CVEs published in November 2016
516 vulnerabilities, 55 critical, 9 exploited.
- dovecot, fedora dovecot22, opensuse leap +2 more +4 moreA postinstall script in the dovecot rpm allows local users to read the contents of newly created...3.3 Low
- ibm sterling connect\IBM Sterling Connect:Direct 4.5.00, 4.5.01, 4.6.0 before 4.6.0.6 iFix008, and 4.7.0 before 4.7.0...2.5 Low
- ibm sterling connect\IBM Sterling Connect:Direct 4.5.00, 4.5.01, 4.6.0 before 4.6.0.6 iFix008, and 4.7.0 before 4.7.0...4.5 Medium
- ibm filenet workplace, filenet workplace xt +1 moreCross-site scripting (XSS) vulnerability in IBM FileNet Workplace XT through 1.1.5.2-WPXT-LA011...5.4 Medium
- ibm tealeaf customer experienceThe Replay Server in IBM Tealeaf Customer Experience 8.x before 8.7.1.8847 FP10, 8.8.x before 8.8...5.3 Medium
- ibm rational asset analyzerThe installation component in IBM Rational Asset Analyzer (RAA) 6.1.0 before FP10 allows local...5.5 Medium
- ibm rational doors next generationCross-site scripting (XSS) vulnerability in IBM Rational DOORS Next Generation 6.0.2 before...5.4 Medium
- ge bently nevada 3500\/22m serial firmware, bently nevada 3500\/22m usb firmware +1 moreGeneral Electric (GE) Bently Nevada 3500/22M USB with firmware before 5.0 and Bently Nevada 3500...10.0 Critical
- ibm security access manager, security access manager for web +1 moreIBM Security Access Manager for Web 7.0 before IF2 and 8.0 before 8.0.1.4 IF3 and Security Access...9.1 Critical
- ibm security access manager, security access manager for mobile +1 moreIBM Security Access Manager for Mobile 8.x before 8.0.1.4 IF3 and Security Access Manager 9.x...8.1 High
- ibm tivoli storage manager for virtual environmentsIBM Tivoli Storage Manger for Virtual Environments: Data Protection for VMware (aka Spectrum...8.5 High
- ibm rational doors next generation, rational engineering lifecycle manager, rational quality manager +2 more +4 moreCross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 6.x...5.4 Medium
- ibm general parallel file system, spectrum scale +1 moreIBM Spectrum Scale 4.1.1.x before 4.1.1.8 and 4.2.x before 4.2.0.4 and General Parallel File...7.0 High
- ibm general parallel file system, spectrum scale +1 moreIBM Spectrum Scale 4.1.1.x before 4.1.1.8 and 4.2.x before 4.2.0.4 and General Parallel File...7.0 High
- ibm rational collaborative lifecycle management, rational doors next generation, rational engineering lifecycle manager +4 more +6 moreIBM Rational Collaborative Lifecycle Management 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18,...2.7 Low
- bdwgc project bdwgc, debian linux, opensuse leap +1 more +3 moreInteger overflow vulnerability in bdwgc before 2016-09-27 allows attackers to cause client of...9.8 Critical
- ibm security privileged identity managerIBM Security Privileged Identity Manager 2.0 before 2.0.2 FP8, when Virtual Appliance is used,...6.5 Medium
- ibm rational collaborative lifecycle management, rational doors next generation, rational engineering lifecycle manager +4 more +6 moreCross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 3.0.1...5.4 Medium
- ibm websphere application serverIBM WebSphere Application Server (WAS) Liberty before 16.0.0.3, when the installation lacks a...3.7 Low
- ibm rational collaborative lifecycle management, rational doors next generation, rational engineering lifecycle manager +4 more +6 moreIBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5...3.7 Low
- ibm security privileged identity managerIBM Security Privileged Identity Manager 2.0 before 2.0.2 FP8, when Virtual Appliance is used,...3.7 Low
- ibm rational team concertIBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5...6.3 Medium
- ibm rational team concertCross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 3.0.1...5.4 Medium
- ibm rational collaborative lifecycle management, rational doors next generation, rational engineering lifecycle manager +4 more +6 moreThe XML parser in IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0...5.4 Medium
- ibm lotus inotesCross-site scripting (XSS) vulnerability in IBM iNotes before 8.5.3 FP6 IF2 allows remote...5.4 Medium
- ibm rational collaborative lifecycle management, rational doors next generation, rational engineering lifecycle manager +4 more +6 moreCross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 3.0.1...5.4 Medium
- ibm tealeaf customer experienceIBM Tealeaf Customer Experience 8.x before 8.7.1.8847 FP10, 8.8.x before 8.8.0.9049 FP9, 9.0.0...2.6 Low
- gstreamer, debian linux, redhat enterprise linux desktop +3 more +5 moreHeap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the...9.8 Critical
- gstreamer, debian linux, redhat enterprise linux desktop +3 more +5 moreHeap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the...9.8 Critical
- gstreamer, debian linux, redhat enterprise linux desktop +3 more +5 moreHeap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the...9.8 Critical
- xen, citrix xenserver +1 moreThe x86 emulator in Xen does not properly treat x86 NULL segments as unusable when accessing...7.8 High
- xen, citrix xenserver +1 moreXen, when running on a 64-bit hypervisor, allows local x86 guest OS users to modify arbitrary...8.8 High
- xen, citrix xenserver +1 moreXen 4.0.x through 4.7.x mishandle x86 task switches to VM86 mode, which allows local 32-bit x86...7.8 High
- qemu, citrix xenserver +1 moreRace condition in QEMU in Xen allows local x86 HVM guest OS administrators to gain privileges by...7.5 High
- xen, citrix xenserver +1 moreThe pygrub boot loader emulator in Xen, when nul-delimited output format is requested, allows...7.5 High
- xen, citrix xenserver +1 moreThe pygrub boot loader emulator in Xen, when S-expression output format is requested, allows...7.9 High
- lynxlynx: It was found that Lynx doesn't parse the authority component of the URL correctly when the...7.5 High
- apache tomcat, canonical ubuntu linux, debian linux +16 more +18 moreApache Tomcat Improper Access Control vulnerability9.8 Critical
- linuxcontainers lxclxc-attach in LXC before 1.0.9 and 2.x before 2.0.6 allows an attacker inside of an unprivileged...9.1 Critical
- samsung mobileThe mDNIe system service on Samsung Mobile S7 devices with M(6.0) software does not properly...5.5 Medium
- siemens simatic cp 343-1 firmware, simatic cp 443-1 firmware, simatic s7 300 cpu firmware +1 more +3 moreA vulnerability has been identified in SIMATIC CP 343-1 Advanced (incl. SIPLUS NET variant) (All...8.8 High
- siemens simatic cp 343-1 firmware, simatic cp 443-1 firmware, simatic s7 300 cpu firmware +1 more +3 moreA vulnerability has been identified in SIMATIC CP 343-1 Advanced (incl. SIPLUS NET variant) (All...5.3 Medium
- sap netweaver, netweaver application server java +1 moreBC-BMT-BPM-DSK in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to conduct XML...6.5 Medium
- sap netweaver application server javaSAP NetWeaver AS JAVA 7.4 allows remote attackers to cause a Denial of Service (null pointer...7.5 High
- imagemagick, debian linux, opensuse project leap +2 moreThe IsPixelGray function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3-8 allows remote...5.5 Medium
- apache tomcatImproper Input Validation in Apache Tomcat7.1 High
gst-plugins-good0.10Ubuntu,gst-plugins-good1.0Ubuntu +1 moregst-plugins-good0.10, gst-plugins-good1.0 vulnerabilityNo score- soap\ \In Soap Lite (aka the SOAP::Lite extension for Perl) 1.14 and earlier, an example attack consists...7.5 High
- qemu, opensuse leap +1 moreMemory leak in the ehci_process_itd function in hw/usb/hcd-ehci.c in QEMU (aka Quick Emulator)...6.0 Medium
- qemu, opensuse leap, redhat openstack +1 more +3 moreThe virtqueue_map_desc function in hw/virtio/virtio.c in QEMU (aka Quick Emulator) allows local...6.0 Medium
- Show moreLoading…