|
265321
|
8.8 |
HIGH
Network
|
google
|
chrome
|
Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android had insufficient validation in bitmap handling, which allowed a remote attacker to potentially explo…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2016-5182
|
2024-11-21 11:53 |
2016-12-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265322
|
6.1 |
MEDIUM
Network
|
google
|
chrome
|
Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android permitted execution of v8 microtasks while the DOM was in an inconsistent state, which allowed a rem…
|
CWE-79
Cross-site Scripting
|
CVE-2016-5181
|
2024-11-21 11:53 |
2016-12-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265323
|
6.1 |
MEDIUM
Network
|
open-xchange
|
open-xchange_appsuite
|
An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev14. Adding images from external sources to HTML editors by drag&drop can potentially lead to script code execution in the context …
|
CWE-79
Cross-site Scripting
|
CVE-2016-5124
|
2024-11-21 11:53 |
2016-12-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265324
|
6.1 |
MEDIUM
Network
|
naver
|
ngrinder
|
Multiple cross-site scripting (XSS) vulnerabilities in nGrinder before 3.4 allow remote attackers to inject arbitrary web script or HTML via the (1) description, (2) email, or (3) username parameter …
|
CWE-79
Cross-site Scripting
|
CVE-2016-5060
|
2024-11-21 11:53 |
2016-12-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265325
|
6.0 |
MEDIUM
Local
|
qemu
|
qemu
|
The mptsas_fetch_requests function in hw/scsi/mptsas.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop, and CPU consumption or QEMU proce…
|
NVD-CWE-noinfo
|
CVE-2016-4964
|
2024-11-21 11:53 |
2016-12-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265326
|
6.6 |
MEDIUM
Local
|
nvidia
|
gpu_driver
|
For the NVIDIA Quadro, NVS, and GeForce products, improper sanitization of parameters in the NVAPI support layer causes a denial of service vulnerability (blue screen crash) within the NVIDIA Windows…
|
CWE-20
Improper Input Validation
|
CVE-2016-5025
|
2024-11-21 11:53 |
2016-11-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265327
|
5.5 |
MEDIUM
Local
|
nvidia
|
geforce_experience
|
For the NVIDIA Quadro, NVS, and GeForce products, improper sanitization of parameters in the NVStreamKMS.sys API layer caused a denial of service vulnerability (blue screen crash) within the NVIDIA W…
|
CWE-20
Improper Input Validation
|
CVE-2016-4961
|
2024-11-21 11:53 |
2016-11-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265328
|
7.3 |
HIGH
Local
|
nvidia
|
geforce_experience
|
For the NVIDIA Quadro, NVS, and GeForce products, the NVIDIA NVStreamKMS.sys service component is improperly validating user-supplied data through its API entry points causing an elevation of privile…
|
CWE-20
Improper Input Validation
|
CVE-2016-4960
|
2024-11-21 11:53 |
2016-11-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265329
|
7.5 |
HIGH
Network
|
nvidia
|
gpu_driver
|
For the NVIDIA Quadro, NVS, and GeForce products, there is a Remote Desktop denial of service. A successful exploit of a vulnerable system will result in a kernel null pointer dereference, causing a …
|
CWE-476
NULL Pointer Dereference
|
CVE-2016-4959
|
2024-11-21 11:53 |
2016-11-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265330
|
9.8 |
CRITICAL
Network
|
animas
|
onetouch_ping_firmware
|
Johnson & Johnson Animas OneTouch Ping devices allow remote attackers to bypass authentication via replay attacks.
|
CWE-287
Improper Authentication
|
CVE-2016-5086
|
2024-11-21 11:53 |
2016-10-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|