CVEs published in October 2016
809 vulnerabilities, 161 critical, 5 exploited.
- redhat pagurePagure 2.2.1 XSS in raw file endpoint6.1 Medium
- mirror manager project managerMirror Manager version 0.7.2 and older is vulnerable to remote code execution in the checkin code.9.8 Critical
- flask-oidc project flask-oidcflask-oidc Open Redirect vulnerability7.4 High
- systemd project systemd, novell suse linux enterprise desktop, suse linux enterprise server +6 more +8 moreThe manager_dispatch_notify_fd function in systemd allows local users to cause a denial of...5.5 Medium
- xenXen 4.7.x and earlier does not properly honor CR0.TS and CR0.EM, which allows local x86 HVM guest...6.3 Medium
- redhat cloudforms management engineRed Hat CloudForms Management Engine 4.1 does not properly handle regular expressions passed to...8.8 High
- citrix license server, license server vpx +1 moreThe lmadmin component in Flexera FlexNet Publisher (aka Flex License Manager) before 2015 SP5 and...7.5 High
- linux kernel, redhat enterprise mrg, linux +2 moreThe Linux kernel, as used in Red Hat Enterprise Linux 7.2 and Red Hat Enterprise MRG 2 and when...7.4 High
- fortinet fortianalyzer firmware, fortimanager firmware +1 moreCross-site scripting (XSS) vulnerability in the advanced settings page in Fortinet FortiManager 5...5.4 Medium
- eclipse jetty, fedoraproject fedora +1 moreJetty vulnerable to exposure of sensitive information to unauthenticated remote users7.5 High
- gnu glibc, fedoraproject fedora, opensuse +2 moreThe makecontext function in the GNU C Library (aka glibc or libc6) before 2.25 creates execution...7.5 High
- openstack cinder, glance, nova +2 moreOpenStack Cinder, Glance, and Nova contain Uncontrolled Resource Consumption7.5 High
- nodejs node.js, suse linux enterprise +1 moreThe tls.checkServerIdentity function in Node.js 0.10.x before 0.10.47, 0.12.x before 0.12.16, 4.x...5.9 Medium
- nodejs node.js, suse linux enterprise +1 moreCRLF injection vulnerability in the ServerResponse#writeHead function in Node.js 0.10.x before 0...6.1 Medium
- zotpress project zotpressZotpress plugin for WordPress SQLi in zp_get_account()9.8 Critical
- huge-it catalogUnauthenticated SQL Injection in Huge-IT Catalog v1.0.7 for Joomla9.8 Critical
- huge-it portfolio galleryUnauthenticated SQL Injection in Huge-IT Portfolio Gallery Plugin v1.0.69.8 Critical
- huge-it video galleryUnauthenticated SQL Injection in Huge-IT Video Gallery v1.0.9 for Joomla9.8 Critical
- huge-it galleryXSS in huge IT gallery v1.1.5 for Joomla6.1 Medium
- huge-it galleryXSS and SQLi in huge IT gallery v1.1.5 for Joomla9.8 Critical
- contussupport contus-video-commentsUnauthenticated remote .jpg file upload in contus-video-comments v1.0 wordpress plugin9.1 Critical
- tp-linkTP-LINK lost control of two domains, www.tplinklogin.net and tplinkextender.net. Please note that...7.5 High
- progress whatsup goldIpswitch WhatsUp Gold 16.4.1 WrFreeFormText.asp sUniqueID Parameter Blind SQL Injection8.8 High
- csv2wpec-coupon project csv2wpec-couponRemote file upload vulnerability in wordpress plugin csv2wpec-coupon v1.17.8 High
- mypixs project mypixsLocal File Inclusion Vulnerability in mypixs v0.3 wordpress plugin7.5 High
- dukapress project dukapressBlind SQL Injection in wordpress plugin dukapress v2.5.99.8 Critical
- simple-image-manipulator project simple-image-manipulatorRemote file download in simple-image-manipulator v1.0 wordpress plugin7.5 High
- google-adsense-and-hotel-booking project google-adsense-and-hotel-bookingOpen proxy in Wordpress plugin google-adsense-and-hotel-booking v1.059.1 Critical
- mp3-jplayer project mp3-jplayerPath Disclosure Vulnerability in wordpress plugin MP3-jPlayer v2.3.25.3 Medium
- wptf-image-gallery project wptf-image-galleryRemote file download vulnerability in wptf-image-gallery v1.037.5 High
- recent-backups project recent-backupsRemote file download vulnerability in recent-backups v0.7 wordpress plugin7.5 High
- candidate-application-form project candidate-application-formRemote file download vulnerability in candidate-application-form v1.0 wordpress plugin7.5 High
- filedownload project filedownloadXSS in filedownload v1.4 wordpress plugin6.1 Medium
- filedownload project filedownloadBlind SQL Injection in filedownload v1.4 wordpress plugin9.8 Critical
- filedownload project filedownloadOpen Proxy in filedownload v1.4 wordpress plugin8.2 High
- fast-image-adder project fast-image-adderRemote file upload vulnerability in fast-image-adder v1.1 Wordpress plugin9.8 Critical
- mailcwp project mailcwpRemote file upload vulnerability in mailcwp v1.99 wordpress plugin9.8 Critical
- pivotal software cloud foundry cf mysqlThe MariaDB audit_plugin component in Pivotal Cloud Foundry (PCF) cf-mysql-release 27 and 28...7.5 High
- cisco hostscan engineCross-site scripting (XSS) vulnerability in HostScan Engine 3.0.08062 through 3.1.14018 in the...6.1 Medium
- cisco secure firewall management centerThe web console in Cisco Firepower Management Center 6.0.1 allows remote authenticated users to...6.5 Medium
- cisco secure firewall management centerCisco Firepower Management Center 6.0.1 has hardcoded database credentials, which allows local...7.8 High
- cisco secure firewall management centerThe Threat Management Console in Cisco Firepower Management Center 5.2.0 through 6.0.1 allows...8.8 High
- cisco ios xrCisco IOS XR 6.1.1 allows local users to execute arbitrary OS commands as root by leveraging...7.8 High
- cisco unified contact center express, unified intelligence center +1 moreCross-site request forgery (CSRF) vulnerability in Cisco Unified Intelligence Center (CUIC) 8.5.4...8.8 High
- cisco unified contact center express, unified intelligence center +1 moreCross-site scripting (XSS) vulnerability in Cisco Unified Intelligence Center (CUIC) 8.5.4...6.1 Medium
- cisco adaptive security appliance softwareThe DHCP Relay implementation in Cisco Adaptive Security Appliance (ASA) Software 8.4.7.29 and 9...6.5 Medium
- cisco iosCisco IOS 12.2(33)SXJ9 on Supervisor Engine 32 and 720 modules for 6500 and 7600 devices...7.5 High
- ibm sterling secure proxyThe Configuration Manager in IBM Sterling Secure Proxy (SSP) 3.4.2 before 3.4.2.0 iFix 8 and 3.4...6.1 Medium
- ibm sterling secure proxyThe Configuration Manager in IBM Sterling Secure Proxy (SSP) 3.4.2 before 3.4.2.0 iFix 8 and 3.4...5.3 Medium
- ibm sterling secure proxyThe Configuration Manager in IBM Sterling Secure Proxy (SSP) 3.4.2 before 3.4.2.0 iFix 8 and 3.4...5.9 Medium
- Show moreLoading…