CVEs published in July 2016
755 vulnerabilities, 88 critical, 0 exploited.
- ibm jazz reporting serviceCross-site scripting (XSS) vulnerability in the Report Builder and Data Collection Component (DCC...5.4 Medium
- ibm i accessIBM i Access 7.1 on Windows allows local users to discover registry passwords via unspecified...7.8 High
- ibm urbancode deployThe agents in IBM UrbanCode Deploy 6.x before 6.0.1.14, 6.1.x before 6.1.3.3, and 6.2.x before 6...8.2 High
- ibm control center, sterling control center +1 moreIBM Control Center 6.x before 6.0.0.1 iFix06 and Sterling Control Center 5.4.x before 5.4.2.1...5.1 Medium
- ibm websphere application serverIBM WebSphere Application Server (WAS) 8.5 through 8.5.5.9 Liberty before Liberty Fix Pack 16.0.0...7.5 High
- cisco telepresence video communication server, telepresence video communication server software +1 moreThe Mobile and Remote Access (MRA) component in Cisco TelePresence Video Communication Server ...6.5 Medium
- cisco amp threat grid applianceThe virtual network stack on Cisco AMP Threat Grid Appliance devices before 2.1.1 allows remote...8.1 High
- cisco prime infrastructureThe administrative web interface in Cisco Prime Infrastructure (PI) before 3.1.1 allows remote...8.8 High
- ibm websphere application serverAdmin Center in IBM WebSphere Application Server (WAS) 8.5.5.2 through 8.5.5.9 Liberty before...5.3 Medium
- ibm hardware management consoleIBM Power Hardware Management Console (HMC) 7.3 through 7.3.0 SP7, 7.9 through 7.9.0 SP3, 8.1...6.8 Medium
- broadcom tcpreplaytcprewrite in tcpreplay before 4.1.2 allows remote attackers to cause a denial of service ...7.5 High
- sambalibcli/smb/smbXcli_base.c in Samba 4.x before 4.2.14, 4.3.x before 4.3.11, and 4.4.x before 4.4.5...7.5 High
- isc bind, redhat enterprise linux +1 moreISC BIND through 9.9.9-P1, 9.10.x through 9.10.4-P1, and 9.11.x through 9.11.0b1 allows primary...6.5 Medium
- apache http serverThe Apache HTTP Server 2.4.18 through 2.4.20, when mod_http2 and mod_ssl are enabled, does not...7.5 High
- bosch bladecontrol-webvisCross-site scripting (XSS) vulnerability in Rexroth Bosch BLADEcontrol-WebVIS 3.0.2 and earlier...6.1 Medium
- bosch bladecontrol-webvisSQL injection vulnerability in Rexroth Bosch BLADEcontrol-WebVIS 3.0.2 and earlier allows remote...6.4 Medium
- apache http serverThe Apache HTTP Server 2.4.17 and 2.4.18, when mod_http2 is enabled, does not limit the number of...5.9 Medium
- emc avamarThe web-restore interface in Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC...8.8 High
- libgd, debian linux, opensuse leap +2 moreThe output function in gd_gif_out.c in the GD Graphics Library (aka libgd) allows remote...6.5 Medium
- php, debian linux, opensuse leap +1 more +3 moreInteger overflow in the SplFileObject::fread function in spl_directory.c in the SPL extension in...9.8 Critical
- libgdInteger overflow in the gdImageCreate function in gd.c in the GD Graphics Library (aka libgd)...8.8 High
- apache cxf fedizHigh severity vulnerability that affects org.apache.cxf.fediz:fediz-spring and org.apache.cxf.fediz:fediz-spring29.8 Critical
- debian linux, es iperf3, novell suse package hub for suse linux enterprise +2 more +4 moreThe parse_string function in cjson.c in the cJSON library mishandles UTF8/16 strings, which...9.8 Critical
- libarchiveStack-based buffer overflow in the parse_device function in archive_read_support_format_mtree.c...7.8 High
- phpmyadmin, opensuse +1 moreDirectory traversal vulnerability in libraries/error_report.lib.php in phpMyAdmin before 4.6.2...5.3 Medium
- phpmyadmin, opensuse +1 morephpMyAdmin before 4.6.2 places tokens in query strings and does not arrange for them to be...5.3 Medium
- sqlite, fedoraproject fedora, opensuse leap +2 moreos_unix.c in SQLite before 3.13.0 improperly implements the temporary directory search algorithm,...5.9 Medium
- apache strutsApache Struts vulnerable to possible DoS attack when using URLValidator5.3 Medium
- apache strutsArbitrary code execution in Apache Struts 29.8 Critical
- apache strutsApache Struts Open Redirect7.5 High
- apache strutsApache Struts Access Control Redirect7.5 High
- apache strutsApache Struts CSRF Vulnerability8.8 High
- apache strutsImproper Input Validation in Apache Struts8.2 High
- apache struts, oracle banking platform, portal +2 moreImproper Input Validation in Apache Struts8.1 High
- siemens sicam pas\/pqsSiemens SICAM PAS through 8.07 allows local users to obtain sensitive configuration information...2.5 Low
- siemens sicam pas\/pqsSiemens SICAM PAS before 8.07 does not properly restrict password data in the database, which...6.7 Medium
- emc rsa archer egrcEMC RSA Archer GRC 5.5.x before 5.5.3.4 allows remote authenticated users to read the web.config...6.3 Medium
- ibm tivoli storage managerIBM Spectrum Protect (formerly Tivoli Storage Manager) 5.5 through 6.3 before 6.3.2.6, 6.4 before...2.5 Low
- ibm websphere commerceCross-site request forgery (CSRF) vulnerability in IBM WebSphere Commerce 7.0 Feature Pack 8, 8.0...8.0 High
- ibm websphere commerceCross-site scripting (XSS) vulnerability in IBM WebSphere Commerce 6.0 through 6.0.0.11, 7.0...6.1 Medium
- cisco iosCisco IOS 15.0(2)SG5, 15.1(2)SG3, 15.2(1)E, 15.3(3)S, and 15.4(1.13)S allows remote attackers to...6.5 Medium
- cisco rv110w firmware, rv130w firmware, rv215w firmware +2 moreBuffer overflow in the web-based management interface on Cisco RV110W devices with firmware...6.5 Medium
- cisco epc3928 firmwareCisco EPC3928 devices allow remote attackers to obtain sensitive configuration and credential...8.1 High
- cisco epc3928 firmwaregoform/Docsis_system on Cisco EPC3928 devices allows remote attackers to cause a denial of...7.5 High
- cisco epc3928 firmwaregoform/WClientMACList on Cisco EPC3928 devices allows remote attackers to cause a denial of...7.5 High
- ibm websphere application serverCRLF injection vulnerability in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.43, 8.0...6.1 Medium
- ibm cognos business intelligenceCross-site scripting (XSS) vulnerability in IBM Cognos Business Intelligence 10.2 before IF20, 10...5.4 Medium
- ibm cognos business intelligenceCross-site scripting (XSS) vulnerability in IBM Cognos TM1, as used in IBM Cognos Business...5.4 Medium
- eaton elcsoftStack-based buffer overflow in ELCSimulator in Eaton ELCSoft 2.4.01 and earlier allows remote...7.3 High
- eaton elcsoftHeap-based buffer overflow in elcsoft.exe in Eaton ELCSoft 2.4.01 and earlier allows remote...6.0 Medium
- Show moreLoading…