|
266351
|
9.8 |
CRITICAL
Network
|
facebook
|
hhvm
|
The array_*_recursive functions in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors, related to recursion.
|
NVD-CWE-Other
|
CVE-2016-6874
|
2024-11-21 11:56 |
2017-02-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266352
|
9.8 |
CRITICAL
Network
|
facebook
|
hhvm
|
Self recursion in compact in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors.
|
NVD-CWE-Other
|
CVE-2016-6873
|
2024-11-21 11:56 |
2017-02-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266353
|
9.8 |
CRITICAL
Network
|
facebook
|
hhvm
|
Integer overflow in StringUtil::implode in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors.
|
CWE-190
Integer Overflow or Wraparound
|
CVE-2016-6872
|
2024-11-21 11:56 |
2017-02-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266354
|
9.8 |
CRITICAL
Network
|
facebook
|
hhvm
|
Integer overflow in bcmath in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors, which triggers a buffer overflow.
|
CWE-190
Integer Overflow or Wraparound
|
CVE-2016-6871
|
2024-11-21 11:56 |
2017-02-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266355
|
9.8 |
CRITICAL
Network
|
facebook
|
hhvm
|
Out-of-bounds write in the (1) mb_detect_encoding, (2) mb_send_mail, and (3) mb_detect_order functions in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors.
|
CWE-787
Out-of-bounds Write
|
CVE-2016-6870
|
2024-11-21 11:56 |
2017-02-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266356
|
7.5 |
HIGH
Network
|
suckless fedoraproject
|
slock fedora
|
slock allows attackers to bypass the screen lock via vectors involving an invalid password hash, which triggers a NULL pointer dereference and crash.
|
CWE-476
NULL Pointer Dereference
|
CVE-2016-6866
|
2024-11-21 11:56 |
2017-02-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266357
|
5.5 |
MEDIUM
Local
|
libav
|
libav
|
Heap-based buffer overflow in the ff_audio_resample function in resample.c in libav before 11.4 allows remote attackers to cause a denial of service (crash) via vectors related to buffer resizing.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2016-6832
|
2024-11-21 11:56 |
2017-02-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266358
|
9.8 |
CRITICAL
Network
|
netapp
|
oncommand_unified_manager_for_clustered_data_ontap
|
NetApp OnCommand Unified Manager for Clustered Data ONTAP 6.3 through 6.4P1 contain a default privileged account, which allows remote attackers to execute arbitrary code via unspecified vectors.
|
NVD-CWE-noinfo
|
CVE-2016-6667
|
2024-11-21 11:56 |
2017-02-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266359
|
5.9 |
MEDIUM
Network
|
netapp
|
data_ontap
|
NetApp Data ONTAP before 8.2.4P5, when operating in 7-Mode, allows remote attackers to obtain information about the volumes configured for HTTP access.
|
CWE-200
Information Exposure
|
CVE-2016-6495
|
2024-11-21 11:56 |
2017-02-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266360
|
8.1 |
HIGH
Network
|
forgerock
|
racf_connector
|
Unspecified methods in the RACF Connector component before 1.1.1.0 in ForgeRock OpenIDM and OpenICF improperly call the SearchControls constructor with returnObjFlag set to true, which allows remote …
|
CWE-20
Improper Input Validation
|
CVE-2016-6500
|
2024-11-21 11:56 |
2017-02-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|