CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2016-5114 CRITICAL · 9.1 sapi/fpm/fpm/fpm_log.c in PHP before 5.5.31, 5.6.x before 5.6.17, and 7.x before 7.0.2 misinterprets the semantics of the snprintf return value, which allows attackers to obtain… Php
- CVE-2016-5096 HIGH · 8.6 Integer overflow in the fread function in ext/standard/file.c in PHP before 5.5.36 and 5.6.x before 5.6.22 allows remote attackers to cause a denial of service… Php
- CVE-2016-5095 HIGH · 8.6 Integer overflow in the php_escape_html_entities_ex function in ext/standard/html.c in PHP before 5.5.36 and 5.6.x before 5.6.22 allows remote attackers to cause a denial of service… Php
- CVE-2016-5094 HIGH · 8.6 Integer overflow in the php_html_entities function in ext/standard/html.c in PHP before 5.5.36 and 5.6.x before 5.6.22 allows remote attackers to cause a denial of service… Php
- CVE-2016-5093 HIGH · 8.6 The get_icu_value_internal function in ext/intl/locale/locale_methods.c in PHP before 5.5.36, 5.6.x before 5.6.22, and 7.x before 7.0.7 does not ensure the presence of a '' character,… Php
- CVE-2016-3132 CRITICAL · 9.8 Double free vulnerability in the SplDoublyLinkedList::offsetSet function in ext/spl/spl_dllist.c in PHP 7.x before 7.0.6 allows remote attackers to execute arbitrary code via a crafted index. Php
- CVE-2016-3078 CRITICAL · 9.8 Meerdere integer overflows in php_zip.c in de ZIP-extensie in PHP vóór 7.0.6 stellen externe aanvallers in staat om een denial of service (heap-based buffer overflow… Php
- CVE-2015-8935 MEDIUM · 6.1 De functie sapi_header_op in main/SAPI.c in PHP vóór 5.4.38, 5.5.x vóór 5.5.22 en 5.6.x vóór 5.6.6 ondersteunt verouderde line folding zonder rekening te houden met… Php
- CVE-2013-7456 HIGH · 7.6 gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.1.1, as used in PHP before 5.5.36, 5.6.x before 5.6.22, and 7.x before 7.0.7, allows remote… Libgd Php
- CVE-2016-6513 MEDIUM · 5.9 epan/dissectors/packet-wbxml.c in the WBXML dissector in Wireshark 2.x before 2.0.5 does not restrict the recursion depth, which allows remote attackers to cause a denial of… Wireshark
- CVE-2016-6512 MEDIUM · 5.9 epan/dissectors/packet-wap.c in Wireshark 2.x before 2.0.5 omits an overflow check in the tvb_get_guintvar function, which allows remote attackers to cause a denial of service (infinite… Wireshark
- CVE-2016-6511 MEDIUM · 5.9 epan/proto.c in Wireshark 1.12.x vóór 1.12.13 en 2.x vóór 2.0.5 stelt externe aanvallers in staat om een denial of service (OpenFlow dissector large loop) te… Wireshark
- CVE-2016-6510 MEDIUM · 5.9 Off-by-one error in epan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allows remote attackers to cause a denial of… Wireshark
- CVE-2016-6509 MEDIUM · 5.9 epan/dissectors/packet-ldss.c in the LDSS dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 mishandles conversations, which allows remote attackers to cause a denial of… Wireshark
- CVE-2016-6508 MEDIUM · 5.9 epan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 uses an incorrect integer data type, which allows remote attackers to… Wireshark
- CVE-2016-6507 MEDIUM · 5.9 epan/dissectors/packet-mmse.c in the MMSE dissector in Wireshark 1.12.x before 1.12.13 allows remote attackers to cause a denial of service (infinite loop) via a crafted packet. Wireshark
- CVE-2016-6506 MEDIUM · 5.9 epan/dissectors/packet-wsp.c in de WSP dissector in Wireshark 1.12.x vóór 1.12.13 en 2.x vóór 2.0.5 stelt externe aanvallers in staat om een denial of service (oneindige… Wireshark
- CVE-2016-6505 MEDIUM · 5.9 epan/dissectors/packet-packetbb.c in the PacketBB dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allows remote attackers to cause a denial of service (divide-by-zero error… Wireshark
- CVE-2016-6504 MEDIUM · 5.9 epan/dissectors/packet-ncp2222.inc in the NDS dissector in Wireshark 1.12.x before 1.12.13 does not properly maintain a ptvc data structure, which allows remote attackers to cause a… Wireshark
- CVE-2016-6503 MEDIUM · 5.9 De CORBA IDL-dissectoren in Wireshark 2.x vóór 2.0.5 op 64-bits Windows-platforms werken niet goed samen met Visual C++ compiler-opties, waardoor externe aanvallers een denial of… Wireshark
- CVE-2016-6516 HIGH · 7.4 Raceconditie in de functie ioctl_file_dedupe_range in fs/ioctl.c in de Linux-kernel tot en met 4.7 stelt lokale gebruikers in staat om een denial of service (heap-based… Linux
- CVE-2016-6480 MEDIUM · 5.1 Raceconditie in de ioctl_send_fib-functie in drivers/scsi/aacraid/commctrl.c in de Linux-kernel via 4.7 stelt lokale gebruikers in staat om een denial of service (toegang buiten de grenzen… Linux
- CVE-2016-6198 MEDIUM · 5.5 The filesystem layer in the Linux kernel before 4.5.5 proceeds with post-rename operations after an OverlayFS file is renamed to a self-hardlink, which allows local… Linux Oracle
- CVE-2016-6197 MEDIUM · 5.5 fs/overlayfs/dir.c in de OverlayFS-bestandssysteemimplementatie in de Linux-kernel vóór 4.6 controleert het bovenste gebit niet goed voordat wordt overgegaan tot het ontkoppelen en hernoemen van systeemoproepverwerking,… Oracle Linux
- CVE-2016-6187 HIGH · 7.8 The apparmor_setprocattr function in security/apparmor/lsm.c in the Linux kernel before 4.6.5 does not validate the buffer size, which allows local users to gain privileges by… Linux
- CVE-2016-6162 HIGH · 7.8 net/core/skbuff.c in the Linux kernel 4.7-rc6 allows local users to cause a denial of service (panic) or possibly have unspecified other impact via certain IPv6… Linux
- CVE-2016-6156 MEDIUM · 5.1 Raceconditie in de functie ec_device_ioctl_xcmd in drivers/platform/chrome/cros_ec_dev.c in de Linux-kernel vóór 4.7 stelt lokale gebruikers in staat om een denial of service (toegang tot array… Linux
- CVE-2016-6136 MEDIUM · 4.7 Raceconditie in de audit_log_single_execve_arg-functie in kernel/auditsc.c in de Linux-kernel tot 4.7 stelt lokale gebruikers in staat om beoogde beperkingen van tekensets te omzeilen of systeemoproepaudits… Linux
- CVE-2016-5696 MEDIUM · 4.8 net/ipv4/tcp_input.c in the Linux kernel before 4.7 does not properly determine the rate of challenge ACK segments, which makes it easier for remote attackers to… Google Oracle Linux
- CVE-2016-5412 MEDIUM · 6.5 arch/powerpc/kvm/book3s_hv_rmhandlers.S in the Linux kernel through 4.7 on PowerPC platforms, when CONFIG_KVM_BOOK3S_64_HV is enabled, allows guest OS users to cause a denial of service (host… Linux
- CVE-2016-5400 MEDIUM · 4.3 Memory leak in the airspy_probe function in drivers/media/usb/airspy/airspy.c in the airspy USB driver in the Linux kernel before 4.7 allows local users to cause a… Linux
- CVE-2016-3841 HIGH · 7.3 The IPv6 stack in the Linux kernel before 4.3.3 mishandles options data, which allows local users to gain privileges or cause a denial of service… Google Linux
- CVE-2016-3070 HIGH · 7.8 The trace_writeback_dirty_page implementation in include/trace/events/writeback.h in the Linux kernel before 4.4 improperly interacts with mm/migrate.c, which allows local users to cause a denial of service… Debian Linux
- CVE-2016-3856 HIGH · 7.8 netd in Android before 2016-08-05 mishandles tethering and stdio streams, which allows attackers to cause a denial of service or possibly have unspecified other impact… Google
- CVE-2016-3855 HIGH · 7.8 drivers/thermal/supply_lm_core.c in the Qualcomm components in Android before 2016-08-05 does not validate a certain count parameter, which allows attackers to cause a denial of service… Google
- CVE-2016-3854 HIGH · 7.8 drivers/media/video/msm/msm_mctl_buf.c in the Qualcomm components in Android before 2016-08-05 does not validate the image mode, which allows attackers to cause a denial of service (out-of-bounds… Google
- CVE-2015-8944 MEDIUM · 5.5 The ioresources_init function in kernel/resource.c in the Linux kernel through 4.7, as used in Android before 2016-08-05 on Nexus 6 and 7 (2013) devices, uses… Google Linux
- CVE-2015-8943 HIGH · 7.8 drivers/video/msm/mdss/mdss_mdp_util.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not verify that a mapping exists before proceeding with an unmap… Google
- CVE-2015-8942 HIGH · 7.8 drivers/media/platform/msm/camera_v2/pproc/cpp/msm_cpp.c in the Qualcomm components in Android before 2016-08-05 on Nexus 6 devices does not validate the stream state, which allows attackers to gain privileges… Google
- CVE-2015-8941 HIGH · 7.8 drivers/media/platform/msm/camera_v2/isp/msm_isp_axi_util.c in the Qualcomm components in Android before 2016-08-05 on Nexus 6 and 7 (2013) devices does not properly validate array indexes, which allows attackers… Google
- CVE-2015-8940 HIGH · 7.8 Integer overflow in sound/soc/msm/qdsp6v2/q6lsm.c in the Qualcomm components in Android before 2016-08-05 on Nexus 6 devices allows attackers to gain privileges via a crafted application,… Google
- CVE-2015-8939 HIGH · 7.8 drivers/video/msm/mdp4_util.c in the Qualcomm components in Android before 2016-08-05 on Nexus 7 (2013) devices does not validate r stages, g stages, or b stages data,… Google
- CVE-2015-8938 HIGH · 7.8 The MSM camera driver in the Qualcomm components in Android before 2016-08-05 on Nexus 6 devices does not validate input parameters, which allows attackers to… Google
- CVE-2015-8937 HIGH · 7.8 drivers/char/diag/diagchar_core.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5, 6, and 7 (2013) devices mishandles a socket process, which allows attackers to… Google
- CVE-2014-9900 MEDIUM · 5.5 The ethtool_get_wol function in net/core/ethtool.c in the Linux kernel through 4.7, as used in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices, does… Google Linux
- CVE-2014-9899 MEDIUM · 5.5 drivers/usb/host/ehci-msm2.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices omits certain minimum calculations before copying data, which allows attackers to obtain… Google
- CVE-2014-9898 MEDIUM · 5.5 arch/arm/mach-msm/qdsp6v2/ultrasound/usf.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices does not properly validate input parameters, which allows attackers… Google
- CVE-2014-9897 MEDIUM · 5.5 sound/soc/msm/qdsp6v2/msm-lsm-client.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not validate certain user-space data, which allows attackers to obtain sensitive… Google
- CVE-2014-9896 MEDIUM · 5.5 drivers/char/adsprpc.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices does not properly validate parameters and return values, which… Google
- CVE-2014-9895 MEDIUM · 5.5 drivers/media/media-device.c in the Linux kernel before 3.11, as used in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices, does not properly initialize certain… Google Linux