Show filters
80 Total Results
Displaying 71-80 of 80
Sort by:
Attacker Value
Unknown
CVE-2016-9841
Disclosure Date: May 23, 2017 (last updated November 08, 2023)
inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.
0
Attacker Value
Unknown
CVE-2016-5011
Disclosure Date: April 11, 2017 (last updated November 26, 2024)
The parse_dos_extended function in partitions/dos.c in the libblkid library in util-linux allows physically proximate attackers to cause a denial of service (memory consumption) via a crafted MSDOS partition table with an extended partition boot record at zero offset.
0
Attacker Value
Unknown
CVE-2016-4322
Disclosure Date: December 13, 2016 (last updated November 25, 2024)
BMC BladeLogic Server Automation (BSA) before 8.7 Patch 3 allows remote attackers to bypass authentication and consequently read arbitrary files or possibly have unspecified other impact by leveraging a "logic flaw" in the authentication process.
0
Attacker Value
Unknown
CVE-2016-0230
Disclosure Date: July 07, 2016 (last updated November 25, 2024)
IBM Power Hardware Management Console (HMC) 7.3 through 7.3.0 SP7, 7.9 through 7.9.0 SP3, 8.1 through 8.1.0 SP3, 8.2 through 8.2.0 SP2, 8.3 through 8.3.0 SP2, 8.4 through 8.4.0 SP1, and 8.5.0 allows physically proximate attackers to obtain root access via unspecified vectors.
0
Attacker Value
Unknown
CVE-2016-1542
Disclosure Date: June 13, 2016 (last updated November 25, 2024)
The RPC API in RSCD agent in BMC BladeLogic Server Automation (BSA) 8.2.x, 8.3.x, 8.5.x, 8.6.x, and 8.7.x on Linux and UNIX allows remote attackers to bypass authorization and enumerate users by sending an action packet to xmlrpc after an authorization failure.
0
Attacker Value
Unknown
CVE-2016-1543
Disclosure Date: June 13, 2016 (last updated November 25, 2024)
The RPC API in the RSCD agent in BMC BladeLogic Server Automation (BSA) 8.2.x, 8.3.x, 8.5.x, 8.6.x, and 8.7.x on Linux and UNIX allows remote attackers to bypass authorization and reset arbitrary user passwords by sending an action packet to xmlrpc after an authorization failure.
0
Attacker Value
Unknown
CVE-2016-3427
Disclosure Date: April 21, 2016 (last updated June 28, 2024)
Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.
0
Attacker Value
Unknown
CVE-2015-7450
Disclosure Date: January 02, 2016 (last updated July 25, 2024)
Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the InvokerTransformer class in the Apache Commons Collections library.
0
Attacker Value
Unknown
CVE-2011-4157
Disclosure Date: November 16, 2011 (last updated October 04, 2023)
Stack-based buffer overflow in hydra.exe in HP SAN/iQ before 9.5 on the HP StorageWorks P4000 Virtual SAN Appliance allows remote attackers to execute arbitrary code via a crafted login request.
0
Attacker Value
Unknown
CVE-2005-3653
Disclosure Date: December 31, 2005 (last updated February 22, 2025)
Heap-based buffer overflow in the iGateway service for various Computer Associates (CA) iTechnology products, in iTechnology iGateway before 4.0.051230, allows remote attackers to execute arbitrary code via an HTTP request with a negative Content-Length field.
0
