CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 28, 22:37 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2014-8571 | AP Ascend P6 Edge-c00 Firmware Huawei | 3.3 | Apr 2 | Apps on Huawei Ascend P6 mobile phones with software EDGE-U00 V100R001C17B508SP01 and earlier versions before V100R001C17B508SP02; EDGE-T00 V100R001C01B508SP01 and earlier… |
| CVE-2017-2426 | MO Mac OS X Apple | 3.3 | Apr 2 | An issue was discovered in certain Apple products |
| CVE-2017-2404 | IO iOS Apple | 3.3 | Apr 2 | An issue was discovered in certain Apple products |
| CVE-2017-2397 | IO iOS Apple | 2.4 | Apr 2 | An issue was discovered in certain Apple products |
| CVE-2017-2384 | IO iOS Apple | 3.3 | Apr 2 | An issue was discovered in certain Apple products |
| CVE-2017-2383 | IC Icloud Apple | 3.1 | Apr 2 | An issue was discovered in certain Apple products |
| CVE-2016-6349 | OC Oci-register-machine Projectatomic | 3.3 | Mar 29 | The machinectl command in oci-register-machine allows local users to list running containers and possibly obtain sensitive information by running that command |
| CVE-2016-9471 | RA Revive Adserver Revive-adserver | 3.1 | Mar 28 | Revive Adserver before 3.2.5 and 4.0.0 suffers from Special Element Injection |
| CVE-2016-6102 | SK Security Key Lifecycle Manager Ibm | 3.7 | Mar 27 | IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 stores sensitive information in URL parameters |
| CVE-2015-4078 | CM Cloudera Manager Cloudera | 3.1 | Mar 23 | Cloudera Navigator 2.2.x before 2.2.4 and 2.3.x before 2.3.3 include support for SSLv3 when configured to use SSL/TLS, which makes it easier for man-in-the-middle attackers to… |
| CVE-2015-2263 | CM Cloudera Manager Cloudera | 3.3 | Mar 23 | Cloudera Manager 4.x, 5.0.x before 5.0.6, 5.1.x before 5.1.5, 5.2.x before 5.2.5, and 5.3.x before 5.3.3 uses global read permissions for files in its configuration directory when… |
| CVE-2013-6446 | CD Cdh Cloudera | 3.1 | Mar 23 | The JobHistory Server in Cloudera CDH 4.x before 4.6.0 and 5.x before 5.0.0 Beta 2, when using MRv2/YARN with HTTP authentication, allows remote authenticated users to obtain… |
| CVE-2017-5930 | LE Leap Opensuse | 2.7 | Mar 20 | The AliasHandler component in PostfixAdmin before 3.0.2 allows remote authenticated domain admins to delete protected aliases via the delete parameter to delete.php, involving a… |
| CVE-2016-9697 | RR Rational Rhapsody Design Manager Ibm | 3.1 | Mar 20 | An unspecified vulnerability in IBM Rhapsody DM 4.0, 5.0, and 6.0 could allow an attacker to perform a JSON Hijacking Attack |
| CVE-2017-0096 | WI Windows Microsoft | 2.6 | Mar 17 | Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1, Windows Server 2012 Gold and R2; Windows 10 Gold, 1511, and 1607; and Windows… |
| CVE-2017-0042 | WI Windows Microsoft | 3.1 | Mar 17 | Windows Media Player in Microsoft Windows 8.1; Windows Server 2012 R2; Windows RT 8.1; Windows 7 SP1; Windows 2008 SP2 and R2 SP1, Windows Server 2016; Windows Vista SP2; and… |
| CVE-2016-8016 | VE Virusscan Enterprise Mcafee | 3.4 | Mar 14 | Information exposure in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows authenticated remote attackers to obtain the existence of unauthorized files on… |
| CVE-2017-5985 | LX Lxc Linuxcontainers | 3.3 | Mar 14 | lxc-user-nic in Linux Containers (LXC) allows local users with a lxc-usernet allocation to create network interfaces on the host and choose the name of those interfaces by… |
| CVE-2017-1150 | DB Db2 Ibm | 3.1 | Mar 8 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.1, 10.5, and 11.1 could allow an authenticated attacker with specialized access to tables that they should not… |
| CVE-2017-1124 | MA Maximo Asset Management Ibm | 2.9 | Mar 7 | IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a local attacker to obtain sensitive information using HTTP Header Injection |
| CVE-2017-5865 | OW Owncloud Owncloud | 3.7 | Mar 3 | The password reset functionality in ownCloud Server before 8.1.11, 8.2.x before 8.2.9, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 sends different error messages depending on… |
| CVE-2015-2877 | KE Kernel Linux | 3.3 | Mar 3 | Kernel Samepage Merging (KSM) in the Linux kernel 2.6.32 through 4.x does not prevent use of a write-timing side channel, which allows guest OS users to defeat the ASLR protection… |
| CVE-2016-7553 | BU Buf.pl Irssi | 3.3 | Feb 27 | The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created between upgrades, which might allow local users to obtain… |
| CVE-2017-5928 | HR High Resolution Time Api W3 | 3.7 | Feb 27 | The W3C High Resolution Time API, as implemented in various web browsers, does not consider that memory-reference times can be measured by a performance.now "Time to Tick"… |
| CVE-2016-9009 | WM Websphere MQ Ibm | 3.1 | Feb 24 | IBM WebSphere MQ 8.0 could allow an authenticated user with authority to create a cluster object to cause a denial of service to MQ clustering |
| CVE-2017-2357 | MO Mac OS X Apple | 3.3 | Feb 20 | An issue was discovered in certain Apple products |
| CVE-2017-2351 | IO iOS Apple | 2.4 | Feb 20 | An issue was discovered in certain Apple products |
| CVE-2016-7765 | IO iOS Apple | 2.4 | Feb 20 | An issue was discovered in certain Apple products |
| CVE-2016-7714 | IO iOS Apple | 3.3 | Feb 20 | An issue was discovered in certain Apple products |
| CVE-2016-7664 | IO iOS Apple | 2.4 | Feb 20 | An issue was discovered in certain Apple products |
| CVE-2016-7657 | IO iOS Apple | 3.3 | Feb 20 | An issue was discovered in certain Apple products |
| CVE-2016-7653 | IO iOS Apple | 2.4 | Feb 20 | An issue was discovered in certain Apple products |
| CVE-2016-7625 | MO Mac OS X Apple | 3.3 | Feb 20 | An issue was discovered in certain Apple products |
| CVE-2016-7624 | MO Mac OS X Apple | 3.3 | Feb 20 | An issue was discovered in certain Apple products |
| CVE-2016-7620 | MO Mac OS X Apple | 3.3 | Feb 20 | An issue was discovered in certain Apple products |
| CVE-2016-7577 | IO iOS Apple | 3.7 | Feb 20 | An issue was discovered in certain Apple products |
| CVE-2016-4670 | IO iOS Apple | 3.3 | Feb 20 | An issue was discovered in certain Apple products |
| CVE-2016-4665 | IO iOS Apple | 3.3 | Feb 20 | An issue was discovered in certain Apple products |
| CVE-2016-4664 | IO iOS Apple | 3.3 | Feb 20 | An issue was discovered in certain Apple products |
| CVE-2016-9348 | N5 Nport 5100 Series Firmware Moxa | 3.3 | Feb 13 | An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions prior to 2.8, NPort 5400 Series versions… |
| CVE-2016-9338 | 1S 1763-l16awa Series A Rockwellautomation | 2.7 | Feb 13 | An issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 controller 1763-L16AWA, Series A and B, Version 14.000 and prior versions; 1763-L16BBB, Series A and… |
| CVE-2016-8344 | EP Experion Process Knowledge System Honeywell | 3.7 | Feb 13 | An issue was discovered in Honeywell Experion Process Knowledge System (PKS) platform: Experion PKS, Release 3xx and prior, Experion PKS, Release 400, Experion PKS, Release 410,… |
| CVE-2016-0206 | CO Cloud Orchestrator Ibm | 3.3 | Feb 8 | IBM Cloud Orchestrator could allow a local authenticated attacker to cause the server to slow down for a short period of time by using a specially crafted and malformed URL |
| CVE-2016-0202 | CO Cloud Orchestrator Ibm | 3.3 | Feb 8 | A vulnerability has been identified in tasks, backend object generated for handling any action performed by the application in IBM Cloud Orchestrator |
| CVE-2015-7494 | CO Cloud Orchestrator Ibm | 2.8 | Feb 8 | A vulnerability has been identified in IBM Cloud Orchestrator services/[action]/launch API |
| CVE-2016-9085 | FE Fedora Fedoraproject | 3.3 | Feb 3 | Multiple integer overflows in libwebp allows attackers to have unspecified impact via unknown vectors |
| CVE-2016-8217 | BC Bsafe Crypto-j Dell | 3.7 | Feb 3 | EMC RSA BSAFE Crypto-J versions prior to 6.2.2 has a PKCS#12 Timing Attack Vulnerability |
| CVE-2016-9703 | SI Security Identity Manager Virtual Appliance Ibm | 2.4 | Feb 1 | IBM Security Identity Manager Virtual Appliance does not invalidate session tokens which could allow an unauthorized user with physical access to the work station to obtain… |
| CVE-2016-6001 | FE Forms Experience Builder Ibm | 3.1 | Feb 1 | IBM Forms Experience Builder could be susceptible to a server-side request forgery (SSRF) from the application design interface allowing for some information disclosure of… |
| CVE-2016-5953 | SS Sterling Selling And Fulfillment Foundation Ibm | 3.7 | Feb 1 | IBM Sterling Order Management transmits the session identifier within the URL |