|
264541
|
8.8 |
HIGH
Adjacent
|
ubiquiti_networks
|
unifi_ap_ac_lite_firmware
|
Ubiquiti Networks UniFi 5.2.7 does not restrict access to the database, which allows remote attackers to modify the database by directly connecting to it.
|
CWE-284
Improper Access Control
|
CVE-2016-7792
|
2024-11-21 11:58 |
2017-01-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264542
|
9.8 |
CRITICAL
Network
|
openslp
|
openslp
|
Buffer overflow in the SLPFoldWhiteSpace function in common/slp_compare.c in OpenSLP 2.0 allows remote attackers to have unspecified impact via a crafted string.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2016-7567
|
2024-11-21 11:58 |
2017-01-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264543
|
9.8 |
CRITICAL
Network
|
sociomantic
|
git-hub
|
sociomantic-tsunami git-hub before 0.10.3 allows remote attackers to execute arbitrary code via a crafted repository name.
|
CWE-284
Improper Access Control
|
CVE-2016-7794
|
2024-11-21 11:58 |
2017-01-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264544
|
8.8 |
HIGH
Network
|
sociomantic
|
git-hub
|
sociomantic-tsunami git-hub before 0.10.3 allows remote attackers to execute arbitrary code via a crafted repository URL.
|
CWE-284
Improper Access Control
|
CVE-2016-7793
|
2024-11-21 11:58 |
2017-01-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264545
|
8.8 |
HIGH
Local
|
selinux_project
fedoraproject
redhat
|
selinux
fedora
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
enterprise_linux_hpc_node
enterprise_linux_server_tus
|
SELinux policycoreutils allows local users to execute arbitrary commands outside of the sandbox via a crafted TIOCSTI ioctl call.
|
CWE-284
Improper Access Control
|
CVE-2016-7545
|
2024-11-21 11:58 |
2017-01-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264546
|
8.4 |
HIGH
Local
|
gnu
fedoraproject
|
bash
fedora
|
Bash before 4.4 allows local users to execute arbitrary commands with root privileges via crafted SHELLOPTS and PS4 environment variables.
|
CWE-20
Improper Input Validation
|
CVE-2016-7543
|
2024-11-21 11:58 |
2017-01-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264547
|
6.1 |
MEDIUM
Network
|
emc
|
documentum_webtop
documentum_administrator
documentum_taskspace
documentum_capital_projects
|
EMC Documentum WebTop Version 6.8, prior to P18 and Version 6.8.1, prior to P06; and EMC Documentum TaskSpace version 6.7SP3, prior to P02; and EMC Documentum Capital Projects Version 1.9, prior to P…
|
CWE-79
Cross-site Scripting
|
CVE-2016-8213
|
2024-11-21 11:58 |
2017-01-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264548
|
7.4 |
HIGH
Network
|
spip
|
spip
|
ecrire/exec/valider_xml.php in SPIP 3.1.2 and earlier allows remote attackers to conduct server side request forgery (SSRF) attacks via a URL in the var_url parameter in a valider_xml action.
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2016-7999
|
2024-11-21 11:58 |
2017-01-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264549
|
8.8 |
HIGH
Network
|
spip
|
spip
|
The SPIP template composer/compiler in SPIP 3.1.2 and earlier allows remote authenticated users to execute arbitrary PHP code by uploading an HTML file with a crafted (1) INCLUDE or (2) INCLURE tag a…
|
CWE-20
Improper Input Validation
|
CVE-2016-7998
|
2024-11-21 11:58 |
2017-01-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264550
|
7.5 |
HIGH
Network
|
graphicsmagick
|
graphicsmagick
|
The WPG format reader in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service (assertion failure and crash) via vectors related to a ReferenceBlob and a NULL pointer.
|
CWE-476
NULL Pointer Dereference
|
CVE-2016-7997
|
2024-11-21 11:58 |
2017-01-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
