CVE-2016-8591

logquery.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code as the root user via shell metacharacters in the cacheid parameter...

CVE-2016-3691

Routes in Kallithea before 0.3.2 allows remote attackers to bypass the CSRF protection by using the GET HTTP request method...

CVE-2016-8923

IBM Curam Social Program Management 5.2, 6.0, and 7.0 contains a vulnerability that would allow an authorized user to obtain sensitive information from the profile of a higher privileged user that they should not have access to. IBM X-Force ID: 118536...

CVE-2016-8721

An exploitable OS Command Injection vulnerability exists in the web application 'ping' functionality of Moxa AWK-3131A Wireless Access Points running firmware 1.1. Specially crafted web form input can cause an OS Command Injection resulting in complete compromise of the vulnerable device. An...

CVE-2016-10229

creationtimestamp| type| source ---|---|--- 2017-04-15 17:56:42+00:00| seen| https://t.me/webamoozir/1595 2026-07-26 07:02:05+00:00| seen| https://t.me/KaitNews/4023 2026-07-27 00:01:46+00:00| seen| https://t.me/KaitNews/4023 2026-08-05 15:00:07+00:00| seen| https://t.me/KaitNews/4023 2026-08-06...

BELL-CVE-2016-8602 CVE-2016-8602 does not affect BellSoft software

Bulletin has no description...

CVE-2016-8927

IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

UBUNTU-CVE-2016-10123

Firejail allows --chroot when seccomp is not supported, which might allow local users to gain privileges...

DEBIAN-CVE-2016-9957

Stack-based buffer overflow in game-music-emu before 0.6.1...

CVE-2016-5642

Opmantek NMIS before 8.5.12G has XSS via SNMP...

DEBIAN-CVE-2016-1517

OpenCV 3.0.0 allows remote attackers to cause a denial of service segfault via vectors involving corrupt chunks...

BELL-CVE-2016-10218 CVE-2016-10218 does not affect BellSoft software

Bulletin has no description...

CVE-2016-8274

Huawei PC client software HiSuite 4.0.5.300OVE has a dynamic link library DLL hijack vulnerability; an attacker can make the system load malicious DLL files to execute arbitrary code...

CVE-2016-8271

Huawei eSpace IAD V300R002C01SPC100 and earlier versions have an information leak vulnerability; an attacker can check and download the fault information by accessing a special URL...

CVE-2016-6209

Cross-site scripting XSS vulnerability in Nagios...

BELL-CVE-2016-9243 CVE-2016-9243 does not affect BellSoft software

Bulletin has no description...

CVE-2016-7474

In some cases the MCPD binary cache in F5 BIG-IP devices may allow a user with Advanced Shell access, or privileges to generate a qkview, to temporarily obtain normally unrecoverable information...

UBUNTU-CVE-2016-3179

The processRequest function in minissdpd.c in MiniSSDPd 1.2.20130907-3 allows local users to cause a denial of service invalid free and daemon crash via vectors related to error handling...

UBUNTU-CVE-2016-7797

Pacemaker before 1.1.15, when using pacemaker remote, might allow remote attackers to cause a denial of service node disconnection via an unauthenticated connection...

DEBIAN-CVE-2016-10050

Heap-based buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.9.4-8 allows remote attackers to cause a denial of service application crash or have other unspecified impact via a crafted RLE file...