|
267281
|
3.3 |
LOW
Local
|
libdwarf_project
|
libdwarf
|
The dwarf_read_cie_fde_prefix function in dwarf_frame2.c in libdwarf 20151114 allows attackers to cause a denial of service (out-of-bounds read) via a crafted ELF object file.
|
CWE-125
Out-of-bounds Read
|
CVE-2016-2091
|
2024-11-21 11:47 |
2016-02-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267282
|
6.5 |
MEDIUM
Network
|
jasper_project
|
jasper
|
The jas_matrix_clip function in jas_seq.c in JasPer 1.900.1 allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted JPEG 2000 image.
|
CWE-20
Improper Input Validation
|
CVE-2016-2089
|
2024-11-21 11:47 |
2016-02-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267283
|
5.5 |
MEDIUM
Network
|
djangoproject
|
django
|
Django 1.9.x before 1.9.2, when ModelAdmin.save_as is set to True, allows remote authenticated users to bypass intended access restrictions and create ModelAdmin objects via the "Save as New" option …
|
CWE-284
Improper Access Control
|
CVE-2016-2048
|
2024-11-21 11:47 |
2016-02-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267284
|
9.8 |
CRITICAL
Network
|
kubernetes
|
kubernetes
|
Openshift allows remote attackers to gain privileges by updating a build configuration that was created with an allowed type to a type that is not allowed.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2016-1906
|
2024-11-21 11:47 |
2016-02-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267285
|
7.7 |
HIGH
Network
|
kubernetes
|
kubernetes
|
The API server in Kubernetes does not properly check admission control, which allows remote authenticated users to access additional resources via a crafted patched object.
|
CWE-284
Improper Access Control
|
CVE-2016-1905
|
2024-11-21 11:47 |
2016-02-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267286
|
8.8 |
HIGH
Network
|
janrain
|
php-openid
|
examples/consumer/common.php in JanRain PHP OpenID library (aka php-openid) improperly checks the openid.realm parameter against the SERVER_NAME element in the SERVER superglobal array, which might a…
|
CWE-284
Improper Access Control
|
CVE-2016-2049
|
2024-11-21 11:47 |
2016-02-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267287
|
5.3 |
MEDIUM
Network
|
google
mozilla
|
android
firefox
|
Mozilla Firefox before 44.0 on Android does not ensure that HTTPS is used for a lightweight-theme installation, which allows man-in-the-middle attackers to replace a theme's images and colors by modi…
|
CWE-310
Cryptographic Issues
|
CVE-2016-1948
|
2024-11-21 11:47 |
2016-02-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267288
|
4.7 |
MEDIUM
Network
|
canonical
opensuse
mozilla
|
ubuntu_linux
leap
opensuse
firefox
|
Mozilla Firefox 43.x mishandles attempts to connect to the Application Reputation service, which makes it easier for remote attackers to trigger an unintended download by leveraging the absence of re…
|
CWE-19
Data Processing Errors
|
CVE-2016-1947
|
2024-11-21 11:47 |
2016-02-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267289
|
9.8 |
CRITICAL
Network
|
opensuse
mozilla
|
leap
opensuse
firefox
|
The MoofParser::Metadata function in binding/MoofParser.cpp in libstagefright in Mozilla Firefox before 44.0 does not limit the size of read operations, which might allow remote attackers to cause a …
|
CWE-119
CWE-189
Incorrect Access of Indexable Resource ('Range Error')
Numeric Errors
|
CVE-2016-1946
|
2024-11-21 11:47 |
2016-02-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267290
|
8.8 |
HIGH
Network
|
mozilla
opensuse
|
firefox
leap
opensuse
|
The nsZipArchive function in Mozilla Firefox before 44.0 might allow remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging incorrect use of a pointer d…
|
NVD-CWE-noinfo
|
CVE-2016-1945
|
2024-11-21 11:47 |
2016-02-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
