MA
Product
Manager
On CISA KEVExploited in the wild
22
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 6Medium 6Low 2
Watch
Add Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-3427 In wildKEV | 9.8 | Apr 21 | Oracle Java SE and JRockit Unspecified Vulnerability Affected: 2.1 |
| CVE-2016-3715 In wildKEV | 5.5 | May 5 | ImageMagick Arbitrary File Deletion Vulnerability Affected: 2.1 |
| CVE-2016-3718 In wildKEV | 5.5 | May 5 | ImageMagick Server-Side Request Forgery (SSRF) Vulnerability Affected: 2.1 |
| CVE-2016-1286 | 8.6 | Mar 9 | named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted signature… Affected: 2.1 |
| CVE-2015-5300 | 7.5 | Jul 21 | The panic_gate check in NTP before 4.2.8p5 is only re-enabled after the first change to the system clock that was greater than 128 milliseconds by default, which allows remote… Affected: 2.1 |
| CVE-2015-5219 | 7.5 | Jul 21 | The ULOGTOD function in ntp.d in SNTP before 4.2.7p366 does not properly perform type conversions from a precision value to a double, which allows remote attackers to cause a… Affected: 2.1 |
| CVE-2015-5194 | 7.5 | Jul 21 | The log_config_command function in ntp_parser.y in ntpd in NTP before 4.2.7p42 allows remote attackers to cause a denial of service (ntpd crash) via crafted logconfig commands Affected: 2.1 |
| CVE-2016-4954 | 7.5 | Jul 5 | The process_packet function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (peer-variable modification) by sending spoofed… Affected: 2.1 |
| CVE-2016-4953 | 7.5 | Jul 5 | ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (ephemeral-association demobilization) by sending a spoofed crypto-NAK packet with incorrect… Affected: 2.1 |
| CVE-2016-1285 | 6.8 | Mar 9 | named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME records when parsing fetch reply messages, which allows remote attackers to cause… Affected: 2.1 |
| CVE-2019-3684 | 5.9 | May 13 | SUSE Manager until version 4.0.7 and Uyuni until commit 1b426ad5ed0a7191a6fb46bb83e98ae4b99a5ade created world-readable swap files on systems that don't have a swap already… Affected: through 4.0.7 |
| CVE-2016-0264 | 5.6 | May 24 | Buffer overflow in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40… Affected: 2.1 |
| CVE-2015-7976 | 4.3 | Jan 30 | The ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77 does not properly filter special characters, which allows attackers to cause… Affected: 2.1 |
| CVE-2017-7995 | 3.8 | May 3 | Xen PV guest before Xen 4.3 checked access permissions to MMIO ranges only after accessing them, allowing host PCI device space memory reads, leading to information disclosure Affected: 2.1 |
| CVE-2015-2808 | 3.7 | Apr 1 | The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for… Affected: 1.7 |
| CVE-2014-8162 | – | May 14 | XML external entity (XXE) in the RPC interface in Spacewalk and Red Hat Network (RHN) Satellite 5.7 and earlier allows remote attackers to read arbitrary files and possibly have… Affected: 1.7 |
| CVE-2014-7812 | – | Jan 15 | Cross-site scripting (XSS) vulnerability in Spacewalk and Red Hat Network (RHN) Satellite before 5.7.0 allows remote authenticated users to inject arbitrary web script or HTML via… Affected: 1.7 |
| CVE-2014-7811 | – | Jan 15 | Multiple cross-site scripting (XSS) vulnerabilities in Spacewalk and Red Hat Network (RHN) Satellite before 5.7.0 allow remote authenticated users to inject arbitrary web script… Affected: 1.7 |
| CVE-2014-3654 | – | Nov 3 | Multiple cross-site scripting (XSS) vulnerabilities in spacewalk-java 2.0.2 in Spacewalk and Red Hat Network (RHN) Satellite 5.5 and 5.6 allow remote attackers to inject arbitrary… Affected: 1.7 |
| CVE-2014-3595 | – | Sep 22 | Cross-site scripting (XSS) vulnerability in spacewalk-java 1.2.39, 1.7.54, and 2.0.2 in Spacewalk and Red Hat Network (RHN) Satellite 5.4 through 5.6 allows remote attackers to… Affected: 1.7 |
| CVE-2013-4415 | – | Feb 14 | Multiple cross-site scripting (XSS) vulnerabilities in Spacewalk and Red Hat Network (RHN) Satellite 5.6 allow remote attackers to inject arbitrary web script or HTML via the (1)… Affected: 1.7 |
| CVE-2013-4480 | – | Nov 18 | Red Hat Satellite 5.6 and earlier does not disable the web interface that is used to create the first user for a satellite, which allows remote attackers to create administrator… Affected: 1.7 |
Showing 22