|
258111
|
7.5 |
HIGH
Network
|
openstack
redhat
|
puppet-tripleo
openstack
|
puppet-tripleo before versions 5.5.0, 6.2.0 is vulnerable to an access-control flaw in the IPtables rules management, which allowed the creation of TCP/UDP rules with empty port values. If SSL is ena…
|
CWE-284
Improper Access Control
|
CVE-2016-9599
|
2024-11-21 12:01 |
2018-04-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258112
|
8.1 |
HIGH
Network
|
haxx
|
curl
|
curl before version 7.52.1 is vulnerable to an uninitialized random in libcurl's internal function that returns a good 32bit random value. Having a weak or virtually non-existent random value makes …
|
CWE-665
Improper Initialization
|
CVE-2016-9594
|
2024-11-21 12:01 |
2018-04-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258113
|
8.1 |
HIGH
Network
|
haxx
|
curl
|
curl before version 7.52.0 is vulnerable to a buffer overflow when doing a large floating point output in libcurl's implementation of the printf() functions. If there are any application that accepts…
|
-
|
CVE-2016-9586
|
2024-11-21 12:01 |
2018-04-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258114
|
8.8 |
HIGH
Network
|
theforeman
redhat
|
foreman
satellite
|
foreman-debug before version 1.15.0 is vulnerable to a flaw in foreman-debug's logging. An attacker with access to the foreman log file would be able to view passwords, allowing them to access those …
|
CWE-255
Credentials Management
|
CVE-2016-9593
|
2024-11-21 12:01 |
2018-04-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258115
|
4.3 |
MEDIUM
Network
|
redhat
|
openshift
|
openshift before versions 3.3.1.11, 3.2.1.23, 3.4 is vulnerable to a flaw when a volume fails to detach, which causes the delete operation to fail with 'VolumeInUse' error. Since the delete operation…
|
CWE-399
Resource Management Errors
|
CVE-2016-9592
|
2024-11-21 12:01 |
2018-04-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258116
|
5.3 |
MEDIUM
Network
|
ikiwiki
debian
|
ikiwiki
debian_linux
|
ikiwiki before 3.20161229 incorrectly called the CGI::FormBuilder->field method (similar to the CGI->param API that led to Bugzilla's CVE-2014-1572), which can be abused to lead to commit metadata fo…
|
CWE-287
Improper Authentication
|
CVE-2016-9646
|
2024-11-21 12:01 |
2018-04-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258117
|
6.5 |
MEDIUM
Network
|
ikiwiki
|
ikiwiki
|
The fix for ikiwiki for CVE-2016-10026 was incomplete resulting in editing restriction bypass for git revert when using git versions older than 2.8.0. This has been fixed in 3.20161229.
|
CWE-284
Improper Access Control
|
CVE-2016-9645
|
2024-11-21 12:01 |
2018-04-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258118
|
5.3 |
MEDIUM
Network
|
ibm
|
cognos_analytics
|
IBM Predictive Solutions Foundation (IBM Cognos Analytics 11.0) reveals sensitive information in detailed error messages that could aid an attacker in further attacks against the system. IBM X-Force …
|
CWE-200
Information Exposure
|
CVE-2016-9711
|
2024-11-21 12:01 |
2018-03-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258119
|
9.8 |
CRITICAL
Network
|
pivotal_software
|
gemfire_for_pivotal_cloud_foundry
|
The GemFire broker for Cloud Foundry 1.6.x before 1.6.5 and 1.7.x before 1.7.1 has multiple API endpoints which do not require authentication and could be used to gain access to the cluster managed b…
|
CWE-287
Improper Authentication
|
CVE-2016-9880
|
2024-11-21 12:01 |
2018-03-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258120
|
6.3 |
MEDIUM
Network
|
freeipa
|
freeipa
|
Ipa versions 4.2.x, 4.3.x before 4.3.3 and 4.4.x before 4.4.3 did not properly check the user's permissions while modifying certificate profiles in IdM's certprofile-mod command. An authenticated, un…
|
CWE-285
Improper Authorization
|
CVE-2016-9575
|
2024-11-21 12:01 |
2018-03-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
