CVEs published October 27, 2016
18 CVEs were published on October 27, 2016: 0 critical, 0 high. Browse them by severity, product and exploitation status.
- Published
- 18
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 18
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- Cisco ASA Software before
- 2
- Cisco Meeting Server 1.8, 1.9,
- 2
- NetIQ Designer for Identity Manager before
- 2
- Cisco Finesse
- 1
- Cisco Firepower System Software before
- 1
- Cisco IOS XE 3.16S, 3.17S, 3.18.0S, 3.18.1S, 3.18.0SP
- 1
- Cisco Meeting Server (CMS) before 2.0.6 and Acano Server be…
- 1
- Cisco Prime Infrastructure and Evolved Programmable Network…
- 1
- Cisco Unified Communications Manager 11.0(1.10000.10), 11.5…
- 1
- Cisco Wide Area Application Services (WAAS) before 5.3(5g)1…
- 1
Medium, low and unrated 18
- CVE-2016-1000120SQLi and XSS in Huge IT catalog extension v1.0.4 for Joomla
- CVE-2016-1000121XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension
- CVE-2016-1000122XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension
- CVE-2016-6431A vulnerability in the local Certificate Authority (CA) feature of Cisco ASA Software before 9.6(1.5) could allow an unauthenticated…Cisco ASA Software before
- CVE-2016-6432A vulnerability in the Identity Firewall feature of Cisco ASA Software before 9.6(2.1) could allow an unauthenticated, remote attacker to…Cisco ASA Software before
- CVE-2016-6437A vulnerability in the SSL session cache management of Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote…Cisco Wide Area Application Services (WAAS) before 5.3(5g)1…
- CVE-2016-6438A vulnerability in Cisco IOS XE Software running on Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, remote…Cisco IOS XE 3.16S, 3.17S, 3.18.0S, 3.18.1S, 3.18.0SP
- CVE-2016-6439A vulnerability in the detection engine reassembly of HTTP packets for Cisco Firepower System Software before 6.0.1 could allow an…Cisco Firepower System Software before
- CVE-2016-6440The Cisco Unified Communications Manager (CUCM) may be vulnerable to data that can be displayed inside an iframe within a web page, which…Cisco Unified Communications Manager 11.0(1.10000.10), 11.5…
- CVE-2016-6442A vulnerability in Cisco Finesse Agent and Supervisor Desktop Software could allow an unauthenticated, remote attacker to conduct a…Cisco Finesse
- CVE-2016-6443A vulnerability in the Cisco Prime Infrastructure and Evolved Programmable Network Manager SQL database interface could allow an…Cisco Prime Infrastructure and Evolved Programmable Network…
- CVE-2016-6444A vulnerability in Cisco Meeting Server could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF)…Cisco Meeting Server 1.8, 1.9,
- CVE-2016-6445A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) service of the Cisco Meeting Server (CMS) before 2.0.6 and Acano…Cisco Meeting Server (CMS) before 2.0.6 and Acano Server be…
- CVE-2016-6446A vulnerability in Web Bridge for Cisco Meeting Server could allow an unauthenticated, remote attacker to retrieve memory from a connected…Cisco Meeting Server 1.8, 1.9,
- CVE-2015-0787XSS in NetIQ Designer for Identity Manager before 4.5.3 allows remote attackers to inject arbitrary HTML code via the accessMgrDN value of…NetIQ Designer for Identity Manager before
- CVE-2016-1592XSS in NetIQ Designer for Identity Manager before 4.5.3 allows remote attackers to inject arbitrary HTML code via the…NetIQ Designer for Identity Manager before
- CVE-2016-1598XSS in NetIQ IDM 4.5 Identity Applications before 4.5.4 allows attackers able to change their username to inject arbitrary HTML code into…NetIQ IDM 4.5 Identity Applications before
- CVE-2016-5764Micro Focus Rumba FTP 4.X client buffer overflow makes it possible to corrupt the stack and allow arbitrary code execution.Micro Focus Rumba FTP 4.X before