cve.nowby Sazabi

CVEs published November 30, 2016

40 CVEs were published on November 30, 2016: 0 critical, 0 high. Browse them by severity, product and exploitation status.

Published: 40
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 40
Now in CISA KEV: 0
Fix available: 0

Most affected products

Lenovo Group ThinkPad systems: 1

Medium, low and unrated 40

CVE-2016-2881IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 and QRadar Incident Forensics 7.2 before 7.2.7 allow remote attackers to…UnratedNov 30, 2016
CVE-2016-2884Cross-site request forgery (CSRF) vulnerability in IBM Forms Experience Builder 8.5.x and 8.6.x before 8.6.3.1, in an unspecified…UnratedNov 30, 2016
CVE-2016-2887IBM IMS Enterprise Suite Data Provider before 3.2.0.1 for Microsoft .NET allows remote authenticated users to obtain sensitive information…UnratedNov 30, 2016
CVE-2016-2917The notifications component in IBM TRIRIGA Applications 10.4 and 10.5 before 10.5.1 allows remote authenticated users to obtain sensitive…UnratedNov 30, 2016
CVE-2016-2869Multiple cross-site scripting (XSS) vulnerabilities in the UI in IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 allow remote…UnratedNov 30, 2016
CVE-2016-2871IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 uses cleartext storage for unspecified passwords, which allows local users to…UnratedNov 30, 2016
CVE-2016-2873SQL injection vulnerability in IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 allows remote authenticated users to execute…UnratedNov 30, 2016
CVE-2016-2874IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 mishandles authorization, which allows remote authenticated users to obtain…UnratedNov 30, 2016
CVE-2016-2876IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 executes unspecified processes at an incorrect privilege level, which makes…UnratedNov 30, 2016
CVE-2016-2877IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 uses weak permissions for unspecified directories under the web root, which…UnratedNov 30, 2016
CVE-2016-2878Multiple cross-site request forgery (CSRF) vulnerabilities in IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 allow remote…UnratedNov 30, 2016
CVE-2016-8222A vulnerability has been identified in a signed kernel driver for the BIOS of some ThinkPad systems that can allow an attacker with…Lenovo Group ThinkPad systemsUnratedNov 30, 2016
CVE-2016-2931IBM BigFix Remote Control before 9.1.3 allows remote attackers to obtain sensitive cleartext information by sniffing the network.UnratedNov 30, 2016
CVE-2016-2932IBM BigFix Remote Control before 9.1.3 allows remote attackers to conduct XML injection attacks via unspecified vectors.UnratedNov 30, 2016
CVE-2016-2933Directory traversal vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote authenticated administrators to read arbitrary…UnratedNov 30, 2016
CVE-2016-2934Cross-site scripting (XSS) vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote attackers to inject arbitrary web script…UnratedNov 30, 2016
CVE-2016-2935The broker application in IBM BigFix Remote Control before 9.1.3 allows remote attackers to cause a denial of service via an invalid HTTP…UnratedNov 30, 2016
CVE-2016-2936IBM BigFix Remote Control before 9.1.3 uses cleartext storage for unspecified passwords, which allows local users to obtain sensitive…UnratedNov 30, 2016
CVE-2016-2937IBM BigFix Remote Control before 9.1.3 allows remote attackers to obtain sensitive information or spoof e-mail transmission via a crafted…UnratedNov 30, 2016
CVE-2016-2940Multiple unspecified vulnerabilities in IBM BigFix Remote Control before 9.1.3 allow remote attackers to obtain sensitive information via…UnratedNov 30, 2016
CVE-2016-2943IBM BigFix Remote Control before 9.1.3 allows local users to obtain sensitive information by leveraging unspecified privileges to read a…UnratedNov 30, 2016
CVE-2016-2944IBM BigFix Remote Control before 9.1.3 does not properly restrict failed login attempts, which makes it easier for remote attackers to…UnratedNov 30, 2016
CVE-2016-2948IBM BigFix Remote Control before 9.1.3 allows local users to discover hardcoded credentials via unspecified vectors.UnratedNov 30, 2016
CVE-2016-2949IBM BigFix Remote Control before 9.1.3 allows local users to obtain sensitive information by reading cached web pages from a different…UnratedNov 30, 2016
CVE-2016-2950SQL injection vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote authenticated users to execute arbitrary SQL commands…UnratedNov 30, 2016

Show all 40 entriesShow fewer entries