|
268971
|
8.8 |
HIGH
Network
|
corega
|
cg-wlbargmh_firmware cg-wlbargnl_firmware
|
Cross-site request forgery (CSRF) vulnerability on Corega CG-WLBARGMH and CG-WLBARGNL devices allows remote attackers to hijack the authentication of administrators for requests that perform administ…
|
CWE-352
Origin Validation Error
|
CVE-2016-1158
|
2024-11-21 11:45 |
2016-03-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268972
|
6.1 |
MEDIUM
Network
|
log-chat_project
|
log-chat
|
Cross-site scripting (XSS) vulnerability in log_chat.cgi in Script* Log-Chat before 2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
|
CWE-79
Cross-site Scripting
|
CVE-2016-1157
|
2024-11-21 11:45 |
2016-02-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268973
|
5.7 |
MEDIUM
Network
|
linecorp
|
line
|
LINE 4.3.0.724 and earlier on Windows and 4.3.1 and earlier on OS X allows remote authenticated users to cause a denial of service (application crash) via a crafted post that is mishandled when displ…
|
CWE-20
Improper Input Validation
|
CVE-2016-1156
|
2024-11-21 11:45 |
2016-02-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268974
|
9.1 |
CRITICAL
Network
|
cuore
|
ec-cube_help_plugin
|
SQL injection vulnerability in the Help plug-in 1.3.5 and earlier in Cuore EC-CUBE allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
|
CWE-89
SQL Injection
|
CVE-2016-1154
|
2024-11-21 11:45 |
2016-02-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268975
|
6.5 |
MEDIUM
Network
|
cybozu
|
office
|
customapp in Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to cause a denial of service via unspecified vectors, a different vulnerability than CVE-2015-8489.
|
CWE-20
Improper Input Validation
|
CVE-2016-1153
|
2024-11-21 11:45 |
2016-02-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268976
|
5.4 |
MEDIUM
Network
|
cybozu
|
office
|
Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to bypass intended access restrictions, and read or write to plan data, via unspecified vectors, a different vulnerability than CV…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2016-1152
|
2024-11-21 11:45 |
2016-02-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268977
|
8.8 |
HIGH
Network
|
cybozu
|
office
|
Multiple cross-site request forgery (CSRF) vulnerabilities in Cybozu Office 9.9.0 through 10.3.0 allow remote attackers to hijack the authentication of arbitrary users.
|
CWE-352
Origin Validation Error
|
CVE-2016-1151
|
2024-11-21 11:45 |
2016-02-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268978
|
6.1 |
MEDIUM
Network
|
cybozu
|
office
|
Cross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than C…
|
CWE-79
Cross-site Scripting
|
CVE-2016-1150
|
2024-11-21 11:45 |
2016-02-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268979
|
6.1 |
MEDIUM
Network
|
cybozu
|
office
|
Cross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than C…
|
CWE-79
Cross-site Scripting
|
CVE-2016-1149
|
2024-11-21 11:45 |
2016-02-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268980
|
7.5 |
HIGH
Network
|
nec
|
expresscluster_x
|
Directory traversal vulnerability in WebManager in NEC EXPRESSCLUSTER X through 3.3 11.31 on Windows and through 3.3 3.3.1-1 on Linux and Solaris allows remote attackers to read arbitrary files via u…
|
CWE-22
Path Traversal
|
CVE-2016-1145
|
2024-11-21 11:45 |
2016-01-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|