2016

ABB PCM600 before 2.7 uses an improper hash algorithm for the main application password, which makes it easier for local

KMC Controls BAC-5051E devices with firmware before E0.2.0.2 allow remote attackers to bypass intended access restrictio

Cross-site request forgery (CSRF) vulnerability on KMC Controls BAC-5051E devices with firmware before E0.2.0.2 allows r

MEDHOST Perioperative Information Management System (aka PIMS or VPIMS) before 2015R1 has hardcoded credentials, which m

The Chef Manage (formerly opscode-manage) add-on before 1.12.0 for Chef allows remote attackers to execute arbitrary cod

A vulnerability in the web application for Cisco IP Phones could allow an unauthenticated, remote attacker to execute co

The installation component on Cisco Application Policy Infrastructure Controller (APIC) devices with software before 1.3

Cisco Access Point devices with software 8.2(102.43) allow remote attackers to cause a denial of service (device reload)

EMC NetWorker 8.2.1.x and 8.2.2.x before 8.2.2.6 and 9.x before 9.0.0.6 mishandles authentication, which allows remote a

EMC Data Domain OS 5.5 before 5.5.4.0, 5.6 before 5.6.1.004, and 5.7 before 5.7.2.0 stores session identifiers of GUI us

The up.time agent in Idera Uptime Infrastructure Monitor 7.5 and 7.6 on Linux allows remote attackers to read arbitrary

XML external entity (XXE) vulnerability in the xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.4,

Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string specif

The xmlParseElementDecl function in parser.c in libxml2 before 2.9.4 allows context-dependent attackers to cause a denia

SPICE allows local guest OS users to read from or write to arbitrary host memory locations via crafted primary surface p

LXD before 2.0.2 does not properly set permissions when switching an unprivileged container into privileged mode, which

LXD before 2.0.2 uses world-readable permissions for /var/lib/lxd/zfs.img when setting up a loop based ZFS pool, which a

The smartcard interaction in SPICE allows remote attackers to cause a denial of service (QEMU-KVM process crash) or poss

Directory traversal vulnerability in the WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.

The WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to cause a

The WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to bypass

HPE Project and Portfolio Management Center (PPM) 9.2x and 9.3x before 9.32.0002 allows remote authenticated users to ex

General Electric (GE) Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware before 5.5.0 and ML810, ML3000,

Red Hat OpenShift Enterprise 3.2 does not properly restrict access to STI builds, which allows remote authenticated user

HAproxy in Red Hat OpenShift Enterprise 3.2 and OpenShift Origin allows local users to obtain the internal IP address of

Red Hat OpenShift Enterprise 3.2, when multi-tenant SDN is enabled and a build is run in a namespace that would normally

Red Hat OpenShift Enterprise 3.2 and 3.1 do not properly validate the origin of a request when anonymous access is grant

Red Hat OpenShift Enterprise 3.2 and OpenShift Origin allow remote authenticated users to execute commands with root pri

Red Hat OpenShift Enterprise 3.2 allows remote authenticated users to read log files from another namespace by using the

Red Hat OpenShift Enterprise 3.1 uses world-readable permissions on the /etc/origin/master/master-config.yaml configurat

Buffer overflow in the DecodeAdpcmImaQT function in modules/codec/adpcm.c in VideoLAN VLC media player before 2.2.4 allo

HPE Discovery and Dependency Mapping Inventory (DDMi) 9.30, 9.31, 9.32, 9.32 update 1, 9.32 update 2, and 9.32 update 3

HPE Universal CMDB 10.0 through 10.21, Universal CMDB Configuration Manager 10.0 through 10.21, and Universal Discovery

The Universal Discovery component in HPE Universal CMDB 10.0, 10.01, 10.10, 10.11, 10.20, and 10.21 allows remote attack

HPE Systems Insight Manager (SIM) before 7.5.1 allows remote attackers to obtain sensitive information, modify data, or

HPE Insight Control server deployment allows remote attackers to obtain sensitive information via unspecified vectors.

HPE Insight Control server deployment allows local users to gain privileges via unspecified vectors.

HPE Insight Control server deployment allows remote attackers to modify data via unspecified vectors.

HPE Insight Control server deployment allows remote authenticated users to obtain sensitive information or modify data v

HPE LoadRunner 11.52 through patch 3, 12.00 through patch 1, 12.01 through patch 3, 12.02 through patch 2, and 12.50 thr

web/admin/data.js in the Performance Center Virtual Table Server (VTS) component in HPE LoadRunner 11.52 through patch 3

Stack-based buffer overflow in mchan.dll in the agent in HPE LoadRunner 11.52 through patch 3, 12.00 through patch 1, 12

HPE Matrix Operating Environment before 7.5.1 allows remote attackers to obtain sensitive information or modify data via

HPE Matrix Operating Environment before 7.5.1 allows remote authenticated users to obtain sensitive information or modif

Cross-site scripting (XSS) vulnerability in the Web Client in VMware vCenter Server 5.1 before update 3d, 5.5 before upd

HPE Systems Insight Manager (SIM) before 7.5.1 allows remote authenticated users to obtain sensitive information or modi

HPE Matrix Operating Environment before 7.5.1 allows remote attackers to obtain sensitive information or modify data via

HPE Matrix Operating Environment before 7.5.1 allows remote authenticated users to obtain sensitive information or modif

HPE Matrix Operating Environment before 7.5.1 allows remote attackers to obtain sensitive information via unspecified ve

HPE Matrix Operating Environment before 7.5.1 allows remote attackers to obtain sensitive information via unspecified ve