|
264621
|
7.5 |
HIGH
Network
|
sap
|
hana
|
SAP HANA DB 1.00.73.00.389160 allows remote attackers to cause a denial of service (process termination) or execute arbitrary code via vectors related to an IMPORT statement, aka SAP Security Note 22…
|
CWE-20
Improper Input Validation
|
CVE-2016-6148
|
2024-11-21 11:55 |
2016-08-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264622
|
9.8 |
CRITICAL
Network
|
sap
|
trex
|
An unspecified interface in SAP TREX 7.10 Revision 63 allows remote attackers to execute arbitrary OS commands with SIDadm privileges via unspecified vectors, aka SAP Security Note 2234226.
|
CWE-78
OS Command
|
CVE-2016-6147
|
2024-11-21 11:55 |
2016-08-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264623
|
5.3 |
MEDIUM
Network
|
sap
|
hana_db
|
The SQL interface in SAP HANA DB 1.00.091.00.1418659308 provides different error messages for failed login attempts depending on whether the username exists and is locked when the detailed_error_on_c…
|
CWE-200
Information Exposure
|
CVE-2016-6145
|
2024-11-21 11:55 |
2016-08-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264624
|
8.1 |
HIGH
Network
|
sap
|
hana
|
The SQL interface in SAP HANA before Revision 102 does not limit the number of login attempts for the SYSTEM user when the password_lock_for_system_user is not supported or is configured as "False," …
|
CWE-284
Improper Access Control
|
CVE-2016-6144
|
2024-11-21 11:55 |
2016-08-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264625
|
9.8 |
CRITICAL
Network
|
sap
|
trex
|
SAP TREX 7.10 Revision 63 allows remote attackers to write to arbitrary files via vectors related to RFC-Gateway, aka SAP Security Note 2203591.
|
CWE-284
Improper Access Control
|
CVE-2016-6140
|
2024-11-21 11:55 |
2016-08-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264626
|
9.8 |
CRITICAL
Network
|
sap
|
trex
|
SAP TREX 7.10 Revision 63 allows remote attackers to read arbitrary files via unspecified vectors, aka SAP Security Note 2203591.
|
NVD-CWE-noinfo
|
CVE-2016-6139
|
2024-11-21 11:55 |
2016-08-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264627
|
9.8 |
CRITICAL
Network
|
sap
|
trex
|
Directory traversal vulnerability in SAP TREX 7.10 Revision 63 allows remote attackers to read arbitrary files via unspecified vectors, aka SAP Security Note 2203591.
|
CWE-22
Path Traversal
|
CVE-2016-6138
|
2024-11-21 11:55 |
2016-08-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264628
|
6.2 |
MEDIUM
Local
|
xen citrix
|
xen xenserver
|
Xen 4.5.x through 4.7.x do not implement Supervisor Mode Access Prevention (SMAP) whitelisting in 32-bit exception and event delivery, which allows local 32-bit PV guest OS kernels to cause a denial …
|
CWE-20
Improper Input Validation
|
CVE-2016-6259
|
2024-11-21 11:55 |
2016-08-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264629
|
8.8 |
HIGH
Local
|
xen citrix
|
xen xenserver
|
The PV pagetable code in arch/x86/mm.c in Xen 4.7.x and earlier allows local 32-bit PV guest OS administrators to gain host OS privileges by leveraging fast-paths for updating pagetable entries.
|
CWE-284
Improper Access Control
|
CVE-2016-6258
|
2024-11-21 11:55 |
2016-08-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264630
|
7.5 |
HIGH
Network
|
canonical kde
|
ubuntu_linux karchives
|
Directory traversal vulnerability in KArchive before 5.24, as used in KDE Frameworks, allows remote attackers to write to arbitrary files via a ../ (dot dot slash) in a filename in an archive file, r…
|
CWE-22
Path Traversal
|
CVE-2016-6232
|
2024-11-21 11:55 |
2016-08-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|