Default credentials

Symantec Endpoint Protection Manager SEPM 12.1 before RU6 MP5 allows remote authenticated users to discover credentials via a brute-force attack...

Directory traversal

Directory traversal vulnerability in Symantec Endpoint Protection Manager SEPM 12.1 before RU6 MP5 allows remote authenticated users to read arbitrary files in the web-root directory tree via unspecified vectors...

cfme: Privilege escalation causing arbitrary code execution

ManageIQ in CloudForms before 4.1 allows remote authenticated users to execute arbitrary code...

CVE-2016-0298

Directory traversal vulnerability in IBM Security Guardium Database Activity Monitor 10 before 10.0p100 allows remote authenticated users to read arbitrary files via a crafted URL...

Directory traversal

Directory traversal vulnerability in IBM Security Guardium Database Activity Monitor 10 before 10.0p100 allows remote authenticated users to read arbitrary files via a crafted URL...

CVE-2016-0298

Directory traversal vulnerability in IBM Security Guardium Database Activity Monitor 10 before 10.0p100 allows remote authenticated users to read arbitrary files via a crafted URL...

CVE-2016-0233

SQL injection vulnerability in IBM Marketing Platform 8.5.x, 8.6.x, and 9.x before 9.1.2.2 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2016-1189

Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote authenticated users to bypass intended restrictions on reading, creating, or modifying a portlet via unspecified vectors...

Code injection

Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote authenticated users to send spoofed e-mail messages via unspecified vectors...

CVE-2016-1189

CVE-2016-1189 affects Cybozu Garoon 3.x and 4.x up to but not including 4.2.1, where remote authenticated users can bypass access restrictions on Portlets (read/create/modify) via unspecified vectors. The connected sources corroborate a portlet access restriction bypass vulnerability in Garoon’s ...

CVE-2016-1188

CVE-2016-1188 affects Cybozu Garoon 3.x to 4.2.x before 4.2.1. It is described in the connected JVN as an operation restriction bypass in the mail function, enabling remote authenticated users to send spoofed e‑mail messages via unspecified vectors. Affected versions include Cybozu Garoon 3.0–4.2...

Sql injection

SQL injection vulnerability in the SQL database in Cisco Prime Collaboration Deployment before 11.5.1 allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCuy92549...

CVE-2016-0914

EMC Documentum WebTop and related components are affected by CVE-2016-0914. The vulnerability allows remote authenticated users to bypass intended access restrictions and execute arbitrary IAPI/IDQL commands via the IAPI/IDQL interface. Affected products/versions and patches (as described): WebTo...

CVE-2016-1428

CVE-2016-1428 is a Cisco IOS XE SNMP subsystem vulnerability described as a double‑free error in the SNMP processing path. According to sources, it affects Cisco IOS XE releases 3.15S, 3.16S, and 3.17S and can be exploited by an authenticated, remote attacker via crafted SNMP read requests to tri...

PT-2016-6217 · Red Hat +3 · Ceph +3

Name of the Vulnerable Software and Affected Versions: Ceph affected versions not specified Description: The issue allows remote authenticated users to cause a denial of service, resulting in a segmentation fault and ceph monitor crash. This can be achieved by sending an empty or crafted prefix t...

CVE-2016-4518

OSIsoft PI AF Server before 2016 2.8.0 allows remote authenticated users to cause a denial of service service outage via a message...

CVE-2016-4518

OSIsoft PI AF Server before 2016 2.8.0 allows remote authenticated users to cause a denial of service service outage via a message...

CVE-2016-4514

Moxa PT-7728 devices with software 3.4 build 15081113 allow remote authenticated users to change the configuration via vectors involving a local proxy...

CVE-2016-1192

Directory traversal vulnerability in the logging implementation in Cybozu Garoon 3.7 through 4.2 allows remote authenticated users to read a log file via unspecified vectors...

CVE-2016-0912

EMC Data Domain OS 5.4 through 5.7 before 5.7.2.0 allows remote authenticated users to bypass intended password-change restrictions by leveraging access to 1 a different account with the same role as a target account or 2 an account's session at an unattended workstation...