CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 28, 19:37 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2016-8942 | SC Spectrum Control Ibm | 3.1 | Feb 1 | IBM Tivoli Storage Productivity Center could allow an authenticated user with intimate knowledge of the system to edit a limited set of properties on the server |
| CVE-2016-3046 | SA Security Access Manager 9.0 Firmware Ibm | 2.7 | Feb 1 | IBM Security Access Manager for Web is vulnerable to SQL injection |
| CVE-2016-3045 | SA Security Access Manager Ibm | 3.7 | Feb 1 | IBM Security Access Manager for Web stores sensitive information in URL parameters |
| CVE-2016-3021 | SA Security Access Manager 9.0 Firmware Ibm | 2.7 | Feb 1 | IBM Security Access Manager for Web could allow an authenticated attacker to obtain sensitive information from error message using a specially crafted HTTP request |
| CVE-2016-0394 | IB Integration Bus Ibm | 3.3 | Feb 1 | IBM Integration Bus and WebSphere Message broker sets incorrect permissions for an object that could allow a local attacker to manipulate certain files |
| CVE-2016-0297 | BP Bigfix Platform Ibm | 3.7 | Feb 1 | IBM Tivoli Endpoint Manager - Mobile Device Management (MDM) could allow a remote attacker to obtain sensitive information due to a missing HTTP Strict-Transport-Security Header… |
| CVE-2016-0296 | BP Bigfix Platform Ibm | 3.3 | Feb 1 | IBM Tivoli Endpoint Manager - Mobile Device Management (MDM) stores potentially sensitive information in log files that could be available to a local user |
| CVE-2015-8034 | SA Salt Saltstack | 3.3 | Jan 30 | The state.sls function in Salt before 2015.8.3 uses weak permissions on the cache data, which allows local users to obtain sensitive information by reading the file |
| CVE-2017-3323 | MC Mysql Cluster Oracle | 3.7 | Jan 27 | Vulnerability in the MySQL Cluster component of Oracle MySQL (subcomponent: Cluster: General) |
| CVE-2017-3322 | MC Mysql Cluster Oracle | 3.7 | Jan 27 | Vulnerability in the MySQL Cluster component of Oracle MySQL (subcomponent: Cluster: NDBAPI) |
| CVE-2017-3321 | MC Mysql Cluster Oracle | 3.7 | Jan 27 | Vulnerability in the MySQL Cluster component of Oracle MySQL (subcomponent: Cluster: General) |
| CVE-2017-3320 | MY MySQL Oracle | 2.4 | Jan 27 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption) |
| CVE-2017-3319 | MY MySQL Oracle | 3.1 | Jan 27 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: X Plugin) |
| CVE-2017-3301 | SO Solaris Oracle | 3.3 | Jan 27 | Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel) |
| CVE-2017-3264 | SU Siebel UI Framework Oracle | 3.1 | Jan 27 | Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: Open UI) |
| CVE-2017-3259 | JD Jdk Oracle | 3.7 | Jan 27 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment) |
| CVE-2017-3240 | DS Database Server Oracle | 3.3 | Jan 27 | Vulnerability in the RDBMS Security component of Oracle Database Server |
| CVE-2017-3239 | GS Glassfish Server Oracle | 3.3 | Jan 27 | Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Administration) |
| CVE-2017-3235 | FU Flexcube Universal Banking Oracle | 3.5 | Jan 27 | Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core) |
| CVE-2016-8330 | SO Solaris Oracle | 3.7 | Jan 27 | Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel) |
| CVE-2016-8328 | JD Jdk Oracle | 3.7 | Jan 27 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Java Mission Control) |
| CVE-2016-8314 | FC Flexcube Core Banking Oracle | 3.1 | Jan 27 | Vulnerability in the Oracle FLEXCUBE Core Banking component of Oracle Financial Services Applications (subcomponent: Core) |
| CVE-2016-8305 | FU Flexcube Universal Banking Oracle | 2.1 | Jan 27 | Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core) |
| CVE-2016-5509 | FI Flexcube Investor Servicing Oracle | 3.1 | Jan 27 | Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Core) |
| CVE-2016-1551 | NT Ntp Ntp | 3.7 | Jan 27 | ntpd in NTP 4.2.8p3 and NTPsec a5fb34b9cc89b92a8fef2f459004865c93bb7f92 relies on the underlying operating system to protect it from requests that impersonate reference clocks |
| CVE-2016-9932 | XE Xen Xen | 3.3 | Jan 26 | CMPXCHG8B emulation in Xen 3.3.x through 4.7.x on x86 systems allows local HVM guest OS users to obtain sensitive information from host stack memory via a "supposedly-ignored"… |
| CVE-2016-7429 | NT Ntp Ntp | 3.7 | Jan 13 | NTP before 4.2.8p9 changes the peer structure to the interface it receives the response from a source, which allows remote attackers to cause a denial of service (prevent… |
| CVE-2016-6770 | AN Android Google | 3.3 | Jan 12 | An elevation of privilege vulnerability in the Framework API could enable a local malicious application to access system functions beyond its access level |
| CVE-2016-9015 | UR Urllib3 Python | 3.7 | Jan 11 | Versions 1.17 and 1.18 of the Python urllib3 library suffer from a vulnerability that can cause them, in certain configurations, to not correctly validate TLS certificates |
| CVE-2015-8020 | CD Clustered Data Ontap Netapp | 3.7 | Jan 11 | Clustered Data ONTAP versions 8.0, 8.3.1, and 8.3.2 contain a default privileged account which under certain conditions can be used for unauthorized information disclosure |
| CVE-2016-8334 | RE Reader Foxitsoftware | 3.3 | Jan 6 | A large out-of-bounds read on the heap vulnerability in Foxit PDF Reader can potentially be abused for information disclosure |
| CVE-2016-4323 | UL Ubuntu Linux Canonical | 3.7 | Jan 6 | A directory traversal exists in the handling of the MXIT protocol in Pidgin |
| CVE-2016-2380 | UL Ubuntu Linux Canonical | 3.1 | Jan 6 | An information leak exists in the handling of the MXIT protocol in Pidgin |
| CVE-2016-7903 | DO Dotclear Dotclear | 3.7 | Jan 4 | Dotclear before 2.10.3, when the Host header is not part of the web server routing process, allows remote attackers to modify the password reset address link via the HTTP Host… |
| CVE-2016-9908 | QE Qemu Qemu | 3.3 | Dec 23 | Quick Emulator (Qemu) built with the Virtio GPU Device emulator support is vulnerable to an information leakage issue |
| CVE-2016-4027 | OA Open-xchange Appsuite Open-xchange | 3.5 | Dec 15 | An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev10 |
| CVE-2016-2877 | QS Qradar Security Information And Event Manager Ibm | 3.3 | Nov 30 | IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 uses weak permissions for unspecified directories under the web root, which allows local users to modify data by… |
| CVE-2016-2874 | QS Qradar Security Information And Event Manager Ibm | 3.1 | Nov 30 | IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 mishandles authorization, which allows remote authenticated users to obtain sensitive information via unspecified… |
| CVE-2016-3009 | CO Connections Ibm | 3.5 | Nov 30 | Cross-site request forgery (CSRF) vulnerability in IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows remote authenticated users to hijack the… |
| CVE-2016-3002 | CO Connections Ibm | 2.1 | Nov 30 | IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows physically proximate attackers to obtain sensitive information by reading cached data on a client… |
| CVE-2016-2953 | CO Connections Ibm | 3.7 | Nov 30 | IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 does not require SSL, which allows remote attackers to obtain sensitive cleartext information by sniffing the… |
| CVE-2016-2952 | BR Bigfix Remote Control Ibm | 3.7 | Nov 30 | IBM BigFix Remote Control before 9.1.3 does not enable the HSTS protection mechanism, which makes it easier for remote attackers to obtain sensitive information by leveraging use… |
| CVE-2016-2951 | BR Bigfix Remote Control Ibm | 3.7 | Nov 30 | IBM BigFix Remote Control before 9.1.3 does not properly set the default encryption strength, which makes it easier for remote attackers to defeat cryptographic protection… |
| CVE-2016-2949 | BR Bigfix Remote Control Ibm | 3.3 | Nov 30 | IBM BigFix Remote Control before 9.1.3 allows local users to obtain sensitive information by reading cached web pages from a different user's session |
| CVE-2016-2943 | BR Bigfix Remote Control Ibm | 1.9 | Nov 30 | IBM BigFix Remote Control before 9.1.3 allows local users to obtain sensitive information by leveraging unspecified privileges to read a log file |
| CVE-2016-5992 | SC Sterling Connect:direct Ibm | 2.5 | Nov 25 | IBM Sterling Connect:Direct 4.5.00, 4.5.01, 4.6.0 before 4.6.0.6 iFix008, and 4.7.0 before 4.7.0.4 on Windows allows local users to cause a denial of service via unspecified… |
| CVE-2016-2947 | RC Rational Collaborative Lifecycle Management Ibm | 2.7 | Nov 25 | IBM Rational Collaborative Lifecycle Management 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Quality Manager 4.0 before 4.0.7 iFix11, 5.0… |
| CVE-2016-0378 | WA Websphere Application Server Ibm | 3.7 | Nov 24 | IBM WebSphere Application Server (WAS) Liberty before 16.0.0.3, when the installation lacks a default error page, allows remote attackers to obtain sensitive information by… |
| CVE-2016-0372 | RC Rational Collaborative Lifecycle Management Ibm | 3.7 | Nov 24 | IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Quality Manager… |
| CVE-2016-0353 | SP Security Privileged Identity Manager Ibm | 3.7 | Nov 24 | IBM Security Privileged Identity Manager 2.0 before 2.0.2 FP8, when Virtual Appliance is used, does not set the secure flag for the session cookie in an https session, which makes… |