|
264771
|
9.8 |
CRITICAL
Network
|
libgd
|
libgd
|
Double free vulnerability in the gdImageWebPtr function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via large width and height values.
|
CWE-415
Double Free
|
CVE-2016-6912
|
2024-11-21 11:57 |
2017-01-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264772
|
5.5 |
MEDIUM
Local
|
libgd
|
libgd
|
The dynamicGetbuf function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TIFF image.
|
CWE-125
Out-of-bounds Read
|
CVE-2016-6911
|
2024-11-21 11:57 |
2017-01-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264773
|
5.5 |
MEDIUM
Local
|
libdwarf_project
|
libdwarf
|
The _dwarf_read_loc_section function in dwarf_loc.c in libdwarf 20160613 allows attackers to cause a denial of service (buffer over-read) via a crafted file.
|
CWE-125
Out-of-bounds Read
|
CVE-2016-7410
|
2024-11-21 11:57 |
2017-01-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264774
|
8.4 |
HIGH
Local
|
owncloud
|
owncloud_desktop_client
|
ownCloud Desktop before 2.2.3 allows local users to execute arbitrary code and possibly gain privileges via a Trojan library in a "special path" in the C: drive.
|
CWE-94
Code Injection
|
CVE-2016-7102
|
2024-11-21 11:57 |
2017-01-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264775
|
7.5 |
HIGH
Network
|
jwt_project
|
jwt
|
The verify function in Encryption/Symmetric.php in Malcolm Fell jwt before 1.0.3 does not use a timing-safe function for hash comparison, which allows attackers to spoof signatures via a timing attac…
|
CWE-361
7PK - Time and State
|
CVE-2016-7037
|
2024-11-21 11:57 |
2017-01-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264776
|
9.8 |
CRITICAL
Network
|
python-jose_project
|
python-jose
|
python-jose before 1.3.2 allows attackers to have unspecified impact by leveraging failure to use a constant time comparison for HMAC keys.
|
CWE-361
7PK - Time and State
|
CVE-2016-7036
|
2024-11-21 11:57 |
2017-01-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264777
|
7.5 |
HIGH
Network
|
ffmpeg
|
ffmpeg
|
Heap-based buffer overflow in the decode_block function in libavcodec/exr.c in FFmpeg before 3.1.3 allows remote attackers to cause a denial of service (application crash) via vectors involving tile …
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2016-6920
|
2024-11-21 11:57 |
2017-01-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264778
|
7.3 |
HIGH
Network
|
moodle
|
moodle
|
In Moodle 2.x and 3.x, web service tokens are not invalidated when the user password is changed or forced to be changed.
|
CWE-640
Weak Password Recovery Mechanism for Forgotten Password
|
CVE-2016-7038
|
2024-11-21 11:57 |
2017-01-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264779
|
6.1 |
MEDIUM
Network
|
opera
|
opera_browser
|
Characters from languages are such as Arabic, Hebrew are displayed from RTL (Right To Left) order in Opera 37.0.2192.105088 for Android, due to mishandling of several unicode characters such as U+FE7…
|
CWE-601
Open Redirect
|
CVE-2016-6908
|
2024-11-21 11:57 |
2017-01-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264780
|
6.5 |
MEDIUM
Network
|
wordpress
|
wordpress
|
Cross-site request forgery (CSRF) vulnerability in the wp_ajax_update_plugin function in wp-admin/includes/ajax-actions.php in WordPress before 4.6 allows remote attackers to hijack the authenticatio…
|
CWE-352
Origin Validation Error
|
CVE-2016-6897
|
2024-11-21 11:57 |
2017-01-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|