CVEs published October 6, 2016
42 CVEs were published on October 6, 2016: 0 critical, 0 high.
- Published
- 42
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 42
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 42
- CVE-2015-1000000Remote file upload vulnerability in mailcwp v1.99 wordpress plugin
- CVE-2015-1000001Remote file upload vulnerability in fast-image-adder v1.1 Wordpress plugin
- CVE-2015-1000002Open Proxy in filedownload v1.4 wordpress plugin
- CVE-2015-1000003Blind SQL Injection in filedownload v1.4 wordpress plugin
- CVE-2015-1000004XSS in filedownload v1.4 wordpress plugin
- CVE-2015-1000005Remote file download vulnerability in candidate-application-form v1.0 wordpress plugin
- CVE-2015-1000006Remote file download vulnerability in recent-backups v0.7 wordpress plugin
- CVE-2015-1000007Remote file download vulnerability in wptf-image-gallery v1.03
- CVE-2015-1000008Path Disclosure Vulnerability in wordpress plugin MP3-jPlayer v2.3.2
- CVE-2015-1000009Open proxy in Wordpress plugin google-adsense-and-hotel-booking v1.05
- CVE-2015-1000010Remote file download in simple-image-manipulator v1.0 wordpress plugin
- CVE-2015-1000011Blind SQL Injection in wordpress plugin dukapress v2.5.9
- CVE-2015-1000012Local File Inclusion Vulnerability in mypixs v0.3 wordpress plugin
- CVE-2015-1000013Remote file upload vulnerability in wordpress plugin csv2wpec-coupon v1.1
- CVE-2016-1000000Ipswitch WhatsUp Gold 16.4.1 WrFreeFormText.asp sUniqueID Parameter Blind SQL Injection
- CVE-2016-1000009TP-LINK lost control of two domains, www.tplinklogin.net and tplinkextender.net.
- CVE-2016-1000112Unauthenticated remote .jpg file upload in contus-video-comments v1.0 wordpress plugin
- CVE-2016-1000113XSS and SQLi in huge IT gallery v1.1.5 for Joomla
- CVE-2016-1000114XSS in huge IT gallery v1.1.5 for Joomla
- CVE-2016-1000123Unauthenticated SQL Injection in Huge-IT Video Gallery v1.0.9 for Joomla
- CVE-2016-1000124Unauthenticated SQL Injection in Huge-IT Portfolio Gallery Plugin v1.0.6
- CVE-2016-1000125Unauthenticated SQL Injection in Huge-IT Catalog v1.0.7 for Joomla
- CVE-2016-1000217Zotpress plugin for WordPress SQLi in zp_get_account()
- CVE-2015-0721Cisco NX-OS 4.0 through 7.3 on Multilayer Director and Nexus 1000V, 2000, 3000, 3500, 4000, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 dev
- CVE-2015-6393Cisco NX-OS 4.1 through 7.3 and 11.0 through 11.2 on Nexus 2000, 3000, 3500, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows rem
- CVE-2016-1453Buffer overflow in the Overlay Transport Virtualization (OTV) GRE feature in Cisco NX-OS 5.0 through 7.3 on Nexus 7000 and 7700 devices allo
- CVE-2016-1454Cisco NX-OS 4.0 through 7.3 and 11.0 through 11.2 on 1000v, 2000, 3000, 3500, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows re
- CVE-2016-6023Directory traversal vulnerability in the Configuration Manager in IBM Sterling Secure Proxy (SSP) 3.4.2 before 3.4.2.0 iFix 8 and 3.4.3 befo
- CVE-2016-6025The Configuration Manager in IBM Sterling Secure Proxy (SSP) 3.4.2 before 3.4.2.0 iFix 8 and 3.4.3 before 3.4.3.0 iFix 1 allows remote attac
- CVE-2016-6026The Configuration Manager in IBM Sterling Secure Proxy (SSP) 3.4.2 before 3.4.2.0 iFix 8 and 3.4.3 before 3.4.3.0 iFix 1 allows man-in-the-m
- CVE-2016-6027The Configuration Manager in IBM Sterling Secure Proxy (SSP) 3.4.2 before 3.4.2.0 iFix 8 and 3.4.3 before 3.4.3.0 iFix 1 does not enable the
- CVE-2016-6422Cisco IOS 12.2(33)SXJ9 on Supervisor Engine 32 and 720 modules for 6500 and 7600 devices mishandles certain operators, flags, and keywords i
- CVE-2016-6424The DHCP Relay implementation in Cisco Adaptive Security Appliance (ASA) Software 8.4.7.29 and 9.1.7.4 allows remote attackers to cause a de
- CVE-2016-6425Cross-site scripting (XSS) vulnerability in Cisco Unified Intelligence Center (CUIC) 8.5.4 through 9.1(1), as used in Unified Contact Center
- CVE-2016-6427Cross-site request forgery (CSRF) vulnerability in Cisco Unified Intelligence Center (CUIC) 8.5.4 through 9.1(1), as used in Unified Contact
- CVE-2016-6428Cisco IOS XR 6.1.1 allows local users to execute arbitrary OS commands as root by leveraging admin privileges, aka Bug ID CSCva38349.
- CVE-2016-6433The Threat Management Console in Cisco Firepower Management Center 5.2.0 through 6.0.1 allows remote authenticated users to execute arbitrar
- CVE-2016-6434Cisco Firepower Management Center 6.0.1 has hardcoded database credentials, which allows local users to obtain sensitive information by leve
- CVE-2016-6435The web console in Cisco Firepower Management Center 6.0.1 allows remote authenticated users to read arbitrary files via crafted parameters,
- CVE-2016-6436Cross-site scripting (XSS) vulnerability in HostScan Engine 3.0.08062 through 3.1.14018 in the Cisco Host Scan package, as used in ASA Web V
- CVE-2016-6653The MariaDB audit_plugin component in Pivotal Cloud Foundry (PCF) cf-mysql-release 27 and 28 allows remote attackers to obtain sensitive inf
- CVE-2015-6392Cisco NX-OS 4.1 through 7.3 and 11.0 through 11.2 on Nexus 2000, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote attacker