|
268351
|
6.5 |
MEDIUM
Network
|
libarchive redhat oracle
|
libarchive enterprise_linux_hpc_node enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation enterprise_linux_server_aus enterprise_linux_server_eus enterpr…
|
Integer overflow in the ISO parser in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) via a crafted ISO file.
|
CWE-190
Integer Overflow or Wraparound
|
CVE-2016-5844
|
2024-11-21 11:55 |
2016-09-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268352
|
8.6 |
HIGH
Local
|
rockwellautomation
|
rslogix_500_starter_edition rslogix_micro_starter_lite rslogix_micro_developer rslogix_500_standard_edition rslogix_500_professional_edition
|
Buffer overflow in Rockwell Automation RSLogix Micro Starter Lite, RSLogix Micro Developer, RSLogix 500 Starter Edition, RSLogix 500 Standard Edition, and RSLogix 500 Professional Edition allows remo…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2016-5814
|
2024-11-21 11:55 |
2016-09-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268353
|
9.4 |
CRITICAL
Network
|
otrs
|
faq
|
Multiple SQL injection vulnerabilities in the FAQ package 2.x before 2.3.6, 4.x before 4.0.5, and 5.x before 5.0.5 in Open Ticket Request System (OTRS) allow remote attackers to execute arbitrary SQL…
|
CWE-89
SQL Injection
|
CVE-2016-5843
|
2024-11-21 11:55 |
2016-09-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268354
|
9.8 |
CRITICAL
Network
|
nodejs openssl
|
node.js openssl
|
Integer overflow in the MDC2_Update function in crypto/mdc2/mdc2dgst.c in OpenSSL before 1.1.0 allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or poss…
|
CWE-787
Out-of-bounds Write
|
CVE-2016-6303
|
2024-11-21 11:55 |
2016-09-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268355
|
7.5 |
HIGH
Network
|
openssl oracle
|
openssl solaris linux
|
The tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the HMAC size during validation of the ticket length, which allows remote attackers to cause a denial of serv…
|
CWE-20
Improper Input Validation
|
CVE-2016-6302
|
2024-11-21 11:55 |
2016-09-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268356
|
4.3 |
MEDIUM
Network
|
cisco
|
hosted_collaboration_mediation_fulfillment
|
Directory traversal vulnerability in the web interface in Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) 10.6(3) and earlier allows remote authenticated users to read arbitrary files via a …
|
CWE-22
Path Traversal
|
CVE-2016-6370
|
2024-11-21 11:55 |
2016-09-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268357
|
6.5 |
MEDIUM
Network
|
ibm
|
websphere_portal
|
IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF30, 8.0.0 through 8.0.0.1 CF21, and 8.5.0 before CF12 allows remote authenticated users to cause a…
|
CWE-284
Improper Access Control
|
CVE-2016-5954
|
2024-11-21 11:55 |
2016-09-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268358
|
5.5 |
MEDIUM
Local
|
ibm
|
tivoli_storage_manager_for_space_management
|
IBM Tivoli Storage Manager for Space Management (aka Spectrum Protect for Space Management) 6.3.x before 6.3.2.6, 6.4.x before 6.4.3.3, and 7.1.x before 7.1.6, when certain dsmsetpw tracing is config…
|
CWE-200
Information Exposure
|
CVE-2016-5927
|
2024-11-21 11:55 |
2016-09-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268359
|
5.3 |
MEDIUM
Network
|
drupal
|
drupal
|
The Views module 7.x-3.x before 7.x-3.14 in Drupal 7.x and the Views module in Drupal 8.x before 8.1.3 might allow remote authenticated users to bypass intended access restrictions and obtain sensiti…
|
CWE-200
Information Exposure
|
CVE-2016-6212
|
2024-11-21 11:55 |
2016-09-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268360
|
8.8 |
HIGH
Network
|
drupal debian
|
drupal debian_linux
|
The User module in Drupal 7.x before 7.44 allows remote authenticated users to gain privileges via vectors involving contributed or custom code that triggers a rebuild of the user profile form.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2016-6211
|
2024-11-21 11:55 |
2016-09-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|