CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Security Vulnerabilities (CVSS score between 6 and 6.99)

Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
6451 CVE-2016-10775 20 2019-08-05 2019-08-12
6.8
None Remote Low Single system Complete None None
cPanel before 60.0.25 allows arbitrary file-chown operations via reassign_post_terminate_cruft (SEC-173).
6452 CVE-2016-10773 134 2019-08-05 2019-08-09
6.5
None Remote Low Single system Partial Partial Partial
cPanel before 60.0.25 allows format-string injection in exception-message handling (SEC-171).
6453 CVE-2016-10766 352 CSRF 2019-07-29 2019-08-05
6.8
None Remote Medium Not required Partial Partial Partial
edx-platform before 2016-06-06 allows CSRF.
6454 CVE-2016-10758 434 2019-05-24 2019-05-29
6.5
None Remote Low Single system Partial Partial Partial
PHPKIT 1.6.6 allows arbitrary File Upload, as demonstrated by a .php file to pkinc/admin/mediaarchive.php and pkinc/func/default.php via the image_name parameter.
6455 CVE-2016-10757 352 Exec Code CSRF 2019-05-24 2019-05-28
6.8
None Remote Medium Not required Partial Partial Partial
In Redaxo 5.2.0, the cron management of the admin panel suffers from CSRF that leads to arbitrary Remote Code Execution via addons/cronjob/lib/types/phpcode.php.
6456 CVE-2016-10756 352 CSRF 2019-05-24 2019-05-28
6.8
None Remote Medium Not required Partial Partial Partial
Kliqqi 3.0.0.5 allows CSRF with resultant Arbitrary File Upload because module.php?module=upload can be used to configure the uploading of .php files, and then modules/upload/upload_main.php can be used for the upload itself.
6457 CVE-2016-10754 89 Sql 2019-05-24 2019-05-29
6.5
None Remote Low Single system Partial Partial Partial
modules/Calendar/Activity.php in Vtiger CRM 6.5.0 allows SQL injection via the contactidlist parameter.
6458 CVE-2016-10753 502 Sql 2019-05-24 2019-05-29
6.5
None Remote Low Single system Partial Partial Partial
e107 2.1.2 allows PHP Object Injection with resultant SQL injection, because usersettings.php uses unserialize without an HMAC.
6459 CVE-2016-10751 434 Exec Code Dir. Trav. 2019-05-24 2019-05-29
6.5
None Remote Low Single system Partial Partial Partial
osClass 3.6.1 allows oc-admin/plugins.php Directory Traversal via the plugin parameter. This is exploitable for remote PHP code execution because an administrator can upload an image that contains PHP code in the EXIF data via index.php?page=ajax&action=ajax_upload.
6460 CVE-2016-10750 502 Exec Code 2019-05-22 2019-08-08
6.8
None Remote Medium Not required Partial Partial Partial
In Hazelcast before 3.11, the cluster join procedure is vulnerable to remote code execution via Java deserialization. If an attacker can reach a listening Hazelcast instance with a crafted JoinRequest, and vulnerable classes exist in the classpath, the attacker can run arbitrary code.
6461 CVE-2016-10738 352 CSRF 2019-01-15 2019-01-18
6.8
None Remote Medium Not required Partial Partial Partial
Zenbership v107 has CSRF via admin/cp-functions/event-add.php.
6462 CVE-2016-10710 20 2018-01-25 2018-02-13
6.5
None Remote Low Single system Partial Partial Partial
Biscom Secure File Transfer (SFT) 5.0.1000 through 5.0.1048 does not validate the dataFieldId value, and uses sequential numbers, which allows remote authenticated users to overwrite or read files via crafted requests. Version 5.0.1050 contains the fix.
6463 CVE-2016-10701 352 CSRF 2017-11-27 2017-12-16
6.8
None Remote Medium Not required Partial Partial Partial
In Hitachi Vantara Pentaho BA Platform through 8.0, a CSRF issue exists in the Business Analytics application.
6464 CVE-2016-10700 264 Bypass 2017-11-24 2017-12-11
6.5
None Remote Low Single system Partial Partial Partial
auth_login.php in Cacti before 1.0.0 allows remote authenticated users who use web authentication to bypass intended access restrictions by logging in as a user not in the cacti database, because the guest user is not considered. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-2313.
6465 CVE-2016-10680 310 2018-05-29 2019-10-09
6.8
None Remote Medium Not required Partial Partial Partial
adamvr-geoip-lite is a light weight native JavaScript implementation of GeoIP API from MaxMind adamvr-geoip-lite downloads geoip resources over HTTP, which leaves it vulnerable to MITM attacks. This impacts the integrity and availability of this geoip data that may alter the decisions made by an application using this data.
6466 CVE-2016-10673 310 2018-06-04 2019-10-09
6.8
None Remote Medium Not required Partial Partial Partial
ipip-coffee queries geolocation information from IP ipip-coffee downloads geolocation resources over HTTP, which leaves it vulnerable to MITM attacks. This could impact the integrity and availability of the data being used to make geolocation decisions by an application.
6467 CVE-2016-10654 310 2018-06-04 2019-10-09
6.8
None Remote Medium Not required Partial Partial Partial
sfml downloads resources over HTTP, which leaves it vulnerable to MITM attacks.
6468 CVE-2016-10652 310 2018-06-04 2019-10-09
6.8
None Remote Medium Not required Partial Partial Partial
prebuild-lwip is a module for comprehensive, fast, and simple image processing and manipulation. prebuild-lwip downloads resources over HTTP, which leaves it vulnerable to MITM attacks.
6469 CVE-2016-10641 310 2018-06-04 2019-10-09
6.8
None Remote Medium Not required Partial Partial Partial
node-bsdiff-android downloads resources over HTTP, which leaves it vulnerable to MITM attacks.
6470 CVE-2016-10619 310 2018-06-01 2019-10-09
6.8
None Remote Medium Not required Partial Partial Partial
pennyworth is a natural language templating engine. pennyworth downloads data resources over HTTP, which leaves it vulnerable to MITM attacks.
6471 CVE-2016-10618 310 2018-06-01 2019-10-09
6.8
None Remote Medium Not required Partial Partial Partial
node-browser is a wrapper webdriver by nodejs. node-browser downloads resources over HTTP, which leaves it vulnerable to MITM attacks.
6472 CVE-2016-10616 310 2018-06-01 2019-10-09
6.8
None Remote Medium Not required Partial Partial Partial
openframe-image is an Openframe extension which adds support for images via fbi. openframe-image downloads data resources over HTTP, which leaves it vulnerable to MITM attacks.
6473 CVE-2016-10610 310 2018-06-01 2019-10-09
6.8
None Remote Medium Not required Partial Partial Partial
unicode-json is a unicode lookup table. unicode-json before 2.0.0 downloads data resources over HTTP, which leaves it vulnerable to MITM attacks.
6474 CVE-2016-10596 310 Exec Code 2018-06-01 2019-10-09
6.8
None Remote Medium Not required Partial Partial Partial
imageoptim is a Node.js wrapper for some images compression algorithms. imageoptim downloads zipped resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested tarball with an attacker controlled tarball if the attacker is on the network or positioned in between the user and the remote server.
6475 CVE-2016-10594 310 2018-06-01 2019-10-09
6.8
None Remote Medium Not required Partial Partial Partial
ipip is a Node.js module to query geolocation information for an IP or domain, based on database by ipip.net. ipip downloads data resources over HTTP, which leaves it vulnerable to MITM attacks.
6476 CVE-2016-10592 310 2018-06-01 2019-10-09
6.8
None Remote Medium Not required Partial Partial Partial
jser-stat is a JSer.info stat library. jser-stat downloads data resources over HTTP, which leaves it vulnerable to MITM attacks.
6477 CVE-2016-10579 310 Exec Code 2018-06-01 2019-10-09
6.8
None Remote Medium Not required Partial Partial Partial
Chromedriver is an NPM wrapper for selenium ChromeDriver. Chromedriver before 2.26.1 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.
6478 CVE-2016-10578 310 2018-05-29 2019-10-09
6.8
None Remote Medium Not required Partial Partial Partial
unicode loads unicode data downloaded from unicode.org into nodejs. Unicode before 9.0.0 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks.
6479 CVE-2016-10577 310 Exec Code 2018-05-29 2019-10-09
6.8
None Remote Medium Not required Partial Partial Partial
ibm_db is an asynchronous/synchronous interface for node.js to IBM DB2 and IBM Informix. ibm_db before 1.0.2 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.
6480 CVE-2016-10568 310 2018-05-29 2019-10-09
6.8
None Remote Medium Not required Partial Partial Partial
geoip-lite-country is a stripped down version of geoip-lite, supporting only country lookup. geoip-lite-country before 1.1.4 downloads data resources over HTTP, which leaves it vulnerable to MITM attacks.
6481 CVE-2016-10565 310 Exec Code 2018-05-31 2019-10-09
6.8
None Remote Medium Not required Partial Partial Partial
operadriver is a Opera Driver for Selenium. operadriver versions below 0.2.3 download binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.
6482 CVE-2016-10564 310 Exec Code 2018-05-31 2019-10-09
6.8
None Remote Medium Not required Partial Partial Partial
apk-parser is a tool to extract Android Manifest info from an APK file. apk-parser versions below 0.1.6 download binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.
6483 CVE-2016-10563 310 2018-05-31 2019-10-09
6.8
None Remote Medium Not required Partial Partial Partial
During the installation process, the go-ipfs-deps module before 0.4.4 insecurely downloads resources over HTTP. This allows for a MITM attack to compromise the integrity of the resources used by this module and could allow for further compromise.
6484 CVE-2016-10557 310 Exec Code 2018-05-31 2019-10-09
6.8
None Remote Medium Not required Partial Partial Partial
appium-chromedriver is a Node.js wrapper around Chromedriver. Versions below 2.9.4 download binary resources over HTTP, which leaves the module vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.
6485 CVE-2016-10529 352 2018-05-31 2019-10-09
6.8
None Remote Medium Not required Partial Partial Partial
Droppy versions <3.5.0 does not perform any verification for cross-domain websocket requests. An attacker is able to make a specially crafted page that can send requests as the context of the currently logged in user. For example this means the malicious user could add a new admin account under his control and delete others.
6486 CVE-2016-10522 352 CSRF 2018-07-05 2019-10-09
6.8
None Remote Medium Not required Partial Partial Partial
rails_admin ruby gem <v1.1.1 is vulnerable to cross-site request forgery (CSRF) attacks. Non-GET methods were not validating CSRF tokens and, as a result, an attacker could hypothetically gain access to the application administrative endpoints exposed by the gem.
6487 CVE-2016-10509 89 Exec Code Sql 2017-08-31 2017-09-06
6.5
None Remote Low Single system Partial Partial Partial
SQL injection vulnerability in the updateAmazonOrderTracking function in upload/admin/model/openbay/amazon.php in OpenCart before version 2.3.0.0 allows remote authenticated administrators to execute arbitrary SQL commands via a carrier (aka courier_id) parameter to openbay.php.
6488 CVE-2016-10492 20 2018-04-18 2018-05-02
6.4
None Remote Low Not required Partial Partial None
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9635M, MDM9640, MDM9645, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835, SD 845, SD 850, and SDX20, improper ciphersuite validation leads SecSSL accept an unadvertised ciphersuite.
6489 CVE-2016-10403 125 2019-01-09 2019-01-16
6.8
None Remote Medium Not required Partial Partial Partial
Insufficient data validation on image data in PDFium in Google Chrome prior to 51.0.2704.63 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file.
6490 CVE-2016-10395 119 Exec Code Overflow 2017-06-15 2018-05-29
6.8
None Local Low Single system Complete Complete Complete
In FlexNet Publisher versions before Luton SP1 (11.14.1.1) running FlexNet Publisher Licensing Service on Windows platform, a boundary error related to a named pipe within the FlexNet Publisher Licensing Service can be exploited to cause an out-of-bounds memory read access and subsequently execute arbitrary code with SYSTEM privileges.
6491 CVE-2016-10379 89 Sql 2017-05-29 2017-06-08
6.5
None Remote Low Single system Partial Partial Partial
The VirtueMart com_virtuemart component 3.0.14 for Joomla! allows SQL injection by remote authenticated administrators via the virtuemart_paymentmethod_id or virtuemart_shipmentmethod_id parameter to administrator/index.php.
6492 CVE-2016-10378 89 Sql 2017-05-29 2017-06-07
6.5
None Remote Low Single system Partial Partial Partial
e107 2.1.1 allows SQL injection by remote authenticated administrators via the pagelist parameter to e107_admin/menus.php, related to the menuSaveVisibility function.
6493 CVE-2016-10322 77 Exec Code 2017-04-10 2017-04-17
6.5
None Remote Low Single system Partial Partial Partial
Synology Photo Station before 6.3-2958 allows remote authenticated guest users to execute arbitrary commands via shell metacharacters in the X-Forwarded-For HTTP header to photo/login.php.
6494 CVE-2016-10317 119 DoS Overflow 2017-04-03 2018-05-01
6.8
None Remote Medium Not required Partial Partial Partial
The fill_threshhold_buffer function in base/gxht_thresh.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted PostScript document.
6495 CVE-2016-10313 352 CSRF 2017-04-03 2017-04-10
6.8
None Remote Medium Not required Partial Partial Partial
Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev. 3), Air:Link 5000AC (AL5000AC) version 1.13, and Air:Link 59300 (AL59300) version 1.04 (Rev. 4) devices allow remote attackers to conduct CSRF attacks via certain /goform/* pages.
6496 CVE-2016-10272 119 DoS Overflow 2017-03-24 2017-03-30
6.8
None Remote Medium Not required Partial Partial Partial
LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted TIFF image, related to "WRITE of size 2048" and libtiff/tif_next.c:64:9.
6497 CVE-2016-10271 119 DoS Overflow 2017-03-24 2017-03-30
6.8
None Remote Medium Not required Partial Partial Partial
tools/tiffcrop.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read and buffer overflow) or possibly have unspecified other impact via a crafted TIFF image, related to "READ of size 1" and libtiff/tif_fax3.c:413:13.
6498 CVE-2016-10270 125 DoS 2017-03-24 2017-11-03
6.8
None Remote Medium Not required Partial Partial Partial
LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted TIFF image, related to "READ of size 8" and libtiff/tif_read.c:523:22.
6499 CVE-2016-10269 125 DoS 2017-03-24 2018-03-21
6.8
None Remote Medium Not required Partial Partial Partial
LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted TIFF image, related to "READ of size 512" and libtiff/tif_unix.c:340:2.
6500 CVE-2016-10268 191 DoS 2017-03-24 2018-03-21
6.8
None Remote Medium Not required Partial Partial Partial
tools/tiffcp.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (integer underflow and heap-based buffer under-read) or possibly have unspecified other impact via a crafted TIFF image, related to "READ of size 78490" and libtiff/tif_unix.c:115:23.
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.