|
265871
|
7.2 |
HIGH
Network
|
apache
|
ranger
|
SQL injection vulnerability in the policy admin tool in Apache Ranger before 0.5.3 allows remote authenticated administrators to execute arbitrary SQL commands via the eventTime parameter to service/…
|
CWE-89
SQL Injection
|
CVE-2016-2174
|
2024-11-21 11:47 |
2016-06-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265872
|
7.8 |
HIGH
Local
|
linux
|
linux_kernel
|
Integer signedness error in the MSM QDSP6 audio driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attacker…
|
CWE-269
Improper Privilege Management
|
CVE-2016-2066
|
2024-11-21 11:47 |
2016-06-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265873
|
7.8 |
HIGH
Local
|
linux
|
linux_kernel
|
Integer signedness error in the MSM V4L2 video driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers…
|
CWE-269
Improper Privilege Management
|
CVE-2016-2061
|
2024-11-21 11:47 |
2016-06-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265874
|
7.1 |
HIGH
Local
|
redhat opensuse debian spice_project
|
enterprise_linux enterprise_linux_desktop enterprise_linux_hpc_node_eus enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus enterprise_linux_workstation<…
|
SPICE allows local guest OS users to read from or write to arbitrary host memory locations via crafted primary surface parameters, a similar issue to CVE-2015-5261.
|
CWE-284
Improper Access Control
|
CVE-2016-2150
|
2024-11-21 11:47 |
2016-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265875
|
8.8 |
HIGH
Network
|
redhat
|
openshift_origin openshift
|
Red Hat OpenShift Enterprise 3.2 and OpenShift Origin allow remote authenticated users to execute commands with root privileges by changing the root password in an sti builder image.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2016-2160
|
2024-11-21 11:47 |
2016-06-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265876
|
6.5 |
MEDIUM
Network
|
redhat
|
openshift
|
Red Hat OpenShift Enterprise 3.2 allows remote authenticated users to read log files from another namespace by using the same name as a previously deleted namespace when creating a new namespace.
|
CWE-200
Information Exposure
|
CVE-2016-2149
|
2024-11-21 11:47 |
2016-06-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265877
|
5.5 |
MEDIUM
Local
|
redhat
|
openshift
|
Red Hat OpenShift Enterprise 3.1 uses world-readable permissions on the /etc/origin/master/master-config.yaml configuration file, which allows local users to obtain Active Directory credentials by re…
|
CWE-200
Information Exposure
|
CVE-2016-2142
|
2024-11-21 11:47 |
2016-06-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265878
|
6.1 |
MEDIUM
Network
|
vmware
|
vcenter_server
|
Cross-site scripting (XSS) vulnerability in the Web Client in VMware vCenter Server 5.1 before update 3d, 5.5 before update 3d, and 6.0 before update 2 on Windows allows remote attackers to inject ar…
|
CWE-79
Cross-site Scripting
|
CVE-2016-2078
|
2024-11-21 11:47 |
2016-06-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265879
|
8.1 |
HIGH
Network
|
hp
|
matrix_operating_environment systems_insight_manager
|
HPE Systems Insight Manager (SIM) before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2016-2017, …
|
NVD-CWE-noinfo
|
CVE-2016-2030
|
2024-11-21 11:47 |
2016-06-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265880
|
9.1 |
CRITICAL
Network
|
hp
|
systems_insight_manager matrix_operating_environment
|
HPE Matrix Operating Environment before 7.5.1 allows remote attackers to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2016-4358.
|
NVD-CWE-noinfo
|
CVE-2016-2029
|
2024-11-21 11:47 |
2016-06-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|