|
264631
|
5.5 |
MEDIUM
Network
|
gigaccsecure
|
gigacc_office
|
GigaCC OFFICE ver.2.3 and earlier allows remote attackers to execute arbitrary OS commands via specially crafted mail template.
|
CWE-78
OS Command
|
CVE-2016-7844
|
2024-11-21 11:58 |
2017-08-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264632
|
3.1 |
LOW
Network
|
mufg
|
mitsubishi_ufj
|
The Bank of Tokyo-Mitsubishi UFJ, Ltd. App for Android ver5.3.1, ver5.2.2 and earlier allow a man-in-the-middle attacker to downgrade the communication between the app and the server from TLS v1.2 to…
|
CWE-310
Cryptographic Issues
|
CVE-2016-7812
|
2024-11-21 11:58 |
2017-08-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264633
|
7.5 |
HIGH
Network
|
imagemagick
|
imagemagick
|
Memory leak in AcquireVirtualMemory in ImageMagick before 7 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors.
|
CWE-399
Resource Management Errors
|
CVE-2016-7539
|
2024-11-21 11:58 |
2017-07-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264634
|
5.4 |
MEDIUM
Network
|
glpi-project
|
glpi
|
Cross-site scripting (XSS) vulnerability in GLPI 0.90.4 allows remote authenticated attackers to inject arbitrary web script or HTML by attaching a crafted HTML file to a ticket.
|
CWE-79
Cross-site Scripting
|
CVE-2016-7509
|
2024-11-21 11:58 |
2017-07-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264635
|
8.0 |
HIGH
Network
|
glpi-project
|
glpi
|
Cross-Site Request Forgery (CSRF) vulnerability in GLPI 0.90.4 allows remote authenticated attackers to submit a request that could lead to the creation of an admin account in the application.
|
CWE-352
Origin Validation Error
|
CVE-2016-7507
|
2024-11-21 11:58 |
2017-07-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264636
|
7.5 |
HIGH
Network
|
glpi-project
|
glpi
|
Multiple SQL injection vulnerabilities in GLPI 0.90.4 allow an authenticated remote attacker to execute arbitrary SQL commands by using a certain character when the database is configured to use Big5…
|
CWE-89
SQL Injection
|
CVE-2016-7508
|
2024-11-21 11:58 |
2017-06-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264637
|
7.8 |
HIGH
Local
|
winsparkle
|
winsparkle
|
Untrusted search path vulnerability in WinSparkle versions prior to 0.5.3 allows remote attackers to execute arbitrary code via a specially crafted executable file in an unspecified directory.
|
CWE-426
Untrusted Search Path
|
CVE-2016-7838
|
2024-11-21 11:58 |
2017-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264638
|
7.8 |
HIGH
Local
|
bluez
|
bluez
|
Buffer overflow in BlueZ 5.41 and earlier allows an attacker to execute arbitrary code via the parse_line function used in some userland utilities.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2016-7837
|
2024-11-21 11:58 |
2017-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264639
|
9.1 |
CRITICAL
Network
|
h2o_project dena
|
h2o
|
Use-after-free vulnerability in H2O allows remote attackers to cause a denial-of-service (DoS) or obtain server certificate private keys and possibly other information.
|
CWE-416
Use After Free
|
CVE-2016-7835
|
2024-11-21 11:58 |
2017-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264640
|
7.5 |
HIGH
Network
|
cybozu
|
dezie
|
Cybozu Dezie 8.0.0 to 8.1.1 allows remote attackers to bypass access restrictions to delete an arbitrary DBM (Cybozu Dezie proprietary format) file via unspecified vectors.
|
CWE-284
Improper Access Control
|
CVE-2016-7833
|
2024-11-21 11:58 |
2017-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|