CVEs published in October 2016
809 vulnerabilities, 161 critical, 5 exploited.
- ibm sterling secure proxyDirectory traversal vulnerability in the Configuration Manager in IBM Sterling Secure Proxy (SSP)...7.5 High
- cisco nx-osCisco NX-OS 4.0 through 7.3 and 11.0 through 11.2 on 1000v, 2000, 3000, 3500, 5000, 5500, 5600,...6.5 Medium
- cisco nx-osBuffer overflow in the Overlay Transport Virtualization (OTV) GRE feature in Cisco NX-OS 5.0...9.8 Critical
- cisco nx-osCisco NX-OS 4.1 through 7.3 and 11.0 through 11.2 on Nexus 2000, 3000, 3500, 5000, 5500, 5600,...7.5 High
- cisco nx-osCisco NX-OS 4.0 through 7.3 on Multilayer Director and Nexus 1000V, 2000, 3000, 3500, 4000, 5000,...8.0 High
- cisco nx-osCisco NX-OS 4.1 through 7.3 and 11.0 through 11.2 on Nexus 2000, 5000, 5500, 5600, 6000, 7000,...7.5 High
- artifex ghostscriptGhostscript before 9.21 might allow remote attackers to bypass the SAFER mode protection...9.8 Critical
- artifex ghostscriptUse-after-free vulnerability in Ghostscript 9.20 might allow remote attackers to execute...9.8 Critical
- artifex ghostscriptGhostscript before 9.21 might allow remote attackers to bypass the SAFER mode protection...5.5 Medium
- artifex ghostscriptThe PS Interpreter in Ghostscript 9.18 and 9.20 allows remote attackers to execute arbitrary code...8.8 High
- freeimageAn exploitable out-of-bounds write vulnerability exists in the XMP image handling functionality...7.8 High
- adobe flash player, flash player desktop runtime +1 moreUse-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before...8.8 High
- cisco unified contact center express, unified intelligence center +1 moreThe j_spring_security_switch_user function in Cisco Unified Intelligence Center (CUIC) 8.5.4...7.5 High
- cisco iosThe IKEv2 client and initiator implementations in Cisco IOS 15.5(3)M and IOS XE allow remote...6.5 Medium
- cisco ios xrCisco IOS XR 5.2.2 allows remote attackers to cause a denial of service (process restart) via a...5.3 Medium
- cisco ios, ios xe +1 moreThe AAA service in Cisco IOS 12.0 through 12.4 and 15.0 through 15.6 and IOS XE 2.1 through 3.18...7.5 High
- cisco iosCisco IOS 12.2 and 15.0 through 15.3 allows remote attackers to cause a denial of service ...7.5 High
- cisco ios, ios xe +1 moreMemory leak in the Smart Install client implementation in Cisco IOS 12.2 and 15.0 through 15.2...7.5 High
- cisco ios, ios xe, ios xe 3.2ja +3 more +5 moreThe DNS forwarder in Cisco IOS 12.0 through 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3...8.1 High
- cisco ios, ios xe +1 moreCisco IOS 12.2 and IOS XE 3.14 through 3.16 and 16.1 allow remote attackers to cause a denial of...7.5 High
- cisco ios xeCisco IOS XE 3.1 through 3.17 and 16.1 through 16.2 allows remote attackers to cause a denial of...7.5 High
- cisco nx-osCisco NX-OS before 7.0(3)I2(2e) and 7.0(3)I4 before 7.0(3)I4(1) has an incorrect iptables local...7.5 High
- cisco videoscape distribution suite service managerCross-site scripting (XSS) vulnerability in Cisco Videoscape Distribution Suite Service Manager ...6.1 Medium
- cisco firesight system softwareCross-site request forgery (CSRF) vulnerability in Cisco FireSIGHT System Software 4.10.2 through...8.8 High
- cisco content security management appliance, email security appliance, web security appliance +2 moreThe FTP service in Cisco AsyncOS on Email Security Appliance (ESA) devices 9.6.0-000 through 9.9...5.9 Medium
- cisco ios, ios xe +1 moreCisco IOS 12.2 and 15.0 through 15.3 and IOS XE 3.1 through 3.9 allow remote attackers to cause a...7.5 High
- cisco ios xe, ios xe 16.1, ios xe 3.2ja +3 more +5 moreCisco IOS XE 3.1 through 3.17 and 16.1 on 64-bit platforms allows remote attackers to cause a...7.5 High
- cisco ios, ios xe +1 moreCisco IOS 12.2 through 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.17 and 16.2 allow...7.5 High
- cisco ios, ios xe +1 moreCisco IOS 15.2 through 15.6 and IOS XE 3.6 through 3.17 and 16.1 allow remote attackers to cause...7.5 High
- cisco ios, ios xe, ios xe 16.1 +3 more +5 moreCisco IOS 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.18 and 16.1 allow remote attackers...7.5 High
- fortinet fortiwlcFortinet FortiWLC 6.1-2-29 and earlier, 7.0-9-1, 7.0-10-0, 8.0-5-0, 8.1-2-0, and 8.2-4-0 allow...7.2 High
- fortinet fortiwlcThe rsyncd server in Fortinet FortiWLC 6.1-2-29 and earlier, 7.0-9-1, 7.0-10-0, 8.0-5-0, 8.1-2-0,...9.8 Critical
- sap netweaverThe (1) SCTC_REFRESH_EXPORT_TAB_COMP, (2) SCTC_REFRESH_CHECK_ENV, and (3) SCTC_TMS_MAINTAIN_ALOG...9.1 Critical
- pivotal software spring data jpaImproper Neutralization of Special Elements used in an SQL Command Pivotal Spring Data JPA5.6 Medium
- f5 big-ip local traffic managerF5 BIG-IP LTM systems 11.x before 11.2.1 HF16, 11.3.x, 11.4.x before 11.4.1 HF11, 11.5.0, 11.5.1...9.8 Critical
- sap netweaver, aba, basis +2 moreThe (1) SAP_BASIS and (2) SAP_ABA components 7.00 SP Level 0031 in SAP NetWeaver 2004s might...7.5 High
- indasengineering web scadaDirectory traversal vulnerability in INDAS Web SCADA before 3 allows remote attackers to read...7.5 High
- cisco firesight system softwareCisco FireSIGHT System Software 4.10.3 through 5.4.0 in Firepower Management Center allows remote...6.5 Medium
- cisco secure firewall management centerSQL injection vulnerability in Cisco Firepower Management Center 4.10.3 through 5.4.0 allows...7.5 High
- ibm websphere application serverIBM WebSphere Application Server (WAS) 7.0 before 7.0.0.43, 8.0 before 8.0.0.13, 8.5 before 8.5.5...7.5 High
- ibm business process managerCross-site scripting (XSS) vulnerability in a test page in IBM Business Process Manager Advanced...5.4 Medium
- ibm b2b advanced communications, multi-enterprise integration gateway +1 moreCross-site scripting (XSS) vulnerability in IBM 10x, as used in Multi-Enterprise Integration...5.4 Medium
- animas onetouch ping firmwareJohnson & Johnson Animas OneTouch Ping devices mishandle acknowledgements, which makes it easier...9.8 Critical
- animas onetouch ping firmwareJohnson & Johnson Animas OneTouch Ping devices allow remote attackers to bypass authentication...9.8 Critical
- animas onetouch ping firmwareJohnson & Johnson Animas OneTouch Ping devices do not properly generate random numbers, which...7.5 High
- animas onetouch ping firmwareJohnson & Johnson Animas OneTouch Ping devices do not use encryption for certain data, which...7.5 High
- hp keyviewThe Filter SDK in HPE KeyView 10.18 through 10.24 allows remote attackers to execute arbitrary...8.1 High
- hp keyviewThe Filter SDK in HPE KeyView 10.18 through 10.24 allows remote attackers to execute arbitrary...8.1 High
- hp keyviewThe Filter SDK in HPE KeyView 10.18 through 10.24 allows remote attackers to execute arbitrary...8.1 High
- hp keyviewThe Filter SDK in HPE KeyView 10.18 through 10.24 allows remote attackers to execute arbitrary...8.1 High
- Show moreLoading…