Appl…

  Feb 21, 2017
• Unscored —
  CVE-2016-9315 Public exploit

  Privilege Escalation Vulnerability in com.trend.iwss.gui.servlet.updateaccountadministration in Trend Micro InterScan W…

  Feb 21, 2017
• Unscored —
  CVE-2016-10227

  Zyxel USG50 Security Appliance and NWA3560-N Access Point allow remote attackers to cause a denial of service (CPU cons…

  Feb 21, 2017
• Unscored —
  CVE-2017-6095 Public exploit

  A SQL injection issue was discovered in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects /inc/lis…

  Feb 21, 2017
• Unscored —
  CVE-2017-6078

  FastStone MaxView 3.0 and 3.1 allows user-assisted attackers to cause a denial of service (application crash) via a mal…

  Feb 21, 2017
• Unscored —
  CVE-2017-6097 Public exploit

  A SQL injection issue was discovered in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects /inc/cam…

  Feb 21, 2017
• Unscored —
  CVE-2017-6096 Public exploit

  A SQL injection issue was discovered in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects /inc/lis…

  Feb 21, 2017
• Unscored —
  CVE-2017-6072

  CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to conduct information-disclosu…

  Feb 21, 2017
• Unscored —
  CVE-2017-6071

  CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to conduct information-disclosu…

  Feb 21, 2017
• Unscored —
  CVE-2017-6098 Public exploit

  A SQL injection issue was discovered in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects /inc/cam…

  Feb 21, 2017
• Unscored —
  CVE-2017-6070

  CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to execute PHP code via the cnt…

  Feb 21, 2017
• Unscored —
  CVE-2017-5881 Public exploit

  GOM Player 2.3.10.5266 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspec…

  Feb 21, 2017
• Unscored —
  CVE-2017-5959

  CSRF token bypass in GeniXCMS before 1.0.2 could result in escalation of privileges. The forgotpassword.php page can be…

  Feb 21, 2017