|
265261
|
7.5 |
HIGH
Network
|
wordpress
|
wordpress
|
WordPress before 4.5.3 allows remote attackers to bypass intended access restrictions and remove a category attribute from a post via unspecified vectors.
|
NVD-CWE-noinfo
|
CVE-2016-5837
|
2024-11-21 11:55 |
2016-06-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265262
|
7.5 |
HIGH
Network
|
wordpress
|
wordpress
|
The oEmbed protocol implementation in WordPress before 4.5.3 allows remote attackers to cause a denial of service via unspecified vectors.
|
NVD-CWE-noinfo
|
CVE-2016-5836
|
2024-11-21 11:55 |
2016-06-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265263
|
7.5 |
HIGH
Network
|
wordpress
|
wordpress
|
WordPress before 4.5.3 allows remote attackers to obtain sensitive revision-history information by leveraging the ability to read a post, related to wp-admin/includes/ajax-actions.php and wp-admin/re…
|
CWE-200
Information Exposure
|
CVE-2016-5835
|
2024-11-21 11:55 |
2016-06-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265264
|
6.1 |
MEDIUM
Network
|
wordpress
|
wordpress
|
Cross-site scripting (XSS) vulnerability in the wp_get_attachment_link function in wp-includes/post-template.php in WordPress before 4.5.3 allows remote attackers to inject arbitrary web script or HT…
|
CWE-79
Cross-site Scripting
|
CVE-2016-5834
|
2024-11-21 11:55 |
2016-06-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265265
|
6.1 |
MEDIUM
Network
|
wordpress
|
wordpress
|
Cross-site scripting (XSS) vulnerability in the column_title function in wp-admin/includes/class-wp-media-list-table.php in WordPress before 4.5.3 allows remote attackers to inject arbitrary web scri…
|
CWE-79
Cross-site Scripting
|
CVE-2016-5833
|
2024-11-21 11:55 |
2016-06-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265266
|
7.5 |
HIGH
Network
|
wordpress
|
wordpress
|
The customizer in WordPress before 4.5.3 allows remote attackers to bypass intended redirection restrictions via unspecified vectors.
|
NVD-CWE-noinfo
|
CVE-2016-5832
|
2024-11-21 11:55 |
2016-06-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265267
|
7.8 |
HIGH
Local
|
debian linux novell canonical
|
debian_linux linux_kernel suse_linux_enterprise_real_time_extension ubuntu_linux
|
Multiple heap-based buffer overflows in the hiddev_ioctl_usage function in drivers/hid/usbhid/hiddev.c in the Linux kernel through 4.6.3 allow local users to cause a denial of service or possibly hav…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2016-5829
|
2024-11-21 11:55 |
2016-06-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265268
|
7.8 |
HIGH
Local
|
linux novell debian canonical
|
linux_kernel suse_linux_enterprise_real_time_extension debian_linux ubuntu_linux
|
The start_thread function in arch/powerpc/kernel/process.c in the Linux kernel through 4.6.3 on powerpc platforms mishandles transactional state, which allows local users to cause a denial of service…
|
CWE-20
Improper Input Validation
|
CVE-2016-5828
|
2024-11-21 11:55 |
2016-06-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265269
|
4.6 |
MEDIUM
Network
|
netapp
|
snap_creator_framework
|
NetApp Snap Creator Framework before 4.3P1 allows remote authenticated users to conduct clickjacking attacks via unspecified vectors.
|
CWE-1021
Improper Restriction of Rendered UI Layers or Frames
|
CVE-2016-5710
|
2024-11-21 11:54 |
2020-02-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265270
|
7.8 |
HIGH
Local
|
symantec
|
norton_antivirus norton_family norton_antivirus_with_backup norton_security norton_360 norton_internet_security norton_security_with_backup endpoint_protection endpoint_protec…
|
A Privilege Escalation vulnerability exists in Symantec Norton Antivirus, Norton AntiVirus with Backup, Norton Security, Norton Security with Backup, Norton Internet Security, Norton 360, Endpoint Pr…
|
CWE-427
Uncontrolled Search Path Element
|
CVE-2016-5311
|
2024-11-21 11:54 |
2020-01-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|