|
268571
|
7.2 |
HIGH
Network
|
trend_micro
|
deep_discovery_inspector
|
hotfix_upload.cgi in Trend Micro Deep Discovery Inspector (DDI) 3.7, 3.8 SP1 (3.81), and 3.8 SP2 (3.82) allows remote administrators to execute arbitrary code via shell metacharacters in the filename…
|
CWE-20
Improper Input Validation
|
CVE-2016-5840
|
2024-11-21 11:55 |
2016-07-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268572
|
7.5 |
HIGH
Network
|
wordpress
|
wordpress
|
WordPress before 4.5.3 allows remote attackers to bypass the sanitize_file_name protection mechanism via unspecified vectors.
|
NVD-CWE-noinfo
|
CVE-2016-5839
|
2024-11-21 11:55 |
2016-06-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268573
|
7.5 |
HIGH
Network
|
wordpress
|
wordpress
|
WordPress before 4.5.3 allows remote attackers to bypass intended password-change restrictions by leveraging knowledge of a cookie.
|
CWE-255
Credentials Management
|
CVE-2016-5838
|
2024-11-21 11:55 |
2016-06-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268574
|
7.5 |
HIGH
Network
|
wordpress
|
wordpress
|
WordPress before 4.5.3 allows remote attackers to bypass intended access restrictions and remove a category attribute from a post via unspecified vectors.
|
NVD-CWE-noinfo
|
CVE-2016-5837
|
2024-11-21 11:55 |
2016-06-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268575
|
7.5 |
HIGH
Network
|
wordpress
|
wordpress
|
The oEmbed protocol implementation in WordPress before 4.5.3 allows remote attackers to cause a denial of service via unspecified vectors.
|
NVD-CWE-noinfo
|
CVE-2016-5836
|
2024-11-21 11:55 |
2016-06-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268576
|
7.5 |
HIGH
Network
|
wordpress
|
wordpress
|
WordPress before 4.5.3 allows remote attackers to obtain sensitive revision-history information by leveraging the ability to read a post, related to wp-admin/includes/ajax-actions.php and wp-admin/re…
|
CWE-200
Information Exposure
|
CVE-2016-5835
|
2024-11-21 11:55 |
2016-06-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268577
|
6.1 |
MEDIUM
Network
|
wordpress
|
wordpress
|
Cross-site scripting (XSS) vulnerability in the wp_get_attachment_link function in wp-includes/post-template.php in WordPress before 4.5.3 allows remote attackers to inject arbitrary web script or HT…
|
CWE-79
Cross-site Scripting
|
CVE-2016-5834
|
2024-11-21 11:55 |
2016-06-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268578
|
6.1 |
MEDIUM
Network
|
wordpress
|
wordpress
|
Cross-site scripting (XSS) vulnerability in the column_title function in wp-admin/includes/class-wp-media-list-table.php in WordPress before 4.5.3 allows remote attackers to inject arbitrary web scri…
|
CWE-79
Cross-site Scripting
|
CVE-2016-5833
|
2024-11-21 11:55 |
2016-06-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268579
|
7.5 |
HIGH
Network
|
wordpress
|
wordpress
|
The customizer in WordPress before 4.5.3 allows remote attackers to bypass intended redirection restrictions via unspecified vectors.
|
NVD-CWE-noinfo
|
CVE-2016-5832
|
2024-11-21 11:55 |
2016-06-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268580
|
7.8 |
HIGH
Local
|
debian linux novell canonical
|
debian_linux linux_kernel suse_linux_enterprise_real_time_extension ubuntu_linux
|
Multiple heap-based buffer overflows in the hiddev_ioctl_usage function in drivers/hid/usbhid/hiddev.c in the Linux kernel through 4.6.3 allow local users to cause a denial of service or possibly hav…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2016-5829
|
2024-11-21 11:55 |
2016-06-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|