|
256951
|
6.5 |
MEDIUM
Adjacent
|
hughes
|
hn7740s_firmware dw7000_firmware hn7000s_firmware hn7000sm_firmware
|
Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, are potentially vulnerable to improper input validation. The device's advanced status web page that is linked to …
|
CWE-20
Improper Input Validation
|
CVE-2016-9494
|
2024-11-21 12:01 |
2018-07-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256952
|
4.9 |
MEDIUM
Network
|
zohocorp
|
manageengine_applications_manager
|
ManageEngine Applications Manager 12 and 13 before build 13690 allows an authenticated user, who is able to access /register.do page (most likely limited to administrator), to browse the filesystem a…
|
CWE-200
Information Exposure
|
CVE-2016-9491
|
2024-11-21 12:01 |
2018-07-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256953
|
8.8 |
HIGH
Network
|
zohocorp
|
manageengine_applications_manager
|
In ManageEngine Applications Manager 12 and 13 before build 13200, an authenticated user is able to alter all of their own properties, including own group, i.e. changing their group to one with highe…
|
CWE-255 CWE-264
Credentials Management Permissions, Privileges, and Access Controls
|
CVE-2016-9489
|
2024-11-21 12:01 |
2018-07-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256954
|
7.8 |
HIGH
Local
|
w3
|
epubcheck
|
EpubCheck 4.0.1 does not properly restrict resolving external entities when parsing XML in EPUB files during validation. An attacker who supplies a specially crafted EPUB file may be able to exploit …
|
CWE-611
XXE
|
CVE-2016-9487
|
2024-11-21 12:01 |
2018-07-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256955
|
7.5 |
HIGH
Network
|
jqueryform
|
php_formmail_generator
|
The generated PHP form code does not properly validate user input folder directories, allowing a remote unauthenticated attacker to perform a path traversal and access arbitrary files on the server. …
|
CWE-22
Path Traversal
|
CVE-2016-9484
|
2024-11-21 12:01 |
2018-07-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256956
|
9.8 |
CRITICAL
Network
|
jqueryform
|
php_formmail_generator
|
The PHP form code generated by PHP FormMail Generator deserializes untrusted input as part of the phpfmg_filman_download() function. A remote unauthenticated attacker may be able to use this vulnerab…
|
CWE-502
Deserialization of Untrusted Data
|
CVE-2016-9483
|
2024-11-21 12:01 |
2018-07-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256957
|
9.8 |
CRITICAL
Network
|
jqueryform
|
php_formmail_generator
|
Code generated by PHP FormMail Generator may allow a remote unauthenticated user to bypass authentication in the to access the administrator panel by navigating directly to /admin.php?mod=admin&func=…
|
CWE-287
Improper Authentication
|
CVE-2016-9482
|
2024-11-21 12:01 |
2018-07-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256958
|
9.8 |
CRITICAL
Network
|
zohocorp
|
manageengine_applications_manager
|
ManageEngine Applications Manager 12 and 13 before build 13200, allows unserialization of unsafe Java objects. The vulnerability can be exploited by remote user without authentication and it allows t…
|
CWE-502
Deserialization of Untrusted Data
|
CVE-2016-9498
|
2024-11-21 12:01 |
2018-07-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256959
|
6.1 |
MEDIUM
Network
|
jqueryform
|
php_formmail_generator
|
The code generated by PHP FormMail Generator prior to 17 December 2016 is vulnerable to stored cross-site scripting. In the generated form.lib.php file, upload file types are checked against a hard-c…
|
CWE-79
Cross-site Scripting
|
CVE-2016-9493
|
2024-11-21 12:01 |
2018-07-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256960
|
9.8 |
CRITICAL
Network
|
jqueryform
|
php_formmail_generator
|
The code generated by PHP FormMail Generator prior to 17 December 2016 is vulnerable to unrestricted upload of dangerous file types. In the generated form.lib.php file, upload file types are checked …
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2016-9492
|
2024-11-21 12:01 |
2018-07-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|