|
256911
|
5.3 |
MEDIUM
Network
|
ibm
|
qradar_security_information_and_event_manager qradar_incident_forensics
|
IBM QRadar 7.2 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM Reference #: 1999533.
|
CWE-200
Information Exposure
|
CVE-2016-9720
|
2024-11-21 12:01 |
2017-03-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256912
|
6.1 |
MEDIUM
Local
|
ibm
|
business_process_manager websphere
|
IBM Business Process Manager 7.5, 8.0, and 8.5 has a file download capability that is vulnerable to a set of attacks. Ultimately, an attacker can cause an unauthenticated victim to download a malicio…
|
CWE-20
Improper Input Validation
|
CVE-2016-9693
|
2024-11-21 12:01 |
2017-03-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256913
|
7.5 |
HIGH
Network
|
webkit
|
webkit
|
The regex code in Webkit 2.4.11 allows remote attackers to cause a denial of service (memory consumption) as demonstrated in a large number of ($ (open parenthesis and dollar) followed by {-2,16} and…
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2016-9643
|
2024-11-21 12:01 |
2017-03-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256914
|
5.9 |
MEDIUM
Network
|
eset
|
endpoint_security endpoint_antivirus
|
The esets_daemon service in ESET Endpoint Antivirus for macOS before 6.4.168.0 and Endpoint Security for macOS before 6.4.168.0 does not properly verify X.509 certificates from the edf.eset.com SSL s…
|
CWE-295
Improper Certificate Validation
|
CVE-2016-9892
|
2024-11-21 12:01 |
2017-03-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256915
|
5.5 |
MEDIUM
Local
|
graphicsmagick debian opensuse
|
graphicsmagick debian_linux leap opensuse
|
The MagickRealloc function in memory.c in Graphicsmagick 1.3.25 allows remote attackers to cause a denial of service (crash) via large dimensions in a jpeg image.
|
CWE-20
Improper Input Validation
|
CVE-2016-9830
|
2024-11-21 12:01 |
2017-03-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256916
|
5.5 |
MEDIUM
Local
|
libav
|
libav
|
libavcodec/ituh263dec.c in libav 11.8 allows remote attackers to cause a denial of service (crash) via vectors involving left shift of a negative value.
|
CWE-189
Numeric Errors
|
CVE-2016-9826
|
2024-11-21 12:01 |
2017-03-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256917
|
5.5 |
MEDIUM
Local
|
libav
|
libav
|
libswscale/utils.c in libav 11.8 allows remote attackers to cause a denial of service (crash) via vectors involving left shift of a negative value.
|
CWE-189
Numeric Errors
|
CVE-2016-9825
|
2024-11-21 12:01 |
2017-03-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256918
|
5.5 |
MEDIUM
Local
|
libav
|
libav
|
Integer overflow in libswscale/x86/swscale.c in libav 11.8 allows remote attackers to cause a denial of service (crash) via a crafted file.
|
CWE-190
Integer Overflow or Wraparound
|
CVE-2016-9824
|
2024-11-21 12:01 |
2017-03-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256919
|
5.5 |
MEDIUM
Local
|
libav
|
libav
|
libavcodec/x86/mpegvideo.c in libav 11.8 allows remote attackers to cause a denial of service (crash) via a crafted file.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2016-9823
|
2024-11-21 12:01 |
2017-03-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256920
|
5.5 |
MEDIUM
Local
|
libav
|
libav
|
Integer overflow in libavcodec/mpeg12dec.c in libav 11.8 allows remote attackers to cause a denial of service (crash) via a crafted file.
|
CWE-190
Integer Overflow or Wraparound
|
CVE-2016-9822
|
2024-11-21 12:01 |
2017-03-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|