CVEs published in October 2016
809 vulnerabilities, 161 critical, 5 exploited.
- american auto-matrix aspect-matrix building automation front-end solutions application, aspect-nexus building automation front-end solutions application +1 moreAmerican Auto-Matrix Aspect-Nexus Building Automation Front-End Solutions application before 3.0...8.6 High
- american auto-matrix aspect-matrix building automation front-end solutions application, aspect-nexus building automation front-end solutions application +1 moreAmerican Auto-Matrix Aspect-Nexus Building Automation Front-End Solutions application before 3.0...7.5 High
- beckhoff embedded pc images, twincat, twincat components featuring automation device specification (ads) communication +2 moreBeckhoff Embedded PC Images and TwinCAT Components Exposed Dangerous Method or Function9.1 Critical
- beckhoff embedded pc images, twincat, twincat components featuring automation device specification (ads) communication +2 moreBeckhoff Embedded PC Images and TwinCAT Components Improper Restriction of Excessive Authentication Attempts9.1 Critical
- openstack manila, redhat openstack +1 moreOpenstack Manila Persistent XSS in Metadata field5.4 Medium
- dell emc unisphere, emc solutions enabler, unisphere +2 moreThe vApp Managers web application in EMC Unisphere for VMAX Virtual Appliance 8.x before 8.3.0...9.8 Critical
- dell emc unisphere, emc solutions enabler, unisphere +2 moreThe vApp Managers web application in EMC Unisphere for VMAX Virtual Appliance 8.x before 8.3.0...8.8 High
- bb\&t the uThe U by BB&T app 1.5.4 and earlier for iOS does not properly verify X.509 certificates from SSL...5.4 Medium
- emc replication manager, networker module for microsoft applications +1 moreThe client in EMC Replication Manager (RM) before 5.5.3.0_01-PatchHotfix, EMC Network Module for...9.8 Critical
- kde kmail, debian linux, fedoraproject fedora +1 more +3 moreThrough a malicious URL that contained a quote character it was possible to inject HTML code in...7.3 High
- qemu, debian linux +1 moreThe pcnet_rdra_addr function in hw/net/pcnet.c in QEMU (aka Quick Emulator) allows local guest OS...4.4 Medium
- qemu, debian linux +1 moreThe mcf_fec_do_tx function in hw/net/mcf_fec.c in QEMU (aka Quick Emulator) does not properly...4.4 Medium
- qemuThe imx_fec_do_tx function in hw/net/imx_fec.c in QEMU (aka Quick Emulator) does not properly...4.4 Medium
- qemu, debian linux +1 moreHeap-based buffer overflow in the .receive callback of xlnx.xps-ethernetlite in QEMU (aka Quick...9.8 Critical
- zend framework, fedoraproject fedora +1 moreZendframework Local file disclosure via XXE injection in Zend_XmlRpc9.8 Critical
- imagemagick, debian linux +1 moremagick/attribute.c in ImageMagick 7.0.3-2 allows remote attackers to cause a denial of service ...5.5 Medium
- imagemagick, debian linux +1 moreMagickCore/profile.c in ImageMagick before 7.0.3-2 allows remote attackers to cause a denial of...6.5 Medium
- libav, debian linux +1 moreThe put_no_rnd_pixels8_xy2_mmx function in x86/rnd_template.c in libav 11.7 and earlier allows...5.5 Medium
- libavStack-based buffer overflow in the aac_sync function in aac_parser.c in Libav before 11.5 allows...5.5 Medium
- huawei esightDirectory traversal vulnerability in Huawei eSight before V300R003C20SPC005 allows remote...6.5 Medium
- huawei usg9520, usg9560, usg9580 +2 moreHuawei USG9520, USG9560, and USG9580 unified security gateways with software before...7.5 High
- huawei usg9520, usg9560, usg9580 +2 moreHuawei USG9520, USG9560, and USG9580 unified security gateways with software before...6.5 Medium
- huawei usg2100, usg2200, usg5100 +1 more +3 moreBuffer overflow in the Point-to-Point Protocol over Ethernet (PPPoE) module in Huawei USG2100,...9.8 Critical
- redhat jboss enterprise application platformUndertow Uncaught Exception vulnerability5.9 Medium
- huawei ar firmware, quidway s5300 firmware, quidway s9300 firmware +4 more +6 moreHuawei AR routers with software before V200R007C00SPC100; Quidway S9300 routers with software...4.9 Medium
- huawei ar firmware, quidway s5300 firmware, quidway s9300 firmware +4 more +6 moreHuawei AR routers with software before V200R007C00SPC100; Quidway S9300 routers with software...4.9 Medium
- apache derbyImproper Restriction of XML External Entity Reference in Apace Derby9.1 Critical
- freerdpFreeRDP before 1.1.0-beta+2013071101 allows remote attackers to cause a denial of service (NULL...7.5 High
- freerdp, opensuse leap, opensuse +2 moreFreeRDP before 1.1.0-beta1 allows remote attackers to cause a denial of service (NULL pointer...7.5 High
- drupalDrupal Unprivileged access to config export4.3 Medium
- drupalDrupal Cross-site scripting (XSS) vulnerability6.1 Medium
- drupalDrupal Users without "Administer comments" can set comment visibility on nodes they can edit4.3 Medium
- redhat enterprise virtualizationThe ovirt-engine-provisiondb utility in Red Hat Enterprise Virtualization (RHEV) Engine 4.0...3.3 Low
- redhat jboss bpm suiteCross-site scripting (XSS) vulnerability in Business Process Editor in Red Hat JBoss BPM Suite...5.4 Medium
- apache myfaces trinidadApache MyFaces Trinidad Deserialization Vulnerability9.8 Critical
- uclouvain openjpeg, opensuse leap +1 moreconvert.c in OpenJPEG before 2.1.2 allows remote attackers to cause a denial of service (NULL...7.5 High
- sophos unified threat management softwareThe Frontend component in Sophos UTM with firmware 9.405-5 and earlier allows local...4.4 Medium
- sophos unified threat management softwareThe Frontend component in Sophos UTM with firmware 9.405-5 and earlier allows local...4.4 Medium
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip application acceleration manager +5 more +7 moreVirtual servers in F5 BIG-IP systems 11.5.0, 11.5.1 before HF11, 11.5.2, 11.5.3, 11.5.4 before...9.8 Critical
- libtiffThe tagCompare function in tif_dirinfo.c in the thumbnail tool in LibTIFF 4.0.6 and earlier...7.5 High
- libtiffThe setrow function in the thumbnail tool in LibTIFF 4.0.6 and earlier allows remote attackers to...7.5 High
- libtiffThe (1) cpStrips and (2) cpTiles functions in the thumbnail tool in LibTIFF 4.0.6 and earlier...7.5 High
- libtifftif_read.c in the tiff2bw tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a...6.5 Medium
- libtiffThe LZWEncode function in tif_lzw.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the "...8.8 High
- libtiffThe ZIPEncode function in tif_zip.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the "...7.5 High
- libtiffThe DumpModeEncode function in tif_dumpmode.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier,...6.5 Medium
- apache strutsApache Struts improper action name cleanup9.8 Critical
- imagemagickThe SGI coder in ImageMagick before 7.0.2-10 allows remote attackers to cause a denial of service...6.5 Medium
- ceph project ceph, redhat ceph storage +1 moreThe RGW code in Ceph before 10.0.1, when authenticated-read ACL is applied to a bucket, allows...7.5 High
- libtiffThe TIFFWriteDirectoryTagLongLong8Array function in tif_dirwrite.c in the tiffset tool in LibTIFF...7.5 High
- Show moreLoading…