|
268391
|
9.8 |
CRITICAL
Network
|
navis
|
webaccess
|
SQL injection vulnerability in news pages in Cargotec Navis WebAccess before 2016-08-10 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
|
CWE-89
SQL Injection
|
CVE-2016-5817
|
2024-11-21 11:55 |
2016-08-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268392
|
5.4 |
MEDIUM
Network
|
theforeman
|
foreman
|
Cross-site scripting (XSS) vulnerability in app/assets/javascripts/host_edit_interfaces.js in Foreman before 1.12.2 allows remote authenticated users to inject arbitrary web script or HTML via the ne…
|
CWE-79
Cross-site Scripting
|
CVE-2016-6320
|
2024-11-21 11:55 |
2016-08-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268393
|
6.1 |
MEDIUM
Network
|
theforeman
|
foreman
|
Cross-site scripting (XSS) vulnerability in app/helpers/form_helper.rb in Foreman before 1.12.2, as used by Remote Execution and possibly other plugins, allows remote attackers to inject arbitrary we…
|
CWE-79
Cross-site Scripting
|
CVE-2016-6319
|
2024-11-21 11:55 |
2016-08-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268394
|
9.1 |
CRITICAL
Network
|
debian collectd fedoraproject
|
debian_linux collectd fedora
|
Heap-based buffer overflow in the parse_packet function in network.c in collectd before 5.4.3 and 5.x before 5.5.2 allows remote attackers to cause a denial of service (daemon crash) or possibly exec…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2016-6254
|
2024-11-21 11:55 |
2016-08-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268395
|
5.8 |
MEDIUM
Local
|
sap
|
sapcar_archive_tool
|
SAP SAPCAR allows local users to change the permissions of arbitrary files and consequently gain privileges via a hard link attack on files extracted from an archive, possibly related to SAP Security…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2016-5847
|
2024-11-21 11:55 |
2016-08-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268396
|
5.5 |
MEDIUM
Local
|
sap
|
sapcar
|
SAP SAPCAR does not check the return value of file operations when extracting files, which allows remote attackers to cause a denial of service (program crash) via an invalid file name in an archive …
|
NVD-CWE-Other
|
CVE-2016-5845
|
2024-11-21 11:55 |
2016-08-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268397
|
6.5 |
MEDIUM
Network
|
libgd debian opensuse
|
libgd debian_linux leap
|
gd_tga.c in the GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA file.
|
CWE-125
Out-of-bounds Read
|
CVE-2016-6214
|
2024-11-21 11:55 |
2016-08-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268398
|
6.5 |
MEDIUM
Network
|
libgd debian opensuse php
|
libgd debian_linux leap php
|
Integer overflow in the _gdContributionsAlloc function in gd_interpolation.c in GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds memory…
|
CWE-119 CWE-787 CWE-190
Incorrect Access of Indexable Resource ('Range Error') Out-of-bounds Write Integer Overflow or Wraparound
|
CVE-2016-6207
|
2024-11-21 11:55 |
2016-08-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268399
|
6.5 |
MEDIUM
Network
|
libgd debian opensuse
|
libgd debian_linux leap
|
The output function in gd_gif_out.c in the GD Graphics Library (aka libgd) allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted image.
|
CWE-125
Out-of-bounds Read
|
CVE-2016-6161
|
2024-11-21 11:55 |
2016-08-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268400
|
6.5 |
MEDIUM
Network
|
libgd debian opensuse
|
libgd debian_linux leap
|
The gdImageCreateFromTgaCtx function in the GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA file.
|
CWE-125
Out-of-bounds Read
|
CVE-2016-6132
|
2024-11-21 11:55 |
2016-08-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|