| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2016-3109 | 10.0 | The backend/Login/load/ script in Shopware before 5.1.5 allows remote attackers to execute arbitrary code. | 2018-10-09 19:59:00 | 2017-04-21 20:59:00 |
| CVE-2016-1520 | 6.8 | The Grandstream Wave app 1.0.1.26 and earlier for Android does not use HTTPS when retrieving update information, which might allow man-in-the-middle attackers to execute arbitrary code via a crafted application. | 2018-10-09 19:59:00 | 2017-04-21 20:59:00 |
| CVE-2016-1519 | 4.3 | The com.softphone.common package in the Grandstream Wave app 1.0.1.26 and earlier for Android does not properly validate SSL certificates, which allows man-in-the-middle attackers to spoof the Grandstream provisioning server via a crafted certificate | 2018-10-09 19:59:00 | 2017-04-21 20:59:00 |
| CVE-2016-1518 | 6.8 | The auto-provisioning mechanism in the Grandstream Wave app 1.0.1.26 and earlier for Android and Grandstream Video IP phones allows man-in-the-middle attackers to spoof provisioning data and consequently modify device functionality, obtain sensitive | 2018-10-09 19:59:00 | 2017-04-21 20:59:00 |
| CVE-2016-2803 | 4.3 | Cross-site scripting (XSS) vulnerability in the dependency graphs in Bugzilla 2.16rc1 through 4.4.11, and 4.5.1 through 5.0.2 allows remote attackers to inject arbitrary web script or HTML. | 2018-10-09 19:59:00 | 2017-04-12 22:59:00 |
| CVE-2016-1920 | 4.3 | Samsung KNOX 1.0.0 uses the shared certificate on Android, which allows local users to conduct man-in-the-middle attacks as demonstrated by installing a certificate and running a VPN service. | 2018-10-09 19:59:00 | 2017-01-27 20:59:00 |
| CVE-2016-1919 | 1.9 | Samsung KNOX 1.0 uses a weak eCryptFS Key generation algorithm, which makes it easier for local users to obtain sensitive information by leveraging knowledge of the TIMA key and a brute-force attack. | 2018-10-09 19:59:00 | 2017-01-27 20:59:00 |
| CVE-2016-2242 | 10.0 | Exponent CMS 2.x before 2.3.7 Patch 3 allows remote attackers to execute arbitrary code via the sc parameter to install/index.php. | 2018-10-09 19:59:00 | 2017-01-23 21:59:00 |
| CVE-2016-1417 | 6.8 | Untrusted search path vulnerability in Snort 2.9.7.0-WIN32 allows remote attackers to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse tcapi.dll that is located in the same folder on a remote file share as a pcap file that | 2018-10-09 19:59:00 | 2017-01-23 21:59:00 |
| CVE-2016-3152 | 5.0 | Barco ClickShare CSC-1 devices with firmware before 01.09.03 allow remote attackers to obtain the root password by downloading and extracting the firmware image. | 2018-10-09 19:59:00 | 2017-01-12 23:59:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: