Vulnerability index

Browse CVEs

5,953 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Improper Access ControlCWE-284 × clear
Kenexa Lms HIGH 8.8
CVE-2016-8931

IBM Kenexa LMS on Cloud could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code on the vuln…

Patch available
Fix from $1,950 2017-02-01
Kenexa Lms HIGH 8.8
CVE-2016-8932

IBM Kenexa LMS on Cloud could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code on the vuln…

Patch available
Fix from $1,950 2017-02-01
Urbancode Deploy CRITICAL 10.0
CVE-2016-8938

IBM UrbanCode Deploy could allow a user to execute code using a specially crafted file upload that would replace code on the server. This code could …

Patch available
Fix from $2,300 2017-02-01
Security Key Lifecycle Manager HIGH 8.2
CVE-2016-6105

IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 do not perform an authentication check for a critical resource or functionality allowing anonymous users…

Patch available
Fix from $1,950 2017-02-01
Bigfix Platform MEDIUM 6.5
CVE-2016-6085

IBM BigFix Platform could allow an attacker on the local network to crash the BES and relay servers.

Patch available
Fix from $1,600 2017-02-01
Security Privileged Identity Manager CRITICAL 9.8
CVE-2016-5964

IBM Security Privileged Identity Manager Virtual Appliance version 2.0.2 uses an inadequate account lockout setting that could allow a remote attacke…

Patch available
Fix from $2,300 2017-02-01
Security Privileged Identity Manager MEDIUM 6.3
CVE-2016-5990

IBM Security Privileged Identity Manager Virtual Appliance allows an authenticated user to upload malicious files that would be automatically execute…

Patch available
Fix from $1,600 2017-02-01
Merge System CRITICAL 9.8
CVE-2016-9412

MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 allow attackers to have unspecified impact via vectors related to low admi…

Fix: after 1.8.6
Fix from $2,300 2017-01-31
Merge System MEDIUM 6.5
CVE-2016-9413

The Admin control panel in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 allows remote attackers to conduct clickjacking…

Fix: after 1.8.6
Fix from $1,600 2017-01-31
Merge System HIGH 7.5
CVE-2016-9415

MyBB (aka MyBulletinBoard) before 1.8.8 on Windows and MyBB Merge System before 1.8.8 on Windows allow remote attackers to overwrite arbitrary CSS fi…

Fix: after 1.8.7
Fix from $1,950 2017-01-31
Merge System HIGH 8.3
CVE-2015-8973

xmlhttp.php in MyBB (aka MyBulletinBoard) before 1.6.18 and 1.8.x before 1.8.6 and MyBB Merge System before 1.8.6 allows remote attackers to bypass i…

Fix: after 1.8.5
Fix from $1,950 2017-01-31
Onionshare MEDIUM 5.5
CVE-2016-5026

hs.py in OnionShare before 0.9.1 allows local users to modify the hiddenservice by pre-creating the /tmp/onionshare directory.

Fix: after 0.9.0
Fix from $1,600 2017-01-30
Ntp MEDIUM 5.3
CVE-2015-8139EPSS 6%

ntpq in NTP before 4.2.8p7 allows remote attackers to obtain origin timestamps and then impersonate peers via unspecified vectors.

Fix: after 4.2.8
Fix from $1,600 2017-01-30
Flexcube Universal Banking MEDIUM 5.4
CVE-2016-8304

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions t…

Patch available
Fix from $1,600 2017-01-27
Flexcube Universal Banking MEDIUM 5.3
CVE-2016-8307

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions t…

Patch available
Fix from $1,600 2017-01-27
Flexcube Universal Banking MEDIUM 6.5
CVE-2016-8311

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions t…

Patch available
Fix from $1,600 2017-01-27
Flexcube Private Banking HIGH 8.2
CVE-2016-8312

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / Instrument Search).…

Patch available
Fix from $1,950 2017-01-27
Flexcube Investor Servicing HIGH 8.1
CVE-2016-8315

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure Code). Supp…

Patch available
Fix from $1,950 2017-01-27
Flexcube Investor Servicing MEDIUM 5.4
CVE-2016-8316

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Core). Supported versions …

Patch available
Fix from $1,600 2017-01-27
Flexcube Investor Servicing MEDIUM 5.3
CVE-2016-8317

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Unit Trust). Supported ver…

Patch available
Fix from $1,600 2017-01-27
Flexcube Investor Servicing MEDIUM 6.1
CVE-2016-8319

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Core). Supported versions …

Patch available
Fix from $1,600 2017-01-27
Flexcube Enterprise Limits And Collateral Management MEDIUM 6.1
CVE-2016-8320

Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: C…

Patch available
Fix from $1,600 2017-01-27
Flexcube Core Banking MEDIUM 5.4
CVE-2016-8323

Vulnerability in the Oracle FLEXCUBE Core Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that a…

Patch available
Fix from $1,600 2017-01-27
Flexcube Core Banking MEDIUM 5.3
CVE-2016-8324

Vulnerability in the Oracle FLEXCUBE Core Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that a…

Patch available
Fix from $1,600 2017-01-27
One To One Fulfillment CRITICAL 9.1
CVE-2016-8325

Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Internal Operations). Supported versions that …

Patch available
Fix from $2,300 2017-01-27
Flexcube Private Banking MEDIUM 6.1
CVE-2016-8282

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / Instrument Search).…

Patch available
Fix from $1,600 2017-01-27
Flexcube Universal Banking HIGH 8.1
CVE-2016-8297

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions t…

Patch available
Fix from $1,950 2017-01-27
Flexcube Private Banking HIGH 8.1
CVE-2016-8298

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / Instrument Search).…

Patch available
Fix from $1,950 2017-01-27
Flexcube Universal Banking MEDIUM 6.3
CVE-2016-8299

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions t…

Patch available
Fix from $1,600 2017-01-27
Flexcube Private Banking MEDIUM 5.3
CVE-2016-8300

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / Instrument Search).…

Patch available
Fix from $1,600 2017-01-27