|
267081
|
7.0 |
HIGH
Local
|
google
|
android
|
In an audio driver in all Qualcomm products with Android releases from CAF using the Linux kernel, when a sanity check encounters a length value not in the correct range, an error message is printed,…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2016-5853
|
2024-11-21 11:55 |
2017-08-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267082
|
5.9 |
MEDIUM
Network
|
ibm
|
emptoris_strategic_supply_management
|
IBM Emptoris Strategic Supply Management Platform 10.0 and 10.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security.…
|
CWE-200
Information Exposure
|
CVE-2016-6029
|
2024-11-21 11:55 |
2017-08-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267083
|
5.4 |
MEDIUM
Network
|
ibm
|
emptoris_strategic_supply_management
|
IBM Emptoris Strategic Supply Management Platform 10.0 and 10.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering t…
|
CWE-79
Cross-site Scripting
|
CVE-2016-6021
|
2024-11-21 11:55 |
2017-08-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267084
|
5.4 |
MEDIUM
Network
|
ibm
|
emptoris_strategic_supply_management emptoris_supplier_lifecycle_management
|
IBM Emptoris Supplier Lifecycle Management 10.0.x and 10.1.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the …
|
CWE-79
Cross-site Scripting
|
CVE-2016-6121
|
2024-11-21 11:55 |
2017-08-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267085
|
7.5 |
HIGH
Network
|
trendmicro
|
control_manager
|
Information Disclosure vulnerability in the Dashboard and Error Pages in Trend Micro Control Manager SP3 6.0.
|
CWE-200
Information Exposure
|
CVE-2016-6220
|
2024-11-21 11:55 |
2017-08-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267086
|
6.1 |
MEDIUM
Network
|
ektron
|
ektron_content_management_system
|
Cross-site scripting (XSS) vulnerability in Ektron Content Management System before 9.1.0.184SP3(9.1.0.184.3.127) allows remote attackers to inject arbitrary web script or HTML via the rptStatus para…
|
CWE-79
Cross-site Scripting
|
CVE-2016-6133
|
2024-11-21 11:55 |
2017-07-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267087
|
5.4 |
MEDIUM
Network
|
ibm
|
emptoris_strategic_supply_management
|
IBM Emptoris Supplier Lifecycle Management 10.1.0.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended …
|
CWE-79
Cross-site Scripting
|
CVE-2016-6118
|
2024-11-21 11:55 |
2017-07-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267088
|
4.3 |
MEDIUM
Network
|
ibm
|
emptoris_contract_management
|
IBM Emptoris Contract Management 10.0 and 10.1 reveals detailed error messages in certain features that could cause an attacker to gain additional information to conduct further attacks. IBM X-Force …
|
CWE-200
Information Exposure
|
CVE-2016-6018
|
2024-11-21 11:55 |
2017-07-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267089
|
6.5 |
MEDIUM
Network
|
redhat
|
enterprise_linux
|
The mod_dontdothat component of the mod_dav_svn Apache module in Subversion as packaged in Red Hat Enterprise Linux 5.11 does not properly detect recursion during entity expansion, which allows remot…
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2016-6312
|
2024-11-21 11:55 |
2017-07-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267090
|
5.4 |
MEDIUM
Network
|
ibm
|
emptoris_strategic_supply_management
|
IBM Emptoris Strategic Supply Management Platform 10.0.0.x through 10.1.1.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thu…
|
CWE-79
Cross-site Scripting
|
CVE-2016-6019
|
2024-11-21 11:55 |
2017-07-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|