Vulnerabilities > Medium

DATE CVE VULNERABILITY TITLE RISK
2017-04-10 CVE-2016-4334 Open Redirect vulnerability in Jivesoftware Jive
Jive before 2016.3.1 has an open redirect from the external-link.jspa page.
network
low complexity
jivesoftware CWE-601
6.1
2017-04-10 CVE-2016-4320 Path Traversal vulnerability in Atlassian Bitbucket
Atlassian Bitbucket Server before 4.7.1 allows remote attackers to read the first line of an arbitrary file via a directory traversal attack on the pull requests resource.
network
low complexity
atlassian CWE-22
4.3
2017-04-10 CVE-2016-4318 Cross-site Scripting vulnerability in Atlassian Jira
Atlassian JIRA Server before 7.1.9 has XSS in project/ViewDefaultProjectRoleActors.jspa via a role name.
network
low complexity
atlassian CWE-79
4.8
2017-04-10 CVE-2016-4317 Cross-site Scripting vulnerability in Atlassian Confluence
Atlassian Confluence Server before 5.9.11 has XSS on the viewmyprofile.action page.
network
low complexity
atlassian CWE-79
5.4
2017-04-10 CVE-2016-1517 Improper Input Validation vulnerability in Opencv 3.0.0
OpenCV 3.0.0 allows remote attackers to cause a denial of service (segfault) via vectors involving corrupt chunks.
local
low complexity
opencv CWE-20
5.5
2017-04-10 CVE-2015-8276 Information Exposure vulnerability in Eparaksts Edoc-Libraries and Eparakstitajs 3
LVRTC eParakstitajs 3.0 (1.3.0) and edoc-libraries-2.5.4_01 allow attackers to read arbitrary files via crafted EDOC files.
local
low complexity
eparaksts CWE-200
5.5
2017-04-10 CVE-2015-8275 Improper Access Control vulnerability in Eparaksts Edoc-Libraries and Eparakstitajs 3
LVRTC eParakstitajs 3.0 (1.3.0) and edoc-libraries-2.5.4_01 allow attackers to write to arbitrary files via crafted EDOC files.
local
low complexity
eparaksts CWE-284
5.5
2017-04-10 CVE-2015-7275 Cross-site Scripting vulnerability in Dell Integrated Remote Access Controller Firmware
Dell Integrated Remote Access Controller (iDRAC) 6 before 2.85 and 7/8 before 2.30.30.30 has XSS.
network
low complexity
dell CWE-79
6.1
2017-04-10 CVE-2015-6035 Cross-site Scripting vulnerability in Opsview
Opsview before 2015-11-06 has XSS via SNMP.
network
low complexity
opsview CWE-79
6.1
2017-04-10 CVE-2015-6027 Cross-site Scripting vulnerability in Castlerock Snmpc 12.1/9.0
Castle Rock Computing SNMPc before 2015-12-17 has XSS via SNMP.
network
low complexity
castlerock CWE-79
6.1