| Max CVSS | 10.0 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2016-10108 | 10.0 |
Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud NAS 2.11.142 /web/google_analytics.php URL via a modified arg parameter in the POST data.
|
28-07-2023 - 16:15 | 03-01-2017 - 06:59 | |
| CVE-2017-3099 | 9.3 |
Adobe Flash Player versions 26.0.0.131 and earlier have an exploitable memory corruption vulnerability in the Action Script 3 raster data model. Successful exploitation could lead to arbitrary code execution.
|
30-01-2023 - 15:01 | 17-07-2017 - 13:18 | |
| CVE-2016-10061 | 4.3 |
The ReadGROUP4Image function in coders/tiff.c in ImageMagick before 7.0.1-10 does not check the return value of the fputc function, which allows remote attackers to cause a denial of service (crash) via a crafted image file.
|
28-04-2021 - 19:50 | 03-03-2017 - 17:59 | |
| CVE-2016-10060 | 4.3 |
The ConcatenateImages function in MagickWand/magick-cli.c in ImageMagick before 7.0.1-10 does not check the return value of the fputc function, which allows remote attackers to cause a denial of service (application crash) via a crafted file.
|
28-04-2021 - 19:20 | 02-03-2017 - 21:59 | |
| CVE-2016-10062 | 4.3 |
The ReadGROUP4Image function in coders/tiff.c in ImageMagick does not check the return value of the fwrite function, which allows remote attackers to cause a denial of service (application crash) via a crafted file.
|
04-11-2017 - 01:29 | 02-03-2017 - 21:59 | |
| CVE-2006-7210 | 5.0 |
Microsoft Windows 2000, XP, and Server 2003 allows remote attackers to cause a denial of service (cpu consumption) via a PNG image with crafted (1) Width and (2) Height values in the IHDR block.
|
11-10-2017 - 01:31 | 27-06-2007 - 17:30 | |
| CVE-2008-1578 | 2.1 |
The sso_util program in Single Sign-On in Apple Mac OS X before 10.5.3 places passwords on the command line, which allows local users to obtain sensitive information by listing the process.
|
08-08-2017 - 01:30 | 02-06-2008 - 21:30 | |
| CVE-2016-10106 | 4.0 |
Directory traversal vulnerability in scgi-bin/platform.cgi on NETGEAR FVS336Gv3, FVS318N, FVS318Gv2, and SRX5308 devices with firmware before 4.3.3-8 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the thispage paramet
|
27-07-2017 - 01:29 | 03-01-2017 - 06:59 | |
| CVE-2016-10099 | 5.0 |
Borg (aka BorgBackup) before 1.0.9 has a flaw in the cryptographic protocol used to authenticate the manifest (list of archives), potentially allowing an attacker to spoof the list of archives.
|
12-07-2017 - 19:04 | 02-01-2017 - 21:59 | |
| CVE-2004-0047 | 4.6 |
Multiple programs in trr19 1.0 do not properly drop privileges before executing a system command, which could allow local users to gain privileges.
|
11-07-2017 - 01:29 | 03-03-2004 - 05:00 | |
| CVE-2016-10059 | 6.8 |
Buffer overflow in coders/tiff.c in ImageMagick before 6.9.4-1 allows remote attackers to cause a denial of service (application crash) or have unspecified other impact via a crafted TIFF file.
|
25-03-2017 - 01:59 | 23-03-2017 - 17:59 | |
| CVE-2014-1567 | 9.3 |
Use-after-free vulnerability in DirectionalityUtils.cpp in Mozilla Firefox before 32.0, Firefox ESR 24.x before 24.8 and 31.x before 31.1, and Thunderbird 24.x before 24.8 and 31.x before 31.1 allows remote attackers to execute arbitrary code via tex
|
07-01-2017 - 02:59 | 03-09-2014 - 10:55 | |
| CVE-2016-10105 | 7.5 |
admin/plugin.php in Piwigo through 2.8.3 doesn't validate the sections variable while using it to include files. This can cause information disclosure and code execution if it contains a .. sequence.
|
05-01-2017 - 02:59 | 03-01-2017 - 06:59 | |
| CVE-2016-10100 | 5.0 |
Borg (aka BorgBackup) before 1.0.9 has a flaw in the way duplicate archive names were processed during manifest recovery, potentially allowing an attacker to overwrite an archive.
|
05-01-2017 - 02:59 | 02-01-2017 - 21:59 | |
| CVE-2016-10107 | 10.0 |
Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud NAS 2.11.142 index.php page via a modified Cookie header.
|
05-01-2017 - 02:59 | 03-01-2017 - 06:59 |