|
265021
|
8.8 |
HIGH
Network
|
google
|
chrome
|
The content renderer client in Google Chrome prior to 54.0.2840.85 for Android insufficiently enforced the Same Origin Policy amongst downloaded files, which allowed a remote attacker to access any d…
|
CWE-254
7PK - Security Features
|
CVE-2016-5196
|
2024-11-21 11:53 |
2017-01-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265022
|
8.8 |
HIGH
Network
|
web2py
|
web2py
|
Web2py versions 2.14.5 and below was affected by CSRF (Cross Site Request Forgery) vulnerability, which allows an attacker to trick a logged in user to perform some unwanted actions i.e An attacker c…
|
CWE-352
Origin Validation Error
|
CVE-2016-4808
|
2024-11-21 11:53 |
2017-01-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265023
|
4.8 |
MEDIUM
Network
|
web2py
|
web2py
|
Web2py versions 2.14.5 and below was affected by Reflected XSS vulnerability, which allows an attacker to perform an XSS attack on logged in user (admin).
|
CWE-79
Cross-site Scripting
|
CVE-2016-4807
|
2024-11-21 11:53 |
2017-01-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265024
|
7.5 |
HIGH
Network
|
web2py
|
web2py
|
Web2py versions 2.14.5 and below was affected by Local File Inclusion vulnerability, which allows a malicious intended user to read/access web server sensitive files.
|
CWE-200
Information Exposure
|
CVE-2016-4806
|
2024-11-21 11:53 |
2017-01-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265025
|
5.9 |
MEDIUM
Network
|
f5
|
big-ip_local_traffic_manager big-ip_application_acceleration_manager big-ip_advanced_firewall_manager big-ip_analytics big-ip_access_policy_manager big-ip_application_security_manager<…
|
Virtual servers in F5 BIG-IP systems 11.6.1 before 11.6.1 HF1 and 12.1.x before 12.1.2, when configured to parse RADIUS messages via an iRule, allow remote attackers to cause a denial of service (Tra…
|
CWE-20
Improper Input Validation
|
CVE-2016-5024
|
2024-11-21 11:53 |
2017-01-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265026
|
4.3 |
MEDIUM
Network
|
google
|
chrome
|
Google Chrome prior to 54.0 for iOS had insufficient validation of URLs for windows open by DOM, which allowed a remote attacker to bypass restrictions on navigation to certain URL schemes via crafte…
|
CWE-20
Improper Input Validation
|
CVE-2016-5193
|
2024-11-21 11:53 |
2016-12-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265027
|
6.5 |
MEDIUM
Network
|
google
|
chrome
|
Blink in Google Chrome prior to 54.0.2840.59 for Windows missed a CORS check on redirect in TextTrackLoader, which allowed a remote attacker to bypass cross-origin restrictions via crafted HTML pages.
|
CWE-284
Improper Access Control
|
CVE-2016-5192
|
2024-11-21 11:53 |
2016-12-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265028
|
6.1 |
MEDIUM
Network
|
google
|
chrome
|
Bookmark handling in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android had insufficient validation of supplied data, which allowed a remote attacker to inject …
|
CWE-79
Cross-site Scripting
|
CVE-2016-5191
|
2024-11-21 11:53 |
2016-12-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265029
|
6.3 |
MEDIUM
Network
|
google
|
chrome
|
Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android incorrectly handled object lifecycles during shutdown, which allowed a remote attacker to perform an out of b…
|
CWE-416
Use After Free
|
CVE-2016-5190
|
2024-11-21 11:53 |
2016-12-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265030
|
6.5 |
MEDIUM
Network
|
google
|
chrome
|
Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android permitted navigation to blob URLs with non-canonical origins, which allowed a remote attacker to spoof the co…
|
CWE-284
Improper Access Control
|
CVE-2016-5189
|
2024-11-21 11:53 |
2016-12-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|