|
265521
|
6.5 |
MEDIUM
Network
|
buffalo
|
wzr-600dhp3_firmware hw-450hp-zwe_firmware wzr-hp-g450h_firmware wzr-450hp_firmware wzr-900dhp2_firmware wcr-300_firmware wzr-450hp-cwt_firmware wzr-hp-g301nh_firmware wxr-175…
|
BUFFALO WZR-600DHP3 devices with firmware 2.16 and earlier and WZR-S600DHP devices allow remote attackers to discover credentials and other sensitive information via unspecified vectors.
|
CWE-200
Information Exposure
|
CVE-2016-4816
|
2024-11-21 11:53 |
2016-06-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265522
|
7.5 |
HIGH
Network
|
buffalo
|
wzr-900dhp2_firmware wzr-600dhp3_firmware wzr-s900dhp_firmware wzr-s600dhp_firmware wzr-900dhp_firmware wzr-600dhp2_firmware
|
Directory traversal vulnerability on BUFFALO WZR-600DHP3 devices with firmware 2.16 and earlier and WZR-S600DHP devices with firmware 2.16 and earlier allows remote attackers to read arbitrary files …
|
CWE-22
Path Traversal
|
CVE-2016-4815
|
2024-11-21 11:53 |
2016-06-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265523
|
7.5 |
HIGH
Network
|
gsi
|
old_gsi_maps
|
Directory traversal vulnerability in kml2jsonp.php in Geospatial Information Authority of Japan (aka GSI) Old_GSI_Maps before January 2015 on Windows allows remote attackers to read arbitrary files v…
|
CWE-22
Path Traversal
|
CVE-2016-4814
|
2024-11-21 11:53 |
2016-06-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265524
|
8.8 |
HIGH
Network
|
netcommons
|
netcommons
|
NetCommons 2.4.2.1 and earlier allows remote authenticated secretariat (aka CLERK) users to gain privileges by creating a SYSTEM_ADMIN account.
|
CWE-284
Improper Access Control
|
CVE-2016-4813
|
2024-11-21 11:53 |
2016-06-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265525
|
4.4 |
MEDIUM
Local
|
qemu canonical debian
|
qemu ubuntu_linux debian_linux
|
The get_cmd function in hw/scsi/esp.c in QEMU might allow local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) via vectors related to reading from t…
|
CWE-787
Out-of-bounds Write
|
CVE-2016-5238
|
2024-11-21 11:53 |
2016-06-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265526
|
8.1 |
HIGH
Network
|
huawei
|
rse6500_firmware vp9600_series_firmware
|
Buffer overflow in Huawei VP9660, VP9650, and VP9630 multipoint control unit devices with software before V500R002C00SPC200 and RSE6500 videoconference devices with software before V500R002C00SPC100,…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2016-5234
|
2024-11-21 11:53 |
2016-06-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265527
|
5.3 |
MEDIUM
Network
|
libimobiledevice canonical opensuse
|
libimobiledevice libusbmuxd ubuntu_linux leap opensuse
|
The socket_create function in common/socket.c in libimobiledevice and libusbmuxd allows remote attackers to bypass intended access restrictions and communicate with services on iOS devices by connect…
|
CWE-284
Improper Access Control
|
CVE-2016-5104
|
2024-11-21 11:53 |
2016-06-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265528
|
4.3 |
MEDIUM
Network
|
keystone
|
openstack_identity
|
The Fernet Token Provider in OpenStack Identity (Keystone) 9.0.x before 9.0.1 (mitaka) allows remote authenticated users to prevent revocation of a chain of tokens and bypass intended access restrict…
|
CWE-284
Improper Access Control
|
CVE-2016-4911
|
2024-11-21 11:53 |
2016-06-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265529
|
3.7 |
LOW
Network
|
huawei
|
mate_8_firmware
|
Huawei Mate 8 smartphones with software NXT-AL10 before NXT-AL10C00B182, NXT-CL00 before NXT-CL00C92B182, NXT-DL00 before NXT-DL00C17B182, and NXT-TL00 before NXT-TL00C01B182 allow remote base statio…
|
CWE-200
Information Exposure
|
CVE-2016-5233
|
2024-11-21 11:53 |
2016-06-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265530
|
9.8 |
CRITICAL
Network
|
graphicsmagick suse oracle opensuse canonical debian imagemagick
|
graphicsmagick studio_onsite linux_enterprise_software_development_kit linux_enterprise_debuginfo solaris linux leap opensuse ubuntu_linux debian_linux linux_enterprise_…
|
The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a | (pipe) character at the start of a filename.
|
NVD-CWE-noinfo
|
CVE-2016-5118
|
2024-11-21 11:53 |
2016-06-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|