|
265641
|
6.5 |
MEDIUM
Network
|
hp
|
system_management_homepage
|
HPE System Management Homepage before v7.6 allows remote attackers to obtain sensitive information via unspecified vectors, related to an "HSTS" issue.
|
CWE-254
7PK - Security Features
|
CVE-2016-4394
|
2024-11-21 11:52 |
2016-10-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265642
|
5.4 |
MEDIUM
Network
|
hp
|
system_management_homepage
|
HPE System Management Homepage before v7.6 allows "remote authenticated" attackers to obtain sensitive information via unspecified vectors, related to an "XSS" issue.
|
CWE-79
Cross-site Scripting
|
CVE-2016-4393
|
2024-11-21 11:52 |
2016-10-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265643
|
6.5 |
MEDIUM
Network
|
sap
|
sapcryptolib
|
The DSA algorithm implementation in SAP SAPCRYPTOLIB 5.555.38 does not properly check signatures, which allows remote authenticated users to impersonate arbitrary users via unspecified vectors, aka S…
|
CWE-284
Improper Access Control
|
CVE-2016-4407
|
2024-11-21 11:52 |
2016-10-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265644
|
7.5 |
HIGH
Network
|
sap
|
netweaver sap_aba sap_basis
|
The (1) SAP_BASIS and (2) SAP_ABA components 7.00 SP Level 0031 in SAP NetWeaver 2004s might allow remote attackers to spoof IP addresses written to the Security Audit Log via vectors related to the …
|
CWE-284
Improper Access Control
|
CVE-2016-4551
|
2024-11-21 11:52 |
2016-10-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265645
|
8.1 |
HIGH
Network
|
hp
|
keyview
|
The Filter SDK in HPE KeyView 10.18 through 10.24 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4387, CVE-2016-4388, and CVE-2016-…
|
NVD-CWE-noinfo
|
CVE-2016-4390
|
2024-11-21 11:52 |
2016-10-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265646
|
8.1 |
HIGH
Network
|
hp
|
keyview
|
The Filter SDK in HPE KeyView 10.18 through 10.24 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4387, CVE-2016-4388, and CVE-2016-…
|
NVD-CWE-noinfo
|
CVE-2016-4389
|
2024-11-21 11:52 |
2016-10-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265647
|
8.1 |
HIGH
Network
|
hp
|
keyview
|
The Filter SDK in HPE KeyView 10.18 through 10.24 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4387, CVE-2016-4389, and CVE-2016-…
|
NVD-CWE-noinfo
|
CVE-2016-4388
|
2024-11-21 11:52 |
2016-10-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265648
|
8.1 |
HIGH
Network
|
hp
|
keyview
|
The Filter SDK in HPE KeyView 10.18 through 10.24 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4388, CVE-2016-4389, and CVE-2016-…
|
NVD-CWE-noinfo
|
CVE-2016-4387
|
2024-11-21 11:52 |
2016-10-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265649
|
9.8 |
CRITICAL
Network
|
apache
|
struts
|
Apache Struts 2 before 2.3.29 and 2.5.x before 2.5.1 allow attackers to have unspecified impact via vectors related to improper action name clean up.
|
NVD-CWE-noinfo
|
CVE-2016-4436
|
2024-11-21 11:52 |
2016-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265650
|
7.8 |
HIGH
Local
|
hp
|
network_automation
|
HPE Network Automation Software 10.10 allows local users to write to arbitrary files via unspecified vectors.
|
NVD-CWE-noinfo
|
CVE-2016-4386
|
2024-11-21 11:52 |
2016-09-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|