CVEs published October 27, 2016
18 CVEs were published on October 27, 2016: 0 critical, 0 high.
- Published
- 18
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 18
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- Cisco ASA Software before
- 2
- Cisco Meeting Server 1.8, 1.9,
- 2
- NetIQ Designer for Identity Manager before
- 2
- Cisco Finesse
- 1
- Cisco Firepower System Software before
- 1
- Cisco IOS XE 3.16S, 3.17S, 3.18.0S, 3.18.1S, 3.18.0SP
- 1
- Cisco Meeting Server (CMS) before 2.0.6 and Acano Server be…
- 1
- Cisco Prime Infrastructure and Evolved Programmable Network…
- 1
- Cisco Unified Communications Manager 11.0(1.10000.10), 11.5…
- 1
- Cisco Wide Area Application Services (WAAS) before 5.3(5g)1…
- 1
Medium, low and unrated 18
- CVE-2016-1000120SQLi and XSS in Huge IT catalog extension v1.0.4 for Joomla
- CVE-2016-1000121XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension
- CVE-2016-1000122XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension
- CVE-2016-6431A vulnerability in the local Certificate Authority (CA) feature of Cisco ASA Software before 9.6(1.5) could allow an unauthenticated, remoteCisco ASA Software before
- CVE-2016-6432A vulnerability in the Identity Firewall feature of Cisco ASA Software before 9.6(2.1) could allow an unauthenticated, remote attacker to caCisco ASA Software before
- CVE-2016-6437A vulnerability in the SSL session cache management of Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote atCisco Wide Area Application Services (WAAS) before 5.3(5g)1…
- CVE-2016-6438A vulnerability in Cisco IOS XE Software running on Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, remote attacker Cisco IOS XE 3.16S, 3.17S, 3.18.0S, 3.18.1S, 3.18.0SP
- CVE-2016-6439A vulnerability in the detection engine reassembly of HTTP packets for Cisco Firepower System Software before 6.0.1 could allow an unauthentCisco Firepower System Software before
- CVE-2016-6440The Cisco Unified Communications Manager (CUCM) may be vulnerable to data that can be displayed inside an iframe within a web page, which inCisco Unified Communications Manager 11.0(1.10000.10), 11.5…
- CVE-2016-6442A vulnerability in Cisco Finesse Agent and Supervisor Desktop Software could allow an unauthenticated, remote attacker to conduct a cross-siCisco Finesse
- CVE-2016-6443A vulnerability in the Cisco Prime Infrastructure and Evolved Programmable Network Manager SQL database interface could allow an authenticatCisco Prime Infrastructure and Evolved Programmable Network…
- CVE-2016-6444A vulnerability in Cisco Meeting Server could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attacCisco Meeting Server 1.8, 1.9,
- CVE-2016-6445A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) service of the Cisco Meeting Server (CMS) before 2.0.6 and Acano SeCisco Meeting Server (CMS) before 2.0.6 and Acano Server be…
- CVE-2016-6446A vulnerability in Web Bridge for Cisco Meeting Server could allow an unauthenticated, remote attacker to retrieve memory from a connected sCisco Meeting Server 1.8, 1.9,
- CVE-2015-0787XSS in NetIQ Designer for Identity Manager before 4.5.3 allows remote attackers to inject arbitrary HTML code via the accessMgrDN value of tNetIQ Designer for Identity Manager before
- CVE-2016-1592XSS in NetIQ Designer for Identity Manager before 4.5.3 allows remote attackers to inject arbitrary HTML code via the nrfEntitlementReport.dNetIQ Designer for Identity Manager before
- CVE-2016-1598XSS in NetIQ IDM 4.5 Identity Applications before 4.5.4 allows attackers able to change their username to inject arbitrary HTML code into thNetIQ IDM 4.5 Identity Applications before
- CVE-2016-5764Micro Focus Rumba FTP 4.X client buffer overflow makes it possible to corrupt the stack and allow arbitrary code execution.Micro Focus Rumba FTP 4.X before