CVEs published November 3, 2016
22 CVEs were published on November 3, 2016: 0 critical, 0 high.
- Published
- 22
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 22
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- git-fastclone ruby gem All versions before · git-fastclone
- 2
- Cisco Hosted Collaboration Mediation Fulfillment before
- 1
- Cisco Identity Services Engine
- 1
- Cisco IOS XE 3.17 and
- 1
- Cisco IP Interoperability and Collaboration System
- 1
- Cisco IP Interoperability and Collaboration System before
- 1
- Cisco Meeting Server before 2.0.1, Acano Server before 1.9.…
- 1
- Cisco Meeting Server before 2.0.3 and Acano Server before
- 1
- Cisco Prime Collaboration Provisioning
- 1
- Cisco Prime Home before
- 1
Medium, low and unrated 22
- CVE-2016-6429A vulnerability in the web framework code of the Cisco IP Interoperability and Collaboration System (IPICS) could allow an unauthenticated, Cisco IP Interoperability and Collaboration System
- CVE-2016-6430A vulnerability in the command-line interface of the Cisco IP Interoperability and Collaboration System (IPICS) could allow an authenticatedCisco IP Interoperability and Collaboration System before
- CVE-2016-6441A vulnerability in the Transaction Language 1 (TL1) code of Cisco ASR 900 Series routers could allow an unauthenticated, remote attacker to Cisco IOS XE 3.17 and
- CVE-2016-6447A vulnerability in Cisco Meeting Server and Meeting App could allow an unauthenticated, remote attacker to execute arbitrary code on an affeCisco Meeting Server before 2.0.1, Acano Server before 1.9.…
- CVE-2016-6448A vulnerability in the Session Description Protocol (SDP) parser of Cisco Meeting Server could allow an unauthenticated, remote attacker to Cisco Meeting Server before 2.0.3 and Acano Server before
- CVE-2016-6451Multiple vulnerabilities in the web framework code of the Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attaCisco Prime Collaboration Provisioning
- CVE-2016-6452A vulnerability in the web-based graphical user interface (GUI) of Cisco Prime Home could allow an unauthenticated, remote attacker to bypasCisco Prime Home before
- CVE-2016-6453A vulnerability in the web framework code of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute aCisco Identity Services Engine
- CVE-2016-6454A cross-site request forgery (CSRF) vulnerability in the web interface of the Cisco Hosted Collaboration Mediation Fulfillment application cCisco Hosted Collaboration Mediation Fulfillment before
- CVE-2016-6455A vulnerability in the Slowpath of StarOS for Cisco ASR 5500 Series routers with Data Processing Card 2 (DPC2) could allow an unauthenticateCisco StarOS 18.x through 21.x
- CVE-2015-8968git-fastclone before 1.0.1 permits arbitrary shell command execution from .gitmodules.git-fastclone ruby gem All versions before · git-fastclone
- CVE-2015-8969git-fastclone before 1.0.5 passes user modifiable strings directly to a shell command.git-fastclone ruby gem All versions before · git-fastclone
- CVE-2016-4025Avast Internet Security v11.x.x, Pro Antivirus v11.x.x, Premier v11.x.x, Free Antivirus v11.x.x, Business Security v11.x.x, Endpoint Protect
- CVE-2016-7095Exponent CMS before 2.3.9 is vulnerable to an attacker uploading a malicious script file using redirection to place the script in an unprote
- CVE-2016-7160A vulnerability on Samsung Mobile M(6.0) devices exists because external access to SystemUI activities is not properly restricted, leading t
- CVE-2016-7402SAP ASE 16.0 SP02 PL03 and prior versions allow attackers who own SourceDB and TargetDB databases to elevate privileges to sa (system admini
- CVE-2016-7452The Pixidou Image Editor in Exponent CMS prior to v2.3.9 patch 2 could be used to upload a malicious file to any folder on the site via a cp
- CVE-2016-7453The Pixidou Image Editor in Exponent CMS prior to v2.3.9 patch 2 could be used to perform an fid SQL Injection.
- CVE-2016-9086GitLab versions 8.9.x and above contain a critical security flaw in the "import/export project" feature of GitLab.
- CVE-2016-9134Exponent CMS 2.3.9 suffers from a SQL injection vulnerability in "/expPaginator.php" affecting the order parameter.
- CVE-2016-9135Exponent CMS 2.3.9 suffers from a SQL injection vulnerability in "/framework/modules/help/controllers/helpController.php" affecting the vers
- CVE-2016-9136Artifex Software, Inc.