|
257461
|
8.8 |
HIGH
Network
|
ibm
|
cognos_business_intelligence
|
IBM Cognos Business Intelligence 10.2 could allow a user with lower privilege Capabilities to adopt the Capabilities of a higher-privilege user by intercepting the higher-privilege user's cookie valu…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2016-8960
|
2024-11-21 12:00 |
2017-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
257462
|
7.5 |
HIGH
Network
|
f5
|
big-ip_local_traffic_manager
big-ip_application_acceleration_manager
big-ip_advanced_firewall_manager
big-ip_analytics
big-ip_access_policy_manager
big-ip_application_security_manager<…
|
The Traffic Management Microkernel (TMM) in F5 BIG-IP before 11.5.4 HF3, 11.6.x before 11.6.1 HF2 and 12.x before 12.1.2 does not properly handle minimum path MTU options for IPv6, which allows remot…
|
CWE-19
Data Processing Errors
|
CVE-2016-9252
|
2024-11-21 12:00 |
2017-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
257463
|
7.5 |
HIGH
Network
|
cryptography.io
fedoraproject
canonical
|
cryptography
fedora
ubuntu_linux
|
HKDF in cryptography before 1.5.2 returns an empty byte-string if used with a length less than algorithm.digest_size.
|
NVD-CWE-noinfo
|
CVE-2016-9243
|
2024-11-21 12:00 |
2017-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
257464
|
7.5 |
HIGH
Network
|
libdwarf_project
|
libdwarf
|
The dwarf_get_aranges_list function in dwarf_arrange.c in Libdwarf before 20161124 allows remote attackers to cause a denial of service (out-of-bounds read).
|
CWE-125
Out-of-bounds Read
|
CVE-2016-9276
|
2024-11-21 12:00 |
2017-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
257465
|
7.5 |
HIGH
Network
|
libdwarf_project
|
libdwarf
|
Heap-based buffer overflow in the _dwarf_skim_forms function in libdwarf/dwarf_macro5.c in Libdwarf before 20161124 allows remote attackers to cause a denial of service (out-of-bounds read).
|
CWE-787
Out-of-bounds Write
|
CVE-2016-9275
|
2024-11-21 12:00 |
2017-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
257466
|
6.5 |
MEDIUM
Network
|
libming
|
libming
|
listmp3.c in libming 0.4.7 allows remote attackers to unspecified impact via a crafted mp3 file, which triggers an invalid left shift.
|
CWE-189
Numeric Errors
|
CVE-2016-9266
|
2024-11-21 12:00 |
2017-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
257467
|
5.5 |
MEDIUM
Local
|
libming
|
libming
|
The printMP3Headers function in listmp3.c in Libming 0.4.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted mp3 file.
|
CWE-369
Divide By Zero
|
CVE-2016-9265
|
2024-11-21 12:00 |
2017-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
257468
|
5.5 |
MEDIUM
Local
|
libming
|
libming
|
Buffer overflow in the printMP3Headers function in listmp3.c in Libming 0.4.7 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mp3 file.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2016-9264
|
2024-11-21 12:00 |
2017-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
257469
|
5.5 |
MEDIUM
Local
|
jasper_project
|
jasper
|
Multiple integer overflows in the (1) jas_realloc function in base/jas_malloc.c and (2) mem_resize function in base/jas_stream.c in JasPer before 1.900.22 allow remote attackers to cause a denial of …
|
CWE-190
Integer Overflow or Wraparound
|
CVE-2016-9262
|
2024-11-21 12:00 |
2017-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
257470
|
5.5 |
MEDIUM
Local
|
wvware
|
libwmf
|
The wmf_malloc function in api.c in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (application crash) via a crafted wmf file, which triggers a memory allocation failure.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2016-9011
|
2024-11-21 12:00 |
2017-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
