|
264581
|
9.8 |
CRITICAL
Network
|
libcsp_project
|
libcsp
|
Buffer overflow in the csp_can_process_frame in csp_if_can.c in the libcsp library v1.4 and earlier allows hostile components connected to the canbus to execute arbitrary code via a long csp packet.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2016-8596
|
2024-11-21 11:59 |
2016-10-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264582
|
6.1 |
MEDIUM
Network
|
alienvault
|
unified_security_management open_source_security_information_and_event_management
|
Multiple GET parameters in the vulnerability scan scheduler of AlienVault OSSIM and USM before 5.3.2 are vulnerable to reflected XSS.
|
CWE-79
Cross-site Scripting
|
CVE-2016-8583
|
2024-11-21 11:59 |
2016-10-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264583
|
9.8 |
CRITICAL
Network
|
alienvault
|
unified_security_management open_source_security_information_and_event_management
|
A vulnerability exists in gauge.php of AlienVault OSSIM and USM before 5.3.2 that allows an attacker to execute an arbitrary SQL query and retrieve database information or read local system files via…
|
CWE-89
SQL Injection
|
CVE-2016-8582
|
2024-11-21 11:59 |
2016-10-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264584
|
6.1 |
MEDIUM
Network
|
alienvault
|
unified_security_management open_source_security_information_and_event_management
|
A persistent XSS vulnerability exists in the User-Agent header of the login process of AlienVault OSSIM and USM before 5.3.2 that allows an attacker to steal session IDs of logged in users when the c…
|
CWE-79
Cross-site Scripting
|
CVE-2016-8581
|
2024-11-21 11:59 |
2016-10-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264585
|
9.8 |
CRITICAL
Network
|
alienvault
|
unified_security_management open_source_security_information_and_event_management
|
PHP object injection vulnerabilities exist in multiple widget files in AlienVault OSSIM and USM before 5.3.2. These vulnerabilities allow arbitrary PHP code execution via magic methods in included cl…
|
CWE-284
Improper Access Control
|
CVE-2016-8580
|
2024-11-21 11:59 |
2016-10-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264586
|
4.0 |
MEDIUM
Local
|
docker2aci_project
|
docker2aci
|
docker2aci <= 0.12.3 has an infinite loop when handling local images with cyclic dependency chain.
|
CWE-20 CWE-399
Improper Input Validation Resource Management Errors
|
CVE-2016-8579
|
2024-11-21 11:59 |
2016-10-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264587
|
9.8 |
CRITICAL
Network
|
redislabs
|
redis
|
A buffer overflow in Redis 3.2.x prior to 3.2.4 causes arbitrary code execution when a crafted command is sent. An out of bounds write vulnerability exists in the handling of the client-output-buffer…
|
CWE-787
Out-of-bounds Write
|
CVE-2016-8339
|
2024-11-21 11:59 |
2016-10-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264588
|
7.8 |
HIGH
Local
|
uclouvain
|
openjpeg
|
A buffer overflow in OpenJPEG 2.1.1 causes arbitrary code execution when parsing a crafted image. An exploitable code execution vulnerability exists in the jpeg2000 image file format parser as implem…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2016-8332
|
2024-11-21 11:59 |
2016-10-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264589
|
6.1 |
MEDIUM
Network
|
yandex
|
yandex_browser
|
XSS in Yandex Browser Translator in Yandex browser for desktop for versions from 15.12 to 16.2 could be used by remote attacker for evaluation arbitrary javascript code.
|
CWE-79
Cross-site Scripting
|
CVE-2016-8506
|
2024-11-21 11:59 |
2016-10-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264590
|
6.1 |
MEDIUM
Network
|
yandex
|
yandex.browser
|
XSS in Yandex Browser BookReader in Yandex browser for desktop for versions before 16.6. could be used by remote attacker for evaluation arbitrary javascript code.
|
CWE-79
Cross-site Scripting
|
CVE-2016-8505
|
2024-11-21 11:59 |
2016-10-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|