2016-06-24 - CVE Archive

CVE-2016-5435 Jun 24, 17:59 MEDIUM This Month

Memory leak in Huawei IPS Module, NGFW Module, NIP6300, NIP6600, and Secospace USG6300, USG6500, USG6600, USG9500, and AntiDDoS8000 V500R001C00 before V500R001C20SPC100, when in hot standby. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Denial Of Service Huawei Huawei Firmware

NVD

CVSS 3.0

5.9

EPSS

0.1%

CVE-2016-5021 Jun 24, 17:59 MEDIUM This Month

The iControl REST service in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.5.x before 11.5.4, 11.6.x before 11.6.1, and 12.x before 12.0.0 HF3; BIG-IP DNS 12.x before. Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Big Ip Application Security Manager Big Ip Access Policy Manager Big Ip Advanced Firewall Manager Big Ip Analytics +13

NVD

CVSS 3.0

4.9

EPSS

0.2%

CVE-2016-5709 Jun 24, 17:59 MEDIUM This Month

SolarWinds Virtualization Manager 6.3.1 and earlier uses weak encryption to store passwords in /etc/shadow, which allows local users with superuser privileges to obtain user passwords via a brute. Rated medium severity (CVSS 4.7). No vendor patch available.

Information Disclosure Virtualization Manager Solarwinds

NVD

CVSS 3.0

4.7

EPSS

0.2%