2016 CVEs (page 43)
Page 43 of 94 — CVEs published in 2016, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-9866 | Critical | 9.8 | 2016-12-11 | An issue was discovered in phpMyAdmin. When the arg_separator is different from its default & value, the CSRF token was not properly stripped from the return U… |
CVE-2016-9865 | Critical | 9.8 | 2016-12-11 | An issue was discovered in phpMyAdmin. Due to a bug in serialized string parsing, it was possible to bypass the protection offered by PMA_safeUnserialize() fun… |
CVE-2016-9864 | High | 7.5 | 2016-12-11 | An issue was discovered in phpMyAdmin. With a crafted username or a table name, it was possible to inject SQL statements in the tracking functionality that wou… |
CVE-2016-9863 | High | 7.5 | 2016-12-11 | An issue was discovered in phpMyAdmin. With a very large request to table partitioning function, it is possible to invoke a Denial of Service (DoS) attack. All… |
CVE-2016-9862 | High | 7.5 | 2016-12-11 | An issue was discovered in phpMyAdmin. With a crafted login request it is possible to inject BBCode in the login page. All 4.6.x versions (prior to 4.6.5) are… |
CVE-2016-9861 | High | 7.5 | 2016-12-11 | An issue was discovered in phpMyAdmin. Due to the limitation in URL matching, it was possible to bypass the URL white-list protection. All 4.6.x versions (prio… |
CVE-2016-9860 | Medium | 5.9 | 2016-12-11 | An issue was discovered in phpMyAdmin. An unauthenticated user can execute a denial of service attack when phpMyAdmin is running with $cfg['AllowArbitraryServe… |
CVE-2016-9859 | Medium | 5.3 | 2016-12-11 | An issue was discovered in phpMyAdmin. With a crafted request parameter value it is possible to initiate a denial of service attack in import feature. All 4.6… |
CVE-2016-9858 | Medium | 5.3 | 2016-12-11 | An issue was discovered in phpMyAdmin. With a crafted request parameter value it is possible to initiate a denial of service attack in saved searches feature… |
CVE-2016-9857 | Medium | 6.1 | 2016-12-11 | An issue was discovered in phpMyAdmin. XSS is possible because of a weakness in a regular expression used in some JavaScript processing. All 4.6.x versions (pr… |
CVE-2016-9856 | Medium | 6.1 | 2016-12-11 | An XSS issue was discovered in phpMyAdmin because of an improper fix for CVE-2016-2559 in PMASA-2016-10. This issue is resolved by using a copy of a hash to av… |
CVE-2016-9855 | Medium | 5.3 | 2016-12-11 | An issue was discovered in phpMyAdmin. By calling some scripts that are part of phpMyAdmin in an unexpected way, it is possible to trigger phpMyAdmin to displa… |
CVE-2016-9854 | Medium | 5.3 | 2016-12-11 | An issue was discovered in phpMyAdmin. By calling some scripts that are part of phpMyAdmin in an unexpected way, it is possible to trigger phpMyAdmin to displa… |
CVE-2016-9853 | Medium | 5.3 | 2016-12-11 | An issue was discovered in phpMyAdmin. By calling some scripts that are part of phpMyAdmin in an unexpected way, it is possible to trigger phpMyAdmin to displa… |
CVE-2016-9852 | Medium | 5.3 | 2016-12-11 | An issue was discovered in phpMyAdmin. By calling some scripts that are part of phpMyAdmin in an unexpected way, it is possible to trigger phpMyAdmin to displa… |
CVE-2016-9851 | Medium | 5.3 | 2016-12-11 | An issue was discovered in phpMyAdmin. With a crafted request parameter value it is possible to bypass the logout timeout. All 4.6.x versions (prior to 4.6.5)… |
CVE-2016-9850 | Medium | 5.3 | 2016-12-11 | An issue was discovered in phpMyAdmin. Username matching for the allow/deny rules may result in wrong matches and detection of the username in the rule due to… |
CVE-2016-9849 | Critical | 9.8 | 2016-12-11 | An issue was discovered in phpMyAdmin. It is possible to bypass AllowRoot restriction ($cfg['Servers'][$i]['AllowRoot']) and deny rules for username by using N… |
CVE-2016-9848 | Medium | 5.3 | 2016-12-11 | An issue was discovered in phpMyAdmin. phpinfo (phpinfo.php) shows PHP information including values of HttpOnly cookies. All 4.6.x versions (prior to 4.6.5), 4… |
CVE-2016-9847 | Medium | 5.3 | 2016-12-11 | An issue was discovered in phpMyAdmin. When the user does not specify a blowfish_secret key for encrypting cookies, phpMyAdmin generates one at runtime. A vuln… |
CVE-2016-6633 | High | 8.1 | 2016-12-11 | An issue was discovered in phpMyAdmin. phpMyAdmin can be used to trigger a remote code execution attack against certain PHP installations that are running with… |
CVE-2016-6632 | Medium | 5.9 | 2016-12-11 | An issue was discovered in phpMyAdmin where, under certain conditions, phpMyAdmin may not delete temporary files during the import of ESRI files. All 4.6.x ver… |
CVE-2016-6631 | High | 7.5 | 2016-12-11 | An issue was discovered in phpMyAdmin. A user can execute a remote code execution attack against a server when phpMyAdmin is being run as a CGI application. Un… |
CVE-2016-6630 | Medium | 6.5 | 2016-12-11 | An issue was discovered in phpMyAdmin. An authenticated user can trigger a denial-of-service (DoS) attack by entering a very long password at the change passwo… |
CVE-2016-6629 | Critical | 9.8 | 2016-12-11 | An issue was discovered in phpMyAdmin involving the $cfg['ArbitraryServerRegexp'] configuration directive. An attacker could reuse certain cookie values in a w… |
CVE-2016-6628 | Medium | 6.3 | 2016-12-11 | An issue was discovered in phpMyAdmin. An attacker may be able to trigger a user to download a specially crafted malicious SVG file. All 4.6.x versions (prior… |
CVE-2016-6627 | Medium | 5.3 | 2016-12-11 | An issue was discovered in phpMyAdmin. An attacker can determine the phpMyAdmin host location through the file url.php. All 4.6.x versions (prior to 4.6.4), 4… |
CVE-2016-6626 | Medium | 5.4 | 2016-12-11 | An issue was discovered in phpMyAdmin. An attacker could redirect a user to a malicious web page. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to… |
CVE-2016-6625 | Medium | 4.3 | 2016-12-11 | An issue was discovered in phpMyAdmin. An attacker can determine whether a user is logged in to phpMyAdmin. The user's session, username, and password are not… |
CVE-2016-6624 | Medium | 5.9 | 2016-12-11 | An issue was discovered in phpMyAdmin involving improper enforcement of the IP-based authentication rules. When phpMyAdmin is used with IPv6 in a proxy server… |
CVE-2016-6623 | Medium | 6.5 | 2016-12-11 | An issue was discovered in phpMyAdmin. An authorized user can cause a denial-of-service (DoS) attack on a server by passing large values to a loop. All 4.6.x v… |
CVE-2016-6622 | Medium | 5.9 | 2016-12-11 | An issue was discovered in phpMyAdmin. An unauthenticated user is able to execute a denial-of-service (DoS) attack by forcing persistent connections when phpMy… |
CVE-2016-6620 | Critical | 9.8 | 2016-12-11 | An issue was discovered in phpMyAdmin. Some data is passed to the PHP unserialize() function without verification that it's valid serialized data. The unserial… |
CVE-2016-6619 | High | 8.8 | 2016-12-11 | An issue was discovered in phpMyAdmin. In the user interface preference feature, a user can execute an SQL injection attack against the account of the control… |
CVE-2016-6618 | Medium | 6.5 | 2016-12-11 | An issue was discovered in phpMyAdmin. The transformation feature allows a user to trigger a denial-of-service (DoS) attack against the server. All 4.6.x versi… |
CVE-2016-6617 | High | 8.1 | 2016-12-11 | An issue was discovered in phpMyAdmin. A specially crafted database and/or table name can be used to trigger an SQL injection attack through the export functio… |
CVE-2016-6616 | High | 7.5 | 2016-12-11 | An issue was discovered in phpMyAdmin. In the "User group" and "Designer" features, a user can execute an SQL injection attack against the account of the contr… |
CVE-2016-6615 | Medium | 6.1 | 2016-12-11 | XSS issues were discovered in phpMyAdmin. This affects navigation pane and database/table hiding feature (a specially-crafted database name can be used to trig… |
CVE-2016-6614 | Medium | 6.8 | 2016-12-11 | An issue was discovered in phpMyAdmin involving the %u username replacement functionality of the SaveDir and UploadDir features. When the username substitution… |
CVE-2016-6613 | Medium | 5.3 | 2016-12-11 | An issue was discovered in phpMyAdmin. A user can specially craft a symlink on disk, to a file which phpMyAdmin is permitted to read but the user is not, which… |
CVE-2016-6612 | Medium | 6.5 | 2016-12-11 | An issue was discovered in phpMyAdmin. A user can exploit the LOAD LOCAL INFILE functionality to expose files on the server to the database system. All 4.6.x v… |
CVE-2016-6611 | High | 8.1 | 2016-12-11 | An issue was discovered in phpMyAdmin. A specially crafted database and/or table name can be used to trigger an SQL injection attack through the export functio… |
CVE-2016-6610 | Medium | 4.3 | 2016-12-11 | A full path disclosure vulnerability was discovered in phpMyAdmin where a user can trigger a particular error in the export mechanism to discover the full path… |
CVE-2016-6609 | High | 8.8 | 2016-12-11 | An issue was discovered in phpMyAdmin. A specially crafted database name could be used to run arbitrary PHP commands through the array export feature. All 4.6… |
CVE-2016-6608 | Medium | 6.1 | 2016-12-11 | XSS issues were discovered in phpMyAdmin. This affects the database privilege check and the "Remove partitioning" functionality. Specially crafted database nam… |
CVE-2016-6607 | Medium | 6.1 | 2016-12-11 | XSS issues were discovered in phpMyAdmin. This affects Zoom search (specially crafted column content can be used to trigger an XSS attack); GIS editor (certain… |
CVE-2016-6606 | High | 8.1 | 2016-12-11 | An issue was discovered in cookie encryption in phpMyAdmin. The decryption of the username/password is vulnerable to a padding oracle attack. This can allow an… |
CVE-2016-4412 | Medium | 4.4 | 2016-12-11 | An issue was discovered in phpMyAdmin. A user can be tricked into following a link leading to phpMyAdmin, which after authentication redirects to another malic… |
CVE-2016-9832 | Critical | 9.9 | 2016-12-10 | PricewaterhouseCoopers (PwC) ACE-ABAP 8.10.304 for SAP Security allows remote authenticated users to conduct ABAP injection attacks and execute arbitrary code… |
CVE-2016-7995 | Medium | 6.0 | 2016-12-10 | Memory leak in the ehci_process_itd function in hw/usb/hcd-ehci.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of servic… |
CVE-2016-7994 | Medium | 6.0 | 2016-12-10 | Memory leak in the virtio_gpu_resource_create_2d function in hw/display/virtio-gpu.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause… |
CVE-2016-7466 | Medium | 6.0 | 2016-12-10 | Memory leak in the usb_xhci_exit function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator), when the xhci uses msix, allows local guest OS administrators to c… |
CVE-2016-7422 | Medium | 6.0 | 2016-12-10 | The virtqueue_map_desc function in hw/virtio/virtio.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (NULL poin… |
CVE-2016-7421 | Medium | 4.4 | 2016-12-10 | The pvscsi_ring_pop_req_descr function in hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (… |
CVE-2016-7170 | Medium | 4.4 | 2016-12-10 | The vmsvga_fifo_run function in hw/display/vmware_vga.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (out-of-… |
CVE-2016-7157 | Medium | 4.4 | 2016-12-10 | The (1) mptsas_config_manufacturing_1 and (2) mptsas_config_ioc_0 functions in hw/scsi/mptconfig.c in QEMU (aka Quick Emulator) allow local guest OS administra… |
CVE-2016-7156 | Medium | 4.4 | 2016-12-10 | The pvscsi_convert_sglist function in hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infi… |
CVE-2016-7155 | Medium | 4.4 | 2016-12-10 | hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (out-of-bounds access or infinite loop, and… |
CVE-2016-7116 | Medium | 6.0 | 2016-12-10 | Directory traversal vulnerability in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to access host files outside the export pat… |
CVE-2016-6888 | Medium | 4.4 | 2016-12-10 | Integer overflow in the net_tx_pkt_init function in hw/net/net_tx_pkt.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of… |
CVE-2016-6836 | Medium | 6.0 | 2016-12-10 | The vmxnet3_complete_packet function in hw/net/vmxnet3.c in QEMU (aka Quick Emulator) allows local guest OS administrators to obtain sensitive host memory info… |
CVE-2016-6835 | Medium | 6.0 | 2016-12-10 | The vmxnet_tx_pkt_parse_headers function in hw/net/vmxnet_tx_pkt.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of servi… |
CVE-2016-6834 | Medium | 4.4 | 2016-12-10 | The net_tx_pkt_do_sw_fragmentation function in hw/net/net_tx_pkt.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of servi… |
CVE-2016-6833 | Medium | 4.4 | 2016-12-10 | Use-after-free vulnerability in the vmxnet3_io_bar0_write function in hw/net/vmxnet3.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cau… |
CVE-2016-6490 | Medium | 4.4 | 2016-12-10 | The virtqueue_map_desc function in hw/virtio/virtio.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite… |
CVE-2016-4964 | Medium | 6.0 | 2016-12-10 | The mptsas_fetch_requests function in hw/scsi/mptsas.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite… |
CVE-2016-5424 | High | 7.1 | 2016-12-09 | PostgreSQL before 9.1.23, 9.2.x before 9.2.18, 9.3.x before 9.3.14, 9.4.x before 9.4.9, and 9.5.x before 9.5.4 might allow remote authenticated users with the… |
CVE-2016-5423 | High | 8.3 | 2016-12-09 | PostgreSQL before 9.1.23, 9.2.x before 9.2.18, 9.3.x before 9.3.14, 9.4.x before 9.4.9, and 9.5.x before 9.5.4 allow remote authenticated users to cause a deni… |
CVE-2016-9106 | Medium | 6.0 | 2016-12-09 | Memory leak in the v9fs_write function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory c… |
CVE-2016-9105 | Medium | 6.0 | 2016-12-09 | Memory leak in the v9fs_link function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory co… |
CVE-2016-9104 | Medium | 4.4 | 2016-12-09 | Multiple integer overflows in the (1) v9fs_xattr_read and (2) v9fs_xattr_write functions in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allow local guest OS admi… |
CVE-2016-9103 | Medium | 6.0 | 2016-12-09 | The v9fs_xattrcreate function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to obtain sensitive host heap memory informatio… |
CVE-2016-9102 | Medium | 6.0 | 2016-12-09 | Memory leak in the v9fs_xattrcreate function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (me… |
CVE-2016-9101 | Medium | 6.0 | 2016-12-09 | Memory leak in hw/net/eepro100.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption and QEMU pr… |
CVE-2016-6501 | Critical | 9.8 | 2016-12-09 | JFrog Artifactory before 4.11 allows remote attackers to execute arbitrary code via an LDAP attribute with a crafted serialized Java object, aka LDAP entry poi… |
CVE-2016-6496 | Critical | 9.8 | 2016-12-09 | The LDAP directory connector in Atlassian Crowd before 2.8.8 and 2.9.x before 2.9.5 allows remote attackers to execute arbitrary code via an LDAP attribute wit… |
CVE-2016-6321 | High | 7.5 | 2016-12-09 | Directory traversal vulnerability in the safer_name_suffix function in GNU tar 1.14 through 1.29 might allow remote attackers to bypass an intended protection… |
CVE-2016-9014 | High | 8.1 | 2016-12-09 | Django before 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3, when settings.DEBUG is True, allow remote attackers to conduct DNS rebinding… |
CVE-2016-9013 | Critical | 9.8 | 2016-12-09 | Django 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3 use a hardcoded password for a temporary database user created when running tests wit… |
CVE-2016-6829 | Critical | 9.8 | 2016-12-09 | The trove service user in (1) Openstack deployment (aka crowbar-openstack) and (2) Trove Barclamp (aka barclamp-trove and crowbar-barclamp-trove) in the Crowba… |
CVE-2016-6523 | Medium | 6.1 | 2016-12-09 | Multiple cross-site scripting (XSS) vulnerabilities in the media manager in Dotclear before 2.10 allow remote attackers to inject arbitrary web script or HTML… |
CVE-2016-6301 | High | 7.5 | 2016-12-09 | The recv_and_process_client_pkt function in networking/ntpd.c in busybox allows remote attackers to cause a denial of service (CPU and bandwidth consumption) v… |
CVE-2016-8858 | High | 7.5 | 2016-12-09 | The kex_input_kexinit function in kex.c in OpenSSH 6.x and 7.x through 7.3 allows remote attackers to cause a denial of service (memory consumption) by sending… |
CVE-2016-9120 | High | 7.8 | 2016-12-08 | Race condition in the ion_ioctl function in drivers/staging/android/ion/ion.c in the Linux kernel before 4.6 allows local users to gain privileges or cause a d… |
CVE-2016-9920 | High | 7.5 | 2016-12-08 | steps/mail/sendmail.inc in Roundcube before 1.1.7 and 1.2.x before 1.2.3, when no SMTP server is configured and the sendmail program is enabled, does not prope… |
CVE-2016-9919 | High | 7.5 | 2016-12-08 | The icmp6_send function in net/ipv6/icmp.c in the Linux kernel through 4.8.12 omits a certain check of the dst data structure, which allows remote attackers to… |
CVE-2016-8104 | Medium | 5.5 | 2016-12-08 | Buffer overflow in Intel PROSet/Wireless Software and Drivers in versions before 19.20.3 allows a local user to crash iframewrk.exe causing a potential denial… |
CVE-2016-8103 | Medium | 6.7 | 2016-12-08 | SMM call out in all Intel Branded NUC Kits allows a local privileged user to access the System Management Mode and take full control of the platform. |
CVE-2016-8102 | High | 7.8 | 2016-12-08 | Unquoted service path vulnerability in Intel Wireless Bluetooth Drivers 16.x, 17.x, and before 18.1.1607.3129 allows local users to launch processes with eleva… |
CVE-2016-9918 | High | 7.5 | 2016-12-08 | In BlueZ 5.42, an out-of-bounds read was identified in "packet_hexdump" function in "monitor/packet.c" source file. This issue can be triggered by processing a… |
CVE-2016-9917 | High | 7.5 | 2016-12-08 | In BlueZ 5.42, a buffer overflow was observed in "read_n" function in "tools/hcidump.c" source file. This issue can be triggered by processing a corrupted dump… |
CVE-2016-9888 | Medium | 5.5 | 2016-12-08 | An error within the "tar_directory_for_file()" function (gsf-infile-tar.c) in GNOME Structured File Library before 1.14.41 can be exploited to trigger a Null p… |
CVE-2016-9839 | High | 7.5 | 2016-12-08 | In MapServer before 7.0.3, OGR driver error messages are too verbose and may leak sensitive information if data connection fails. |
CVE-2016-8655 | High | 7.8 | 2016-12-08 | Race condition in net/packet/af_packet.c in the Linux kernel through 4.8.12 allows local users to gain privileges or cause a denial of service (use-after-free)… |
CVE-2016-5341 | Medium | 5.9 | 2016-12-06 | The GPS component in Android before 2016-12-05 allows man-in-the-middle attackers to cause a denial of service (GPS signal-acquisition delay) via an incorrect… |
CVE-2016-8740 | High | 7.5 | 2016-12-05 | The mod_http2 module in the Apache HTTP Server 2.4.17 through 2.4.23, when the Protocols configuration includes h2 or h2c, does not restrict request-header len… |
CVE-2016-9152 | Medium | 6.1 | 2016-12-05 | Cross-site scripting (XSS) vulnerability in ecrire/exec/plonger.php in SPIP 3.1.3 allows remote attackers to inject arbitrary web script or HTML via the rac pa… |
CVE-2016-7171 | Medium | 5.6 | 2016-12-05 | NetApp Plug-in for Symantec NetBackup prior to version 2.0.1 makes use of a non-unique server certificate, making it vulnerable to impersonation. |
CVE-2016-9836 | Critical | 9.8 | 2016-12-05 | The file scanning mechanism of JFilterInput::isFileSafe() in Joomla! CMS before 3.6.5 does not consider alternative PHP file extensions when checking uploaded… |
CVE-2016-9835 | Critical | 9.8 | 2016-12-05 | Directory traversal vulnerability in file "jcss.php" in Zikula 1.3.x before 1.3.11 and 1.4.x before 1.4.4 on Windows allows a remote attacker to launch a PHP o… |