CVE-2016-4751

LOW Year: 2016
CVSS v3 Score
3.5
Low
CVSS v2 Score
4.3
Medium
Weakness Type
CWE-254
View all →

Vulnerability Description

The Safari Tabs component in Apple Safari before 10 allows remote attackers to spoof the address bar of a tab via a crafted web site.

Related Vulnerabilities

CVE-2015-7576

LOW
CVSS:3.7(Low)

The http_basic_authenticate_with method in actionpack/lib/action_controller/metal/http_authentication.rb in the Basic Authentication implementation in Action Controller in Ruby on Rails before 3.2.22....

CWE-2542015

CVE-2016-0137

LOW
CVSS:3.3(Low)

The Click-to-Run (C2R) implementation in Microsoft Office 2013 SP1 and 2016 allows local users to bypass the ASLR protection mechanism via a crafted application, aka "Microsoft APP-V ASLR Bypass."

CWE-2542016

CVE-2016-0240

LOW
CVSS:3.7(Low)

IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 does not enable the HSTS protection mechanism, which makes it easier for...

CWE-2542016

CVE-2016-0266

LOW
CVSS:3.7(Low)

IBM AIX 5.3, 6.1, 7.1, and 7.2 and VIOS 2.2.x do not default to the latest TLS version, which makes it easier for man-in-the-middle attackers to obtain sensitive information via unspecified vectors.

CWE-2542016

CVE-2016-10772

LOW
CVSS:3.3(Low)

cPanel before 60.0.25 does not enforce feature-list restrictions when calling the multilang adminbin (SEC-168).

CWE-2542016

CVE-2016-1551

LOW
CVSS:3.7(Low)

ntpd in NTP 4.2.8p3 and NTPsec a5fb34b9cc89b92a8fef2f459004865c93bb7f92 relies on the underlying operating system to protect it from requests that impersonate reference clocks. Because reference clock...

CWE-2542016