CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2016-4073 CRITICAL · 9.8 Multiple integer overflows in the mbfl_strcut function in ext/mbstring/libmbfl/mbfl/mbfilter.c in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allow remote attackers to cause… Php Apple
- CVE-2016-4072 CRITICAL · 9.8 The Phar extension in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allows remote attackers to execute arbitrary code via a crafted filename,… Php Apple
- CVE-2016-4071 CRITICAL · 9.8 Format string vulnerability in the php_snmp_error function in ext/snmp/snmp.c in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allows remote attackers to execute… Php Apple
- CVE-2016-4070 HIGH · 7.5 Integer overflow in the php_raw_url_encode function in ext/standard/url.c in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allows remote attackers to cause a… Php
- CVE-2016-1859 HIGH · 8.8 Met de WebKit Canvas-implementatie in Apple iOS vóór 9.3.2, Safari vóór 9.1.1 en tvOS vóór 9.2.1 kunnen aanvallers op afstand willekeurige code uitvoeren of een… Apple Webkitgtk
- CVE-2016-1858 MEDIUM · 6.5 WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, improperly tracks taint attributes, which allows remote attackers to obtain… Apple Webkitgtk
- CVE-2016-1857 HIGH · 8.8 WebKit, zoals gebruikt in Apple iOS vóór 9.3.2, Safari vóór 9.1.1 en tvOS vóór 9.2.1, stelt externe aanvallers in staat om willekeurige code uit te… Apple Webkitgtk
- CVE-2016-1856 HIGH · 8.8 WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows remote attackers to execute arbitrary code or cause a… Apple Webkitgtk
- CVE-2016-1855 HIGH · 8.8 WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows remote attackers to execute arbitrary code or cause a… Apple
- CVE-2016-1854 HIGH · 8.8 WebKit, zoals gebruikt in Apple iOS vóór 9.3.2, Safari vóór 9.1.1 en tvOS vóór 9.2.1, stelt externe aanvallers in staat om willekeurige code uit te… Apple Webkitgtk
- CVE-2016-1853 HIGH · 7.5 Tcl in Apple OS X before 10.11.5 allows remote attackers to obtain sensitive information by leveraging SSLv2 support. Apple
- CVE-2016-1852 LOW · 2.4 Siri in Apple iOS before 9.3.2 does not block data detectors within results in the lock-screen state, which allows physically proximate attackers to obtain sensitive… Apple
- CVE-2016-1851 MEDIUM · 4.6 The Screen Lock feature in Apple OS X before 10.11.5 mishandles password profiles, which allows physically proximate attackers to reset expired passwords in the lock-screen… Apple
- CVE-2016-1850 HIGH · 7.8 Met SceneKit in Apple OS X vóór 10.11.5 kunnen aanvallers op afstand willekeurige code uitvoeren of een denial of service (geheugenbeschadiging) veroorzaken via een vervaardigd… Apple
- CVE-2016-1849 LOW · 3.3 The "Clear History and Website Data" feature in Apple Safari before 9.1.1, as used in iOS before 9.3.2 and other products, mishandles the deletion of… Apple
- CVE-2016-1848 HIGH · 7.8 QuickTime in Apple OS X before 10.11.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted… Apple
- CVE-2016-1847 HIGH · 8.8 OpenGL, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary… Apple
- CVE-2016-1846 HIGH · 7.8 The nvCommandQueue::GetHandleIndex method in the NVIDIA Graphics Drivers subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context… Apple
- CVE-2016-1844 MEDIUM · 5.3 The Messages component in Apple OS X before 10.11.5 mishandles roster changes, which allows remote attackers to modify contact lists via unspecified vectors. Apple
- CVE-2016-1843 HIGH · 7.5 The Messages component in Apple OS X before 10.11.5 mishandles filename encoding, which allows remote attackers to obtain sensitive information via unspecified vectors. Apple
- CVE-2016-1842 HIGH · 7.5 MapKit in Apple iOS before 9.3.2, OS X before 10.11.5, and watchOS before 2.2.1 does not use HTTPS for shared links, which allows remote attackers… Apple
- CVE-2016-1841 HIGH · 8.8 libxslt, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary… Apple
- CVE-2016-1840 HIGH · 7.8 Heap-based buffer overflow in the xmlFAParsePosCharGroup function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1,… Debian Apple Canonical Redhat
- CVE-2016-1839 MEDIUM · 5.5 The xmlDictAddString function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1,… Apple Canonical Debian Redhat
- CVE-2016-1838 MEDIUM · 5.5 The xmlPArserPrintFileContextInternal function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1,… Canonical Debian Apple Redhat
- CVE-2016-1837 MEDIUM · 5.5 Multiple use-after-free vulnerabilities in the (1) htmlPArsePubidLiteral and (2) htmlParseSystemiteral functions in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before… Canonical Debian Apple Redhat
- CVE-2016-1836 MEDIUM · 5.5 Use-after-free vulnerability in the xmlDictComputeFastKey function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and… Canonical Debian Apple Redhat
- CVE-2016-1835 HIGH · 8.8 Use-after-free kwetsbaarheid in de xmlSAX2AttributeNs-functie in libxml2 vóór 2.9.4, zoals gebruikt in Apple iOS vóór 9.3.2 en OS X vóór 10.11.5, stelt externe aanvallers in… Canonical Apple Debian
- CVE-2016-1834 HIGH · 7.8 Heap-based buffer overflow in the xmlStrncat function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1,… Canonical Apple Debian Redhat
- CVE-2016-1833 MEDIUM · 5.5 The htmlCurrentChar function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1,… Apple Debian Canonical Redhat
- CVE-2016-1832 HIGH · 7.8 libc in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows local users to gain privileges or cause… Apple
- CVE-2016-1831 HIGH · 7.8 The kernel in Apple iOS before 9.3.2 and OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a… Apple
- CVE-2016-1830 HIGH · 7.8 The kernel in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in… Apple
- CVE-2016-1829 HIGH · 7.8 The kernel in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in… Apple
- CVE-2016-1828 HIGH · 7.8 The kernel in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in… Apple
- CVE-2016-1827 HIGH · 7.8 The kernel in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in… Apple
- CVE-2016-1826 HIGH · 7.8 Integer overflow in the dtrace implementation in the kernel in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context… Apple
- CVE-2016-1825 HIGH · 7.8 IOHIDFamily in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption)… Apple
- CVE-2016-1824 HIGH · 7.8 IOHIDFamily in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a… Apple
- CVE-2016-1823 HIGH · 7.8 The IOHIDDevice::handleReportWithTime function in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code… Apple
- CVE-2016-1822 HIGH · 7.8 IOFireWireFamily in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption)… Apple
- CVE-2016-1821 HIGH · 7.8 IOAudioFamily in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer… Apple
- CVE-2016-1820 HIGH · 7.8 Buffer overflow in IOAudioFamily in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context via a crafted app. Apple
- CVE-2016-1819 HIGH · 7.8 Use-after-free vulnerability in the IOAccelContext2::clientMemoryForType method in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to… Apple
- CVE-2016-1818 HIGH · 7.8 IOAcceleratorFamily in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a… Apple
- CVE-2016-1817 HIGH · 7.8 Met IOAcceleratorFamily in Apple iOS vóór 9.3.2, OS X vóór 10.11.5, tvOS vóór 9.2.1 en watchOS vóór 2.2.1 kunnen aanvallers willekeurige code uitvoeren in een… Apple
- CVE-2016-1816 HIGH · 7.8 Met IOAcceleratorFamily in Apple OS X vóór 10.11.5 kunnen aanvallers willekeurige code uitvoeren in een bevoorrechte context of een denial of service (NULL pointer dereference)… Apple
- CVE-2016-1815 HIGH · 7.8 IOAcceleratorFamily in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption)… Apple
- CVE-2016-1814 MEDIUM · 5.5 IOAcceleratorFamily in Apple iOS before 9.3.2, OS X before 10.11.5, and tvOS before 9.2.1 allows attackers to cause a denial of service (NULL pointer dereference)… Apple
- CVE-2016-1813 HIGH · 7.8 The IOAccelSharedUserClient2::page_off_resource method in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code… Apple