Avaya Iq vulnerabilities

5 CVEs affecting Avaya Iq, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-5285, published 2019-11-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2010-2943, published 2010-09-30. High severity, CVSS 8.1. EPSS: 17% chance of exploitation in the next 30 days. The xfs implementation in the Linux kernel before 2.6.35 does not look up inode allocation btrees before reading inode buffers, which allows remote authenticated users to read unlinked files, or read…
CVE-2016-5285, published 2019-11-15. High severity, CVSS 7.5. EPSS: 2.3% chance of exploitation in the next 30 days. A Null pointer dereference vulnerability exists in Mozilla Network Security Services due to a missing NULL check in PK11_SignWithSymKey / ssl3_ComputeRecordMACConstantTime, which could let a remote…
CVE-2010-2492, published 2010-09-08. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Buffer overflow in the ecryptfs_uid_hash macro in fs/ecryptfs/messaging.c in the eCryptfs subsystem in the Linux kernel before 2.6.35 might allow local users to gain privileges or cause a denial of…
CVE-2010-2942, published 2010-09-21. Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days. The actions implementation in the network queueing functionality in the Linux kernel before 2.6.36-rc2 does not properly initialize certain structure members when performing dump operations, which…
CVE-2010-2798, published 2010-09-08. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. The gfs2_dirent_find_space function in fs/gfs2/dir.c in the Linux kernel before 2.6.35 uses an incorrect size value in calculations associated with sentinel directory entries, which allows local…