20 matches found
CVE-2026-16138
In Progress ShareFile Storage Zones Controller v5.12.5 and below versions, unsafe deserialization of untrusted file metadata can allow a user with write access to a Network share to execute arbitrary code on the Storage Zones Controller host...
CVE-2026-16138 Remote code execution via unsafe deserialization in Progress ShareFile Storage Zones Controller's CICO service
In Progress ShareFile Storage Zones Controller v5.12.5 and below versions, unsafe deserialization of untrusted file metadata can allow a user with write access to a Network share to execute arbitrary code on the Storage Zones Controller host...
CVE-2026-16138 Remote code execution via unsafe deserialization in Progress ShareFile Storage Zones Controller's CICO service
In Progress ShareFile Storage Zones Controller v5.12.5 and below versions, unsafe deserialization of untrusted file metadata can allow a user with write access to a Network share to execute arbitrary code on the Storage Zones Controller host...
ROOT-APP-NPM-CVE-2017-16138 CVE-2017-16138 in @rootio/mime - Patched by Root
Root has patched CVE-2017-16138 in the @rootio/mime package for Root:npm. Multiple fixed versions available...
CVE-2019-16138
An issue was discovered in the image crate before 0.21.3 for Rust, affecting the HDR image format decoder. Vec::setlen is called on an uninitialized vector, leading to a use-after-free and arbitrary code execution...
RHEL 8 : nodejs-mime (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - nodejs-mime: Regular expression Denial of Service CVE-2017-16138 Note that Nessus has not tested for this issue but...
airust (0.1.6), akaze (>=0.1.0, <=0.1.2) +300 more potentially affected by CVE-2019-16138 via image (>=0.10.4, <=0.20.1)
image CARGO version =0.10.4, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.1.5, =0.1.0, =0.1.0, =0.1.0, =0.11.0, =0.1.0, =0.1.0, =0.0.4, =0.1.0, =0.2.8 and more Source cves: CVE-2019-16138 Source advisory: OSV:GHSA-M2PF-HPRP-3VQM...
CVE-2020-16138
CVE-2020-16138 concerns Cisco Unified IP Conference Station 7937G (versions 1-4-4-0 to 1-4-5-7). The core issue is a denial-of-service condition that allows remote disruption of the device, potentially disabling it until a power cycle. The connected records corroborate a DoS/offline impact and sh...
CVE-2020-16138
creationtimestamp| type| source ---|---|--- 2020-08-11 11:07:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1569 2020-08-21 20:54:51+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/cisco/cisco7937gdos.py 2025-02-06...
Cisco 7937G Denial Of Service Exploit
CVE-2020-16138.py: Exploit Title: Cisco 7937G DoS 2 MSF Module Date: 2020-08-10 Exploit Author: Cody Martin Vendor Homepage: https://cisco.com Version: ', 'type': 'cve', 'ref': '2020-', 'type': 'edb', 'ref': '' , 'type': 'dos', 'options': 'rhost': 'type': 'address', 'description': 'Target address...
Cisco 7937G Denial Of Service
CVE-2020-16138.py: Exploit Title: Cisco 7937G DoS 2 MSF Module Date: 2020-08-10 Exploit Author: Cody Martin Vendor Homepage: https://cisco.com Version: ', 'type': 'cve', 'ref': '2020-', 'type': 'edb', 'ref': '' , 'type': 'dos', 'options': 'rhost': 'type': 'address', 'description': 'Target address...
Cisco 7937G Denial-of-Service Attack
This module exploits a bug in how the conference station handles incoming SSH connections that provide an incompatible key exchange. By connecting with an incompatible key exchange, the device becomes nonresponsive until it is manually power cycled. Module Options msf use...
CVE-2019-16138
An issue was discovered in the image crate before 0.21.3 for Rust, affecting the HDR image format decoder. Vec::setlen is called on an uninitialized vector, leading to a use-after-free and arbitrary code execution...
CVE-2019-16138
An issue was discovered in the image crate before 0.21.3 for Rust, affecting the HDR image format decoder. Vec::setlen is called on an uninitialized vector, leading to a use-after-free and arbitrary code execution...
CVE-2018-16138
An issue was discovered in the administration page in IPBRICK OS 6.3. There are multiple XSS vulnerabilities...
CVE-2018-16138
The CVE-2018-16138 entry concerns IPBRICK OS 6.3, specifically the administration page, which has multiple XSS vulnerabilities. Connected sources identify the root cause as a lack of proper validation of client data by the WEB application, enabling client-side code execution scenarios. Documented...
00ld8nuivn (2.1.0), 00rqiw31nd (2.1.0) +33813 more potentially affected by CVE-2017-16138 via mime (>=1.0.0, <=1.4.0)
mime NPM version =1.0.0, =1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on mime and may be impacted: - 00ld8nuivn 2.1.0 - 00rqiw31nd 2.1.0 - 01dk01majk 2.1.0 - 02rjq8i863 1.1.0 - 02vx8qsp01 2.1.0 - 05y6tjgmws 1.1.0 - 066m7q8o0z 2.1.0 - 06buj9h3su...
CVE-2017-16138
The mime module is vulnerable to regular expression denial of service when a mime lookup is performed on untrusted user input...