Browse CVEs

MEDIUM 5.3 CVE-2015-1857 The odl-mdsal-apidocs feature in OpenDaylight Helium allow remote attackers to obtain sensitive information by leveraging missing AAA restrictions. Opendaylight 0.2.4+ Fix from $1,6002018-04-27 MEDIUM 5.6 CVE-2018-10472 An issue was discovered in Xen through 4.10.x allowing x86 HVM guest OS users (in certain configurations) to read arbitrary dom0 files via QMP live i… Debian Linux after 4.10.1 Fix from $1,6002018-04-27 MEDIUM 6.5 CVE-2016-9590 puppet-swift before versions 8.2.1, 9.4.4 is vulnerable to an information-disclosure in Red Hat OpenStack Platform director's installation of Object … Openstack 8.2.1 / 9.4.4+ Fix from $1,6002018-04-26 HIGH 7.2 CVE-2018-1074 ovirt-engine API and administration web portal before versions 4.2.2.5, 4.1.11.2 is vulnerable to an exposure of Power Management credentials, includ… Enterprise Virtualization after 4.1.11.1 Fix from $1,9502018-04-26 HIGH 7.5 CVE-2017-9284 IDM 4.6 Identity Applications prior to 4.6.2.1 may expose sensitive information. Identity Manager 4.6.2.1+ Fix from $1,9502018-04-26 MEDIUM 6.5 CVE-2014-0882 Integrated Management Module II (IMM2) on IBM Flex System, NeXtScale, System x3xxx, and System x iDataPlex systems might allow remote authenticated u… Integrated Management Module Firmware Mitigation only Fix from $1,6002018-04-25 MEDIUM 6.1 CVE-2018-1059 The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contiguous when performing Guest Phy… Ubuntu Linux Mitigation only Fix from $1,6002018-04-24 HIGH 7.5 CVE-2018-8880EPSS 14% Lutron Quantum BACnet Integration 2.0 (firmware 3.2.243) doesn't check for correct user authentication before showing the /deviceIP information, whic… Quantum Bacnet Integration Firmware No fix yet Fix from $1,9502018-04-23 MEDIUM 5.3 CVE-2014-0912 IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote attackers to obtain sensitive product information via vect… Sterling B2b Integrator Patch available Fix from $1,6002018-04-20 MEDIUM 6.5 CVE-2014-4782 IBM InfoSphere BigInsights 2.1.2 allows remote authenticated users to discover SMTP server credentials via vectors related to the Alert management se… Infosphere Biginsights Patch available Fix from $1,6002018-04-20 MEDIUM 5.9 CVE-2014-6108 IBM Tivoli Identity Manager 5.1.x before 5.1.0.15-ISS-TIM-IF0057 and Security Identity Manager 6.0.x before 6.0.0.4-ISS-SIM-IF0001 and 7.0.x before 7… Security Identity Manager Patch available Fix from $1,6002018-04-20 MEDIUM 5.3 CVE-2014-6109 IBM Tivoli Identity Manager 5.1.x before 5.1.0.15-ISS-TIM-IF0057 and Security Identity Manager 6.0.x before 6.0.0.4-ISS-SIM-IF0001 and 7.0.x before 7… Security Identity Manager Patch available Fix from $1,6002018-04-20 MEDIUM 5.9 CVE-2014-6112 IBM Tivoli Identity Manager 5.1.x before 5.1.0.15-ISS-TIM-IF0057 and Security Identity Manager 6.0.x before 6.0.0.4-ISS-SIM-IF0001 and 7.0.x before 7… Security Identity Manager Patch available Fix from $1,6002018-04-20 MEDIUM 5.3 CVE-2018-10245 A Full Path Disclosure vulnerability in AWStats through 7.6 allows remote attackers to know where the config file is allocated, obtaining the full pa… Awstats after 7.6 Fix from $1,6002018-04-20 MEDIUM 6.5 CVE-2018-0267 A vulnerability in the web framework of Cisco Unified Communications Manager could allow an authenticated, local attacker to view sensitive data that… Unified Communications Manager Mitigation only Fix from $1,6002018-04-19 HIGH 7.5 CVE-2017-3776 Lenovo Help Android mobile app versions earlier than 6.1.2.0327 allowed information to be transmitted over an HTTP channel, permitting others observi… Lenovo Help 6.1.2.0327+ Fix from $1,9502018-04-19 MEDIUM 5.3 CVE-2018-10219 baijiacms V3 has physical path leakage via an index.php?mod=mobile&name=member&do=index request. Baijiacms Mitigation only Fix from $1,6002018-04-19 MEDIUM 5.3 CVE-2018-7244 An information disclosure vulnerability exists In Schneider Electric's 66074 MGE Network Management Card Transverse installed in MGE UPS and MGE STS.… 66074 Mge Network Management Card Transverse Mitigation only Fix from $1,6002018-04-18 HIGH 7.5 CVE-2016-8220 Pivotal Gemfire for PCF, versions 1.6.x prior to 1.6.5.0 and 1.7.x prior to 1.7.1.0, contain an information disclosure vulnerability. The application… Gemfire 1.6.5.0 / 1.7.1.0+ Fix from $1,9502018-04-18 HIGH 8.0 CVE-2018-1240 Dell EMC ViPR Controller, versions after 3.0.0.38, contain an information exposure vulnerability in the VRRP. VRRP defaults to an insecure configurat… Vipr Controller 3.6.1.4+ Fix from $1,9502018-04-18 HIGH 7.5 CVE-2016-10437 In Android before 2018-04-05 or earlier security patch level on Qualcomm Small Cell SoC, Snapdragon Mobile, and Snapdragon Wear FSM9055, MDM9206, MDM… Mdm9206 Firmware Mitigation only Fix from $1,9502018-04-18 HIGH 7.5 CVE-2016-10438 In Android before 2018-04-05 or earlier security patch level on Qualcomm Small Cell SoC, Snapdragon Mobile, and Snapdragon Wear FSM9055, IPQ4019, IPQ… Mdm9206 Firmware Mitigation only Fix from $1,9502018-04-18 HIGH 7.5 CVE-2016-10423 In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 425, SD 430, SD 450, SD 625, … Sd 425 Firmware Mitigation only Fix from $1,9502018-04-18 HIGH 7.5 CVE-2016-10428 In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 425, SD 430, SD 450, SD 625, … Sd 425 Firmware Mitigation only Fix from $1,9502018-04-18 CRITICAL 9.8 CVE-2016-10430 In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 425, SD 430, SD 450, SD 625, … Sd 425 Firmware Mitigation only Fix from $2,3002018-04-18 HIGH 7.5 CVE-2016-10406 In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9650, SD 210/SD 212/SD 205, SD 410/12, SD 430, SD 450, … Mdm9650 Firmware Mitigation only Fix from $1,9502018-04-18 HIGH 7.5 CVE-2015-9189 In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9615, MD… Mdm9206 Firmware Mitigation only Fix from $1,9502018-04-18 HIGH 7.5 CVE-2015-9194 In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 210/SD 212/SD 205, SD 400, SD 425, SD 427, SD 430, SD 4… Sd 427 Firmware Mitigation only Fix from $1,9502018-04-18 HIGH 7.5 CVE-2015-9176 In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM96… Mdm9206 Firmware Mitigation only Fix from $1,9502018-04-18 HIGH 7.5 CVE-2015-9163 In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM96… Mdm9206 Firmware Mitigation only Fix from $1,9502018-04-18