Browse CVEs

HIGH 7.5 CVE-2016-8346 An issue was discovered in Moxa EDR-810 Industrial Secure Router. By accessing a specific uniform resource locator (URL) on the web server, a malicio… Edr 810 Firmware after 3.12 Fix from $1,9502017-02-13 MEDIUM 5.5 CVE-2017-5549 The klsi_105_get_line_state function in drivers/usb/serial/kl5kusb105.c in the Linux kernel before 4.9.5 places uninitialized heap-memory contents in… Linux Kernel after 4.9.4 Fix from $1,6002017-02-06 MEDIUM 6.2 CVE-2017-5137 An issue was discovered on SendQuick Entera and Avera devices before 2HF16. An attacker could request and download the SMS logs from an unauthenticat… Entera Sms Gateway Firmware Mitigation only Fix from $1,6002017-02-05 HIGH 7.5 CVE-2015-8977 MyBB (aka MyBulletinBoard) before 1.6.18 and 1.8.x before 1.8.6 and MyBB Merge System before 1.8.6 allow remote attackers to obtain the installation … Merge System after 1.8.5 Fix from $1,9502017-01-31 HIGH 7.5 CVE-2016-9882 An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v250 and CAPI-release versions prior to v1.12.0. Cloud Foundry logs … Capi Release after 249 Fix from $1,9502017-01-13 MEDIUM 5.5 CVE-2016-4443 Red Hat Enterprise Virtualization (RHEV) Manager 3.6 allows local users to obtain encryption keys, certificates, and other sensitive information by r… Enterprise Virtualization Patch available Fix from $1,6002016-12-14 MEDIUM 5.5 CVE-2016-5967 The installation component in IBM Rational Asset Analyzer (RAA) 6.1.0 before FP10 allows local users to discover the WAS Admin password by reading IM… Rational Asset Analyzer Mitigation only Fix from $1,6002016-11-25 HIGH 7.5 CVE-2016-0879 Moxa Secure Router EDR-G903 devices before 3.4.12 do not delete copies of configuration and log files after completing the import function, which all… Edr G903 Firmware 3.4.12+ Fix from $1,9502016-05-31 HIGH 7.5 CVE-2016-0875 Moxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to read configuration and log files via a crafted URL. Edr G903 Firmware 3.4.12+ Fix from $1,9502016-05-31 HIGH 7.5 CVE-2013-4733 The web server on the Digital Alert Systems DASDEC EAS device before 2.0-2 and the Monroe Electronics R189 One-Net EAS device before 2.0-2 allows rem… Dasdec Eas after 2.0-1 Fix from $1,9502013-06-30 MEDIUM 6.5 CVE-2012-0814 The auth_parse_options function in auth-options.c in sshd in OpenSSH before 5.7 provides debug messages containing authorized_keys command options, w… Openssh after 5.6 Fix from $1,6002012-01-27 MEDIUM 5.0 CVE-2001-1556 The log files in Apache web server contain information directly supplied by clients and does not filter or quote control characters, which could allo… HTTP Server 1.3.31 / 2.0.49+ Fix from $1,6002001-12-31