CVEs published October 28, 2016
35 CVEs were published on October 28, 2016: 0 critical, 5 high.
- Published
- 35
- Critical
- 0
- High
- 5
- Medium
- 1
- Low
- 0
- Unrated
- 29
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- HPE System Management Homepage before
- 4
- Cisco AsyncOS through WSA10.0.0-000
- 3
- Cisco AsyncOS through 9.7.0-125
- 2
- Cisco AsyncOS 8.0.2-069
- 1
- Cisco AsyncOS through 9.7.1-066
- 1
- Cisco AsyncOS through 9.9.6-026
- 1
- Cisco Email Security Appliance (ESA) through 9.7.1-000
- 1
- Cisco IPICS 4.8(1) to
- 1
- github.com/appc/docker2aci
- 1
- Iceni Argus
- 1
High 5
- CVE-2016-8331An exploitable remote code execution vulnerability exists in the handling of TIFF images in LibTIFF version 4.0.6.LibTIFF
- CVE-2016-8333An exploitable stack-based buffer overflow vulnerability exists in the ipfSetColourStroke functionality of Iceni Argus version 6.6.04 A specIceni Argus
- CVE-2016-8335An exploitable stack based buffer overflow vulnerability exists in the ipNameAdd functionality of Iceni Argus Version 6.6.04 (Sep 7 2012) NKIceni Argus 6.6.04 (Sep 7 2012) NK - Linux x64 and 6.6.04 (…
- CVE-2016-7919Moodle 3.1.2 allows remote attackers to obtain sensitive information via unspecified vectors, related to a "SQL Injection" issue affecting t
- CVE-2016-8332A buffer overflow in OpenJPEG 2.1.1 causes arbitrary code execution when parsing a crafted image.OPENJPEG
Medium, low and unrated 30
- CVE-2016-4393HPE System Management Homepage before v7.6 allows "remote authenticated" attackers to obtain sensitive information via unspecified vectors, HPE System Management Homepage before
- CVE-2016-4394HPE System Management Homepage before v7.6 allows remote attackers to obtain sensitive information via unspecified vectors, related to an "HHPE System Management Homepage before
- CVE-2016-4395HPE System Management Homepage before v7.6 allows remote attackers to have an unspecified impact via unknown vectors, related to a "Buffer OHPE System Management Homepage before
- CVE-2016-4396HPE System Management Homepage before v7.6 allows remote attackers to have an unspecified impact via unknown vectors, related to a "Buffer OHPE System Management Homepage before
- CVE-2016-8579docker2aci <= 0.12.3 has an infinite loop when handling local images with cyclic dependency chain.github.com/appc/docker2aci
- CVE-2016-8580PHP object injection vulnerabilities exist in multiple widget files in AlienVault OSSIM and USM before 5.3.2.
- CVE-2016-8581A persistent XSS vulnerability exists in the User-Agent header of the login process of AlienVault OSSIM and USM before 5.3.2 that allows an
- CVE-2016-8582A vulnerability exists in gauge.php of AlienVault OSSIM and USM before 5.3.2 that allows an attacker to execute an arbitrary SQL query and r
- CVE-2016-8583Multiple GET parameters in the vulnerability scan scheduler of AlienVault OSSIM and USM before 5.3.2 are vulnerable to reflected XSS.
- CVE-2016-8596Buffer overflow in the csp_can_process_frame in csp_if_can.c in the libcsp library v1.4 and earlier allows hostile components connected to t
- CVE-2016-8597Buffer overflow in the csp_sfp_recv_fp in csp_sfp.c in the libcsp library v1.4 and earlier allows hostile components with network access to
- CVE-2016-8598Buffer overflow in the zmq interface in csp_if_zmqhub.c in the libcsp library v1.4 and earlier allows hostile computers connected via a zmq
- CVE-2016-8600In dotCMS 3.2.1, attacker can load captcha once, fill it with correct value and then this correct value is ok for forms with captcha check l
- CVE-2016-8867Docker Engine 1.12.2 enabled ambient capabilities with misconfigured capability policies.
- CVE-2016-8871In Botan 1.11.29 through 1.11.32, RSA decryption with certain padding options had a detectable timing channel which could given sufficient q
- CVE-2016-8889In Bitcoin Knots v0.11.0.ljr20150711 through v0.13.0.knots20160814 (fixed in v0.13.1.knots20161027), the debug console stores sensitive info
- CVE-2016-9017Artifex Software, Inc.
- CVE-2016-9018Improper handling of a repeating VRAT chunk in qcpfformat.dll allows attackers to cause a Null pointer dereference and crash in RealNetworks
- CVE-2016-9028Unauthorized redirect vulnerability in Citrix NetScaler ADC before 10.1 135.8, 10.5 61.11, 11.0 65.31/65.35F and 11.1 47.14 allows a remote
- CVE-2016-8339A buffer overflow in Redis 3.2.x prior to 3.2.4 causes arbitrary code execution when a crafted command is sent.Redis
- CVE-2016-1423A vulnerability in the display of email messages in the Messages in Quarantine (MIQ) view in Cisco AsyncOS for Cisco Email Security AppliancCisco AsyncOS 8.0.2-069
- CVE-2016-1480A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security Appliances (ECisco AsyncOS through WSA10.0.0-000
- CVE-2016-1481A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenCisco AsyncOS through 9.7.0-125
- CVE-2016-1486A vulnerability in the email attachment scanning functionality of the Advanced Malware Protection (AMP) feature of Cisco AsyncOS Software foCisco AsyncOS through 9.7.1-066
- CVE-2016-6356A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenCisco AsyncOS through 9.7.0-125
- CVE-2016-6357A vulnerability in the configured security policies, including drop email filtering, in Cisco AsyncOS for Cisco Email Security Appliance (ESCisco AsyncOS through 9.9.6-026
- CVE-2016-6358A vulnerability in local FTP to the Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause a partial Cisco Email Security Appliance (ESA) through 9.7.1-000
- CVE-2016-6360A vulnerability in Advanced Malware Protection (AMP) for Cisco Email Security Appliances (ESA) and Web Security Appliances (WSA) could allowCisco AsyncOS through WSA10.0.0-000
- CVE-2016-6372A vulnerability in the email message and content filtering for malformed Multipurpose Internet Mail Extensions (MIME) headers of Cisco AsyncCisco AsyncOS through WSA10.0.0-000
- CVE-2016-6397A vulnerability in the interdevice communications interface of the Cisco IP Interoperability and Collaboration System (IPICS) Universal MediCisco IPICS 4.8(1) to