CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2016-3884 MEDIUM · 5.5 server/notification/NotificationManagerService.java in the Notification Manager Service in Android 6.x before 2016-09-01 and 7.0 before 2016-09-01 lacks uid checks, which allows attackers to bypass intended restrictions… Google
- CVE-2016-3883 MEDIUM · 5.5 internal/telephony/SMSDispatcher.java in Telephony in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 does not properly construct… Google
- CVE-2016-3881 MEDIUM · 5.5 Met de decoder_peek_si_interne functie in vp9/vp9_dx_iface.c in libvpx in mediaserver in Android 4.x vóór 4.4.4, 5.0.x vóór 5.0.2, 5.1.x vóór 5.1.1, 6.x vóór 2016-09-01 en… Google
- CVE-2016-3880 MEDIUM · 5.5 Multiple buffer overflows in rtsp/ASessionDescription.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0… Google
- CVE-2016-3879 MEDIUM · 5.5 arm-wt-22k/lib_src/eas_mdls.c in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-09-01 allows remote attackers to cause a denial… Google
- CVE-2016-3878 MEDIUM · 5.5 decoder/ih264d_api.c in mediaserver in Android 6.x before 2016-09-01 mishandles the case of decoding zero MBs, which allows remote attackers to cause a denial of service… Google
- CVE-2016-3877 CRITICAL · 9.8 Niet-gespecificeerde kwetsbaarheid in Android vóór 01-09-2016 heeft onbekende impact- en aanvalsvectoren. Google
- CVE-2016-3876 MEDIUM · 6.8 providers/settings/SettingsProvider.java in Android 6.x before 2016-09-01 and 7.0 before 2016-09-01 allows physically proximate attackers to bypass the SAFE_BOOT_DISALLOWED protection mechanism and boot to safe mode… Google
- CVE-2016-3875 MEDIUM · 6.8 server/wm/WindowManagerService.java in Android 6.x before 2016-09-01 does not enforce the DISALLOW_SAFE_BOOT setting, which allows physically proximate attackers to bypass intended access restrictions and boot to… Google
- CVE-2016-3874 HIGH · 7.8 CORE/HDD/src/wlan_hdd_wext.c in the Qualcomm Wi-Fi driver in Android before 2016-09-05 on Nexus 5X devices does not properly validate the arguments array, which allows attackers to… Google
- CVE-2016-3873 HIGH · 7.8 The NVIDIA kernel in Android before 2016-09-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 29518457. Google
- CVE-2016-3872 HIGH · 7.8 Bufferoverloop in codecs/on2/dec/SoftVPX.cpp in libstagefright in mediaserver in Android 4.x vóór 4.4.4, 5.0.x vóór 5.0.2, 5.1.x vóór 5.1.1, 6.x vóór 2016-09-01 en 7.0 vóór 2016-09-01… Google
- CVE-2016-3871 HIGH · 7.8 Multiple buffer overflows in codecs/mp3dec/SoftMP3.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0… Google
- CVE-2016-3870 HIGH · 7.8 omx/SimpleSoftOMXComponent.cpp in libstagefright in mediaserver in Android 4.x vóór 4.4.4, 5.0.x vóór 5.0.2, 5.1.x vóór 5.1.1, 6.x vóór 2016-09-01 en 7.0 vóór 2016-09-01 voorkomt geen… Google
- CVE-2016-3869 HIGH · 7.8 The Broadcom Wi-Fi driver in Android before 2016-09-05 on Nexus 5, Nexus 6, Nexus 6P, Nexus 9, Nexus Player, and Pixel C devices allows attackers… Google
- CVE-2016-3868 HIGH · 7.8 The Qualcomm power driver in Android before 2016-09-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application, aka Android… Google
- CVE-2016-3867 HIGH · 7.8 Met het Qualcomm IPA-stuurprogramma in Android vóór 2016-09-05 op Nexus 5X- en 6P-apparaten kunnen aanvallers privileges krijgen via een vervaardigde applicatie, ook bekend als Android… Google
- CVE-2016-3866 HIGH · 7.8 The Qualcomm sound driver in Android before 2016-09-05 on Nexus 5X, 6, and 6P devices allows attackers to gain privileges via a crafted application, aka… Google
- CVE-2016-3865 HIGH · 7.8 The Synaptics touchscreen driver in Android before 2016-09-05 on Nexus 5X and 9 devices allows attackers to gain privileges via a crafted application, aka internal… Google
- CVE-2016-3864 HIGH · 7.8 The Qualcomm radio interface layer in Android before 2016-09-05 on Nexus 5, Nexus 5X, Nexus 6, Nexus 6P, and Android One devices allows attackers to… Google
- CVE-2016-3863 HIGH · 7.8 Meerdere stackgebaseerde bufferoverlopen in de AVCC-hermontage-implementatie in Utils.cpp in libstagefright in MediaMuxer in Android 4.x vóór 4.4.4, 5.0.x vóór 5.0.2, 5.1.x vóór 5.1.1, 6.x vóór… Google
- CVE-2016-3862 HIGH · 7.8 media/ExifInterface.java in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-09-01 does not properly interact with the use… Google
- CVE-2016-3861 HIGH · 7.8 LibUtils in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 mishandles conversions between Unicode character encodings… Google
- CVE-2016-3859 HIGH · 7.8 The Qualcomm camera driver in Android before 2016-09-05 on Nexus 5, 5X, 6, and 6P devices allows attackers to gain privileges via a crafted application,… Google
- CVE-2016-3858 HIGH · 7.8 Buffer overflow in drivers/soc/qcom/subsystem_restart.c in the Qualcomm subsystem driver in Android before 2016-09-05 on Nexus 5X and 6P devices allows attackers to gain privileges via… Google
- CVE-2016-7395 HIGH · 8.8 SkPath.cpp in Skia, zoals gebruikt in Google Chrome vóór 53.0.2785.89 op Windows en OS X en vóór 53.0.2785.92 op Linux, valideert de retourwaarden van ChopMonoAtY-oproepen… Google
- CVE-2016-5167 HIGH · 8.8 Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux allow attackers to cause a denial of… Opensuse Google
- CVE-2016-5166 LOW · 3.1 The download implementation in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not properly restrict saving a file://… Google Opensuse
- CVE-2016-5165 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in the Developer Tools (aka DevTools) subsystem in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on… Google Opensuse
- CVE-2016-5164 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in WebKit/Source/platform/v8_inspector/V8Debugger.cpp in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux,… Google Opensuse
- CVE-2016-5163 MEDIUM · 4.3 The bidirectional-text implementation in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not ensure left-to-right (LTR) rendering of… Google Opensuse
- CVE-2016-5162 MEDIUM · 6.5 The AllowCrossRendererResourceLoad function in extensions/browser/url_request_util.cc in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not properly use an… Opensuse Google
- CVE-2016-5161 HIGH · 8.8 The EditingStyle::mergeStyle function in WebKit/Source/core/editing/EditingStyle.cpp in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, mishandles… Google Opensuse
- CVE-2016-5160 MEDIUM · 6.5 The AllowCrossRendererResourceLoad function in extensions/browser/url_request_util.cc in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not properly use an… Opensuse Google
- CVE-2016-5159 HIGH · 8.8 Meerdere integer overflows in OpenJPEG, zoals gebruikt in PDFium in Google Chrome vóór 53.0.2785.89 op Windows en OS X en vóór 53.0.2785.92 op Linux, stellen… Opensuse Google
- CVE-2016-5158 HIGH · 8.8 Meerdere integer overflows in de opj_tcd_init_tile-functie in tcd.c in OpenJPEG, zoals gebruikt in PDFium in Google Chrome vóór 53.0.2785.89 op Windows en OS X en… Opensuse Google
- CVE-2016-5157 HIGH · 8.8 Heap-based buffer overflow in the opj_dwt_interleave_v function in dwt.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X… Opensuse Google Fedoraproject
- CVE-2016-5156 HIGH · 8.8 extensions/renderer/event_bindings.cc in the event bindings in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux attempts to process filtered events… Opensuse Google
- CVE-2016-5155 MEDIUM · 6.5 Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not properly validate access to the initial document, which allows… Google Opensuse
- CVE-2016-5154 HIGH · 8.8 Multiple heap-based buffer overflows in PDFium, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allow remote… Google Opensuse
- CVE-2016-5153 HIGH · 8.8 The Web Animations implementation in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, improperly relies… Opensuse Google
- CVE-2016-5152 HIGH · 8.8 Integer overflow in the opj_tcd_get_decoded_tile_size function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and… Google Opensuse
- CVE-2016-5151 HIGH · 8.8 PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux mishandles timers, which allows remote attackers to cause a… Opensuse Google
- CVE-2016-5150 HIGH · 8.8 WebKit/Source/bindings/modules/v8/V8BindingForModules.cpp in Blink, zoals gebruikt in Google Chrome vóór 53.0.2785.89 op Windows en OS X en vóór 53.0.2785.92 op Linux, heeft een Indexed Database (ook… Opensuse Google
- CVE-2016-5149 HIGH · 8.8 Het extensiesubsysteem in Google Chrome vóór 53.0.2785.89 op Windows en OS X en vóór 53.0.2785.92 op Linux vertrouwt op een iframe-bron-URL om een bijbehorende extensie… Google Opensuse
- CVE-2016-5148 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote… Google
- CVE-2016-5147 MEDIUM · 6.1 Knipperen, zoals gebruikt in Google Chrome vóór 53.0.2785.89 op Windows en OS X en vóór 53.0.2785.92 op Linux, misbruikt uitgestelde paginaladingen, waardoor externe aanvallers willekeurig… Google
- CVE-2016-6212 MEDIUM · 5.3 The Views module 7.x-3.x before 7.x-3.14 in Drupal 7.x and the Views module in Drupal 8.x before 8.1.3 might allow remote authenticated users to bypass… Drupal
- CVE-2016-6211 HIGH · 8.8 The User module in Drupal 7.x before 7.44 allows remote authenticated users to gain privileges via vectors involving contributed or custom code that triggers a… Drupal Debian
- CVE-2016-4573 CRITICAL · 9.8 Fortinet FortiSwitch FSW-108D-POE, FSW-124D, FSW-124D-POE, FSW-224D-POE, FSW-224D-FPOE, FSW-248D-POE, FSW-248D-FPOE, FSW-424D, FSW-424D-POE, FSW-424D-FPOE, FSW-448D, FSW-448D-POE, FSW-448D-FPOE, FSW-524D, FSW-524D-FPOE, FSW-548D, FSW-548D-FPOE, FSW-1024D, FSW-1048D, FSW-3032D, and FSW-R-112D-POE models,… Fortinet