Browse CVEs

HIGH 8.8 CVE-2016-8931 IBM Kenexa LMS on Cloud could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code on the vuln… Kenexa Lms Patch available Fix from $1,9502017-02-01 HIGH 8.8 CVE-2016-8932 IBM Kenexa LMS on Cloud could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code on the vuln… Kenexa Lms Patch available Fix from $1,9502017-02-01 CRITICAL 10.0 CVE-2016-8938 IBM UrbanCode Deploy could allow a user to execute code using a specially crafted file upload that would replace code on the server. This code could … Urbancode Deploy Patch available Fix from $2,3002017-02-01 HIGH 8.2 CVE-2016-6105 IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 do not perform an authentication check for a critical resource or functionality allowing anonymous users… Security Key Lifecycle Manager Patch available Fix from $1,9502017-02-01 MEDIUM 6.5 CVE-2016-6085 IBM BigFix Platform could allow an attacker on the local network to crash the BES and relay servers. Bigfix Platform Patch available Fix from $1,6002017-02-01 CRITICAL 9.8 CVE-2016-5964 IBM Security Privileged Identity Manager Virtual Appliance version 2.0.2 uses an inadequate account lockout setting that could allow a remote attacke… Security Privileged Identity Manager Patch available Fix from $2,3002017-02-01 MEDIUM 6.3 CVE-2016-5990 IBM Security Privileged Identity Manager Virtual Appliance allows an authenticated user to upload malicious files that would be automatically execute… Security Privileged Identity Manager Patch available Fix from $1,6002017-02-01 CRITICAL 9.8 CVE-2016-9412 MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 allow attackers to have unspecified impact via vectors related to low admi… Merge System after 1.8.6 Fix from $2,3002017-01-31 MEDIUM 6.5 CVE-2016-9413 The Admin control panel in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 allows remote attackers to conduct clickjacking… Merge System after 1.8.6 Fix from $1,6002017-01-31 HIGH 7.5 CVE-2016-9415 MyBB (aka MyBulletinBoard) before 1.8.8 on Windows and MyBB Merge System before 1.8.8 on Windows allow remote attackers to overwrite arbitrary CSS fi… Merge System after 1.8.7 Fix from $1,9502017-01-31 HIGH 8.3 CVE-2015-8973 xmlhttp.php in MyBB (aka MyBulletinBoard) before 1.6.18 and 1.8.x before 1.8.6 and MyBB Merge System before 1.8.6 allows remote attackers to bypass i… Merge System after 1.8.5 Fix from $1,9502017-01-31 MEDIUM 5.5 CVE-2016-5026 hs.py in OnionShare before 0.9.1 allows local users to modify the hiddenservice by pre-creating the /tmp/onionshare directory. Onionshare after 0.9.0 Fix from $1,6002017-01-30 MEDIUM 5.3 CVE-2015-8139EPSS 6% ntpq in NTP before 4.2.8p7 allows remote attackers to obtain origin timestamps and then impersonate peers via unspecified vectors. Ntp after 4.2.8 Fix from $1,6002017-01-30 MEDIUM 5.4 CVE-2016-8304 Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions t… Flexcube Universal Banking Patch available Fix from $1,6002017-01-27 MEDIUM 5.3 CVE-2016-8307 Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions t… Flexcube Universal Banking Patch available Fix from $1,6002017-01-27 MEDIUM 6.5 CVE-2016-8311 Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions t… Flexcube Universal Banking Patch available Fix from $1,6002017-01-27 HIGH 8.2 CVE-2016-8312 Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / Instrument Search).… Flexcube Private Banking Patch available Fix from $1,9502017-01-27 HIGH 8.1 CVE-2016-8315 Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure Code). Supp… Flexcube Investor Servicing Patch available Fix from $1,9502017-01-27 MEDIUM 5.4 CVE-2016-8316 Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Core). Supported versions … Flexcube Investor Servicing Patch available Fix from $1,6002017-01-27 MEDIUM 5.3 CVE-2016-8317 Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Unit Trust). Supported ver… Flexcube Investor Servicing Patch available Fix from $1,6002017-01-27 MEDIUM 6.1 CVE-2016-8319 Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Core). Supported versions … Flexcube Investor Servicing Patch available Fix from $1,6002017-01-27 MEDIUM 6.1 CVE-2016-8320 Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: C… Flexcube Enterprise Limits And Collateral Management Patch available Fix from $1,6002017-01-27 MEDIUM 5.4 CVE-2016-8323 Vulnerability in the Oracle FLEXCUBE Core Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that a… Flexcube Core Banking Patch available Fix from $1,6002017-01-27 MEDIUM 5.3 CVE-2016-8324 Vulnerability in the Oracle FLEXCUBE Core Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that a… Flexcube Core Banking Patch available Fix from $1,6002017-01-27 CRITICAL 9.1 CVE-2016-8325 Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Internal Operations). Supported versions that … One To One Fulfillment Patch available Fix from $2,3002017-01-27 MEDIUM 6.1 CVE-2016-8282 Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / Instrument Search).… Flexcube Private Banking Patch available Fix from $1,6002017-01-27 HIGH 8.1 CVE-2016-8297 Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions t… Flexcube Universal Banking Patch available Fix from $1,9502017-01-27 HIGH 8.1 CVE-2016-8298 Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / Instrument Search).… Flexcube Private Banking Patch available Fix from $1,9502017-01-27 MEDIUM 6.3 CVE-2016-8299 Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions t… Flexcube Universal Banking Patch available Fix from $1,6002017-01-27 MEDIUM 5.3 CVE-2016-8300 Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / Instrument Search).… Flexcube Private Banking Patch available Fix from $1,6002017-01-27