Vulnerabilities > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2016-10-06 | CVE-2015-1000006 | Path Traversal vulnerability in Recent-Backups Project Recent-Backups 0.7 Remote file download vulnerability in recent-backups v0.7 wordpress plugin | 7.5 |
| 2016-10-06 | CVE-2015-1000005 | Path Traversal vulnerability in Candidate-Application-Form Project Candidate-Application-Form 1.0 Remote file download vulnerability in candidate-application-form v1.0 wordpress plugin | 7.5 |
| 2016-10-06 | CVE-2015-1000002 | Improper Input Validation vulnerability in Filedownload Project Filedownload 1.4 Open Proxy in filedownload v1.4 wordpress plugin | 8.2 |
| 2016-10-06 | CVE-2016-6653 | Information Exposure vulnerability in Pivotal Software Cloud Foundry CF Mysql 27.0/28.0 The MariaDB audit_plugin component in Pivotal Cloud Foundry (PCF) cf-mysql-release 27 and 28 allows remote attackers to obtain sensitive information by reading syslog messages, as demonstrated by cleartext credentials. | 7.5 |
| 2016-10-06 | CVE-2016-6434 | Improper Authentication vulnerability in Cisco Secure Firewall Management Center 6.0.1 Cisco Firepower Management Center 6.0.1 has hardcoded database credentials, which allows local users to obtain sensitive information by leveraging CLI access, aka Bug ID CSCva30370. | 7.8 |
| 2016-10-06 | CVE-2016-6433 | Improper Input Validation vulnerability in Cisco Secure Firewall Management Center The Threat Management Console in Cisco Firepower Management Center 5.2.0 through 6.0.1 allows remote authenticated users to execute arbitrary commands via crafted web-application parameters, aka Bug ID CSCva30872. | 8.8 |
| 2016-10-06 | CVE-2016-6428 | Permissions, Privileges, and Access Controls vulnerability in Cisco IOS XR 6.1.1 Cisco IOS XR 6.1.1 allows local users to execute arbitrary OS commands as root by leveraging admin privileges, aka Bug ID CSCva38349. | 7.8 |
| 2016-10-06 | CVE-2016-6427 | Cross-Site Request Forgery (CSRF) vulnerability in Cisco products Cross-site request forgery (CSRF) vulnerability in Cisco Unified Intelligence Center (CUIC) 8.5.4 through 9.1(1), as used in Unified Contact Center Express 10.0(1) through 11.0(1), allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs CSCuy75036 and CSCuy81654. | 8.8 |
| 2016-10-06 | CVE-2016-6422 | Improper Input Validation vulnerability in Cisco IOS 12.2(33)Sxj9 Cisco IOS 12.2(33)SXJ9 on Supervisor Engine 32 and 720 modules for 6500 and 7600 devices mishandles certain operators, flags, and keywords in TCAM share ACLs, which allows remote attackers to bypass intended access restrictions by sending packets that should have been recognized by a filter, aka Bug ID CSCuy64806. | 7.5 |
| 2016-10-06 | CVE-2016-6023 | Path Traversal vulnerability in IBM Sterling Secure Proxy 3.4.2.0/3.4.3.0 Directory traversal vulnerability in the Configuration Manager in IBM Sterling Secure Proxy (SSP) 3.4.2 before 3.4.2.0 iFix 8 and 3.4.3 before 3.4.3.0 iFix 1 allows remote attackers to read arbitrary files via a crafted URL. | 7.5 |