CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 29, 21:13 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2016-1551 | NT Ntp Ntp | 3.7 | Jan 27 | ntpd in NTP 4.2.8p3 and NTPsec a5fb34b9cc89b92a8fef2f459004865c93bb7f92 relies on the underlying operating system to protect it from requests that impersonate reference clocks |
| CVE-2016-9932 | XE Xen Xen | 3.3 | Jan 26 | CMPXCHG8B emulation in Xen 3.3.x through 4.7.x on x86 systems allows local HVM guest OS users to obtain sensitive information from host stack memory via a "supposedly-ignored"… |
| CVE-2016-7429 | NT Ntp Ntp | 3.7 | Jan 13 | NTP before 4.2.8p9 changes the peer structure to the interface it receives the response from a source, which allows remote attackers to cause a denial of service (prevent… |
| CVE-2016-6770 | AN Android Google | 3.3 | Jan 12 | An elevation of privilege vulnerability in the Framework API could enable a local malicious application to access system functions beyond its access level |
| CVE-2016-9015 | UR Urllib3 Python | 3.7 | Jan 11 | Versions 1.17 and 1.18 of the Python urllib3 library suffer from a vulnerability that can cause them, in certain configurations, to not correctly validate TLS certificates |
| CVE-2015-8020 | CD Clustered Data Ontap Netapp | 3.7 | Jan 11 | Clustered Data ONTAP versions 8.0, 8.3.1, and 8.3.2 contain a default privileged account which under certain conditions can be used for unauthorized information disclosure |
| CVE-2016-8334 | RE Reader Foxitsoftware | 3.3 | Jan 6 | A large out-of-bounds read on the heap vulnerability in Foxit PDF Reader can potentially be abused for information disclosure |
| CVE-2016-4323 | UL Ubuntu Linux Canonical | 3.7 | Jan 6 | A directory traversal exists in the handling of the MXIT protocol in Pidgin |
| CVE-2016-2380 | UL Ubuntu Linux Canonical | 3.1 | Jan 6 | An information leak exists in the handling of the MXIT protocol in Pidgin |
| CVE-2016-7903 | DO Dotclear Dotclear | 3.7 | Jan 4 | Dotclear before 2.10.3, when the Host header is not part of the web server routing process, allows remote attackers to modify the password reset address link via the HTTP Host… |
| CVE-2016-9908 | QE Qemu Qemu | 3.3 | Dec 23 | Quick Emulator (Qemu) built with the Virtio GPU Device emulator support is vulnerable to an information leakage issue |
| CVE-2016-4027 | OA Open-xchange Appsuite Open-xchange | 3.5 | Dec 15 | An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev10 |
| CVE-2016-2877 | QS Qradar Security Information And Event Manager Ibm | 3.3 | Nov 30 | IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 uses weak permissions for unspecified directories under the web root, which allows local users to modify data by… |
| CVE-2016-2874 | QS Qradar Security Information And Event Manager Ibm | 3.1 | Nov 30 | IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 mishandles authorization, which allows remote authenticated users to obtain sensitive information via unspecified… |
| CVE-2016-3009 | CO Connections Ibm | 3.5 | Nov 30 | Cross-site request forgery (CSRF) vulnerability in IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows remote authenticated users to hijack the… |
| CVE-2016-3002 | CO Connections Ibm | 2.1 | Nov 30 | IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows physically proximate attackers to obtain sensitive information by reading cached data on a client… |
| CVE-2016-2953 | CO Connections Ibm | 3.7 | Nov 30 | IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 does not require SSL, which allows remote attackers to obtain sensitive cleartext information by sniffing the… |
| CVE-2016-2952 | BR Bigfix Remote Control Ibm | 3.7 | Nov 30 | IBM BigFix Remote Control before 9.1.3 does not enable the HSTS protection mechanism, which makes it easier for remote attackers to obtain sensitive information by leveraging use… |
| CVE-2016-2951 | BR Bigfix Remote Control Ibm | 3.7 | Nov 30 | IBM BigFix Remote Control before 9.1.3 does not properly set the default encryption strength, which makes it easier for remote attackers to defeat cryptographic protection… |
| CVE-2016-2949 | BR Bigfix Remote Control Ibm | 3.3 | Nov 30 | IBM BigFix Remote Control before 9.1.3 allows local users to obtain sensitive information by reading cached web pages from a different user's session |
| CVE-2016-2943 | BR Bigfix Remote Control Ibm | 1.9 | Nov 30 | IBM BigFix Remote Control before 9.1.3 allows local users to obtain sensitive information by leveraging unspecified privileges to read a log file |
| CVE-2016-5992 | SC Sterling Connect:direct Ibm | 2.5 | Nov 25 | IBM Sterling Connect:Direct 4.5.00, 4.5.01, 4.6.0 before 4.6.0.6 iFix008, and 4.7.0 before 4.7.0.4 on Windows allows local users to cause a denial of service via unspecified… |
| CVE-2016-2947 | RC Rational Collaborative Lifecycle Management Ibm | 2.7 | Nov 25 | IBM Rational Collaborative Lifecycle Management 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Quality Manager 4.0 before 4.0.7 iFix11, 5.0… |
| CVE-2016-0378 | WA Websphere Application Server Ibm | 3.7 | Nov 24 | IBM WebSphere Application Server (WAS) Liberty before 16.0.0.3, when the installation lacks a default error page, allows remote attackers to obtain sensitive information by… |
| CVE-2016-0372 | RC Rational Collaborative Lifecycle Management Ibm | 3.7 | Nov 24 | IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Quality Manager… |
| CVE-2016-0353 | SP Security Privileged Identity Manager Ibm | 3.7 | Nov 24 | IBM Security Privileged Identity Manager 2.0 before 2.0.2 FP8, when Virtual Appliance is used, does not set the secure flag for the session cookie in an https session, which makes… |
| CVE-2015-4961 | TC Tealeaf Customer Experience Ibm | 2.6 | Nov 24 | IBM Tealeaf Customer Experience 8.x before 8.7.1.8847 FP10, 8.8.x before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.5108 FP5, 9.0.2 before… |
| CVE-2016-6450 | IX IOS XE Cisco | 2.5 | Nov 19 | A vulnerability in the package unbundle utility of Cisco IOS XE Software could allow an authenticated, local attacker to gain write access to some files in the underlying… |
| CVE-2016-7239 | ED Edge Microsoft | 3.1 | Nov 10 | The RegEx class in the XSS filter in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allows remote attackers to conduct cross-site scripting (XSS) attacks and obtain… |
| CVE-2016-7227 | ED Edge Microsoft | 3.1 | Nov 10 | The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to determine the existence of local files via unspecified vectors, aka… |
| CVE-2016-7220 | WI Windows Microsoft | 3.3 | Nov 10 | Virtual Secure Mode in Microsoft Windows 10 allows local users to obtain sensitive information via a crafted application, aka "Virtual Secure Mode Information Disclosure… |
| CVE-2016-7214 | WI Windows Microsoft | 3.3 | Nov 10 | The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10… |
| CVE-2016-7204 | ED Edge Microsoft | 3.1 | Nov 10 | Microsoft Edge allows remote attackers to access arbitrary "My Documents" files via a crafted web site, aka "Microsoft Edge Information Disclosure Vulnerability." |
| CVE-2016-7199 | ED Edge Microsoft | 3.1 | Nov 10 | Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to bypass the Same Origin Policy and obtain sensitive window-state information via a crafted web… |
| CVE-2016-8288 | MY MySQL Oracle | 3.1 | Oct 25 | Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote authenticated users to affect integrity via vectors related to Server: InnoDB… |
| CVE-2016-8286 | MY MySQL Oracle | 3.1 | Oct 25 | Unspecified vulnerability in Oracle MySQL 5.7.14 and earlier allows remote authenticated users to affect confidentiality via vectors related to Server: Security: Privileges |
| CVE-2016-8284 | MY MySQL Oracle | 1.8 | Oct 25 | Unspecified vulnerability in Oracle MySQL 5.6.31 and earlier and 5.7.13 and earlier allows local users to affect availability via vectors related to Server: Replication |
| CVE-2016-5618 | DI Data Integrator Oracle | 3.1 | Oct 25 | Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, 12.1.2.0.0, 12.1.3.0.0, 12.2.1.0.0, and 12.2.1.1.0 allows… |
| CVE-2016-5615 | SO Solaris Oracle | 3.3 | Oct 25 | Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect availability via vectors related to Lynx |
| CVE-2016-5561 | SO Solaris Oracle | 3.1 | Oct 25 | Unspecified vulnerability in Oracle Sun Solaris 11.3 allows remote attackers to affect availability via vectors related to IKE |
| CVE-2016-5542 | JD Jdk Oracle | 3.1 | Oct 25 | Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect integrity via vectors related to Libraries |
| CVE-2016-5525 | SC Solaris Cluster Oracle | 3.3 | Oct 25 | Unspecified vulnerability in the Solaris Cluster component in Oracle Sun Systems Products Suite 3.3 and 4.3 allows local users to affect integrity via vectors related to Cluster… |
| CVE-2016-5508 | SC Solaris Cluster Oracle | 3.3 | Oct 25 | Unspecified vulnerability in the Solaris Cluster component in Oracle Sun Systems Products Suite 4.3 allows local users to affect confidentiality via vectors related to Cluster Geo |
| CVE-2016-5506 | IM Identity Manager Oracle | 3.1 | Oct 25 | Unspecified vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware allows local users to affect confidentiality and integrity via vectors related to… |
| CVE-2016-5499 | DS Database Server Oracle | 3.3 | Oct 25 | Unspecified vulnerability in the RDBMS Security component in Oracle Database Server 11.2.0.4 and 12.1.0.2 allows local users to affect confidentiality via unknown vectors, a… |
| CVE-2016-5498 | DS Database Server Oracle | 3.3 | Oct 25 | Unspecified vulnerability in the RDBMS Security component in Oracle Database Server 11.2.0.4 and 12.1.0.2 allows local users to affect confidentiality via unknown vectors, a… |
| CVE-2016-5490 | FU Flexcube Universal Banking Oracle | 3.3 | Oct 25 | Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.4.0 allows local users to affect confidentiality via… |
| CVE-2016-5481 | SZ Sun Zfs Storage Appliance Kit Oracle | 3.7 | Oct 25 | Unspecified vulnerability in the Sun ZFS Storage Appliance Kit (AK) component in Oracle Sun Systems Products Suite AK 2013 allows remote attackers to affect confidentiality via… |
| CVE-2016-5480 | SO Solaris Oracle | 2.8 | Oct 25 | Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect integrity via vectors related to Bash |
| CVE-2016-3562 | DS Database Server Oracle | 2.4 | Oct 25 | Unspecified vulnerability in the RDBMS Security and SQL*Plus components in Oracle Database Server 11.2.0.4 and 12.1.0.2 allows remote administrators to affect confidentiality via… |