CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2016-2834 HIGH · 8.8 Mozilla Network Security Services (NSS) before 3.23, as used in Mozilla Firefox before 47.0, allows remote attackers to cause a denial of service (memory corruption… Canonical Opensuse Mozilla Novell
- CVE-2016-2833 MEDIUM · 6.1 Mozilla Firefox before 47.0 ignores Content Security Policy (CSP) directives for cross-domain Java applets, which makes it easier for remote attackers to conduct cross-site scripting… Opensuse Mozilla Canonical
- CVE-2016-2832 MEDIUM · 4.3 Mozilla Firefox before 47.0 allows remote attackers to discover the list of disabled plugins via a fingerprinting attack involving Cascading Style Sheets (CSS) pseudo-classes. Canonical Mozilla Opensuse
- CVE-2016-2831 HIGH · 8.8 Mozilla Firefox vóór 47.0 en Firefox ESR 45.x vóór 45.2 zorgen er niet voor dat de gebruiker de instellingen voor volledig scherm en pointerlock goedkeurt,… Canonical Mozilla Debian Opensuse
- CVE-2016-2829 MEDIUM · 6.5 Mozilla Firefox before 47.0 allows remote attackers to spoof permission notifications via a crafted web site that rapidly triggers permission requests, as demonstrated by the… Canonical Mozilla Opensuse
- CVE-2016-2828 HIGH · 8.8 Use-after-free vulnerability in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allows remote attackers to execute arbitrary code via WebGL content that triggers… Canonical Opensuse Mozilla Debian
- CVE-2016-2826 HIGH · 7.8 The maintenance service in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 on Windows does not prevent MAR extracted-file modification during updater execution,… Microsoft Mozilla
- CVE-2016-2825 MEDIUM · 6.5 Mozilla Firefox before 47.0 allows remote attackers to bypass the Same Origin Policy and modify the location.host property via an invalid data: URL. Canonical Opensuse Mozilla
- CVE-2016-2824 HIGH · 8.8 The TSymbolTableLevel class in ANGLE, as used in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 on Windows, allows remote attackers to cause… Microsoft Mozilla Opensuse
- CVE-2016-2822 MEDIUM · 6.5 Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to spoof the address bar via a SELECT element with a persistent… Debian Mozilla Canonical Opensuse
- CVE-2016-2821 HIGH · 7.5 Use-after-free vulnerability in the mozilla::dom::Element class in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2, when contenteditable mode is enabled, allows remote attackers… Mozilla Debian Opensuse Canonical
- CVE-2016-2819 HIGH · 8.8 Een bufferoverloop op de heap in Mozilla Firefox vóór versie 47.0 en Firefox ESR 45.x vóór versie 45.2 stelt externe aanvallers in staat om willekeurige… Opensuse Mozilla Debian Canonical
- CVE-2016-2818 HIGH · 8.8 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to cause a denial… Mozilla Debian Redhat Novell
- CVE-2016-2815 HIGH · 8.8 Meerdere niet-gespecificeerde kwetsbaarheden in de browser-engine in Mozilla Firefox vóór 47.0 stellen externe aanvallers in staat om een denial of service (geheugenbeschadiging en applicatiecrash) te… Mozilla Canonical Novell Opensuse
- CVE-2016-2500 MEDIUM · 5.5 Activity Manager in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not properly terminate process groups, which allows attackers to obtain… Google
- CVE-2016-2499 MEDIUM · 5.5 AudioSource.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not initialize certain data,… Google
- CVE-2016-2498 MEDIUM · 5.5 The Qualcomm Wi-Fi driver in Android before 2016-06-01 on Nexus 7 (2013) devices allows attackers to bypass intended data-access restrictions via a crafted application, aka… Google
- CVE-2016-2496 CRITICAL · 9.8 De Framework UI permission-dialog implementatie in Android 6.x vóór 2016-06-01 stelt aanvallers in staat om tapjacking-aanvallen uit te voeren en toegang te krijgen tot willekeurige… Google
- CVE-2016-2495 MEDIUM · 5.5 SampleTable.cpp in libstagefright in mediaserver in Android 4.x vóór 4.4.4, 5.0.x vóór 5.0.2, 5.1.x vóór 5.1.1 en 6.x vóór 2016-06-01 stelt aanvallers op afstand in… Google
- CVE-2016-2494 HIGH · 7.8 Off-by-one error in sdcard/sdcard.c in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 allows attackers to gain privileges via… Google
- CVE-2016-2493 HIGH · 7.8 The Broadcom Wi-Fi driver in Android before 2016-06-01 on Nexus 5, Nexus 6, Nexus 6P, Nexus 7 (2013), Nexus Player, and Pixel C devices allows… Google
- CVE-2016-2492 HIGH · 7.8 De MediaTek-stuurprogramma voor energiebeheer in Android vóór 2016-06-01 op Android One-apparaten stelt aanvallers in staat om privileges te verkrijgen via een vervaardigde applicatie, ook bekend… Google
- CVE-2016-2491 HIGH · 7.8 The NVIDIA camera driver in Android before 2016-06-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 27556408. Google
- CVE-2016-2490 HIGH · 7.8 The NVIDIA camera driver in Android before 2016-06-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 27533373. Google
- CVE-2016-2489 HIGH · 7.8 The Qualcomm video driver in Android before 2016-06-01 on Nexus 5, 5X, 6, and 6P devices allows attackers to gain privileges via a crafted application,… Google
- CVE-2016-2488 HIGH · 7.8 The Qualcomm camera driver in Android before 2016-06-01 on Nexus 5, 5X, 6, 6P, and 7 (2013) devices allows attackers to gain privileges via a… Google
- CVE-2016-2487 HIGH · 7.8 libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 allows attackers to gain privileges via a… Google
- CVE-2016-2486 HIGH · 7.8 Het bestand mp3dec/SoftMP3.cpp in libstagefright in mediaserver in Android 4.x vóór 4.4.4, 5.0.x vóór 5.0.2, 5.1.x vóór 5.1.1 en 6.x vóór 1 juni 2016 valideert… Google
- CVE-2016-2485 HIGH · 7.8 libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not validate OMX buffer sizes for… Google
- CVE-2016-2484 HIGH · 7.8 libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not validate OMX buffer sizes for… Google
- CVE-2016-2483 HIGH · 7.8 De mm-video-v4l2 venc-component in mediaserver in Android 4.x vóór 4.4.4, 5.0.x vóór 5.0.2, 5.1.x vóór 5.1.1 en 6.x vóór 2016-06-01 misbruikt een buffertelling, waardoor aanvallers… Google
- CVE-2016-2482 HIGH · 7.8 The mm-video-v4l2 vdec component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishandles a buffer count,… Google
- CVE-2016-2481 HIGH · 7.8 The mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishandles a buffer count,… Google
- CVE-2016-2480 HIGH · 7.8 De vidc-component mm-video-v4l2 in mediaserver in Android 4.x vóór 4.4.4, 5.0.x vóór 5.0.2, 5.1.x vóór 5.1.1 en 6.x vóór 2016-06-01 valideert bepaalde OMX-parametergegevensstructuren niet, waardoor… Google
- CVE-2016-2479 HIGH · 7.8 The mm-video-v4l2 vdec component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishandles a buffer count,… Google
- CVE-2016-2478 HIGH · 7.8 mm-video-v4l2/vidc/vdec/src/omx_vdec_msm8974.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishandles pointers, which allows attackers to gain… Google
- CVE-2016-2477 HIGH · 7.8 mm-video-v4l2/vidc/vdec/src/omx_vdec_msm8974.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishandles pointers, which allows attackers to gain… Google
- CVE-2016-2476 HIGH · 7.8 mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not validate OMX buffer sizes, which allows attackers… Google
- CVE-2016-2475 HIGH · 7.8 The Broadcom Wi-Fi driver in Android before 2016-06-01 on Nexus 5, Nexus 6, Nexus 6P, Nexus 7 (2013), Nexus 9, Nexus Player, and Pixel C… Google
- CVE-2016-2474 HIGH · 7.8 The Qualcomm Wi-Fi driver in Android before 2016-06-01 on Nexus 5X devices allows attackers to gain privileges via a crafted application, aka internal bug 27424603. Google
- CVE-2016-2473 CRITICAL · 9.8 The Qualcomm Wi-Fi driver in Android before 2016-06-01 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application, aka internal bug… Google
- CVE-2016-2472 HIGH · 7.8 The Qualcomm Wi-Fi driver in Android before 2016-06-01 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application, aka internal bug… Google
- CVE-2016-2471 HIGH · 7.8 Met het Qualcomm Wi-Fi-stuurprogramma in Android vóór 2016-06-01 op Nexus 7 (2013) -apparaten kunnen aanvallers privileges krijgen via een vervaardigde applicatie, ook bekend als interne… Google
- CVE-2016-2470 HIGH · 7.8 Met het Qualcomm Wi-Fi-stuurprogramma in Android vóór 2016-06-01 op Nexus 7 (2013) -apparaten kunnen aanvallers privileges krijgen via een vervaardigde applicatie, ook bekend als interne… Google
- CVE-2016-2469 HIGH · 7.8 Met het Qualcomm-geluidsstuurprogramma in Android vóór 2016-06-01 op Nexus 5-, 6- en 6P-apparaten kunnen aanvallers privileges krijgen via een vervaardigde applicatie, ook bekend als interne… Google
- CVE-2016-2468 HIGH · 7.8 The Qualcomm GPU driver in Android before 2016-06-01 on Nexus 5, 5X, 6, 6P, and 7 devices allows attackers to gain privileges via a crafted… Google
- CVE-2016-2467 HIGH · 7.8 The Qualcomm sound driver in Android before 2016-06-01 on Nexus 5 devices allows attackers to gain privileges via a crafted application, aka internal bug 28029010. Google
- CVE-2016-2466 HIGH · 7.8 Met het Qualcomm-geluidsstuurprogramma in Android vóór 2016-06-01 op Nexus 6-apparaten kunnen aanvallers privileges krijgen via een vervaardigde applicatie, ook bekend als interne bug 27947307. Google
- CVE-2016-2465 HIGH · 7.8 The Qualcomm video driver in Android before 2016-06-01 on Nexus 5, 5X, 6, and 6P devices allows attackers to gain privileges via a crafted application,… Google
- CVE-2016-2464 HIGH · 7.8 libvpx in libwebm in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 allows remote attackers to execute… Google