| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2016-1525 | 7.8 | Directory traversal vulnerability in data/config/image.do in NETGEAR Management System NMS300 1.5.0.11 and earlier allows remote authenticated users to read arbitrary files via a .. (dot dot) in the realName parameter. | 2018-10-09 19:59:00 | 2016-02-13 02:59:00 |
| CVE-2016-1524 | 8.3 | Multiple unrestricted file upload vulnerabilities in NETGEAR Management System NMS300 1.5.0.11 and earlier allow remote attackers to execute arbitrary Java code by using (1) fileUpload.do or (2) lib-1.0/external/flash/fileUpload.do to upload a JSP fi | 2018-10-09 19:59:00 | 2016-02-13 02:59:00 |
| CVE-2016-2268 | 5.8 | Dell SecureWorks app before 2.1 for iOS does not validate SSL certificates, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. | 2018-10-09 19:59:00 | 2016-02-08 19:59:00 |
| CVE-2016-1728 | 4.3 | The Cascading Style Sheets (CSS) implementation in Apple iOS before 9.2.1 and Safari before 9.0.3 mishandles the "a:visited button" selector during height processing, which makes it easier for remote attackers to obtain sensitive browser-history info | 2018-10-09 19:59:00 | 2016-02-01 11:59:00 |
| CVE-2016-1726 | 9.3 | WebKit, as used in Apple iOS before 9.2.1 and Safari before 9.0.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-1723 and CVE-2016-17 | 2018-10-09 19:59:00 | 2016-02-01 11:59:00 |
| CVE-2016-1725 | 9.3 | WebKit, as used in Apple iOS before 9.2.1 and Safari before 9.0.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-1723 and CVE-2016-17 | 2018-10-09 19:59:00 | 2016-02-01 11:59:00 |
| CVE-2016-1723 | 9.3 | WebKit, as used in Apple iOS before 9.2.1 and Safari before 9.0.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-1725 and CVE-2016-17 | 2018-10-09 19:59:00 | 2016-02-01 11:59:00 |
| CVE-2016-1493 | 7.6 | Intel Driver Update Utility before 2.4 retrieves driver updates in cleartext, which makes it easier for man-in-the-middle attackers to execute arbitrary code via a crafted file. | 2018-10-09 19:59:00 | 2016-01-29 20:59:00 |
| CVE-2016-1926 | 4.3 | Cross-site scripting (XSS) vulnerability in the charts module in Greenbone Security Assistant (GSA) 6.x before 6.0.8 allows remote attackers to inject arbitrary web script or HTML via the aggregate_type parameter in a get_aggregate command to omp. | 2018-10-09 19:59:00 | 2016-01-26 19:59:00 |
| CVE-2016-1492 | 2.9 | The Wifi hotspot in Lenovo SHAREit before 3.5.48_ww for Android, when configured to receive files, does not require a password, which makes it easier for remote attackers to obtain access by leveraging a position within the WLAN coverage area. | 2018-10-09 19:59:00 | 2016-01-26 19:59:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: