Latest CVE Feed

  1. Home
  2. Vulnerabilities
  3. Latest
Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.
Latest Critical Actively Exploited Remotely Exploitable
Published Last Updated CVSS Score

  • 5.9

    MEDIUM
    CVE-2016-5655

    Misys FusionCapital Opics Plus does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to obtain sensitive information via a crafted certificate.... Read more

    Affected Products : fusioncapital_opics_plus
    • EPSS Score: %0.11
    • Published: Jul. 19, 2016
    • Modified: Apr. 12, 2025

  • 8.5

    HIGH
    CVE-2016-5654

    Misys FusionCapital Opics Plus allows remote authenticated users to gain privileges via a man-in-the-middle attack that modifies the xmlMessageOut parameter.... Read more

    Affected Products : fusioncapital_opics_plus
    • EPSS Score: %0.80
    • Published: Jul. 19, 2016
    • Modified: Apr. 12, 2025

  • 6.5

    MEDIUM
    CVE-2016-5653

    Multiple SQL injection vulnerabilities in Misys FusionCapital Opics Plus allow remote authenticated users to execute arbitrary SQL commands via the (1) ID or (2) Branch parameter.... Read more

    Affected Products : fusioncapital_opics_plus
    • EPSS Score: %0.38
    • Published: Jul. 19, 2016
    • Modified: Apr. 12, 2025

  • 10.0

    HIGH
    CVE-2016-5080

    Integer overflow in the rtxMemHeapAlloc function in asn1rt_a.lib in Objective Systems ASN1C for C/C++ before 7.0.2 allows context-dependent attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow), on a system running ... Read more

    Affected Products : asn1c
    • EPSS Score: %40.64
    • Published: Jul. 19, 2016
    • Modified: Apr. 12, 2025

  • 5.9

    MEDIUM
    CVE-2016-2775

    ISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or the named lwres option is enabled, allows remote attackers to cause a denial of service (daemon crash) via a long request that uses the lightweight resolver ... Read more

    • EPSS Score: %34.22
    • Published: Jul. 19, 2016
    • Modified: Apr. 12, 2025

  • 7.6

    HIGH
    CVE-2015-8947

    hb-ot-layout-gpos-table.hh in HarfBuzz before 1.0.5 allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via crafted data, a different vulnerability than CVE-2016-2052.... Read more

    Affected Products : harfbuzz
    • EPSS Score: %0.48
    • Published: Jul. 19, 2016
    • Modified: Apr. 12, 2025

  • 8.1

    HIGH
    CVE-2016-5388

    Apache Tomcat 7.x through 7.0.70 and 8.x through 8.5.4, when the CGI Servlet is enabled, follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which m... Read more

    • EPSS Score: %66.01
    • Published: Jul. 19, 2016
    • Modified: Apr. 12, 2025

  • 8.1

    HIGH
    CVE-2016-5387

    The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an applicat... Read more

    • EPSS Score: %71.30
    • Published: Jul. 19, 2016
    • Modified: Apr. 12, 2025

  • 8.1

    HIGH
    CVE-2016-5386

    The net/http package in Go through 1.6 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might a... Read more

    • EPSS Score: %87.62
    • Published: Jul. 19, 2016
    • Modified: Apr. 12, 2025

  • 8.1

    HIGH
    CVE-2016-5385

    PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to ... Read more

    • EPSS Score: %81.55
    • Published: Jul. 19, 2016
    • Modified: Apr. 12, 2025

  • 8.5

    HIGH
    CVE-2016-3039

    IBM Traveler 8.x and 9.x before 9.0.1.12 allows remote authenticated users to read arbitrary files or cause a denial of service (memory consumption) via XML data containing an external entity declaration in conjunction with an entity reference, related to... Read more

    Affected Products : traveler
    • EPSS Score: %0.66
    • Published: Jul. 17, 2016
    • Modified: Apr. 12, 2025

  • 5.3

    MEDIUM
    CVE-2016-1459

    Cisco IOS 12.4 and 15.0 through 15.5 and IOS XE 3.13 through 3.17 allow remote authenticated users to cause a denial of service (device reload) via crafted attributes in a BGP message, aka Bug ID CSCuz21061.... Read more

    Affected Products : ios_xe ios
    • EPSS Score: %0.64
    • Published: Jul. 17, 2016
    • Modified: Apr. 12, 2025

  • 8.8

    HIGH
    CVE-2016-1448

    Cross-site request forgery (CSRF) vulnerability in Cisco WebEx Meetings Server 2.7 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuy92706.... Read more

    Affected Products : webex_meetings_server
    • EPSS Score: %0.22
    • Published: Jul. 17, 2016
    • Modified: Apr. 12, 2025

  • 5.3

    MEDIUM
    CVE-2016-0393

    IBM Maximo Asset Management 7.5 before 7.5.0.10-TIV-MBS-IFIX002 and 7.6 before 7.6.0.5-TIV-MAMMT-FP001 allows remote attackers to obtain sensitive URL information by reading log files.... Read more

    Affected Products : maximo_asset_management
    • EPSS Score: %0.21
    • Published: Jul. 17, 2016
    • Modified: Apr. 12, 2025

  • 6.2

    MEDIUM
    CVE-2016-0321

    IBM Personal Communications (aka PCOMM) 6.x before 6.0.17 and 12.x before 12.0.0.1 does not properly restrict credential extraction, which allows local users to discover passwords by leveraging access to the victim account and executing a PowerShell scrip... Read more

    Affected Products : personal_communications
    • EPSS Score: %0.13
    • Published: Jul. 17, 2016
    • Modified: Apr. 12, 2025

  • 8.8

    HIGH
    CVE-2016-5661

    Accela Civic Platform Citizen Access portal relies on the client to restrict file types for uploads, which allows remote authenticated users to execute arbitrary code via modified _EventArgument and filename parameters.... Read more

    • EPSS Score: %5.33
    • Published: Jul. 15, 2016
    • Modified: Apr. 12, 2025

  • 6.1

    MEDIUM
    CVE-2016-5660

    Cross-site scripting (XSS) vulnerability in AttachmentsList.aspx in Accela Civic Platform Citizen Access portal allows remote attackers to inject arbitrary web script or HTML via the iframeid parameter.... Read more

    Affected Products : civic_platform
    • EPSS Score: %0.56
    • Published: Jul. 15, 2016
    • Modified: Apr. 12, 2025

  • 8.8

    HIGH
    CVE-2016-5637

    The restore_tqb_pixels function in libbpg 0.9.5 through 0.9.7 mishandles the transquant_bypass_enable_flag value, which allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write) via a crafted BPG image, related t... Read more

    Affected Products : libbpg
    • EPSS Score: %0.38
    • Published: Jul. 15, 2016
    • Modified: Apr. 12, 2025

  • 6.5

    MEDIUM
    CVE-2016-2865

    The GIT Integration component in IBM Rational Team Concert (RTC) 5.x before 5.0.2 iFix14 and 6.x before 6.0.1 iFix5 and Rational Collaborative Lifecycle Management 5.x before 5.0.2 iFix14 and 6.x before 6.0.1 iFix5 allows remote authenticated users to obt... Read more

    • EPSS Score: %0.20
    • Published: Jul. 15, 2016
    • Modified: Apr. 12, 2025

  • 4.3

    MEDIUM
    CVE-2016-0357

    IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 allows remote attackers to conduct clickjacking attacks via a crafted web site.... Read more

    • EPSS Score: %0.30
    • Published: Jul. 15, 2016
    • Modified: Apr. 12, 2025
Showing 20 of 291269 Results