Vulnerabilities
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2016-10-28 | CVE-2016-8600 | 7PK - Security Features vulnerability in Dotcms 3.2.1 In dotCMS 3.2.1, attacker can load captcha once, fill it with correct value and then this correct value is ok for forms with captcha check later. | 7.5 |
| 2016-10-28 | CVE-2016-8598 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Libcsp Project Libcsp Buffer overflow in the zmq interface in csp_if_zmqhub.c in the libcsp library v1.4 and earlier allows hostile computers connected via a zmq interface to execute arbitrary code via a long packet. | 9.8 |
| 2016-10-28 | CVE-2016-8597 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Libcsp Project Libcsp Buffer overflow in the csp_sfp_recv_fp in csp_sfp.c in the libcsp library v1.4 and earlier allows hostile components with network access to the SFP underlying network layers to execute arbitrary code via specially crafted SFP packets. | 9.8 |
| 2016-10-28 | CVE-2016-8596 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Libcsp Project Libcsp Buffer overflow in the csp_can_process_frame in csp_if_can.c in the libcsp library v1.4 and earlier allows hostile components connected to the canbus to execute arbitrary code via a long csp packet. | 9.8 |
| 2016-10-28 | CVE-2016-8583 | Cross-site Scripting vulnerability in Alienvault products Multiple GET parameters in the vulnerability scan scheduler of AlienVault OSSIM and USM before 5.3.2 are vulnerable to reflected XSS. | 6.1 |
| 2016-10-28 | CVE-2016-8582 | SQL Injection vulnerability in Alienvault products A vulnerability exists in gauge.php of AlienVault OSSIM and USM before 5.3.2 that allows an attacker to execute an arbitrary SQL query and retrieve database information or read local system files via MySQL's LOAD_FILE. | 9.8 |
| 2016-10-28 | CVE-2016-8581 | Cross-site Scripting vulnerability in Alienvault products A persistent XSS vulnerability exists in the User-Agent header of the login process of AlienVault OSSIM and USM before 5.3.2 that allows an attacker to steal session IDs of logged in users when the current sessions are viewed by an administrator. | 6.1 |
| 2016-10-28 | CVE-2016-8580 | Improper Access Control vulnerability in Alienvault products PHP object injection vulnerabilities exist in multiple widget files in AlienVault OSSIM and USM before 5.3.2. | 9.8 |
| 2016-10-28 | CVE-2016-8579 | Resource Management Errors vulnerability in Docker2Aci Project Docker2Aci 0.12.3 docker2aci <= 0.12.3 has an infinite loop when handling local images with cyclic dependency chain. | 4.0 |
| 2016-10-28 | CVE-2016-7919 | SQL Injection vulnerability in Moodle 3.1.2 Moodle 3.1.2 allows remote attackers to obtain sensitive information via unspecified vectors, related to a "SQL Injection" issue affecting the Administration panel function in the installation process component. | 7.5 |