|
265021
|
9.8 |
CRITICAL
Network
|
google
|
chrome_os
|
Chrome OS before 53.0.2785.144 allows remote attackers to execute arbitrary commands at boot.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2016-5179
|
2024-11-21 11:53 |
2018-03-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265022
|
9.8 |
CRITICAL
Network
|
apache
|
ws-xmlrpc
|
The Apache XML-RPC (aka ws-xmlrpc) library 3.1.3, as used in Apache Archiva, allows remote attackers to execute arbitrary code via a crafted serialized Java object in an <ex:serializable> element.
|
CWE-502
Deserialization of Untrusted Data
|
CVE-2016-5003
|
2024-11-21 11:53 |
2017-10-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265023
|
7.8 |
HIGH
Local
|
apache
|
xml-rpc
|
XML external entity (XXE) vulnerability in the Apache XML-RPC (aka ws-xmlrpc) library 3.1.3, as used in Apache Archiva, allows remote attackers to conduct server-side request forgery (SSRF) attacks v…
|
CWE-611
XXE
|
CVE-2016-5002
|
2024-11-21 11:53 |
2017-10-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265024
|
7.5 |
HIGH
Network
|
juniper
|
junose
|
Receipt of a specifically malformed IPv6 packet processed by the router may trigger a line card reset: processor exception 0x68616c74 (halt) in task: scheduler. The line card will reboot and recover …
|
CWE-19
Data Processing Errors
|
CVE-2016-4925
|
2024-11-21 11:53 |
2017-10-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265025
|
5.5 |
MEDIUM
Local
|
juniper
|
junos
|
An incorrect permissions vulnerability in Juniper Networks Junos OS on vMX may allow local unprivileged users on a host system read access to vMX or vPFE images and obtain sensitive information conta…
|
CWE-275
Permission Issues
|
CVE-2016-4924
|
2024-11-21 11:53 |
2017-10-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265026
|
6.1 |
MEDIUM
Network
|
juniper
|
junos
|
Insufficient cross site scripting protection in J-Web component in Juniper Networks Junos OS may potentially allow a remote unauthenticated user to inject web script or HTML and steal sensitive data …
|
CWE-79
Cross-site Scripting
|
CVE-2016-4923
|
2024-11-21 11:53 |
2017-10-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265027
|
7.8 |
HIGH
Local
|
juniper
|
junos
|
Certain combinations of Junos OS CLI commands and arguments have been found to be exploitable in a way that can allow unauthorized access to the operating system. This may allow any user with permiss…
|
CWE-77
Command Injection
|
CVE-2016-4922
|
2024-11-21 11:53 |
2017-10-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265028
|
7.5 |
HIGH
Network
|
juniper
|
junos
|
By flooding a Juniper Networks router running Junos OS with specially crafted IPv6 traffic, all available resources can be consumed, leading to the inability to store next hop information for legitim…
|
CWE-399
Resource Management Errors
|
CVE-2016-4921
|
2024-11-21 11:53 |
2017-10-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265029
|
5.5 |
MEDIUM
Local
|
apache
|
hadoop
|
This is an information disclosure vulnerability in Apache Hadoop before 2.6.4 and 2.7.x before 2.7.2 in the short-circuit reads feature of HDFS. A local user on an HDFS DataNode may be able to craft …
|
CWE-200
Information Exposure
|
CVE-2016-5001
|
2024-11-21 11:53 |
2017-08-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265030
|
9.1 |
CRITICAL
Network
|
apache netapp canonical debian redhat oracle
|
tomcat snap_creator_framework oncommand_insight oncommand_shift ubuntu_linux debian_linux enterprise_linux_desktop enterprise_linux_workstation jboss_enterprise_application_pl…
|
In Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 a malicious web application was able to bypass a configured SecurityManager via a Tomca…
|
NVD-CWE-noinfo
|
CVE-2016-5018
|
2024-11-21 11:53 |
2017-08-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|