CVEs published in November 2016
516 vulnerabilities, 55 critical, 9 exploited.
- ibm tririga application platform The notifications component in IBM TRIRIGA Applications 10.4 and 10.5 before 10.5.1 allows remote... 8.8 High
- ibm ims enterprise suite IBM IMS Enterprise Suite Data Provider before 3.2.0.1 for Microsoft .NET allows remote... 8.1 High
- ibm forms experience builder Cross-site request forgery (CSRF) vulnerability in IBM Forms Experience Builder 8.5.x and 8.6.x... 8.0 High
- ibm qradar security information and event manager IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 and QRadar Incident Forensics 7.2... 6.5 Medium
- ibm qradar security information and event manager Multiple cross-site request forgery (CSRF) vulnerabilities in IBM QRadar SIEM 7.1 before MR2... 8.0 High
- ibm qradar security information and event manager IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 uses weak permissions for... 3.3 Low
- ibm qradar security information and event manager IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 executes unspecified processes at an... 7.5 High
- ibm qradar security information and event manager IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 mishandles authorization, which... 3.1 Low
- ibm qradar security information and event manager SQL injection vulnerability in IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7... 8.8 High
- ibm qradar security information and event manager IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 uses cleartext storage for... 7.8 High
- ibm qradar security information and event manager Multiple cross-site scripting (XSS) vulnerabilities in the UI in IBM QRadar SIEM 7.1 before MR2... 5.4 Medium
- lenovo group ltd. thinkpad systems, lenovo thinkpad 10 ella 2 bios, thinkpad 11e beema bios +72 more +74 more A vulnerability has been identified in a signed kernel driver for the BIOS of some ThinkPad... 4.4 Medium
- boa Buffer overflow in send_redirect() in Boa Webserver 0.92r allows remote attackers to DoS via an... 7.5 High
- ibm maximo asset management IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5 before 7.5.0.10 IF4, and 7.6 before 7.6.0.5... 5.3 Medium
- ibm maximo asset management Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.5 before 7.5.0.10 IF3... 5.4 Medium
- ibm sterling b2b integrator IBM Sterling B2B Integrator 5.2 before 5020500_14 and 5.2 06 before 5020602_1 allows remote... 5.3 Medium
- ibm sterling b2b integrator Cross-site scripting (XSS) vulnerability in IBM Sterling B2B Integrator 5.2 before 5020500_14 and... 6.1 Medium
- ibm rational collaborative lifecycle management, rational doors next generation, rational engineering lifecycle manager +4 more +6 more Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 4.0... 5.4 Medium
- ibm connections Cross-site request forgery (CSRF) vulnerability in IBM Connections 4.0 through CR4, 4.5 through... 3.5 Low
- ibm connections Cross-site request forgery (CSRF) vulnerability in IBM Connections 4.0 through CR4, 4.5 through... 4.6 Medium
- ibm connections IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows physically proximate... 2.1 Low
- ibm bigfix remote control Cross-site request forgery (CSRF) vulnerability in IBM BigFix Remote Control before 9.1.3 allows... 8.8 High
- ibm connections IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows remote authenticated... 4.3 Medium
- ibm connections IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows remote authenticated... 4.3 Medium
- ibm connections IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 does not require SSL, which... 3.7 Low
- ibm bigfix remote control IBM BigFix Remote Control before 9.1.3 does not enable the HSTS protection mechanism, which makes... 3.7 Low
- ibm bigfix remote control IBM BigFix Remote Control before 9.1.3 does not properly set the default encryption strength,... 3.7 Low
- ibm bigfix remote control SQL injection vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote authenticated... 6.5 Medium
- ibm bigfix remote control IBM BigFix Remote Control before 9.1.3 allows local users to obtain sensitive information by... 3.3 Low
- ibm bigfix remote control IBM BigFix Remote Control before 9.1.3 allows local users to discover hardcoded credentials via... 7.8 High
- ibm bigfix remote control IBM BigFix Remote Control before 9.1.3 does not properly restrict failed login attempts, which... 9.8 Critical
- ibm bigfix remote control IBM BigFix Remote Control before 9.1.3 allows local users to obtain sensitive information by... 1.9 Low
- ibm bigfix remote control Multiple unspecified vulnerabilities in IBM BigFix Remote Control before 9.1.3 allow remote... 5.3 Medium
- ibm bigfix remote control IBM BigFix Remote Control before 9.1.3 allows remote attackers to obtain sensitive information or... 6.5 Medium
- ibm bigfix remote control IBM BigFix Remote Control before 9.1.3 uses cleartext storage for unspecified passwords, which... 7.3 High
- ibm bigfix remote control The broker application in IBM BigFix Remote Control before 9.1.3 allows remote attackers to cause... 5.3 Medium
- ibm bigfix remote control Cross-site scripting (XSS) vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote... 6.1 Medium
- ibm bigfix remote control Directory traversal vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote... 6.8 Medium
- ibm bigfix remote control IBM BigFix Remote Control before 9.1.3 allows remote attackers to conduct XML injection attacks... 5.3 Medium
- ibm bigfix remote control IBM BigFix Remote Control before 9.1.3 allows remote attackers to obtain sensitive cleartext... 5.3 Medium
- teeworlds, fedoraproject fedora +1 more The CClient::ProcessServerPacket method in engine/client/client.cpp in Teeworlds before 0.6.4... 9.8 Critical
- jenkins, fedoraproject fedora +1 more Improper Neutralization of Special Elements used in an LDAP Query in Jenkins 9.8 Critical
-
libdatetime-timezone-perlDebian libdatetime-timezone-perl - new upstream version No score -
tzdataDebian tzdata - new upstream version No score - mozilla firefox, firefox esr, thunderbird +9 more +11 more A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this... 7.5 High
- mozilla firefox Redirection from an HTTP connection to a "data:" URL assigns the referring site's origin to the ... 8.8 High
- apache subversion, debian linux +1 more Apache Subversion's mod_dontdothat module and HTTP clients 1.4.0 through 1.8.16, and 1.9.0... 6.5 Medium
- jasper project jasper, debian linux, redhat enterprise linux desktop +4 more +6 more A heap-buffer overflow vulnerability was found in QMFB code in JPC codec caused by buffer being... 7.8 High
- exponentcms exponent cms In framework/modules/core/controllers/expCommentController.php of Exponent CMS 2.4.0, content_id... 9.8 Critical
- libdwarf project libdwarf libdwarf 2016-10-21 allows context-dependent attackers to obtain sensitive information or cause a... 9.1 Critical
- Show olderLoading…