CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2016-3745 CRITICAL · 9.8 Meerdere bufferoverlopen in mediaserver in Android 4.x vóór 4.4.4, 5.0.x vóór 5.0.2, 5.1.x vóór 5.1.1 en 6.x vóór 2016-07-01 stellen aanvallers in staat om privileges… Google
- CVE-2016-3744 HIGH · 7.5 Bufferoverloop in de create_pbuf-functie in btif/src/btif_hh.c in Bluetooth in Android 4.x vóór 4.4.4, 5.0.x vóór 5.0.2, 5.1.x vóór 5.1.1 en 6.x vóór 2016-07-01 stelt externe… Google
- CVE-2016-3743 CRITICAL · 9.8 decoder/ih264d_api.c in mediaserver in Android 6.x before 2016-07-01 does not initialize certain data structures, which allows remote attackers to execute arbitrary code or cause a… Google
- CVE-2016-3742 CRITICAL · 9.8 decoder/ih264d_process_intra_mb.c in mediaserver in Android 6.x before 2016-07-01 mishandles intra mode, which allows remote attackers to execute arbitrary code or cause a denial of service… Google
- CVE-2016-3741 CRITICAL · 9.8 The H.264 decoder in mediaserver in Android 6.x before 2016-07-01 does not initialize certain slice data, which allows remote attackers to execute arbitrary code or… Google
- CVE-2016-2508 HIGH · 7.8 media/libmediaplayerservice/nuplayer/GenericSource.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not validate certain track data, which… Google
- CVE-2016-2507 HIGH · 7.8 Integer overflow in codecs/on2/h264dec/source/h264bsd_storage.c in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows remote… Google
- CVE-2016-2506 CRITICAL · 9.8 DRMExtractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not validate a certain… Google
- CVE-2016-2505 HIGH · 7.8 mpeg2ts/ATSParser.cpp in libstagefright in mediaserver in Android 6.x before 2016-07-01 does not validate a certain section length, which allows remote attackers to execute arbitrary code… Google
- CVE-2016-2503 HIGH · 7.8 The Qualcomm GPU driver in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application, aka Android… Google
- CVE-2016-2502 HIGH · 7.8 drivers/usb/gadget/f_serial.c in the Qualcomm USB driver in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a large size… Google
- CVE-2016-2501 HIGH · 7.8 The Qualcomm camera driver in Android before 2016-07-05 on Nexus 5X, 6, 6P, and 7 (2013) devices allows attackers to gain privileges via a crafted… Google
- CVE-2016-2068 HIGH · 7.8 De MSM QDSP6-audiostuurprogramma (ook bekend als geluidsstuurprogramma) voor de Linux-kernel 3.x, zoals gebruikt in Qualcomm Innovation Center (QuIC) Android-bijdragen voor MSM-apparaten en andere producten, stelt… Google Linux
- CVE-2016-2067 HIGH · 7.8 drivers/gpu/msm/kgsl.c in the MSM graphics driver (aka GPU driver) for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM… Google Linux
- CVE-2015-8893 MEDIUM · 5.5 app/aboot/aboot.c in de Qualcomm bootloader in Android vóór 2016-07-05 op Nexus 5 en 7 (2013) apparaten kunnen aanvallers een denial of service (OS uitval of… Google
- CVE-2015-8892 HIGH · 7.8 platform/msm_shared/boot_verifier.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to bypass intended access restrictions via a digest… Google
- CVE-2015-8891 HIGH · 7.8 Multiple integer overflows in app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices allow attackers to bypass intended… Google
- CVE-2015-8890 HIGH · 7.8 platform/msm_shared/partition_parser.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices does not validate certain GUID Partition Table (GPT) data,… Google
- CVE-2015-8889 HIGH · 7.8 The aboot implementation in the Qualcomm components in Android before 2016-07-05 on Nexus 6P devices omits the recovery PIN feature, which has unspecified impact and… Google
- CVE-2015-8888 HIGH · 7.8 Integer overflow in app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allows attackers to bypass intended access restrictions via a… Google
- CVE-2014-9803 HIGH · 7.8 arch/arm64/include/asm/pgtable.h in the Linux kernel before 3.15-rc5-next-20140519, as used in Android before 2016-07-05 on Nexus 5X and 6P devices, mishandles execute-only pages, which allows attackers… Linux Google
- CVE-2014-9802 HIGH · 7.8 Multiple integer overflows in lib/libfdt/fdt.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices allow attackers to gain privileges… Google
- CVE-2014-9801 HIGH · 7.8 Multiple integer overflows in lib/libfdt/fdt_rw.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allow attackers to gain privileges via a crafted… Google
- CVE-2014-9800 HIGH · 7.8 Integer overflow in lib/heap/heap.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices allows attackers to gain privileges via… Google
- CVE-2014-9799 HIGH · 7.8 The makefile in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices omits the -fno-strict-overflow option to gcc, which might… Google
- CVE-2014-9798 MEDIUM · 5.5 platform/msm_shared/dev_tree.c in the Qualcomm bootloader in Android before 2016-07-05 on Nexus 5 devices does not check the relationship between tags addresses and aboot addresses, which… Google
- CVE-2014-9796 HIGH · 7.8 app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices does not validate the page size in the kernel… Google
- CVE-2014-9795 HIGH · 7.8 app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices does not properly check for an integer overflow, which allows attackers to… Google
- CVE-2014-9793 HIGH · 7.8 platform/msm_shared/mmc.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 (2013) devices mishandles the power-on write-protect feature, which allows attackers to gain privileges… Google
- CVE-2014-9792 HIGH · 7.8 arch/arm/mach-msm/ipc_router.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices uses an incorrect integer data type, which allows attackers to gain privileges… Google
- CVE-2014-9790 HIGH · 7.8 drivers/mmc/core/debugfs.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices does not validate pointers used in read and write… Google
- CVE-2014-9789 HIGH · 7.8 De (1) toewijzing en (2) gratis API's in arch/arm/mach-msm/qdsp6v2/msm_audio_ion.c in de Qualcomm-componenten in Android vóór 2016-07-05 op Nexus 5-apparaten valideren geen parameters, waardoor aanvallers privileges… Google
- CVE-2014-9788 HIGH · 7.8 Multiple buffer overflows in the voice drivers in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allow attackers to gain privileges via… Google
- CVE-2014-9787 HIGH · 7.8 Integer overflow in drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted… Google
- CVE-2014-9786 HIGH · 7.8 Heap-based buffer overflow in drivers/media/platform/msm/camera_v2/sensor/actuator/msm_actuator.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices allows attackers to gain privileges… Google
- CVE-2014-9785 HIGH · 7.8 drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 (2013) devices does not validate addresses before copying data, which allows attackers to… Google
- CVE-2014-9784 HIGH · 7.8 Multiple buffer overflows in drivers/char/diag/diag_debugfs.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices allow attackers to gain privileges… Google
- CVE-2014-9783 HIGH · 7.8 drivers/media/platform/msm/camera_v2/sensor/cci/msm_cci.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 (2013) devices does not validate certain values, which allows attackers to gain privileges… Google
- CVE-2014-9782 HIGH · 7.8 drivers/media/platform/msm/camera_v2/sensor/actuator/msm_actuator.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices does not validate direction and step parameters, which allows… Google
- CVE-2014-9781 HIGH · 7.8 Buffer overflow in drivers/video/fbcmap.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted… Google
- CVE-2014-9780 HIGH · 7.8 drivers/video/msm/mdss/mdp3_ctrl.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5, 5X, and 6P devices does not validate start and length values, which allows… Google
- CVE-2014-9779 HIGH · 7.8 arch/arm/mach-msm/qdsp6v2/msm_audio_ion.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allows attackers to obtain sensitive information from kernel memory via a crafted… Google
- CVE-2014-9778 HIGH · 7.8 The vid_dec_set_h264_mv_buffers function in drivers/video/msm/vidc/common/dec/vdec.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices does not validate the number… Google
- CVE-2014-9777 HIGH · 7.8 The vid_dec_set_meta_buffers function in drivers/video/msm/vidc/common/dec/vdec.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices does not validate the number… Google
- CVE-2013-7457 HIGH · 7.8 Unspecified vulnerability in the Qualcomm components in Android before 2016-07-05 allows attackers to gain privileges via a crafted application. Google
- CVE-2016-4463 HIGH · 7.5 Stack-based buffer overflow in Apache Xerces-C++ before 3.1.4 allows context-dependent attackers to cause a denial of service via a deeply nested DTD. Apache Debian
- CVE-2016-4324 HIGH · 7.8 Use-after-free kwetsbaarheid in LibreOffice vóór 5.1.4 stelt externe aanvallers in staat om willekeurige code uit te voeren via een vervaardigd RTF-bestand, gerelateerd aan stylesheets en… Debian Libreoffice Canonical
- CVE-2016-2945 HIGH · 7.5 The API Discovery implementation in IBM WebSphere Application Server (WAS) 8.5.5.8 through 8.5.5.9 Liberty before Liberty Fix Pack 16.0.0.2 allows remote authenticated users to gain… Ibm
- CVE-2016-2889 HIGH · 8.8 Cross-site request forgery (CSRF) vulnerability in the Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016, 6.0… Ibm
- CVE-2016-2888 MEDIUM · 5.4 Cross-site scripting (XSS) vulnerability in the Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016 and 6.x… Ibm