|
266081
|
9.8 |
CRITICAL
Network
|
exponentcms
|
exponent_cms
|
SQL injection vulnerability in framework/core/models/expRecord.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the title parameter.
|
CWE-89
SQL Injection
|
CVE-2016-7783
|
2024-11-21 11:58 |
2017-03-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266082
|
9.8 |
CRITICAL
Network
|
exponentcms
|
exponent_cms
|
SQL injection vulnerability in framework/core/models/expConfig.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the src parameter.
|
CWE-89
SQL Injection
|
CVE-2016-7782
|
2024-11-21 11:58 |
2017-03-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266083
|
9.8 |
CRITICAL
Network
|
exponentcms
|
exponent_cms
|
SQL injection vulnerability in framework/modules/blog/controllers/blogController.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the author paramet…
|
CWE-89
SQL Injection
|
CVE-2016-7781
|
2024-11-21 11:58 |
2017-03-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266084
|
9.8 |
CRITICAL
Network
|
exponentcms
|
exponent_cms
|
SQL injection vulnerability in cron/find_help.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the version parameter.
|
CWE-89
SQL Injection
|
CVE-2016-7780
|
2024-11-21 11:58 |
2017-03-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266085
|
7.5 |
HIGH
Network
|
opensuse fedoraproject libass_project
|
leap opensuse fedora libass
|
The check_allocations function in libass/ass_shaper.c in libass before 0.13.4 allows remote attackers to cause a denial of service (memory allocation failure) via unspecified vectors.
|
CWE-399
Resource Management Errors
|
CVE-2016-7972
|
2024-11-21 11:58 |
2017-03-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266086
|
7.5 |
HIGH
Network
|
fedoraproject libass_project
|
fedora libass
|
Buffer overflow in the calc_coeff function in libass/ass_blur.c in libass before 0.13.4 allows remote attackers to cause a denial of service via unspecified vectors.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2016-7970
|
2024-11-21 11:58 |
2017-03-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266087
|
7.5 |
HIGH
Network
|
opensuse fedoraproject libass_project
|
leap opensuse fedora libass
|
The wrap_lines_smart function in ass_render.c in libass before 0.13.4 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors, related to "0/3 line wrapping …
|
CWE-125
Out-of-bounds Read
|
CVE-2016-7969
|
2024-11-21 11:58 |
2017-03-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266088
|
3.3 |
LOW
Local
|
irssi
|
buf.pl
|
The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created between upgrades, which might allow local users to obtain sensitive information from …
|
CWE-275
Permission Issues
|
CVE-2016-7553
|
2024-11-21 11:58 |
2017-02-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266089
|
6.5 |
MEDIUM
Adjacent
|
intel
|
x710_series_driver xl710_series_driver
|
Drivers for the Intel Ethernet Controller X710 and Intel Ethernet Controller XL710 families before version 22.0 are vulnerable to a denial of service in certain layer 2 network configurations.
|
NVD-CWE-noinfo
|
CVE-2016-8105
|
2024-11-21 11:58 |
2017-02-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266090
|
2.4 |
LOW
Physics
|
apple
|
iphone_os
|
An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "Clipboard" component, which allows physically proximate attackers to obtain sensitive informati…
|
CWE-200
Information Exposure
|
CVE-2016-7765
|
2024-11-21 11:58 |
2017-02-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|