|
265131
|
6.1 |
MEDIUM
Network
|
wso2
|
carbon
|
Multiple cross-site scripting (XSS) vulnerabilities in WSO2 Carbon 4.4.5 allow remote attackers to inject arbitrary web script or HTML via the (1) setName parameter to identity-mgt/challenges-mgt.jsp…
|
CWE-79
Cross-site Scripting
|
CVE-2016-4316
|
2024-11-21 11:51 |
2017-02-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265132
|
5.7 |
MEDIUM
Network
|
wso2
|
carbon
|
Cross-site request forgery (CSRF) vulnerability in WSO2 Carbon 4.4.5 allows remote attackers to hijack the authentication of privileged users for requests that shutdown a server via a shutdown action…
|
CWE-352
Origin Validation Error
|
CVE-2016-4315
|
2024-11-21 11:51 |
2017-02-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265133
|
4.9 |
MEDIUM
Network
|
wso2
|
carbon
|
Directory traversal vulnerability in the LogViewer Admin Service in WSO2 Carbon 4.4.5 allows remote authenticated administrators to read arbitrary files via a .. (dot dot) in the logFile parameter to…
|
CWE-22
Path Traversal
|
CVE-2016-4314
|
2024-11-21 11:51 |
2017-02-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265134
|
7.5 |
HIGH
Network
|
wso2
|
identity_server
|
XML external entity (XXE) vulnerability in the XACML flow feature in WSO2 Identity Server 5.1.0 before WSO2-CARBON-PATCH-4.4.0-0231 allows remote authenticated users with access to XACML features to …
|
CWE-611
XXE
|
CVE-2016-4312
|
2024-11-21 11:51 |
2017-02-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265135
|
8.8 |
HIGH
Network
|
wso2
|
identity_server
|
Cross-site request forgery (CSRF) vulnerability in the XACML flow feature in WSO2 Identity Server 5.1.0 allows remote attackers to hijack the authentication of privileged users for requests that proc…
|
CWE-352
Origin Validation Error
|
CVE-2016-4311
|
2024-11-21 11:51 |
2017-02-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265136
|
7.5 |
HIGH
Network
|
cryptopp
|
crypto\+\+
|
The timing attack protection in Rijndael::Enc::ProcessAndXorBlock and Rijndael::Dec::ProcessAndXorBlock in Crypto++ (aka cryptopp) before 5.6.4 may be optimized out by the compiler, which allows atta…
|
CWE-200
Information Exposure
|
CVE-2016-3995
|
2024-11-21 11:51 |
2017-02-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265137
|
7.5 |
HIGH
Network
|
netapp
|
clustered_data_ontap
|
NetApp Clustered Data ONTAP before 8.3.2P7 allows remote attackers to obtain SMB share information via unspecified vectors.
|
CWE-200
Information Exposure
|
CVE-2016-4341
|
2024-11-21 11:51 |
2017-02-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265138
|
5.5 |
MEDIUM
Local
|
libavformat_project
|
libavformat
|
Integer overflow in the demuxer function in libmpdemux/demux_gif.c in Mplayer allows remote attackers to cause a denial of service (crash) via large dimensions in a gif file.
|
CWE-190
Integer Overflow or Wraparound
|
CVE-2016-4352
|
2024-11-21 11:51 |
2017-02-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265139
|
7.8 |
HIGH
Local
|
samsung
|
samsung_mobile
|
Array index error in the msm_sensor_config function in kernel/SM-G9008V_CHN_KK_Opensource/Kernel/drivers/media/platform/msm/camera_v2/sensor/msm_sensor.c in Samsung devices with Android KK(4.4) or L …
|
CWE-20
Improper Input Validation
|
CVE-2016-4038
|
2024-11-21 11:51 |
2017-02-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265140
|
5.5 |
MEDIUM
Local
|
samsung
|
knox
|
ClipboardDataMgr in Samsung KNOX 1.0.0 and 2.3.0 does not properly check the caller, which allows local users to read KNOX clipboard data via a crafted application.
|
CWE-200
Information Exposure
|
CVE-2016-3996
|
2024-11-21 11:51 |
2017-01-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|