|
266201
|
7.1 |
HIGH
Local
|
microsoft
|
windows_server_2012 windows_8.1 windows_10
|
Hyper-V in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 allows guest OS users to obtain sensitive information from host OS memory via a crafted application, aka "Hyper-V Inf…
|
CWE-200
Information Exposure
|
CVE-2016-0089
|
2024-11-21 11:41 |
2016-04-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266202
|
9.3 |
CRITICAL
Local
|
microsoft
|
windows_server_2012 windows_8.1 windows_10
|
Hyper-V in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 allows guest OS users to execute arbitrary code on the host OS via a crafted application, aka "Hyper-V Remote Code Ex…
|
CWE-284
Improper Access Control
|
CVE-2016-0088
|
2024-11-21 11:41 |
2016-04-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266203
|
4.3 |
MEDIUM
Network
|
ibm
|
maximo_asset_management
|
shiprec.xml in the SHIPREC application in IBM Maximo Asset Management 7.1 and 7.5 before 7.5.0.10 and 7.6 before 7.6.0.4 allows remote authenticated users to bypass intended item-selection restrictio…
|
CWE-284
Improper Access Control
|
CVE-2016-0289
|
2024-11-21 11:41 |
2016-04-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266204
|
7.8 |
HIGH
Local
|
ibm
|
informix_dynamic_server
|
The client implementation in IBM Informix Dynamic Server 11.70.xCn on Windows does not properly restrict access to the (1) nsrd, (2) nsrexecd, and (3) portmap executable files, which allows local use…
|
CWE-284
Improper Access Control
|
CVE-2016-0226
|
2024-11-21 11:41 |
2016-03-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266205
|
6.1 |
MEDIUM
Network
|
ibm
|
websphere_application_server
|
Cross-site scripting (XSS) vulnerability in the OpenID Connect (OIDC) client web application in IBM WebSphere Application Server (WAS) Liberty Profile 8.5.5 before 8.5.5.9 allows remote attackers to …
|
CWE-79
Cross-site Scripting
|
CVE-2016-0283
|
2024-11-21 11:41 |
2016-03-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266206
|
5.4 |
MEDIUM
Network
|
ibm
|
maximo_asset_management
|
Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1.1 through 7.1.1.3, 7.5.0 before 7.5.0.9 IFIX004, and 7.6.0 before 7.6.0.3 IFIX001 allows remote authenticated users to inje…
|
CWE-79
Cross-site Scripting
|
CVE-2016-0262
|
2024-11-21 11:41 |
2016-03-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266207
|
4.3 |
MEDIUM
Network
|
ibm
|
maximo_asset_management smartcloud_control_desk maximo_for_government maximo_for_life_sciences maximo_for_nuclear_power maximo_for_oil_and_gas maximo_for_transportation maximo_fo…
|
IBM Maximo Asset Management 7.6 before 7.6.0.3 IFIX001 allows remote authenticated users to bypass intended access restrictions and read arbitrary purchase-order work logs via unspecified vectors.
|
CWE-284
Improper Access Control
|
CVE-2016-0222
|
2024-11-21 11:41 |
2016-03-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266208
|
3.7 |
LOW
Network
|
ibm
|
websphere_commerce
|
IBM WebSphere Commerce 6.x through 6.0.0.11, 7.x through 7.0.0.9, and 8.x before 8.0.0.3 allows remote attackers to cause a denial of service (order-processing outage) via unspecified vectors.
|
CWE-284
Improper Access Control
|
CVE-2016-0208
|
2024-11-21 11:41 |
2016-03-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266209
|
7.8 |
HIGH
Local
|
microsoft
|
word word_for_mac office sharepoint_server office_web_apps_server office_compatibility_pack word_viewer
|
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Viewer, Word Automation …
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2016-0134
|
2024-11-21 11:41 |
2016-03-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266210
|
6.8 |
MEDIUM
Physics
|
microsoft
|
windows_rt_8.1 windows_7 windows_10 windows_8.1 windows_server_2008 windows_vista
|
The USB Mass Storage Class driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold …
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2016-0133
|
2024-11-21 11:41 |
2016-03-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|