Vulnerability_Archives

CVE_ARCHIVES.DB

ARCHIVE_CHRONOLOGY.INDEXSTATUS: ONLINE

Risk_Filter:

Records: 6,517

Mode: SECURE_QUERY

CVE-2016-9942

CRITICAL

Heap-based buffer overflow in ultra.c in LibVNCClient in LibVNCServer before 0.9.11 allows remote servers to cause a denial of service (application cr

Discovered

Dec 31, 2016

CVE-2016-9941

CRITICAL

Heap-based buffer overflow in rfbproto.c in LibVNCClient in LibVNCServer before 0.9.11 allows remote servers to cause a denial of service (application

Discovered

Dec 31, 2016

CVE-2016-6859

MEDIUM

Hybris Management Console (HMC) in SAP Hybris before 6.0 allows remote attackers to obtain sensitive information by triggering an error and then readi

Discovered

Dec 31, 2016

CVE-2016-6858

MEDIUM

Cross-site scripting (XSS) vulnerability in the Create Employee feature in Hybris Management Console (HMC) in SAP Hybris before 5.0.4.11, 5.1.0.x befo

Discovered

Dec 31, 2016

CVE-2016-6857

MEDIUM

Cross-site scripting (XSS) vulnerability in the Create Catalogue feature in Hybris Management Console (HMC) in SAP Hybris before 5.2.0.13, 5.3.x befor

Discovered

Dec 31, 2016

CVE-2016-6856

MEDIUM

Cross-site scripting (XSS) vulnerability in the Inbox Search feature in Hybris Management Console (HMC) in SAP Hybris before 6.0 allows remote attacke

Discovered

Dec 31, 2016

CVE-2016-1004

UNKNOWN

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it

Discovered

Dec 31, 2016

CVE-2016-1003

UNKNOWN

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-10033. Reason: This candidate is a duplicate of CVE-2016-10033. A typo cause

Discovered

Dec 31, 2016

CVE-2016-10074

CRITICAL

The mail transport (aka Swift_Transport_MailTransport) in Swift Mailer before 5.4.5 might allow remote attackers to pass extra parameters to the mail

Discovered

Dec 30, 2016

CVE-2016-10045

CRITICAL

The isMail transport in PHPMailer before 5.2.20 might allow remote attackers to pass extra parameters to the mail command and consequently execute arb

Discovered

Dec 30, 2016

CVE-2016-10034

CRITICAL

The setFrom function in the Sendmail adapter in the zend-mail component before 2.4.11, 2.5.x, 2.6.x, and 2.7.x before 2.7.2, and Zend Framework before

Discovered

Dec 30, 2016

CVE-2016-10033

CRITICAL

The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra parameters to the mail command and

Discovered

Dec 30, 2016

CVE-2016-10088

HIGH

The sg implementation in the Linux kernel through 4.9 does not properly restrict write operations in situations where the KERNEL_DS option is set, whi

Discovered

Dec 30, 2016

CVE-2016-10085

HIGH

admin/languages.php in Piwigo through 2.8.3 allows remote authenticated administrators to conduct File Inclusion attacks via the tab parameter.

Discovered

Dec 30, 2016

CVE-2016-10084

HIGH

admin/batch_manager.php in Piwigo through 2.8.3 allows remote authenticated administrators to conduct File Inclusion attacks via the $page['tab'] vari

Discovered

Dec 30, 2016

CVE-2016-10083

MEDIUM

Cross-site scripting (XSS) vulnerability in admin/plugin.php in Piwigo through 2.8.3 allows remote attackers to inject arbitrary web script or HTML vi

Discovered

Dec 30, 2016

CVE-2016-10082

CRITICAL

include/functions_installer.inc.php in Serendipity through 2.0.5 is vulnerable to File Inclusion and a possible Code Execution attack during a first-t

Discovered

Dec 30, 2016

CVE-2016-9916

MEDIUM

Memory leak in hw/9pfs/9p-proxy.c in QEMU (aka Quick Emulator) allows local privileged guest OS users to cause a denial of service (host memory consum

Discovered

Dec 29, 2016

CVE-2016-9915

MEDIUM

Memory leak in hw/9pfs/9p-handle.c in QEMU (aka Quick Emulator) allows local privileged guest OS users to cause a denial of service (host memory consu

Discovered

Dec 29, 2016

CVE-2016-9914

MEDIUM

Memory leak in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local privileged guest OS users to cause a denial of service (host memory consumption

Discovered

Dec 29, 2016

...