CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3416 matches found

NVD•added 2016/09/30 12:59 a.m.•36 views

CVE-2016-6651

The UAA /oauth/token endpoint in Pivotal Cloud Foundry PCF before 243; UAA 2.x before 2.7.4.8, 3.x before 3.3.0.6, and 3.4.x before 3.4.5; UAA BOSH before 11.7 and 12.x before 12.6; Elastic Runtime before 1.6.40, 1.7.x before 1.7.21, and 1.8.x before 1.8.2; and Ops Manager 1.7.x before 1.7.13 and...

8.8CVSS8.6AI score0.01748EPSS

SaveExploits0References2

osv_cve•added 2016/09/30 12:59 a.m.•21 views

CVE-2016-6637

Multiple cross-site request forgery CSRF vulnerabilities in Pivotal Cloud Foundry PCF before 242; UAA 2.x before 2.7.4.7, 3.x before 3.3.0.5, and 3.4.x before 3.4.4; UAA BOSH before 11.5 and 12.x before 12.5; Elastic Runtime before 1.6.40, 1.7.x before 1.7.21, and 1.8.x before 1.8.2; and Ops...

9.6CVSS9.6AI score

SaveExploits0References2

NVD•added 2016/09/30 12:59 a.m.•33 views

CVE-2016-6637

9.6CVSS9.6AI score0.00726EPSS

SaveExploits0References2

Prion•added 2016/09/30 12:59 a.m.•30 views

Cross site request forgery (csrf)

6.8CVSS7.8AI score0.00726EPSS

SaveExploits0References2Affected Software5

Prion•added 2016/09/30 12:59 a.m.•30 views

Authorization

The OAuth authorization implementation in Pivotal Cloud Foundry PCF before 242; UAA 2.x before 2.7.4.7, 3.x before 3.3.0.5, and 3.4.x before 3.4.4; UAA BOSH before 11.5 and 12.x before 12.5; Elastic Runtime before 1.6.40, 1.7.x before 1.7.21, and 1.8.x before 1.8.1; and Ops Manager 1.7.x before...

5CVSS7AI score0.01385EPSS

SaveExploits0References2Affected Software5

Prion•added 2016/09/30 12:59 a.m.•36 views

Code injection

6.5CVSS7AI score0.01748EPSS

SaveExploits0References2Affected Software5

NVD•added 2016/09/30 12:59 a.m.•30 views

CVE-2016-6636

5.3CVSS5.2AI score0.01385EPSS

SaveExploits0References2

osv_cve•added 2016/09/30 12:59 a.m.•22 views

CVE-2016-6636

5.3CVSS6.8AI score0.01385EPSS

SaveExploits0References2

CVE•added 2016/09/30 12:00 a.m.•66 views

CVE-2016-6637

CVE-2016-6637 involves multiple CSRF vulnerabilities in Pivotal Cloud Foundry (PCF) and related components. The Cloud Foundry release v241 and earlier, UAA releases v2.0.0–v2.7.4.6 and v3.0.0–v3.6.0, and UAA bosh releases up to v15 are affected. The flaw arises because the profile and authorize a...

9.6CVSS9.5AI score0.00726EPSS

SaveExploits0References2Affected Software5

Positive Technologies•added 2016/09/30 12:00 a.m.•6 views

PT-2016-7012

Name of the Vulnerable Software and Affected Versions Pivotal Cloud Foundry versions prior to 242 UAA versions 2.x prior to 2.7.4.7 UAA versions 3.x prior to 3.3.0.5 UAA versions 3.4.x prior to 3.4.4 UAA BOSH versions prior to 11.5 UAA BOSH versions 12.x prior to 12.5 Elastic Runtime versions 1.6...

9.6CVSS0.00726EPSS

SaveExploits0References11

Rapid7 Vulnerability Database (full)•added 2016/09/30 12:00 a.m.•7 views

CVE-2016-6637: Cross-Site Request Forgery (CSRF)

9.6CVSS8.3AI score0.00726EPSS

SaveExploits0References2

Cvelist•added 2016/09/30 12:00 a.m.•44 views

CVE-2016-6651

8.6AI score0.01748EPSS

SaveExploits0References2

CVE•added 2016/09/30 12:00 a.m.•64 views

CVE-2016-6651

CVE-2016-6651 affects the UAA /oauth/token endpoint in Pivotal Cloud Foundry (PCF), including PCF prior to v243 and UAA releases up to specific versions (UAA 2.x before 2.7.4.8, 3.x before 3.3.0.6, 3.4.x before 3.4.5; UAA BOSH before 11.7 and 12.x before 12.6; Elastic Runtime and Ops Manager acro...

8.8CVSS8.5AI score0.01748EPSS

SaveExploits0References2Affected Software5

Rapid7 Vulnerability Database (full)•added 2016/09/30 12:00 a.m.•12 views

CVE-2016-6651: Undefined Security Weakness

8.8CVSS7.9AI score0.01748EPSS

SaveExploits0References2

Positive Technologies•added 2016/09/30 12:00 a.m.•7 views

PT-2016-7021

Name of the Vulnerable Software and Affected Versions Pivotal Cloud Foundry PCF versions before 243 UAA versions 2.x before 2.7.4.8 UAA versions 3.x before 3.3.0.6 UAA versions 3.4.x before 3.4.5 UAA BOSH versions before 11.7 UAA BOSH versions 12.x before 12.6 Elastic Runtime versions 1.6.x befor...

8.8CVSS0.01748EPSS

SaveExploits0References6

Cvelist•added 2016/09/30 12:00 a.m.•49 views

CVE-2016-6637

9.7AI score0.00726EPSS

SaveExploits0References2

Cvelist•added 2016/09/30 12:00 a.m.•47 views

CVE-2016-6636

5.2AI score0.01385EPSS

SaveExploits0References2

CVE•added 2016/09/30 12:00 a.m.•72 views

CVE-2016-6636

CVE-2016-6636 affects Pivotal Cloud Foundry components and related UAA releases. The vulnerability arises from improper validation of redirect_uri subdomains in the OAuth authorization flow, enabling a remote attacker to obtain implicit access tokens by using a modified subdomain. Affected softwa...

5.3CVSS5.1AI score0.01385EPSS

SaveExploits0References2Affected Software5

Rapid7 Vulnerability Database (full)•added 2016/09/30 12:00 a.m.•9 views

CVE-2016-6636: URL Redirection to Untrusted Site

5.3CVSS6AI score0.01385EPSS

SaveExploits0References2

Cloud Foundry•added 2016/09/29 12:00 a.m.•83 views

CVE-2016-6653 MySQL Audit logs sent to Syslog | Cloud Foundry

CVE-2016-6653 MySQL Audit logs sent to Syslog High Vendor Cloud Foundry Foundation Versions Affected Cloud Foundry MySQL Release versions 271 and 282 Description MariaDB’s auditplugin, incorporated in cf-mysql-release starting with cf-mysql-release v27, allows the Operator to enable audit trails,...

7.5CVSS7.7AI score0.01363EPSS

SaveExploits0

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by