Vulnerabilities

DATE CVE VULNERABILITY TITLE RISK
2016-11-03 CVE-2016-6448 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Cisco Meeting Server
A vulnerability in the Session Description Protocol (SDP) parser of Cisco Meeting Server could allow an unauthenticated, remote attacker to execute arbitrary code on an affected system.
network
low complexity
cisco CWE-119
critical
9.8
2016-11-03 CVE-2016-6447 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Cisco Meeting APP and Meeting Server
A vulnerability in Cisco Meeting Server and Meeting App could allow an unauthenticated, remote attacker to execute arbitrary code on an affected system.
network
low complexity
cisco CWE-119
critical
9.8
2016-11-03 CVE-2016-6441 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Cisco IOS XE
A vulnerability in the Transaction Language 1 (TL1) code of Cisco ASR 900 Series routers could allow an unauthenticated, remote attacker to cause a reload of, or remotely execute code on, the affected system.
network
low complexity
cisco CWE-119
critical
9.8
2016-11-03 CVE-2016-6430 Permissions, Privileges, and Access Controls vulnerability in Cisco IP Interoperability and Collaboration System
A vulnerability in the command-line interface of the Cisco IP Interoperability and Collaboration System (IPICS) could allow an authenticated, local attacker to elevate the privilege level associated with their session.
local
low complexity
cisco CWE-264
7.8
2016-11-03 CVE-2016-6429 Cross-site Scripting vulnerability in Cisco IP Interoperability and Collaboration System 4.10(1)
A vulnerability in the web framework code of the Cisco IP Interoperability and Collaboration System (IPICS) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack.
network
low complexity
cisco CWE-79
6.1
2016-11-03 CVE-2016-9136 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Artifex Mujs
Artifex Software, Inc.
network
low complexity
artifex CWE-119
7.5
2016-11-03 CVE-2016-9135 SQL Injection vulnerability in Exponentcms Exponent CMS 2.3.9
Exponent CMS 2.3.9 suffers from a SQL injection vulnerability in "/framework/modules/help/controllers/helpController.php" affecting the version parameter.
network
low complexity
exponentcms CWE-89
7.5
2016-11-03 CVE-2016-9134 SQL Injection vulnerability in Exponentcms Exponent CMS 2.3.9
Exponent CMS 2.3.9 suffers from a SQL injection vulnerability in "/expPaginator.php" affecting the order parameter.
network
low complexity
exponentcms CWE-89
7.5
2016-11-03 CVE-2016-9086 Information Exposure vulnerability in Gitlab
GitLab versions 8.9.x and above contain a critical security flaw in the "import/export project" feature of GitLab.
network
low complexity
gitlab CWE-200
6.5
2016-11-03 CVE-2016-7453 SQL Injection vulnerability in Exponentcms Exponent CMS
The Pixidou Image Editor in Exponent CMS prior to v2.3.9 patch 2 could be used to perform an fid SQL Injection.
network
low complexity
exponentcms CWE-89
critical
9.8