CVE-2016-7103

CVE-2016-7103 is a cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0, exploitable via the closeText parameter of the Dialog widget. The issue allows remote script/HTML injection. Remediation per connected documents is to upgrade to jQuery UI 1.12.0 or later (fixed version).

CVE-2017-5638

The CVE-2017-5638 issue affects Apache Struts 2, specifically 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1. The Jakarta Multipart parser mishandles file uploads, leading to remote code execution via crafted Content-Type, Content-Disposition, or Content-Length headers (notably with a #cmd= payloa...

CVE-2017-6334

CVE-2017-6334 affects NETGEAR DGN2200 routers (firmware up to 10.0.0.50). The vulnerability is a command-injection in dnslookup.cgi, exploitable by remote authenticated users via shell metacharacters in the host_name field of an HTTP POST, enabling arbitrary OS command execution. Related entries ...

CVE-2017-0037

CVE-2017-0037 affects Microsoft Internet Explorer 10/11 and Microsoft Edge via a type confusion in mshtml.dll (Layout::MultiColumnBoxBuilder::HandleColumnBreakOnColumnSpanningElement), enabling remote code execution through crafted CSS/JS sequences. Connected sources note public exploitation acti...

CVE-2017-6077

CVE-2017-6077 affects NETGEAR DGN2200 routers (firmware up to 10.0.0.50). The vulnerability is a remote code execution via ping.cgi: an authenticated attacker can inject shell metacharacters in the ping_IPAddr field of an HTTP POST, enabling arbitrary OS command execution. The issue is tied to th...

CVE-2017-5963

Affected software: caddy (TYPO3) before 7.2.10. The vulnerability arises from insufficient filtration of user-supplied data in the paymillToken POST parameter passed to caddy/Resources/Public/JavaScript/e-payment/paymill/api/php/payment.php, enabling a stored/Reflective XSS in the browser context...

CVE-2017-5611

CVE-2017-5611 is a SQL injection vulnerability in WordPress WP_Query (wp-includes/class-wp-query.php) that affects WordPress up to version 4.7.1 (pre-4.7.2). The root cause is insufficient sanitization of the post type name, enabling remote attackers to execute arbitrary SQL commands. Connected N...

CVE-2016-10174

The NETGEAR WNR2000v5 router is affected by a buffer overflow in the hidden_lang_avi parameter when invoking /apply.cgi?/lang_check.html. An unauthenticated attacker can cause remote code execution. Documentation and exploit sources (e.g., Metasploit module for WNR2000v5 and exploits in Exploit-D...

CVE-2016-5198

CVE-2016-5198 is an out-of-bounds memory access vulnerability in the V8 engine of Chromium/Google Chrome that allowed remote code execution via a crafted HTML page. Affected Chrome versions were prior to 54.0.2840.90 (Linux), 54.0.2840.85 (Android), and 54.0.2840.87 (Windows/Mac). The root cause ...

CVE-2017-5521

CVE-2017-5521 affects multiple NETGEAR router models (R8500, R8300, R7000, R6400, R7300, R7100LG, R6300v2, WNDR3400v3, WNR3500Lv2, R6250, R6700, R6900, R8000) and enables an authentication bypass that can disclose the admin password through crafted requests to the web management server. The root ...

CVE-2016-10108

CVE-2016-10108 : Western Digital MyCloud NAS (around version 2.11.142) is vulnerable to an unauthenticated remote command injection via the POST parameter arg in the /web/google_analytics.php endpoint, enabling potential root access. The CVSS metrics listed (3.0: 9.8, CRITICAL; 2.0: 10.0) reflect...

CVE-2016-10045

PHPMailer–CVE-2016-10045 affects the isMail transport in PHPMailer before 5.2.20. An improper interaction between escapeshellarg and internal escaping in the mail() function could allow remote attackers to pass extra parameters to the mail command and execute arbitrary code. This vulnerability ex...

CVE-2016-10033

PHPMailer CVE-2016-10033 affects the isMail transport in PHPMailer prior to 5.2.18, where an attacker can craft the Sender property to inject an extra parameter to the mail() call and achieve remote code execution on the web server. Related entries note the issue as a fix in PHPMailer versions 5....

CVE-2016-7262

CVE-2016-7262 is a Microsoft Office vulnerability (Microsoft Excel family) described as a Security Feature Bypass: a crafted cell mishandled on click can allow user-assisted remote command execution. Affected products include Excel 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, 2016, Office Compatibi...

CVE-2016-7892

CVE-2016-7892 affects Adobe Flash Player and is due to a use-after-free in the TextField class, leading to arbitrary code execution. Affected versions: 23.0.0.207 and earlier, 11.2.202.644 and earlier. Industry advisories (e.g., Arch Linux ASA entries) indicate remediation by upgrading to Flash P...

CVE-2016-582384

CVE-2016-582384 is rejected and not used; it does not represent an active vulnerability entry.

CVE-2016-6277

CVE-2016-6277 affects Netgear routers (R6250, R6400, R6700, R6900, R7000, R7100LG, R7300DST, R7900, R8000, D6220, D6400, D7000, and possibly others) where remote attackers could execute arbitrary commands via shell metacharacters in the path info to cgi-bin/. Root cause is unsanitized/crafted pat...

CVE-2016-9563

This CVE concerns XML External Entity (XXE) injection in SAP NetWeaver AS Java 7.5, specifically the BC-BMT-BPM-DSK component exposed via the sap.com~tc~bpem~him~uwlconn~provider~web/bpemuwlconn URI. Root cause is an XXE flaw that could allow an authenticated remote attacker to read arbitrary fil...

CVE-2016-8562

Siemens SIMATIC CP 1543-1 and SIPLUS NET CP 1543-1 (versions before 2.0.28) are affected by CVE-2016-8562. Under special conditions, SNMP variables on port 161/UDP, which should be read-only, can be written, potentially reducing availability or causing denial-of-service. The ICS advisory notes th...

CVE-2016-5195

CVE-2016-5195 (Dirty COW) : A race condition in the Linux kernel’s memory management (mm/gup.c) allows a local user to gain write access to read‑only mappings via a faulty copy‑on‑write handling. Affected: kernel 2.x–4.x prior to 4.8.3. Exploitation was observed in the wild around Oct 2016. Impac...