| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2016-4994 | 6.8 | Use-after-free vulnerability in the xcf_load_image function in app/xcf/xcf-load.c in GIMP allows remote attackers to cause a denial of service (program crash) or possibly execute arbitrary code via a crafted XCF file. | 2023-02-12 23:22:00 | 2016-07-12 19:59:00 |
| CVE-2016-4985 | 5.0 | The ironic-api service in OpenStack Ironic before 4.2.5 (Liberty) and 5.x before 5.1.2 (Mitaka) allows remote attackers to obtain sensitive information about a registered node by leveraging knowledge of the MAC address of a network card belonging to | 2023-02-12 23:22:00 | 2016-07-12 19:59:00 |
| CVE-2016-4998 | 5.6 | The IPT_SO_SET_REPLACE setsockopt implementation in the netfilter subsystem in the Linux kernel before 4.6 allows local users to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from kernel heap memory by levera | 2023-02-12 23:22:00 | 2016-07-03 21:59:00 |
| CVE-2016-4971 | 4.3 | GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted FTP resource. | 2023-02-12 23:22:00 | 2016-06-30 17:59:00 |
| CVE-2016-4581 | 4.9 | fs/pnode.c in the Linux kernel before 4.5.4 does not properly traverse a mount propagation tree in a certain case involving a slave mount, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) via a crafted series | 2023-02-12 23:22:00 | 2016-05-23 10:59:00 |
| CVE-2016-4457 | 5.0 | CloudForms Management Engine before 5.8 includes a default SSL/TLS certificate. | 2023-02-12 23:21:00 | 2017-06-08 18:29:00 |
| CVE-2016-4455 | 2.1 | The Subscription Manager package (aka subscription-manager) before 1.17.7-1 for Candlepin uses weak permissions (755) for subscription-manager cache directories, which allows local users to obtain sensitive information by reading files in the directo | 2023-02-12 23:21:00 | 2017-04-14 18:59:00 |
| CVE-2016-4475 | 6.5 | The (1) Organization and (2) Locations APIs and UIs in Foreman before 1.11.4 and 1.12.x before 1.12.0-RC3 allow remote authenticated users to bypass organization and location restrictions and (a) read, (b) edit, or (c) delete arbitrary organizations | 2023-02-12 23:21:00 | 2016-08-19 21:59:00 |
| CVE-2016-4451 | 6.0 | The (1) Organization and (2) Locations APIs in Foreman before 1.11.3 and 1.12.x before 1.12.0-RC1 allow remote authenticated users with unlimited filters to bypass organization and location restrictions and read or modify data for an arbitrary organi | 2023-02-12 23:21:00 | 2016-08-19 21:59:00 |
| CVE-2016-4463 | 5.0 | Stack-based buffer overflow in Apache Xerces-C++ before 3.1.4 allows context-dependent attackers to cause a denial of service via a deeply nested DTD. | 2023-02-12 23:21:00 | 2016-07-08 19:59:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39953
Zapisa po stranici: