|
264711
|
7.5 |
HIGH
Network
|
apache
|
tomcat
|
A bug in the error handling of the send file code for the NIO HTTP connector in Apache Tomcat 9.0.0.M1 to 9.0.0.M13, 8.5.0 to 8.5.8, 8.0.0.RC1 to 8.0.39, 7.0.0 to 7.0.73 and 6.0.16 to 6.0.48 resulted…
|
CWE-388
7PK - Errors
|
CVE-2016-8745
|
2024-11-21 11:59 |
2017-08-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264712
|
7.5 |
HIGH
Network
|
apache
|
cxf
|
The JAX-RS module in Apache CXF prior to 3.0.12 and 3.1.x prior to 3.1.9 provides a number of Atom JAX-RS MessageBodyReaders. These readers use Apache Abdera Parser which expands XML entities by defa…
|
CWE-611
XXE
|
CVE-2016-8739
|
2024-11-21 11:59 |
2017-08-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264713
|
7.5 |
HIGH
Network
|
apache netapp debian redhat
|
http_server clustered_data_ontap oncommand_unified_manager debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_tus<…
|
Apache HTTP Server, in all releases prior to 2.2.32 and 2.4.25, was liberal in the whitespace accepted from requests and sent in response lines and headers. Accepting these different behaviors repres…
|
NVD-CWE-noinfo
|
CVE-2016-8743
|
2024-11-21 11:59 |
2017-07-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264714
|
9.1 |
CRITICAL
Network
|
ipsilon_project
|
ipsilon
|
A vulnerability in ipsilon 2.0 before 2.0.2, 1.2 before 1.2.1, 1.1 before 1.1.2, and 1.0 before 1.0.3 was found that allows attacker to log out active sessions of other users. This issue is related …
|
CWE-384
Session Fixation
|
CVE-2016-8638
|
2024-11-21 11:59 |
2017-07-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264715
|
8.8 |
HIGH
Network
|
fortinet
|
forticlient
|
In FortiClientWindows 5.4.1 and 5.4.2, an attacker may escalate privilege via a FortiClientNamedPipe vulnerability.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2016-8493
|
2024-11-21 11:59 |
2017-06-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264716
|
9.8 |
CRITICAL
Network
|
foscam
|
c1_webcam_firmware
|
Hard-coded FTP credentials (r:r) are included in the Foscam C1 running firmware 1.9.1.12. Knowledge of these credentials would allow remote access to any cameras found on the internet that do not hav…
|
CWE-798
Use of Hard-coded Credentials
|
CVE-2016-8731
|
2024-11-21 11:59 |
2017-06-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264717
|
4.8 |
MEDIUM
Network
|
apache
|
ranger
|
Apache Ranger before 0.6.3 is vulnerable to a Stored Cross-Site Scripting in when entering custom policy conditions. Admin users can store some arbitrary javascript code to be executed when normal us…
|
CWE-79
Cross-site Scripting
|
CVE-2016-8751
|
2024-11-21 11:59 |
2017-06-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264718
|
5.9 |
MEDIUM
Network
|
apache
|
ranger
|
Apache Ranger before 0.6.3 policy engine incorrectly matches paths in certain conditions when policy does not contain wildcards and has recursion flag set to true.
|
CWE-426
Untrusted Search Path
|
CVE-2016-8746
|
2024-11-21 11:59 |
2017-06-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264719
|
6.5 |
MEDIUM
Network
|
cloudfoundry
|
capi-release cf-release
|
An issue was discovered in Cloud Foundry Foundation cf-release versions prior to 250 and CAPI-release versions prior to 1.12.0. A user with the SpaceAuditor role is over-privileged with the ability t…
|
CWE-269
Improper Privilege Management
|
CVE-2016-8219
|
2024-11-21 11:59 |
2017-06-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264720
|
9.8 |
CRITICAL
Network
|
cloudfoundry
|
cf-release routing-release
|
An issue was discovered in Cloud Foundry Foundation routing-release versions prior to 0.142.0 and cf-release versions 203 to 231. Incomplete validation logic in JSON Web Token (JWT) libraries can all…
|
CWE-20
Improper Input Validation
|
CVE-2016-8218
|
2024-11-21 11:59 |
2017-06-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|