|
266061
|
6.1 |
MEDIUM
Network
|
smartbear
|
swagger-ui
|
Swagger-UI before 2.2.1 has XSS via the Default field in the Definitions section.
|
CWE-79
Cross-site Scripting
|
CVE-2016-5682
|
2024-11-21 11:54 |
2017-04-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266062
|
5.4 |
MEDIUM
Network
|
opmantek
|
network_management_information_system
|
Opmantek NMIS before 8.5.12G has XSS via SNMP.
|
CWE-79
Cross-site Scripting
|
CVE-2016-5642
|
2024-11-21 11:54 |
2017-04-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266063
|
5.5 |
MEDIUM
Local
|
google
|
android
|
The high level operating systems (HLOS) was not providing sufficient memory address information to ensure that secure applications inside Qualcomm Secure Execution Environment (QSEE) only write to le…
|
CWE-200
Information Exposure
|
CVE-2016-5349
|
2024-11-21 11:54 |
2017-04-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266064
|
8.8 |
HIGH
Network
|
netiq
|
access_manager
|
A cross site request forgery protection mechanism in NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before 4.2.2 could be circumvented by repeated uploads causing a high load.
|
CWE-352
Origin Validation Error
|
CVE-2016-5758
|
2024-11-21 11:54 |
2017-03-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266065
|
9.8 |
CRITICAL
Network
|
netiq
|
access_manager
|
iManager Admin Console in NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before 4.2.2 was vulnerable to iFrame manipulation attacks, which could allow remote users to gain access to authenti…
|
CWE-200
Information Exposure
|
CVE-2016-5757
|
2024-11-21 11:54 |
2017-03-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266066
|
6.1 |
MEDIUM
Network
|
netiq
|
access_manager
|
Multiple components of the web tools in NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before 4.2.2 were vulnerable to Reflected Cross Site Scripting attacks which could be used to hijack us…
|
CWE-79
Cross-site Scripting
|
CVE-2016-5756
|
2024-11-21 11:54 |
2017-03-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266067
|
6.5 |
MEDIUM
Network
|
netiq
|
access_manager
|
NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before 4.2.2 was vulnerable to clickjacking attacks due to a missing SAMEORIGIN filter in the "high encryption" setting.
|
CWE-20
Improper Input Validation
|
CVE-2016-5755
|
2024-11-21 11:54 |
2017-03-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266068
|
7.5 |
HIGH
Network
|
netiq
|
access_manager
|
Presence of a .htaccess file could leak information in NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before SP2.
|
CWE-200
Information Exposure
|
CVE-2016-5754
|
2024-11-21 11:54 |
2017-03-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266069
|
7.5 |
HIGH
Network
|
netiq
|
access_manager
|
The SAML2 implementation in Identity Server in NetIQ Access Manager 4.1 before 4.1.2 HF1 and 4.2 before 4.2.2 was handling unsigned SAML requests incorrectly, leaking results to a potentially malicio…
|
CWE-200
Information Exposure
|
CVE-2016-5752
|
2024-11-21 11:54 |
2017-03-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266070
|
6.1 |
MEDIUM
Network
|
netiq
|
access_manager
|
An unfiltered finalizer target URL in the SAML processing feature in Identity Server in NetIQ Access Manager 4.1 before 4.1.2 HF1 and 4.2 before 4.2.2 could be used to trigger XSS and leak authentica…
|
CWE-79
Cross-site Scripting
|
CVE-2016-5751
|
2024-11-21 11:54 |
2017-03-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|