Total
22706 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2015-2773 | 1 Websense | 1 V-series Appliances | 2016-12-02 | 5.0 MEDIUM | N/A |
SVM in Websense TRITON V-Series appliances before 8.0.0 allows attackers to read arbitrary files via unspecified vectors. | |||||
CVE-2015-2352 | 1 Mybb | 1 Mybb | 2016-12-02 | 7.5 HIGH | N/A |
The cache handler in MyBB (aka MyBulletinBoard) before 1.8.4 does not properly check the encoding of input to the var_export function, which allows attackers to have an unspecified impact via unknown vectors. | |||||
CVE-2015-2579 | 1 Oracle | 1 Health Sciences Applications | 2016-12-02 | 2.1 LOW | N/A |
Unspecified vulnerability in the Oracle Health Sciences Argus Safety component in Oracle Health Sciences Applications 8.0 allows local users to affect confidentiality via vectors related to BIP Installer. | |||||
CVE-2015-2115 | 1 Hp | 1 Capture And Route Software | 2016-12-02 | 2.7 LOW | N/A |
Unspecified vulnerability in HP Capture and Route Software (HPCR) 1.3 before Patch 7, 1.3 FP1 before Patch 1, and 1.4 before Patch 1 allows remote authenticated users to obtain sensitive information via unknown vectors. | |||||
CVE-2015-2123 | 1 Hp | 1 Nonstop Safeguard Security | 2016-12-02 | 9.0 HIGH | N/A |
Unspecified vulnerability in HP NonStop Safeguard Security Software H06.x, L15.02, and J06.x before J06.19 allows remote authenticated users to gain privileges by leveraging Expand access. | |||||
CVE-2015-2124 | 1 Hp | 2 Smart Zero Core, Thinpro Linux | 2016-12-02 | 7.2 HIGH | N/A |
Unspecified vulnerability in Easy Setup Wizard in HP ThinPro Linux 4.1 through 5.1 and Smart Zero Core 4.3 and 4.4 allows local users to bypass intended access restrictions and gain privileges via unknown vectors. | |||||
CVE-2015-2116 | 1 Hp | 1 Storage Data Protector | 2016-12-02 | 9.0 HIGH | N/A |
Unspecified vulnerability in HP Storage Data Protector 7.x before 7.03 build 107 allows remote authenticated users to execute arbitrary code or cause a denial of service via unknown vectors. | |||||
CVE-2015-1152 | 1 Apple | 3 Iphone Os, Itunes, Safari | 2016-12-02 | 6.8 MEDIUM | N/A |
WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2015-1153 and CVE-2015-1154. | |||||
CVE-2015-1153 | 1 Apple | 3 Iphone Os, Itunes, Safari | 2016-12-02 | 6.8 MEDIUM | N/A |
WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2015-1152 and CVE-2015-1154. | |||||
CVE-2016-1851 | 1 Apple | 1 Mac Os X | 2016-12-02 | 2.1 LOW | 4.6 MEDIUM |
The Screen Lock feature in Apple OS X before 10.11.5 mishandles password profiles, which allows physically proximate attackers to reset expired passwords in the lock-screen state via unspecified vectors. | |||||
CVE-2016-1809 | 1 Apple | 1 Mac Os X | 2016-11-30 | 7.8 HIGH | 7.5 HIGH |
Disk Utility in Apple OS X before 10.11.5 uses incorrect encryption keys for disk images, which has unspecified impact and attack vectors. | |||||
CVE-2016-5837 | 1 Wordpress | 1 Wordpress | 2016-11-29 | 5.0 MEDIUM | 7.5 HIGH |
WordPress before 4.5.3 allows remote attackers to bypass intended access restrictions and remove a category attribute from a post via unspecified vectors. | |||||
CVE-2016-5832 | 1 Wordpress | 1 Wordpress | 2016-11-29 | 5.0 MEDIUM | 7.5 HIGH |
The customizer in WordPress before 4.5.3 allows remote attackers to bypass intended redirection restrictions via unspecified vectors. | |||||
CVE-2016-2297 | 1 Meteocontrol | 4 Web\'log Basic 100, Web\'log Light, Web\'log Pro and 1 more | 2016-11-29 | 9.7 HIGH | 9.4 CRITICAL |
Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited allows remote attackers to execute arbitrary commands via an "access command shell-like feature." | |||||
CVE-2015-2111 | 2 Hp, Microsoft | 3 Intelligent Provisioning, Windows Server 2008, Windows Server 2012 | 2016-11-29 | 2.1 LOW | N/A |
Unspecified vulnerability in HP Intelligent Provisioning 1.40 through 1.60 on Windows Server 2008 R2 and 2012 allows local users to obtain sensitive information via unknown vectors. | |||||
CVE-2015-2109 | 1 Hp | 1 Operations Orchestration | 2016-11-29 | 7.5 HIGH | N/A |
Unspecified vulnerability in HP Operations Orchestration 10.x allows remote attackers to bypass authentication, and obtain sensitive information or modify data, via unknown vectors. | |||||
CVE-2015-2106 | 1 Hp | 3 Integrated Lights-out 2 Firmware, Integrated Lights-out 3 Firmware, Integrated Lights-out 4 Firmware | 2016-11-29 | 6.4 MEDIUM | N/A |
Unspecified vulnerability in HP Integrated Lights-Out (iLO) firmware 2 before 2.27, 3 before 1.82, and 4 before 2.10 allows remote attackers to bypass intended access restrictions or cause a denial of service via unknown vectors. | |||||
CVE-2015-1945 | 1 Ibm | 1 Infosphere Master Data Management Server | 2016-11-29 | 6.5 MEDIUM | N/A |
Unspecified vulnerability in the Reference Data Management component in IBM InfoSphere Master Data Management 10.1, 11.0, 11.3 before FP3, and 11.4 allows remote authenticated users to gain privileges via unknown vectors. | |||||
CVE-2015-1829 | 1 Oracle | 1 Fusion Middleware | 2016-11-29 | 5.0 MEDIUM | N/A |
Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 10.1.3.5, 11.1.1.7, 11.1.1.9, 12.1.2.0, and 12.1.3.0 allows remote attackers to affect availability via unknown vectors related to Web Listener. | |||||
CVE-2016-6139 | 1 Sap | 1 Trex | 2016-11-28 | 7.6 HIGH | 9.8 CRITICAL |
SAP TREX 7.10 Revision 63 allows remote attackers to read arbitrary files via unspecified vectors, aka SAP Security Note 2203591. |