|
266631
|
7.5 |
HIGH
Network
|
cisco
|
email_security_appliance
|
A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to cause an affected device to sto…
|
CWE-20
Improper Input Validation
|
CVE-2016-6356
|
2024-11-21 11:55 |
2016-10-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266632
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
drivers/infiniband/ulp/srpt/ib_srpt.c in the Linux kernel before 4.5.1 allows local users to cause a denial of service (NULL pointer dereference and system crash) by using an ABORT_TASK command to ab…
|
CWE-476
NULL Pointer Dereference
|
CVE-2016-6327
|
2024-11-21 11:55 |
2016-10-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266633
|
7.8 |
HIGH
Local
|
apache
|
tomcat
|
The Tomcat package on Red Hat Enterprise Linux (RHEL) 5 through 7, JBoss Web Server 3.0, and JBoss EWS 2 uses weak permissions for (1) /etc/sysconfig/tomcat and (2) /etc/tomcat/tomcat.conf, which all…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2016-6325
|
2024-11-21 11:55 |
2016-10-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266634
|
7.5 |
HIGH
Network
|
gnu opensuse fedoraproject
|
glibc opensuse fedora
|
The makecontext function in the GNU C Library (aka glibc or libc6) before 2.25 creates execution contexts incompatible with the unwinder on ARM EABI (32-bit) platforms, which might allow context-depe…
|
CWE-284
Improper Access Control
|
CVE-2016-6323
|
2024-11-21 11:55 |
2016-10-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266635
|
7.5 |
HIGH
Network
|
citrix
|
license_server license_server_vpx
|
The lmadmin component in Flexera FlexNet Publisher (aka Flex License Manager) before 2015 SP5 and 2016 before R1 SP1, as used by Citrix License Server for Windows before 11.14.0.1 and Citrix License …
|
NVD-CWE-noinfo
|
CVE-2016-6273
|
2024-11-21 11:55 |
2016-10-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266636
|
6.1 |
MEDIUM
Network
|
ibm
|
sterling_secure_proxy
|
The Configuration Manager in IBM Sterling Secure Proxy (SSP) 3.4.2 before 3.4.2.0 iFix 8 and 3.4.3 before 3.4.3.0 iFix 1 does not enable the HSTS protection mechanism, which makes it easier for remot…
|
CWE-79
Cross-site Scripting
|
CVE-2016-6027
|
2024-11-21 11:55 |
2016-10-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266637
|
5.3 |
MEDIUM
Adjacent
|
ibm
|
sterling_secure_proxy
|
The Configuration Manager in IBM Sterling Secure Proxy (SSP) 3.4.2 before 3.4.2.0 iFix 8 and 3.4.3 before 3.4.3.0 iFix 1 allows man-in-the-middle attackers to obtain sensitive information via an HTTP…
|
CWE-200
Information Exposure
|
CVE-2016-6026
|
2024-11-21 11:55 |
2016-10-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266638
|
5.9 |
MEDIUM
Local
|
ibm
|
sterling_secure_proxy
|
The Configuration Manager in IBM Sterling Secure Proxy (SSP) 3.4.2 before 3.4.2.0 iFix 8 and 3.4.3 before 3.4.3.0 iFix 1 allows remote attackers to obtain access by leveraging an unattended workstati…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2016-6025
|
2024-11-21 11:55 |
2016-10-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266639
|
7.5 |
HIGH
Network
|
ibm
|
sterling_secure_proxy
|
Directory traversal vulnerability in the Configuration Manager in IBM Sterling Secure Proxy (SSP) 3.4.2 before 3.4.2.0 iFix 8 and 3.4.3 before 3.4.3.0 iFix 1 allows remote attackers to read arbitrary…
|
CWE-22
Path Traversal
|
CVE-2016-6023
|
2024-11-21 11:55 |
2016-10-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266640
|
7.5 |
HIGH
Network
|
ibm
|
websphere_application_server
|
IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.43, 8.0 before 8.0.0.13, 8.5 before 8.5.5.11, 9.0 before 9.0.0.2, and Liberty before 16.0.0.4 allows remote authenticated users to execute arbi…
|
CWE-284
Improper Access Control
|
CVE-2016-5983
|
2024-11-21 11:55 |
2016-10-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|