|
264951
|
8.1 |
HIGH
Network
|
juniper
|
junos_space
|
Insufficient validation of SSH keys in Junos Space before 15.2R2 allows man-in-the-middle (MITM) type of attacks while a Space device is communicating with managed devices.
|
CWE-20
Improper Input Validation
|
CVE-2016-4927
|
2024-11-21 11:53 |
2017-03-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264952
|
9.8 |
CRITICAL
Network
|
juniper
|
junos_space
|
Insufficient authentication vulnerability in Junos Space before 15.2R2 allows remote network based users with access to Junos Space web interface to perform certain administrative tasks without authe…
|
CWE-287
Improper Authentication
|
CVE-2016-4926
|
2024-11-21 11:53 |
2017-03-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264953
|
9.8 |
CRITICAL
Network
|
imagemagick
|
imagemagick
|
The gnuplot delegate functionality in ImageMagick before 6.9.4-0 and GraphicsMagick allows remote attackers to execute arbitrary commands via unspecified vectors.
|
CWE-284
Improper Access Control
|
CVE-2016-5239
|
2024-11-21 11:53 |
2017-03-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264954
|
7.5 |
HIGH
Network
|
cloudera
|
manager
|
Cloudera Manager 5.5 and earlier allows remote attackers to enumerate user sessions via a request to /api/v11/users/sessions.
|
CWE-200
Information Exposure
|
CVE-2016-4950
|
2024-11-21 11:53 |
2017-03-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264955
|
7.5 |
HIGH
Network
|
cloudera
|
manager
|
Cloudera Manager 5.5 and earlier allows remote attackers to obtain sensitive information via a (1) stderr.log or (2) stdout.log value in the filename parameter to /cmf/process/<process_id>/logs.
|
CWE-200
Information Exposure
|
CVE-2016-4949
|
2024-11-21 11:53 |
2017-03-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264956
|
6.1 |
MEDIUM
Network
|
cloudera
|
manager
|
Multiple cross-site scripting (XSS) vulnerabilities in Cloudera Manager 5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) Template Name field when renaming a t…
|
CWE-79
Cross-site Scripting
|
CVE-2016-4948
|
2024-11-21 11:53 |
2017-03-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264957
|
5.3 |
MEDIUM
Network
|
cloudera
|
hue
|
Cloudera HUE 3.9.0 and earlier allows remote attackers to enumerate user accounts via a request to desktop/api/users/autocomplete.
|
CWE-200
Information Exposure
|
CVE-2016-4947
|
2024-11-21 11:53 |
2017-03-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264958
|
6.1 |
MEDIUM
Network
|
cloudera
|
hue
|
Multiple cross-site scripting (XSS) vulnerabilities in Cloudera HUE 3.9.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) First name or (2) Last name field in th…
|
CWE-79
Cross-site Scripting
|
CVE-2016-4946
|
2024-11-21 11:53 |
2017-03-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264959
|
5.5 |
MEDIUM
Local
|
graphicsmagick
|
graphicsmagick
|
The DrawDashPolygon function in magick/render.c in GraphicsMagick before 1.3.24 and the SVG renderer in ImageMagick allow remote attackers to cause a denial of service (infinite loop) by converting a…
|
CWE-20
Improper Input Validation
|
CVE-2016-5240
|
2024-11-21 11:53 |
2017-02-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264960
|
5.5 |
MEDIUM
Local
|
libdwarf_project
|
libdwarf
|
dwarf_form.c in libdwarf 20160115 allows remote attackers to cause a denial of service (crash) via a crafted elf file.
|
CWE-476
NULL Pointer Dereference
|
CVE-2016-5027
|
2024-11-21 11:53 |
2017-02-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|