|
265181
|
6.5 |
MEDIUM
Network
|
imagemagick
|
imagemagick
|
coders/tiff.c in ImageMagick before 6.9.5-3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TIFF file.
|
CWE-125
Out-of-bounds Read
|
CVE-2016-5010
|
2024-11-21 11:53 |
2017-04-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265182
|
8.8 |
HIGH
Network
|
cs-cart
|
cs-cart
|
Twigmo bundled with CS-Cart 4.3.9 and earlier and Twigmo bundled with CS-Cart Multi-Vendor 4.3.9 and earlier allow remote authenticated users to execute arbitrary PHP code on the servers.
|
CWE-20
Improper Input Validation
|
CVE-2016-4862
|
2024-11-21 11:53 |
2017-04-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265183
|
8.1 |
HIGH
Network
|
linecorp
|
line
|
LINE for Windows before 4.8.3 allows man-in-the-middle attackers to execute arbitrary code.
|
CWE-284
Improper Access Control
|
CVE-2016-4850
|
2024-11-21 11:53 |
2017-04-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265184
|
4.3 |
MEDIUM
Network
|
cybozu
|
mailwise
|
Cybozu Mailwise before 5.4.0 allows remote attackers to conduct clickjacking attacks.
|
CWE-200
Information Exposure
|
CVE-2016-4844
|
2024-11-21 11:53 |
2017-04-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265185
|
6.5 |
MEDIUM
Network
|
cybozu
|
mailwise
|
Cybozu Mailwise before 5.4.0 allows remote attackers to obtain sensitive cookie information.
|
CWE-200
Information Exposure
|
CVE-2016-4843
|
2024-11-21 11:53 |
2017-04-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265186
|
4.3 |
MEDIUM
Network
|
cybozu
|
mailwise
|
Cybozu Mailwise before 5.4.0 allows remote attackers to obtain information on when an email is read.
|
CWE-200
Information Exposure
|
CVE-2016-4842
|
2024-11-21 11:53 |
2017-04-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265187
|
5.9 |
MEDIUM
Network
|
dmm
|
dmmfx_demo_trade gaitamejapan_fx_trade dmmfx_trade
|
DMMFX Trade for Android 1.5.0 and earlier, DMMFX DEMO Trade for Android 1.5.0 and earlier, and GAITAMEJAPAN FX Trade for Android 1.4.0 and earlier do not verify SSL certificates.
|
CWE-295
Improper Certificate Validation
|
CVE-2016-4818
|
2024-11-21 11:53 |
2017-04-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265188
|
6.1 |
MEDIUM
Network
|
geeklog_project
|
geeklog
|
Multiple cross-site scripting (XSS) vulnerabilities in Geeklog IVYWE edition 2.1.1 allow remote attackers to inject arbitrary web script or HTML by leveraging use of the COM_getCurrentURL function in…
|
CWE-79
Cross-site Scripting
|
CVE-2016-4849
|
2024-11-21 11:53 |
2017-04-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265189
|
6.1 |
MEDIUM
Network
|
ossec
|
web_ui
|
Cross-site scripting (XSS) vulnerability in site/search.php in OSSEC Web UI before 0.9 allows remote attackers to inject arbitrary web script or HTML by leveraging an unanchored regex.
|
CWE-79
Cross-site Scripting
|
CVE-2016-4847
|
2024-11-21 11:53 |
2017-04-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265190
|
3.5 |
LOW
Network
|
cybozu
|
office
|
Cybozu Office 9.0.0 through 10.4.0 allows remote attackers to conduct a "reflected file download" attack.
|
CWE-284
Improper Access Control
|
CVE-2016-4874
|
2024-11-21 11:53 |
2017-04-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|