51378 matches found
CVE-2016-6586
A security bypass vulnerability exists in Symantec Norton Mobile Security for Android before 3.16, which could let a malicious user conduct a man-in-the-middle via specially crafted JavaScript to add arbitrary URLs to the URL whitelist...
CVE-2016-6586
CVE-2016-6586 affects Symantec Norton Mobile Security for Android, prior to 3.16. The vulnerability is a security bypass that could allow a remote attacker to perform a man-in-the-middle by sending specially crafted JavaScript to add arbitrary URLs to the app’s URL whitelist. Affected component: ...
CVE-2016-6590
A privilege escalation vulnerability exists when loading DLLs during boot up and reboot in Symantec IT Management Suite 8.0 prior to 8.0 HF4 and Suite 7.6 prior to 7.6 HF7, Symantec Ghost Solution Suite 3.1 prior to 3.1 MP4, Symantec Endpoint Virtualization 7.x prior to 7.6 HF7, and Symantec...
CVE-2016-6588
CVE-2016-6588 affects Symantec IT Management Suite 8.0 in the ITMS workflow process manager console. The vulnerability arises from insufficient input validation/filtering in HTTP requests, enabling a reflected cross-site scripting (XSS) attack when an authenticated user clicks a malicious link or...
CVE-2016-6588
A Cross-Site Scripting XSS vulnerability exists in the ITMS workflow process manager console in Symantec IT Management Suite 8.0...
CVE-2016-6589
CVE-2016-6589 is a Denial of Service vulnerability in the Symantec IT Management Suite 8.0, specifically in the ITMS workflow process manager console login window. Public entries describe that an authorized network user could input excessive data into the login/process console, leading to reduced...
CVE-2016-6590
The CVE-2016-6590 issue is a local privilege-escalation caused by loading DLLs during boot/reboot without absolute paths in multiple Symantec products. Affected: IT Management Suite 8.0 (before HF4), ITMS 7.6 (before HF7); Ghost Solution Suite 3.1 (before MP4); Endpoint Virtualization 7.x (before...
CVE-2016-6591
CVE-2016-6591 : Local security bypass in Symantec Norton App Lock 1.0.3.186 and earlier when application pinning is enabled. The bypass could let a local attacker bypass security restrictions. CVSS data from sources show a LOCAL, medium complexity issue with partial confidentiality/integrity impa...
CVE-2016-6593
Summary: Symantec VIP Access Desktop before 2.2.2 is affected by a local code execution vulnerability during startup. The UI Manager loads DLLs from the current working folder, allowing a local attacker to replace required DLLs (jhi.dll/otpiha.dll) with malicious ones and execute arbitrary code i...
CVE-2016-5679
creationtimestamp| type| source ---|---|--- 2020-01-08 13:22:45+00:00| seen| MISP/5e15d698-a3b4-40fd-86e7-15cc02de0b81 2020-10-09 14:13:46+00:00| seen| MISP/b6fb39e0-8665-41f9-bc21-88d7f1945ec4...
Photon OS 1.0: Gc PHSA-2019-1.0-0260
An update of the gc package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0260. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid132694;...
Tomcat 9.0.0.M1 Sandbox Escape
Exploit Title: Tomcat proprietaryEvaluate 9.0.0.M1 - Sandbox Escape Date: 2020-01-07 Exploit Author: Harrison Neal, PatchAdvisor Vendor Homepage: https://tomcat.apache.org/ Software Link: https://archive.apache.org/dist/tomcat/tomcat-8/v8.0.36/bin/apache-tomcat-8.0.36.exe Version: 8.0.36...
Tomcat proprietaryEvaluate 9.0.0.M1 - Sandbox Escape
Tomcat proprietaryEvaluate 9.0.0.M1 - Sandbox Escape Exploit Title: Tomcat proprietaryEvaluate 9.0.0.M1 - Sandbox Escape Date: 2020-01-07 Exploit Author: Harrison Neal, PatchAdvisor Vendor Homepage: https://tomcat.apache.org/ Software Link:...
Tomcat proprietaryEvaluate 9.0.0.M1 - Sandbox Escape Exploit
Exploit for java platform in category web applications Exploit Title: Tomcat proprietaryEvaluate 9.0.0.M1 - Sandbox Escape Exploit Author: Harrison Neal, PatchAdvisor Vendor Homepage: https://tomcat.apache.org/ Software Link:...
VulnCheck KEV: CVE-2016-1555
Multiple NETGEAR Wireless Access Point devices allows unauthenticated web pages to pass form input directly to the command-line interface. Exploitation allows for arbitrary code execution...
January 7, 2020, update for Office 2016 (KB4464586)
None None...
10er10 (0.23.0), 1405-authtokens (>=1.0.1, <=1.0.5) +3112 more potentially affected by CVE-2016-1000236 via cookie-signature (>=1.0.0, <=1.0.3)
cookie-signature NPM version =1.0.0, =1.0.1, =0.0.1, =0.0.1, =1.0.1, =0.25.0, =1.0.4, =1.0.6 - @axerunners/p2pool-scanner 0.0.2 - @azu/api-mock 1.0.0 - @bear-fe/dbl 1.0.8 and more Source cves: CVE-2016-1000236 Source advisory: OSV:GHSA-92VM-WFM5-MXVV...
CVE-2016-11017
CVE-2016-11017 affects AKIPS Network Monitor (versions 15.37 through 16.5). The login page is vulnerable to remote, unauthenticated command injection via shell metacharacters in the username parameter, with the command output exposed in a login failure field. This is fixed in version 16.6. Remedi...
