| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2016-4311 | 6.8 | Cross-site request forgery (CSRF) vulnerability in the XACML flow feature in WSO2 Identity Server 5.1.0 allows remote attackers to hijack the authentication of privileged users for requests that process XACML requests via an entitlement/eval-policy-s | 2018-10-09 20:00:00 | 2017-02-17 02:59:00 |
| CVE-2016-3996 | 4.3 | ClipboardDataMgr in Samsung KNOX 1.0.0 and 2.3.0 does not properly check the caller, which allows local users to read KNOX clipboard data via a crafted application. | 2018-10-09 20:00:00 | 2017-01-27 20:59:00 |
| CVE-2016-6603 | 5.0 | ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remote attackers to bypass authentication and impersonate arbitrary users via the UserName HTTP header. | 2018-10-09 20:00:00 | 2017-01-23 21:59:00 |
| CVE-2016-6602 | 5.0 | ZOHO WebNMS Framework 5.2 and 5.2 SP1 use a weak obfuscation algorithm to store passwords, which allows context-dependent attackers to obtain cleartext passwords by leveraging access to WEB-INF/conf/securitydbData.xml. NOTE: this issue can be combin | 2018-10-09 20:00:00 | 2017-01-23 21:59:00 |
| CVE-2016-6601 | 5.0 | Directory traversal vulnerability in the file download functionality in ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remote attackers to read arbitrary files via a .. (dot dot) in the fileName parameter to servlets/FetchFile. | 2018-10-09 20:00:00 | 2017-01-23 21:59:00 |
| CVE-2016-6600 | 7.5 | Directory traversal vulnerability in the file upload functionality in ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remote attackers to upload and execute arbitrary JSP files via a .. (dot dot) in the fileName parameter to servlets/FileUploadServlet. | 2018-10-09 20:00:00 | 2017-01-23 21:59:00 |
| CVE-2016-6582 | 6.4 | The Doorkeeper gem before 4.2.0 for Ruby might allow remote attackers to conduct replay attacks or revoke arbitrary tokens by leveraging failure to implement the OAuth 2.0 Token Revocation specification. | 2018-10-09 20:00:00 | 2017-01-23 21:59:00 |
| CVE-2016-6484 | 4.3 | CRLF injection vulnerability in Infoblox Network Automation NetMRI before 7.1.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the contentType parameter in a login action to config/userAdmin/l | 2018-10-09 20:00:00 | 2017-01-23 21:59:00 |
| CVE-2016-4338 | 6.8 | The mysql user parameter configuration script (userparameter_mysql.conf) in the agent in Zabbix before 2.0.18, 2.2.x before 2.2.13, and 3.0.x before 3.0.3, when used with a shell other than bash, allows context-dependent attackers to execute arbitrar | 2018-10-09 20:00:00 | 2017-01-23 21:59:00 |
| CVE-2016-6492 | 9.3 | The MT6573FDVT_SetRegHW function in camera_fdvt.c in the MediaTek driver for Linux allows local users to gain privileges via a crafted application that makes an MT6573FDVTIOC_T_SET_FDCONF_CMD IOCTL call. | 2018-10-09 20:00:00 | 2017-01-12 23:59:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: