|
265541
|
7.8 |
HIGH
Local
|
canonical linux oracle novell
|
ubuntu_linux linux_kernel linux suse_linux_enterprise_server suse_linux_enterprise_debuginfo suse_linux_enterprise_software_development_kit
|
The get_rock_ridge_filename function in fs/isofs/rock.c in the Linux kernel before 4.5.5 mishandles NM (aka alternate name) entries containing \0 characters, which allows local users to obtain sensit…
|
CWE-200
Information Exposure
|
CVE-2016-4913
|
2024-11-21 11:53 |
2016-05-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265542
|
7.8 |
HIGH
Local
|
novell redhat canonical linux oracle
|
suse_linux_enterprise_desktop suse_linux_enterprise_workstation_extension suse_linux_enterprise_module_for_public_cloud suse_linux_enterprise_server opensuse_leap suse_linux_enterprise…
|
Use-after-free vulnerability in drivers/net/ppp/ppp_generic.c in the Linux kernel before 4.5.2 allows local users to cause a denial of service (memory corruption and system crash, or spinlock) or pos…
|
CWE-416
Use After Free
|
CVE-2016-4805
|
2024-11-21 11:53 |
2016-05-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265543
|
7.5 |
HIGH
Network
|
zulip
|
zulip
|
In zulip before 1.3.12, deactivated users could access messages if SSO was enabled.
|
NVD-CWE-noinfo
|
CVE-2016-4427
|
2024-11-21 11:52 |
2022-07-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265544
|
4.3 |
MEDIUM
Network
|
zulip
|
zulip
|
In zulip before 1.3.12, bot API keys were accessible to other users in the same realm.
|
NVD-CWE-noinfo
|
CVE-2016-4426
|
2024-11-21 11:52 |
2022-07-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265545
|
9.8 |
CRITICAL
Network
|
haxx
|
curl
|
Curl before 7.49.1 in Apple OS X before macOS Sierra prior to 10.12 allows remote or local attackers to execute arbitrary code, gain sensitive information, cause denial-of-service conditions, bypass …
|
NVD-CWE-noinfo
|
CVE-2016-4606
|
2024-11-21 11:52 |
2020-02-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265546
|
7.5 |
HIGH
Network
|
apple
|
mac_os_x safari
|
A Cross-origin vulnerability exists in WebKit in Apple Safari before 10.0.1 when processing location attributes, which could let a remote malicious user obtain sensitive information.
|
CWE-200
Information Exposure
|
CVE-2016-4676
|
2024-11-21 11:52 |
2020-02-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265547
|
8.8 |
HIGH
Network
|
webkitgtk canonical
|
webkitgtk\+ ubuntu_linux
|
WebKitGTK+ before 2.14.0: A use-after-free vulnerability can allow remote attackers to cause a DoS
|
CWE-416
Use After Free
|
CVE-2016-4761
|
2024-11-21 11:52 |
2020-01-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265548
|
8.8 |
HIGH
Network
|
cloudera
|
cdh
|
In Cloudera CDH before 5.7.1, Impala REVOKE ALL ON SERVER commands do not revoke all privileges.
|
CWE-863
Incorrect Authorization
|
CVE-2016-4572
|
2024-11-21 11:52 |
2019-11-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265549
|
9.8 |
CRITICAL
Network
|
arubanetworks
|
clearpass
|
Aruba ClearPass Policy Manager before 6.5.7 and 6.6.x before 6.6.2 allows attackers to obtain database credentials.
|
CWE-522
Insufficiently Protected Credentials
|
CVE-2016-4401
|
2024-11-21 11:52 |
2019-11-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265550
|
6.5 |
MEDIUM
Network
|
apple
|
iphone_os mac_os apple_tv
|
In iOS before 9.3.3, tvOS before 9.2.2, and OS X El Capitan before v10.11.6 and Security Update 2016-004, a downgrade issue existed with HTTP authentication credentials saved in Keychain. This issue …
|
CWE-200
Information Exposure
|
CVE-2016-4644
|
2024-11-21 11:52 |
2019-01-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|