CVE-2016-6277

NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.Beta, R7100LG before 1.0.0.28.Beta, R7300DST before 1.0.0.46.Beta, R7900 before 1.0.1.8.Beta, R8000 before 1.0.3.26.Beta, D6220, D6400, D7000, and possibly other routers allow...

PT-2016-3443

Name of the Vulnerable Software and Affected Versions NETGEAR R6250 versions 1.0.4.6.Beta and earlier NETGEAR R6400 versions 1.0.1.18.Beta and earlier NETGEAR R6700 versions 1.0.1.14.Beta and earlier NETGEAR R6900 affected versions not specified NETGEAR R7000 versions 1.0.7.6.Beta and earlier...

CVE-2016-6277: Cross-Site Request Forgery (CSRF)

NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.Beta, R7100LG before 1.0.0.28.Beta, R7300DST before 1.0.0.46.Beta, R7900 before 1.0.1.8.Beta, R8000 before 1.0.3.26.Beta, D6220, D6400, D7000, and possibly other routers allow...

PT-2016-6697 · NetGear · R6400 +11

Name of the Vulnerable Software and Affected Versions: NETGEAR R6250 versions 1.0.0 through 1.0.4.6.Beta NETGEAR R6400 versions 1.0.0 through 1.0.1.18.Beta NETGEAR R6700 versions 1.0.0 through 1.0.1.14.Beta NETGEAR R6900 version 1.0.0 NETGEAR R7000 versions 1.0.0 through 1.0.7.6.Beta NETGEAR...

UBUNTU-CVE-2016-6607

XSS issues were discovered in phpMyAdmin. This affects Zoom search specially crafted column content can be used to trigger an XSS attack; GIS editor certain fields in the graphical GIS editor are not properly escaped and can be used to trigger an XSS attack; Relation view; the following...

Android GPS Component Denial of Service Vulnerability (CNVD-2016-12023)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, with GPS as one of the global positioning components. A denial-of-service vulnerability exists in the GPS component in versions of Android prior to 2016-12-05, which stems from th...

CVE-2016-5341

The GPS component in Android before 2016-12-05 allows man-in-the-middle attackers to cause a denial of service GPS signal-acquisition delay via an incorrect xtra.bin or xtra2.bin file on a spoofed Qualcomm gpsonextra.net or izatcloud.net host, aka internal bug 31470303 and external bug 211602 and...

PT-2016-3145

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-12-05 Description The issue is related to the GPS component and is caused by insufficient access control. It allows remote attackers to cause a denial of service, specifically a GPS signal-acquisition delay, by...

CVE-2016-5341: Improper Access Control

The GPS component in Android before 2016-12-05 allows man-in-the-middle attackers to cause a denial of service GPS signal-acquisition delay via an incorrect xtra.bin or xtra2.bin file on a spoofed Qualcomm gpsonextra.net or izatcloud.net host, aka internal bug 31470303 and external bug 211602 and...

Downloads Resources over HTTP

Overview Affected versions of fis-parser-sass-bin insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code...

Downloads Resources over HTTP

Overview Affected versions of dwebp-bin insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on...

Downloads Resources over HTTP

Overview Affected versions of scalajs-standalone-bin insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code...

PT-2016-5310

Name of the Vulnerable Software and Affected Versions IBM Spectrum Scale versions 4.1.1.x through 4.1.1.7 IBM Spectrum Scale versions 4.2.x through 4.2.0.3 General Parallel File System GPFS versions 3.5.x through 3.5.0.31 General Parallel File System GPFS versions 4.1.x through 4.1.1.7 Descriptio...

PT-2016-5309

Name of the Vulnerable Software and Affected Versions IBM Spectrum Scale versions 4.1.1.x through 4.1.1.7 IBM Spectrum Scale versions 4.2.x through 4.2.0.3 General Parallel File System GPFS versions 3.5.x through 3.5.0.31 General Parallel File System GPFS versions 4.1.x through 4.1.1.7 Descriptio...

NETGEAR JNR1010 ADSL Router - (Authenticated) Remote File Disclosure

NETGEAR JNR1010 ADSL Router - Authenticated Remote File Disclosure !/bin/sh NETGEAR ADSL ROUTER JNR1010 1.0.0.16 Authenticated Remote File Disclosure Hardware Version: JNR1010 Firmware Version: 1.0.0.16 GUI Language Version: 1.0.0.16 Copyright 2016 c Todor Donev https://www.ethical-hacker.org/...

PT-2016-3222

Name of the Vulnerable Software and Affected Versions dnaLIMS version 4-2015s13 Description The issue concerns an improperly protected administrative web shell, allowing unauthenticated command execution. This can be exploited through cgi-bin/dna/sysAdmin.cgi using specially crafted POST requests...

PT-2016-7553

Name of the Vulnerable Software and Affected Versions Memcached affected versions not specified Description The issue is related to multiple integer overflows in the process bin update function, which processes multiple commands of the Memcached binary protocol. This can lead to a heap overflow a...

UBUNTU-CVE-2016-8705

Multiple integer overflows in processbinupdate function in Memcached, which is responsible for processing multiple commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution...

PT-2016-7554

Name of the Vulnerable Software and Affected Versions Memcached affected versions not specified Description The issue is related to an integer overflow in the process bin sasl auth function, which handles authentication commands for the Memcached binary protocol. This overflow can lead to a heap...

Remote Code Execution Vulnerability in Memcached Update

Memcached is a high-performance distributed in-memory object caching system for dynamic Web applications to reduce database load. A remote code execution vulnerability exists in Memcached Update. processbinupdate function handling multiple commands of the Memcached binary protocol can lead to a...