38609 matches found
CVE-2016-15055 JVC VN-T IP-Camera Directory Traversal via check.cgi
JVC VN-T IP-camera models firmware versions up to 2016-08-22 confirmed on the VN-T216VPRU model contain a directory traversal vulnerability in the checkcgi endpoint that accepts a user-controlled file parameter. An unauthenticated remote attacker can leverage this vulnerability to read arbitrary...
CVE-2016-15055 JVC VN-T IP-Camera Directory Traversal via check.cgi
JVC VN-T IP-camera models firmware versions up to 2016-08-22 confirmed on the VN-T216VPRU model contain a directory traversal vulnerability in the checkcgi endpoint that accepts a user-controlled file parameter. An unauthenticated remote attacker can leverage this vulnerability to read arbitrary...
Advisory ROSA-SA-2025-3048
Software: libxml2 2.9.7 OS: ROSA Virtualization 3.1 unaffected versions = libxml2-2.9.7-21.0.1.rv31.3 affected versions libxml2-2.9.7-21.0.1.1.rv31.3 CVE-ID: CVE-2016-3709 BDU-ID: CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the Libxml2 library is related to the failure to take measures to...
SUSE CVE-2016-11066
An issue was discovered in Mattermost Server before 3.2.0. The initialload API disclosed unnecessary personal information...
SUSE CVE-2016-11067
An issue was discovered in Mattermost Server before 3.2.0. It allowed crafted posts that could cause a web browser to hang...
SUSE CVE-2016-11072
An issue was discovered in Mattermost Server before 3.0.2. The purposes of a session ID and a Session Token were mishandled...
SUSE CVE-2016-11073
An issue was discovered in Mattermost Server before 3.0.0. It allows XSS via a Legal or Support setting...
SUSE CVE-2016-11074
An issue was discovered in Mattermost Server before 3.0.0. A password-reset link could be reused...
CLSA-2025-1762544268 rsync: Fix of CVE-2016-9840
CVE-2016-9840: fix improper pointer arithmetic in inftrees.c...
erlang-28.1.1-1.1 on GA media (moderate)
erlang-28.1.1-1.1 on GA media Announcement ID: openSUSE-SU-2025:15706-1 Rating: moderate Cross-References: CVE-2016-1000107 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the erlang-28.1.1-1....
CVE-2016-15049
Nagios Log Server versions prior to 1.4.2 are vulnerable to cross-site scripting XSS in the Dashboards section when rendering log entries in the Logs table. Untrusted log content was not safely encoded for the output context, allowing attacker-controlled data present in logs to execute script in...
CVE-2016-15053
Nagios XI versions prior to 5.2.4 are vulnerable to cross-site scripting XSS via the “My Reports” listing of the web interface. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...
K000156994: BusyBox vulnerability CVE-2016-2148
Security Advisory Description Heap-based buffer overflow in the DHCP client udhcpc in BusyBox before 1.25.0 allows remote attackers to have unspecified impact via vectors involving OPTION6RD parsing. CVE-2016-2148 Impact This vulnerability allows remote attackers to perform a Remote Code Executio...
KB5066877: Windows Server 2008 Security Update (October 2025)
The remote Windows host is missing security update 5066877. It is, therefore, affected by multiple vulnerabilities - tifpredict.h and tifpredict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual til...
KB5066836: Windows 10 Version 1607 / Windows Server 2016 Security Update (October 2025)
The remote Windows host is missing security update 5066836. It is, therefore, affected by multiple vulnerabilities - tifpredict.h and tifpredict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual til...
CVE-2016-9296
creationtimestamp| type| source ---|---|--- 2025-10-08 14:41:07+00:00| seen| https://gist.github.com/uilianries/b8926036ccfb28856898b8c0472bacf5...
VulnCheck KEV: CVE-2016-10960
The wsecure plugin before 2.4 for WordPress has remote code execution via shell metacharacters in the wsecure-config.php publish parameter...
EUVD-2016-5243
Malware in sbrugna...