CVE-2016-1189

Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote authenticated users to bypass intended restrictions on reading, creating, or modifying a portlet via unspecified vectors...

CVE-2016-1188

Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote authenticated users to send spoofed e-mail messages via unspecified vectors...

CVE-2016-1189

CVE-2016-1189 affects Cybozu Garoon 3.x and 4.x up to but not including 4.2.1, where remote authenticated users can bypass access restrictions on Portlets (read/create/modify) via unspecified vectors. The connected sources corroborate a portlet access restriction bypass vulnerability in Garoon’s ...

CVE-2016-4822

Corega CG-WLBARGL devices allow remote authenticated users to execute arbitrary commands via unspecified vectors...

PT-2016-6165 · Corega · Corega Cg-Wlbargl

Name of the Vulnerable Software and Affected Versions: Corega CG-WLBARGL devices affected versions not specified Description: The issue allows remote authenticated users to execute arbitrary commands via unspecified vectors. Recommendations: At the moment, there is no information about a newer...

CVE-2016-5723

Huawei FusionInsight HD before V100R002C60SPC200 allows local users to gain root privileges via unspecified vectors...

CVE-2016-5021

The iControl REST service in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.5.x before 11.5.4, 11.6.x before 11.6.1, and 12.x before 12.0.0 HF3; BIG-IP DNS 12.x before 12.0.0 HF3; BIG-IP GTM 11.5.x before 11.5.4 and 11.6.x before 11.6.1; BIG-IQ Cloud and Security 4.0.0...

Directory traversal

Directory traversal vulnerability in the logging implementation in Cybozu Garoon 3.7 through 4.2 allows remote authenticated users to read a log file via unspecified vectors...

CVE-2016-1226

Cross-site scripting XSS vulnerability in Trend Micro Internet Security 8 and 10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-1197

Cross-site scripting XSS vulnerability in Cybozu Garoon 4.x before 4.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-7775...

CVE-2016-1197

Cross-site scripting XSS vulnerability in Cybozu Garoon 4.x before 4.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-7775...

Cross site scripting

Cross-site scripting XSS vulnerability in Trend Micro Internet Security 8 and 10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Code injection

Trend Micro Internet Security 8 and 10 allows remote attackers to read arbitrary files via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Cybozu Garoon 4.0.3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-1197...

CVE-2016-1226

Cross-site scripting XSS vulnerability in Trend Micro Internet Security 8 and 10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-1225

Trend Micro Internet Security 8 and 10 allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2016-4816

BUFFALO WZR-600DHP3 devices with firmware 2.16 and earlier and WZR-S600DHP devices allow remote attackers to discover credentials and other sensitive information via unspecified vectors...

Server side request forgery (ssrf)

HPE Service Manager Software 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, and 9.41 allows remote authenticated users to obtain sensitive information, modify data, and conduct server-side request forgery SSRF attacks via unspecified vectors, related to the Server, Web Client, Windows Client, and...

Code injection

I-O DATA DEVICE ETX-R devices allow remote attackers to cause a denial of service web-server crash via unspecified vectors...

Directory traversal

Directory traversal vulnerability in kml2jsonp.php in Geospatial Information Authority of Japan aka GSI OldGSIMaps before January 2015 on Windows allows remote attackers to read arbitrary files via unspecified vectors...