| Max CVSS | 9.4 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2016-9102 | 2.1 |
Memory leak in the v9fs_xattrcreate function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption and QEMU process crash) via a large number of Txattrcreate messages with t
|
13-02-2023 - 04:50 | 09-12-2016 - 22:59 | |
| CVE-2016-9106 | 2.1 |
Memory leak in the v9fs_write function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption) by leveraging failure to free an IO vector.
|
13-02-2023 - 04:50 | 09-12-2016 - 22:59 | |
| CVE-2016-9105 | 2.1 |
Memory leak in the v9fs_link function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption) via vectors involving a reference to the source fid object.
|
12-02-2023 - 23:27 | 09-12-2016 - 22:59 | |
| CVE-2016-1000112 | 9.4 |
Unauthenticated remote .jpg file upload in contus-video-comments v1.0 wordpress plugin
|
29-04-2020 - 13:35 | 06-10-2016 - 14:59 | |
| CVE-2016-6858 | 3.5 |
Cross-site scripting (XSS) vulnerability in the Create Employee feature in Hybris Management Console (HMC) in SAP Hybris before 5.0.4.11, 5.1.0.x before 5.1.0.11, 5.1.1.x before 5.1.1.12, 5.2.0.x and 5.3.0.x before 5.3.0.10, 5.4.x before 5.4.0.9, 5.5
|
27-08-2019 - 16:26 | 31-12-2016 - 07:59 | |
| CVE-2016-6857 | 3.5 |
Cross-site scripting (XSS) vulnerability in the Create Catalogue feature in Hybris Management Console (HMC) in SAP Hybris before 5.2.0.13, 5.3.x before 5.3.0.11, 5.4.x before 5.4.0.11, 5.5.0.x before 5.5.0.10, 5.5.1.x before 5.5.1.11, 5.6.x before 5.
|
07-03-2019 - 19:50 | 31-12-2016 - 07:59 | |
| CVE-2006-3468 | 7.8 |
Linux kernel 2.6.x, when using both NFS and EXT3, allows remote attackers to cause a denial of service (file system panic) via a crafted UDP packet with a V2 lookup procedure that specifies a bad file handle (inode number), which triggers an error an
|
30-10-2018 - 16:26 | 21-07-2006 - 14:03 | |
| CVE-2016-7200 | 7.6 |
The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vu
|
12-10-2018 - 22:14 | 10-11-2016 - 06:59 | |
| CVE-2004-0070 | 7.5 |
PHP remote file inclusion vulnerability in module.php for ezContents allows remote attackers to execute arbitrary PHP code by modifying the link parameter to reference a URL on a remote web server that contains the code.
|
10-10-2017 - 01:30 | 17-02-2004 - 05:00 | |
| CVE-2014-5471 | 4.0 |
Stack consumption vulnerability in the parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to cause a denial of service (uncontrolled recursion, and system crash or reboot) via a crafted i
|
08-09-2017 - 01:29 | 01-09-2014 - 01:55 | |
| CVE-2017-8592 | 4.3 |
Microsoft browsers on when Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows RT 8.1, and Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow a security feature bypass vulnerability
|
19-07-2017 - 22:42 | 11-07-2017 - 21:29 | |
| CVE-2016-4394 | 5.8 |
HPE System Management Homepage before v7.6 allows remote attackers to obtain sensitive information via unspecified vectors, related to an "HSTS" issue.
|
17-02-2017 - 02:59 | 28-10-2016 - 21:59 | |
| CVE-2016-4396 | 7.8 |
HPE System Management Homepage before v7.6 allows remote attackers to have an unspecified impact via unknown vectors, related to a "Buffer Overflow" issue.
|
17-02-2017 - 02:59 | 28-10-2016 - 21:59 | |
| CVE-2016-4393 | 3.5 |
HPE System Management Homepage before v7.6 allows "remote authenticated" attackers to obtain sensitive information via unspecified vectors, related to an "XSS" issue.
|
17-02-2017 - 02:59 | 28-10-2016 - 21:59 | |
| CVE-2016-4395 | 7.8 |
HPE System Management Homepage before v7.6 allows remote attackers to have an unspecified impact via unknown vectors, related to a "Buffer Overflow" issue.
|
17-02-2017 - 02:59 | 28-10-2016 - 21:59 | |
| CVE-2016-9081 | 7.5 |
Joomla! 3.4.4 through 3.6.3 allows attackers to reset username, password, and user group assignments and possibly perform other user account modifications via unspecified vectors.
|
26-01-2017 - 15:07 | 23-01-2017 - 21:59 |