Latest CVE Feed
-
5.8
MEDIUMCVE-2017-3814
A vulnerability in Cisco Firepower System Software could allow an unauthenticated, remote attacker to maliciously bypass the appliance's ability to block certain web content, aka a URL Bypass. More Information: CSCvb93980. Known Affected Releases: 5.3.0 5... Read more
- Published: Feb. 03, 2017
- Modified: Apr. 20, 2025
-
7.1
HIGHCVE-2017-3812
A vulnerability in the implementation of Common Industrial Protocol (CIP) functionality in Cisco Industrial Ethernet 2000 Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition due to a system memory l... Read more
Affected Products : industrial_ethernet_2000_series_firmware industrial_ethernet_2000_series_firmware industrial_ethernet_2000_16ptc-g-e_switch industrial_ethernet_2000_16ptc-g-l_switch industrial_ethernet_2000_16ptc-g-nx_switch industrial_ethernet_2000_16t67-b_switch industrial_ethernet_2000_16t67p-g-e_switch industrial_ethernet_2000_16tc-g-e_switch industrial_ethernet_2000_16tc-g-l_switch industrial_ethernet_2000_16tc-g-n_switch +21 more products- Published: Feb. 03, 2017
- Modified: Apr. 20, 2025
-
5.4
MEDIUMCVE-2017-3810
A vulnerability in the web framework of Cisco Prime Service Catalog could allow an authenticated, remote attacker to conduct a web URL redirect attack against a user who is logged in to an affected system. More Information: CSCvb21745. Known Affected Rele... Read more
Affected Products : prime_service_catalog- Published: Feb. 03, 2017
- Modified: Apr. 20, 2025
-
5.8
MEDIUMCVE-2017-3809
A vulnerability in the Policy deployment module of the Cisco Firepower Management Center (FMC) could allow an unauthenticated, remote attacker to prevent deployment of a complete and accurate rule base. More Information: CSCvb95281. Known Affected Release... Read more
- Published: Feb. 03, 2017
- Modified: Apr. 20, 2025
-
5.3
MEDIUMCVE-2017-3806
A vulnerability in CLI command processing in the Cisco Firepower 4100 Series Next-Generation Firewall and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to inject arbitrary shell commands that are executed by the devi... Read more
- Published: Feb. 03, 2017
- Modified: Apr. 20, 2025
-
10.0
HIGHCVE-2017-2768
EMC Network Configuration Manager (NCM) 9.3.x, EMC Network Configuration Manager (NCM) 9.4.0.x, EMC Network Configuration Manager (NCM) 9.4.1.x, EMC Network Configuration Manager (NCM) 9.4.2.x contains an Improper Authentication vulnerability that could p... Read more
Affected Products : smarts_network_configuration_manager- Published: Feb. 03, 2017
- Modified: Apr. 20, 2025
-
10.0
HIGHCVE-2017-2767
EMC Network Configuration Manager (NCM) 9.3.x, EMC Network Configuration Manager (NCM) 9.4.0.x, EMC Network Configuration Manager (NCM) 9.4.1.x, EMC Network Configuration Manager (NCM) 9.4.2.x contains a Java RMI Remote Code Execution vulnerability that c... Read more
Affected Products : smarts_network_configuration_manager- Published: Feb. 03, 2017
- Modified: Apr. 20, 2025
-
9.8
CRITICALCVE-2017-2766
EMC Documentum eRoom version 7.4.4, EMC Documentum eRoom version 7.4.4 SP1, EMC Documentum eRoom version prior to 7.4.5 P04, EMC Documentum eRoom version prior to 7.5.0 P01 includes an unverified password change vulnerability that could potentially be exp... Read more
Affected Products : documentum_eroom- Published: Feb. 03, 2017
- Modified: Apr. 20, 2025
-
6.5
MEDIUMCVE-2016-9873
EMC Documentum D2 version 4.5 and EMC Documentum D2 version 4.6 has a DQL Injection Vulnerability that could potentially be exploited by malicious users to compromise the affected system. An authenticated low-privileged attacker could potentially exploit ... Read more
Affected Products : documentum_d2- Published: Feb. 03, 2017
- Modified: Apr. 20, 2025
-
6.1
MEDIUMCVE-2016-9872
EMC Documentum D2 version 4.5 and EMC Documentum D2 version 4.6 has Reflected Cross-Site Scripting Vulnerabilities that could potentially be exploited by malicious users to compromise the affected system.... Read more
Affected Products : documentum_d2- Published: Feb. 03, 2017
- Modified: Apr. 20, 2025
-
9.0
HIGHCVE-2016-9871
EMC Isilon OneFS 7.2.1.0 - 7.2.1.3, EMC Isilon OneFS 7.2.0.x, EMC Isilon OneFS 7.1.1.0 - 7.1.1.10, EMC Isilon OneFS 7.1.0.x is affected by a privilege escalation vulnerability that could potentially be exploited by attackers to compromise the affected sys... Read more
- Published: Feb. 03, 2017
- Modified: Apr. 20, 2025
-
4.3
MEDIUMCVE-2016-8217
EMC RSA BSAFE Crypto-J versions prior to 6.2.2 has a PKCS#12 Timing Attack Vulnerability. A possible timing attack could be carried out by modifying a PKCS#12 file that has an integrity MAC for which the password is not known. An attacker could then feed ... Read more
Affected Products : bsafe_crypto-j- Published: Feb. 03, 2017
- Modified: Apr. 20, 2025
-
7.2
HIGHCVE-2016-8216
EMC Data Domain OS (DD OS) 5.4 all versions, EMC Data Domain OS (DD OS) 5.5 family all versions prior to 5.5.5.0, EMC Data Domain OS (DD OS) 5.6 family all versions prior to 5.6.2.0, EMC Data Domain OS (DD OS) 5.7 family all versions prior to 5.7.2.10 has... Read more
Affected Products : emc_data_domain_os- Published: Feb. 03, 2017
- Modified: Apr. 20, 2025
-
7.5
HIGHCVE-2016-8212
An issue was discovered in EMC RSA BSAFE Crypto-J versions prior to 6.2.2. There is an Improper OCSP Validation Vulnerability. OCSP responses have two time values: thisUpdate and nextUpdate. These specify a validity period; however, both values are option... Read more
Affected Products : bsafe_crypto-j- Published: Feb. 03, 2017
- Modified: Apr. 20, 2025
-
7.5
HIGHCVE-2016-8211
EMC Data Protection Advisor 6.1.x, EMC Data Protection Advisor 6.2, EMC Data Protection Advisor 6.2.1, EMC Data Protection Advisor 6.2.2, EMC Data Protection Advisor 6.2.3 prior to patch 446 has a path traversal vulnerability that may potentially be explo... Read more
Affected Products : emc_data_protection_advisor- Published: Feb. 03, 2017
- Modified: Apr. 20, 2025
-
7.2
HIGHCVE-2016-6649
EMC RecoverPoint versions before 4.4.1.1 and EMC RecoverPoint for Virtual Machines versions before 5.0 are affected by multiple command injection vulnerabilities where a malicious administrator with configuration privileges may bypass the user interface a... Read more
- Published: Feb. 03, 2017
- Modified: Apr. 20, 2025
-
4.4
MEDIUMCVE-2016-6648
EMC RecoverPoint versions before 4.4.1.1 and EMC RecoverPoint for Virtual Machines versions before 5.0 are affected by sensitive information disclosure vulnerability as a result of incorrect permissions set on a sensitive system file. A malicious administ... Read more
- Published: Feb. 03, 2017
- Modified: Apr. 20, 2025
-
6.1
MEDIUMCVE-2016-0919
EMC RSA Web Threat Detection version 5.0, RSA Web Threat Detection version 5.1, RSA Web Threat Detection version 5.1.2 has a cross site scripting vulnerability that could potentially be exploited by malicious users to compromise the affected system.... Read more
Affected Products : web_threat_detection- Published: Feb. 03, 2017
- Modified: Apr. 20, 2025
-
6.4
MEDIUMCVE-2016-0890
EMC PowerPath Virtual (Management) Appliance 2.0, EMC PowerPath Virtual (Management) Appliance 2.0 SP1 is affected by a sensitive information disclosure vulnerability that may potentially be exploited by malicious users to compromise the affected system.... Read more
Affected Products : powerpath_virtual_appliance- Published: Feb. 03, 2017
- Modified: Apr. 20, 2025
-
7.8
HIGHCVE-2017-1093
IBM AIX 6.1, 7.1, and 7.2 could allow a local user to exploit a vulnerability in the bellmail binary to gain root privileges.... Read more
Affected Products : aix- Published: Feb. 02, 2017
- Modified: Apr. 20, 2025