CVE-2016-7035

creationtimestamp| type| source ---|---|--- 2018-09-10 20:18:15+00:00| seen| https://t.me/cibsecurity/111...

CVE-2016-7041

creationtimestamp| type| source ---|---|--- 2018-09-10 20:18:14+00:00| seen| https://t.me/cibsecurity/110...

CVE-2016-7056

creationtimestamp| type| source ---|---|--- 2018-09-10 20:18:13+00:00| seen| https://t.me/cibsecurity/109...

CVE-2016-7061

creationtimestamp| type| source ---|---|--- 2018-09-10 20:18:12+00:00| seen| https://t.me/cibsecurity/108...

CVE-2016-7075

creationtimestamp| type| source ---|---|--- 2018-09-10 18:18:37+00:00| seen| https://t.me/cibsecurity/100...

CVE-2016-9044

creationtimestamp| type| source ---|---|--- 2018-09-07 20:33:18+00:00| seen| https://t.me/cibsecurity/66...

BELL-CVE-2016-4975 CVE-2016-4975 does not affect BellSoft software

Bulletin has no description...

CVE-2016-4402

A security vulnerability was identified in the Filter SDK component of HP KeyView earlier than v11.2. The vulnerability could be exploited remotely to allow code execution via buffer overflow...

CVE-2016-5398

creationtimestamp| type| source ---|---|--- 2018-08-01 19:18:39+00:00| seen| https://t.me/VulnerabilityNews/380...

ALPINE-CVE-2016-8622

The URL percent-encoding decode function in libcurl before 7.51.0 is called curleasyunescape. Internally, even if this function would be made to allocate a unscape destination buffer larger than 2GB, it would return that new length in a signed 32 bit integer variable, thus the length would get...

CVE-2016-8631

The OpenShift Enterprise 3 router does not properly sort routes when processing newly added routes. An attacker with access to create routes can potentially overwrite existing routes and redirect network traffic for other users to their own site...

CVE-2016-10610

unicode-json is a unicode lookup table. unicode-json before 2.0.0 downloads data resources over HTTP, which leaves it vulnerable to MITM attacks...

CVE-2016-10584

dalek-browser-chrome-canary provides Google Chrome bindings for DalekJS. dalek-browser-chrome-canary downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary with an attacker...

DEBIAN-CVE-2018-1067

In Undertow before versions 7.1.2.CR1, 7.1.2.GA it was found that the fix for CVE-2016-4993 was incomplete and Undertow web server is vulnerable to the injection of arbitrary HTTP headers, and also response splitting, due to insufficient sanitization and validation of user input before the input ...

undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993)

It was found that the fix for CVE-2016-4993 was incomplete and Undertow web server is vulnerable to the injection of arbitrary HTTP headers, and also response splitting, due to insufficient sanitization and validation of user input before the input is used as part of an HTTP header value...

BELL-CVE-2016-9586 CVE-2016-9586 does not affect BellSoft software

Bulletin has no description...

CVE-2016-0401

creationtimestamp| type| source ---|---|--- 2018-02-14 16:01:25+00:00| exploited| https://t.me/SecLabNews/1538...

CVE-2016-8624

creationtimestamp| type| source ---|---|--- 2018-01-11 23:41:51+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/867...

CVE-2016-6914

Ubiquiti UniFi Video before 3.8.0 for Windows uses weak permissions for the installation directory, which allows local users to gain SYSTEM privileges via a Trojan horse taskkill.exe file...

UBUNTU-CVE-2016-1253

The most package in Debian wheezy before 5.0.0a-2.2, in Debian jessie before 5.0.0a-2.3+deb8u1, and in Debian unstable before 5.0.0a-3 allows remote attackers to execute arbitrary commands via shell metacharacters in the name of an LZMA-compressed file...