|
264871
|
7.8 |
HIGH
Local
|
readydesk
|
readydesk
|
ReadyDesk 9.1 allows local users to determine cleartext SQL Server credentials by reading the SQL_Config.aspx file and decrypting data with a hardcoded key in the ReadyDesk.dll file.
|
NVD-CWE-Other
|
CVE-2016-5683
|
2024-11-21 11:54 |
2016-08-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264872
|
4.3 |
MEDIUM
Network
|
accellion
|
kiteworks_appliance
|
Directory traversal vulnerability on Accellion Kiteworks appliances before kw2016.03.00 allows remote attackers to read files via a crafted URI.
|
CWE-22
Path Traversal
|
CVE-2016-5664
|
2024-11-21 11:54 |
2016-08-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264873
|
6.1 |
MEDIUM
Network
|
accellion
|
kiteworks_appliance
|
Multiple cross-site scripting (XSS) vulnerabilities in oauth_callback.php on Accellion Kiteworks appliances before kw2016.03.00 allow remote attackers to inject arbitrary web script or HTML via the (…
|
CWE-79
Cross-site Scripting
|
CVE-2016-5663
|
2024-11-21 11:54 |
2016-08-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264874
|
7.8 |
HIGH
Local
|
accellion
|
kiteworks_appliance
|
Accellion Kiteworks appliances before kw2016.03.00 use setuid-root permissions for /opt/bin/cli, which allows local users to gain privileges via unspecified vectors.
|
NVD-CWE-Other
|
CVE-2016-5662
|
2024-11-21 11:54 |
2016-08-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264875
|
8.8 |
HIGH
Network
|
redhat
|
cloudforms
|
The web UI in Red Hat CloudForms 4.1 allows remote authenticated users to execute arbitrary code via vectors involving "Lack of field filters."
|
CWE-284
Improper Access Control
|
CVE-2016-5383
|
2024-11-21 11:54 |
2016-08-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264876
|
7.5 |
HIGH
Network
|
ultravnc
|
repeater
|
UltraVNC Repeater before 1300 does not restrict destination IP addresses or TCP ports, which allows remote attackers to obtain open-proxy functionality by using a :: substring in between the IP addre…
|
CWE-284
Improper Access Control
|
CVE-2016-5673
|
2024-11-21 11:54 |
2016-08-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264877
|
9.8 |
CRITICAL
Network
|
dlink d-link
|
dir-868l_firmware dir-822_firmware dir-880l_firmware dir-850l_firmare dir-895l_firmware dir-817l\(w\)_firmware dir-818l\(w\)_firmware dir-890l_firmware dir-823_firmware dir…
|
Stack-based buffer overflow in dws/api/Login on D-Link DIR-850L B1 2.07 before 2.07WWB05, DIR-817 Ax, DIR-818LW Bx before 2.05b03beta03, DIR-822 C1 3.01 before 3.01WWb02, DIR-823 A1 1.00 before 1.00W…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2016-5681
|
2024-11-21 11:54 |
2016-08-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264878
|
7.5 |
HIGH
Network
|
zmodo
|
zp-ibh-13w zp-ne-14-s
|
ZModo ZP-NE14-S and ZP-IBH-13W devices do not enforce a WPA2 configuration setting, which allows remote attackers to trigger association with an arbitrary access point by using a recognized SSID valu…
|
CWE-284
Improper Access Control
|
CVE-2016-5650
|
2024-11-21 11:54 |
2016-08-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264879
|
7.3 |
HIGH
Network
|
rockwellautomation
|
1766-l32bxb 1766-l32bwaa 1766-l32awaa 1766-l32bwa 1766-l32awa 1766-l32bxba
|
Rockwell Automation MicroLogix 1400 PLC 1766-L32BWA, 1766-L32AWA, 1766-L32BXB, 1766-L32BWAA, 1766-L32AWAA, and 1766-L32BXBA devices have a hardcoded SNMP community, which makes it easier for remote a…
|
CWE-284
Improper Access Control
|
CVE-2016-5645
|
2024-11-21 11:54 |
2016-08-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264880
|
5.3 |
MEDIUM
Network
|
theforeman
|
foreman
|
Foreman before 1.11.4 and 1.12.x before 1.12.1 allow remote authenticated users with the view_hosts permission containing a filter to obtain sensitive network interface information via a request to A…
|
CWE-200
Information Exposure
|
CVE-2016-5390
|
2024-11-21 11:54 |
2016-08-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|