Latest CVE Feed
-
7.6
HIGHCVE-2016-2076
Client Integration Plugin (CIP) in VMware vCenter Server 5.5 U3a, U3b, and U3c and 6.0 before U2; vCloud Director 5.5.5; and vRealize Automation Identity Appliance 6.2.4 before 6.2.4.1 mishandles session content, which allows remote attackers to hijack se... Read more
- EPSS Score: %0.44
- Published: Apr. 15, 2016
- Modified: Apr. 12, 2025
-
7.8
HIGHCVE-2016-1274
Juniper Junos OS 14.1X53 before 14.1X53-D30 on QFX Series switches allows remote attackers to cause a denial of service (PFE panic) via a high rate of unspecified VXLAN packets.... Read more
- EPSS Score: %0.61
- Published: Apr. 15, 2016
- Modified: Apr. 12, 2025
-
5.9
MEDIUMCVE-2016-1273
Juniper Junos OS before 13.2X51-D40, 14.x before 14.1X53-D30, and 15.x before 15.1X53-D20 on QFX5100 and QFX10002 switches do not have sufficient entropy, which makes it easier for remote attackers to defeat cryptographic encryption and authentication pro... Read more
- EPSS Score: %0.18
- Published: Apr. 15, 2016
- Modified: Apr. 12, 2025
-
7.8
HIGHCVE-2016-1271
Juniper Junos OS before 12.1X46-D45, 12.1X47 before 12.1X47-D30, 12.3 before 12.3R11, 12.3X48 before 12.3X48-D25, 13.2 before 13.2R8, 13.3 before 13.3R7, 14.1 before 14.1R6, 14.2 before 14.2R4, 15.1 before 15.1R1 or 15.1F2, and 15.1X49 before 15.1X49-D15 ... Read more
- EPSS Score: %0.04
- Published: Apr. 15, 2016
- Modified: Apr. 12, 2025
-
7.5
HIGHCVE-2016-1270
The rpd daemon in Juniper Junos OS before 12.1X44-D60, 12.1X46 before 12.1X46-D45, 12.1X47 before 12.1X47-D30, 12.3 before 12.3R9, 12.3X48 before 12.3X48-D20, 13.2 before 13.2R7, 13.2X51 before 13.2X51-D40, 13.3 before 13.3R6, 14.1 before 14.1R4, and 14.2... Read more
- EPSS Score: %0.60
- Published: Apr. 15, 2016
- Modified: Apr. 12, 2025
-
7.8
HIGHCVE-2016-1269
Juniper Junos OS before 12.1X44-D60, 12.1X46 before 12.1X46-D40, 12.1X47 before 12.1X47-D30, 12.3 before 12.3R11, 12.3X48 before 12.3X48-D20, 13.2 before 13.2R9, 13.2X51 before 13.2X51-D39, 13.3 before 13.3R8, 14.1 before 14.1R6, 14.1X53 before 14.1X53-D3... Read more
- EPSS Score: %2.89
- Published: Apr. 15, 2016
- Modified: Apr. 12, 2025
-
7.8
HIGHCVE-2016-1268
The administrative web services interface in Juniper ScreenOS before 6.3.0r21 allows remote attackers to cause a denial of service (reboot) via a crafted SSL packet.... Read more
Affected Products : screenos- EPSS Score: %0.56
- Published: Apr. 15, 2016
- Modified: Apr. 12, 2025
-
6.7
MEDIUMCVE-2016-1267
Race condition in the RPC functionality in Juniper Junos OS before 12.1X44-D55, 12.1X46 before 12.1X46-D40, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R11, 12.3X48 before 12.3X48-D20, 13.2 before 13.2R8, 13.2X51 before 13.2X51-D39, 13.3 before 13.3R7, 14... Read more
- EPSS Score: %0.04
- Published: Apr. 15, 2016
- Modified: Apr. 12, 2025
-
8.8
HIGHCVE-2016-1264
Race condition in the Op command in Juniper Junos OS before 12.1X44-D55, 12.1X46 before 12.1X46-D40, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R11, 12.3X48 before 12.3X48-D20, 12.3X50 before 12.3X50-D50, 13.2 before 13.2R8, 13.2X51 before 13.2X51-D39, 1... Read more
- EPSS Score: %0.81
- Published: Apr. 15, 2016
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2016-0889
An HTTP servlet in vApp Manager in EMC Unisphere for VMAX Virtual Appliance before 8.2.0 allows remote attackers to write to arbitrary files via a crafted pathname.... Read more
- EPSS Score: %1.71
- Published: Apr. 15, 2016
- Modified: Apr. 12, 2025
-
9.8
CRITICALCVE-2010-5325
Heap-based buffer overflow in the unhtmlify function in foomatic-rip in foomatic-filters before 4.0.6 allows remote attackers to cause a denial of service (memory corruption and crash) or possibly execute arbitrary code via a long job title.... Read more
- EPSS Score: %5.96
- Published: Apr. 15, 2016
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2015-8677
Memory leak in Huawei S5300EI, S5300SI, S5310HI, and S6300EI Campus series switches with software V200R003C00 before V200R003SPH011 and V200R005C00 before V200R005SPH008; S2350EI and S5300LI Campus series switches with software V200R003C00 before V200R003... Read more
Affected Products : s3300_firmware s2300_firmware s7700_firmware s9300_firmware s9700_firmware s2350ei_firmware s5300ei_firmware s5300si_firmware s5310hi_firmware s6300ei_firmware +16 more products- EPSS Score: %0.24
- Published: Apr. 14, 2016
- Modified: Apr. 12, 2025
-
7.8
HIGHCVE-2015-8676
Memory leak in Huawei S5300EI, S5300SI, S5310HI, S6300EI/ S2350EI, and S5300LI Campus series switches with software V200R001C00 before V200R001SPH018, V200R002C00 before V200R003SPH011, and V200R003C00 before V200R003SPH011; S9300, S7700, and S9700 Campus... Read more
Affected Products : s3300_firmware s2300_firmware s7700_firmware s9300_firmware s9700_firmware s2350ei_firmware s5300ei_firmware s5300si_firmware s5310hi_firmware s6300ei_firmware +12 more products- EPSS Score: %0.28
- Published: Apr. 14, 2016
- Modified: Apr. 12, 2025
-
4.3
MEDIUMCVE-2015-8336
Huawei FusionCompute with software before V100R005C10SPC700 allows remote authenticated users to obtain sensitive "role and permission" information via unspecified vectors.... Read more
- EPSS Score: %0.08
- Published: Apr. 14, 2016
- Modified: Apr. 12, 2025
-
6.5
MEDIUMCVE-2015-5247
The virStorageVolCreateXML API in libvirt 1.2.14 through 1.2.19 allows remote authenticated users with a read-write connection to cause a denial of service (libvirtd crash) by triggering a failed unlink after creating a volume on a root_squash NFS pool.... Read more
- EPSS Score: %0.39
- Published: Apr. 14, 2016
- Modified: Apr. 12, 2025
-
5.9
MEDIUMCVE-2011-4600
The networkReloadIptablesRules function in network/bridge_driver.c in libvirt before 0.9.9 does not properly handle firewall rules on bridge networks when libvirtd is restarted, which might allow remote attackers to bypass intended access restrictions via... Read more
- EPSS Score: %0.35
- Published: Apr. 14, 2016
- Modified: Apr. 12, 2025
-
7.5
HIGHCVE-2016-4018
The Data Provisioning Agent (aka DP Agent) in SAP HANA does not properly restrict access to service functionality, which allows remote attackers to obtain sensitive information, gain privileges, and conduct unspecified other attacks via unspecified vector... Read more
Affected Products : hana- EPSS Score: %0.41
- Published: Apr. 14, 2016
- Modified: Apr. 12, 2025
-
7.5
HIGHCVE-2016-4017
The Data Provisioning Agent (aka DP Agent) in SAP HANA allows remote attackers to cause a denial of service (process crash) via unspecified vectors, aka SAP Security Note 2262710.... Read more
Affected Products : hana- EPSS Score: %0.50
- Published: Apr. 14, 2016
- Modified: Apr. 12, 2025
-
6.1
MEDIUMCVE-2016-4016
Cross-site scripting (XSS) vulnerability in SAP Manufacturing Integration and Intelligence (aka MII, formerly xMII) 15 allows remote attackers to inject arbitrary web script or HTML via the title parameter to webdynpro/resources/sap.com/xapps~xmii~ui~admi... Read more
- EPSS Score: %0.49
- Published: Apr. 14, 2016
- Modified: Apr. 12, 2025
-
7.5
HIGHCVE-2016-4015
The Enqueue Server in SAP NetWeaver JAVA AS 7.1 through 7.4 allows remote attackers to cause a denial of service (process crash) via a crafted request, aka SAP Security Note 2258784.... Read more
Affected Products : netweaver- EPSS Score: %3.04
- Published: Apr. 14, 2016
- Modified: Apr. 12, 2025