CVE-2016-9026

CVE-2016-9026 affects Exponent CMS prior to 2.6.0, where improper input validation in fileController.php creates a vulnerability in the CMS. Multiple connected sources confirm the issue exists in Exponent CMS before 2.6.0; the problem is tied to fileController.php input handling. The exploitation...

CVE-2016-9022

Exponent CMS prior to 2.6.0 contains an input validation flaw in usersController.php. The issue, caused by improper input validation, affects Exponent CMS versions before 2.6.0. Public references indicate a high-severity impact with access via network (per CVSS v2) and a critical impact profile (...

CVE-2016-9022

Exponent CMS before 2.6.0 has improper input validation in usersController.php...

CVE-2016-9021

Exponent CMS before 2.6.0 has improper input validation in storeController.php...

CVE-2016-9021

CVE-2016-9021 affects Exponent CMS prior to 2.6.0, with a vulnerability in the input validation of storeController.php. The Red Hat, NVD, OSV, CNVD, and other references corroborate that the issue lies in improper input validation, leading to high-severity impact (CVSSv3.1: CRITICAL; CVSSv2: HIGH...

Microsoft Windows Privilege Escalation (CVE-2016-3225)

A privilege escalation vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect Rational Synergy (CVE-2016-3426)

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Technology Edition, Version 6 Service Refresh 16 Fix Pack 20 that is used by IBM Rational Synergy. These issues were disclosed as part of the IBM Java SDK updates in April 2016. Vulnerability Details CVEID: CVE-2016-3426...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect Rational Synergy

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Technology Edition, Version 6 Service Refresh 16 Fix Pack 30 and earlier releases that is used by IBM Rational Synergy. These issues were disclosed as part of the IBM Java SDK updates in October 2016 and Jan 2017...

Mcafee VirusScan Enterprise Remote Code Execution (CVE-2016-8020)

A remote code execution vulnerability exists in Mcafee VirusScan Enterprise. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Cisco Firepower Management Center Arbitrary File Read (CVE-2016-6435)

A vulnerability exists in Cisco Firepower Management Center. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Oracle Fusion Middleware OiT Component Multiple Vulnerabilities (CVE-2016-3593)

Multiple vulnerabilities exist in Oracle Fusion Middleware Outside in Technology component. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

gd security update

CentOS Errata and Security Advisory CESA-2020:5443 An update for gd is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...

CentOS: Security Advisory for gd (CESA-2020:5443)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

RHEL 7 : python-XStatic-Bootstrap-SCSS (RHSA-2020:5571)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:5571 advisory. python-XStatic-Bootstrap-SCSS is the Bootstrap-SCSS JavaScript library packaged for setuptools / pip. Security Fixes: XSS in the data-target...

Microsoft Windows Privilege Escalation (CVE-2016-0006)

A privilege escalation vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...

Ubuntu: Security Advisory (USN-4672-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Moderate: Red Hat Security Advisory: python-XStatic-Bootstrap-SCSS security update

An update for python-XStatic-Bootstrap-SCSS is now available for Red Hat OpenStack Platform 13 Queens. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...

gd security update

2.0.35-27 - Fix CVE-2016-5766 - Resolves: 1356813 - Upstream patch: https://github.com/libgd/libgd/commit/aba3db8...

Microsoft Windows Information Disclosure (CVE-2016-0175)

An information disclosure vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

Ubuntu 16.04 LTS / 18.04 LTS : unzip vulnerabilities (USN-4672-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4672-1 advisory. Rene Freingruber discovered that unzip incorrectly handled certain specially crafted password protected ZIP archives. If a user or automated...