|
266211
|
7.5 |
HIGH
Adjacent
|
google
|
android
|
Buffer overflow in the create_pbuf function in btif/src/btif_hh.c in Bluetooth in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows remote attackers t…
|
CWE-119 CWE-362
Incorrect Access of Indexable Resource ('Range Error') Race Condition
|
CVE-2016-3744
|
2024-11-21 11:50 |
2016-07-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266212
|
9.8 |
CRITICAL
Network
|
google
|
android
|
decoder/ih264d_api.c in mediaserver in Android 6.x before 2016-07-01 does not initialize certain data structures, which allows remote attackers to execute arbitrary code or cause a denial of service …
|
CWE-20
Improper Input Validation
|
CVE-2016-3743
|
2024-11-21 11:50 |
2016-07-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266213
|
9.8 |
CRITICAL
Network
|
google
|
android
|
decoder/ih264d_process_intra_mb.c in mediaserver in Android 6.x before 2016-07-01 mishandles intra mode, which allows remote attackers to execute arbitrary code or cause a denial of service (memory c…
|
CWE-20
Improper Input Validation
|
CVE-2016-3742
|
2024-11-21 11:50 |
2016-07-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266214
|
9.8 |
CRITICAL
Network
|
google
|
android
|
The H.264 decoder in mediaserver in Android 6.x before 2016-07-01 does not initialize certain slice data, which allows remote attackers to execute arbitrary code or cause a denial of service (memory …
|
CWE-20
Improper Input Validation
|
CVE-2016-3741
|
2024-11-21 11:50 |
2016-07-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266215
|
8.0 |
HIGH
Network
|
symantec
|
endpoint_protection_manager
|
Multiple cross-site request forgery (CSRF) vulnerabilities in management scripts in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allow remote authenticated users to hijack the auth…
|
CWE-352
Origin Validation Error
|
CVE-2016-3653
|
2024-11-21 11:50 |
2016-07-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266216
|
5.4 |
MEDIUM
Network
|
symantec
|
endpoint_protection_manager
|
Multiple cross-site scripting (XSS) vulnerabilities in management scripts in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allow remote authenticated users to inject arbitrary web s…
|
CWE-79
Cross-site Scripting
|
CVE-2016-3652
|
2024-11-21 11:50 |
2016-07-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266217
|
8.0 |
HIGH
Network
|
symantec
|
endpoint_protection_manager
|
Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated users to discover the PHP JSESSIONID value via unspecified vectors.
|
CWE-200
Information Exposure
|
CVE-2016-3651
|
2024-11-21 11:50 |
2016-07-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266218
|
8.8 |
HIGH
Network
|
symantec
|
endpoint_protection_manager
|
Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated users to discover credentials via a brute-force attack.
|
CWE-200 CWE-254
Information Exposure 7PK - Security Features
|
CVE-2016-3650
|
2024-11-21 11:50 |
2016-07-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266219
|
4.3 |
MEDIUM
Network
|
symantec
|
endpoint_protection_manager
|
Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated administrators to enumerate administrator accounts via modified GET requests.
|
CWE-200
Information Exposure
|
CVE-2016-3649
|
2024-11-21 11:50 |
2016-07-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266220
|
8.8 |
HIGH
Network
|
symantec
|
endpoint_protection_manager
|
Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated users to bypass the Authentication Lock protection mechanism, and conduct brute-force password-guessing att…
|
CWE-200 CWE-254
Information Exposure 7PK - Security Features
|
CVE-2016-3648
|
2024-11-21 11:50 |
2016-07-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|