CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2016-2452 HIGH · 7.8 codecs/amrnb/dec/SoftAMR.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not validate buffer sizes,… Google
- CVE-2016-2451 HIGH · 7.8 codecs/on2/dec/SoftVPX.cpp in libstagefright in mediaserver in Android 4.x vóór 4.4.4, 5.0.x vóór 5.0.2, 5.1.x vóór 5.1.1 en 6.x vóór 2016-05-01 valideert de VPX-uitvoerbuffergrootte niet, waardoor… Google
- CVE-2016-2450 HIGH · 7.8 codecs/on2/enc/SoftVPXEncoder.cpp in libstagefright in mediaserver in Android 4.x vóór 4.4.4, 5.0.x vóór 5.0.2, 5.1.x vóór 5.1.1 en 6.x vóór 2016-05-01 valideert OMX-buffergroottes niet, waardoor aanvallers… Google
- CVE-2016-2449 HIGH · 7.8 services/camera/libcameraservice/device3/Camera3Device.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not validate template IDs, which allows… Google
- CVE-2016-2448 HIGH · 7.8 media/libmediaplayerservice/nuplayer/NuPlayerStreamListener.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not properly validate entry data structures,… Google
- CVE-2016-2446 HIGH · 7.0 The NVIDIA media driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 27441354. Google
- CVE-2016-2445 HIGH · 7.0 The NVIDIA media driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 27253079. Google
- CVE-2016-2444 HIGH · 7.0 The NVIDIA media driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 27208332. Google
- CVE-2016-2443 HIGH · 7.0 Met het Qualcomm MDP-stuurprogramma in Android vóór 2016-05-01 op Nexus 5- en Nexus 7 (2013) -apparaten kunnen aanvallers privileges krijgen via een vervaardigde applicatie, ook… Google
- CVE-2016-2442 HIGH · 7.0 The Qualcomm buspm driver in Android before 2016-05-01 on Nexus 5X, 6, and 6P devices allows attackers to gain privileges via a crafted application, aka… Google
- CVE-2016-2441 HIGH · 7.0 The Qualcomm buspm driver in Android before 2016-05-01 on Nexus 5X, 6, and 6P devices allows attackers to gain privileges via a crafted application, aka… Google
- CVE-2016-2440 HIGH · 7.8 libs/binder/IPCThreadState.cpp in Binder in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 mishandles object references, which allows attackers to… Google
- CVE-2016-2439 HIGH · 8.8 Buffer overflow in btif/src/btif_dm.c in Bluetooth in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 allows remote attackers to… Google
- CVE-2016-2437 HIGH · 7.8 The NVIDIA video driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 27436822. Google
- CVE-2016-2436 HIGH · 7.8 The NVIDIA video driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 27299111. Google
- CVE-2016-2435 HIGH · 7.8 The NVIDIA video driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 27297988. Google
- CVE-2016-2434 HIGH · 7.8 The NVIDIA video driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 27251090. Google
- CVE-2016-2432 HIGH · 7.8 The Qualcomm TrustZone component in Android before 2016-05-01 on Nexus 6 and Android One devices allows attackers to gain privileges via a crafted application, aka… Google
- CVE-2016-2431 HIGH · 7.8 The Qualcomm TrustZone component in Android before 2016-05-01 on Nexus 5, Nexus 6, Nexus 7 (2013), and Android One devices allows attackers to gain privileges… Google
- CVE-2016-2430 HIGH · 7.8 libbacktrace/Backtrace.cpp in debuggerd in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 allows attackers to gain privileges via an… Google
- CVE-2016-2429 CRITICAL · 9.8 libFLAC/stream_decoder.c in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not prevent free operations on uninitialized… Google
- CVE-2016-2428 CRITICAL · 9.8 libAACdec/src/aacdec_drc.cpp in mediaserver in Android 4.x vóór 4.4.4, 5.0.x vóór 5.0.2, 5.1.x vóór 5.1.1 en 6.x vóór 2016-05-01 beperkt het aantal threads niet goed, waardoor… Google
- CVE-2016-2060 HIGH · 7.8 server/TetherController.cpp in the tethering controller in netd, as distributed with Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not properly… Google
- CVE-2015-0571 HIGH · 7.8 The WLAN (aka Wi-Fi) driver for the Linux kernel 3.x and 4.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and… Linux
- CVE-2015-0570 HIGH · 7.8 Stack-based buffer overflow in the SET_WPS_IE IOCTL implementation in wlan_hdd_hostapd.c in the WLAN (aka Wi-Fi) driver for the Linux kernel 3.x and 4.x, as used… Linux
- CVE-2015-0569 HIGH · 7.8 Op heap gebaseerde bufferoverloop in de private draadloze extensies IOCTL-implementatie in wlan_hdd_wext.c in het WLAN-stuurprogramma (ook bekend als Wi-Fi) voor de Linux-kernel 3.x en 4.x,… Linux
- CVE-2016-2353 HIGH · 7.8 The Accellion File Transfer Appliance (FTA) before FTA_9_12_40 allows local users to add an SSH key to an arbitrary group, and consequently gain privileges, via… Accellion
- CVE-2016-2352 HIGH · 8.8 The Accellion File Transfer Appliance (FTA) before FTA_9_12_40 allows remote authenticated users to execute arbitrary commands by leveraging the YUM_CLIENT restricted-user role. Accellion
- CVE-2016-2351 CRITICAL · 9.8 SQL injection vulnerability in home/seos/courier/security_key2.api on the Accellion File Transfer Appliance (FTA) before FTA_9_12_40 allows remote attackers to execute arbitrary SQL commands via the client_id… Accellion
- CVE-2016-2350 MEDIUM · 6.1 Meerdere cross-site scripting (XSS) kwetsbaarheden op het Accellion File Transfer Appliance (FTA) vóór FTA_9_12_40 stellen externe aanvallers in staat om willekeurig webscript of HTML te… Accellion
- CVE-2015-6552 CRITICAL · 9.8 The management-services protocol implementation in Veritas NetBackup 7.x through 7.5.0.7, 7.6.0.x through 7.6.0.4, 7.6.1.x through 7.6.1.2, and 7.7.x before 7.7.2 and NetBackup Appliance through 2.5.4,… Veritas
- CVE-2015-6551 MEDIUM · 5.9 Veritas NetBackup 7.x through 7.5.0.7 and 7.6.0.x through 7.6.0.4 and NetBackup Appliance through 2.5.4 and 2.6.0.x through 2.6.0.4 do not use TLS for administration-console traffic… Veritas
- CVE-2015-6550 CRITICAL · 9.8 bpcd in Veritas NetBackup 7.x through 7.5.0.7, 7.6.0.x through 7.6.0.4, 7.6.1.x through 7.6.1.2, and 7.7.x before 7.7.2 and NetBackup Appliance through 2.5.4, 2.6.0.x through 2.6.0.4,… Veritas
- CVE-2016-2014 HIGH · 8.1 HPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to modify data or cause a denial of… Hp
- CVE-2016-2013 MEDIUM · 6.5 HPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to obtain sensitive information via unspecified vectors. Hp
- CVE-2016-2012 MEDIUM · 6.5 HPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote attackers to bypass authentication via unspecified vectors. Hp
- CVE-2016-2011 MEDIUM · 5.4 Cross-site scripting (XSS) vulnerability in HPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to inject arbitrary… Hp
- CVE-2016-2010 MEDIUM · 5.4 Cross-site scripting (XSS) vulnerability in HPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to inject arbitrary… Hp
- CVE-2016-2009 HIGH · 8.8 HPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to execute arbitrary commands via a crafted serialized… Hp
- CVE-2016-1541 HIGH · 8.8 Heap-based buffer overflow in the zip_read_mac_metadata function in archive_read_support_format_zip.c in libarchive before 3.2.0 allows remote attackers to execute arbitrary code via crafted entry-size values in… Libarchive
- CVE-2016-0902 MEDIUM · 5.3 CRLF injection vulnerability in EMC RSA Authentication Manager before 8.1 SP1 P14 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting… Emc
- CVE-2016-0901 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in EMC RSA Authentication Manager before 8.1 SP1 P14 allows remote attackers to inject arbitrary web script or HTML via unspecified… Emc
- CVE-2016-0900 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in EMC RSA Authentication Manager before 8.1 SP1 P14 allows remote attackers to inject arbitrary web script or HTML via unspecified… Emc
- CVE-2013-7455 CRITICAL · 9.8 Double free vulnerability in the DefaultICCintents function in cmscnvrt.c in liblcms2 in Little CMS 2.x before 2.6 allows remote attackers to execute arbitrary code via… Littlecms
- CVE-2016-4422 CRITICAL · 9.8 The pam_sm_authenticate function in pam_sshauth.c in libpam-sshauth might allow context-dependent attackers to bypass authentication or gain privileges via a system user account. Libpam-sshauth Project Debian
- CVE-2016-4074 HIGH · 7.5 Met de functie jv_dump_term in jq 1.5 kunnen externe aanvallers een denial of service (stapelverbruik en applicatiecrash) veroorzaken via een vervaardigd JSON-bestand. Dit probleem is… Jq Project
- CVE-2016-2094 HIGH · 7.5 The HTTPS NIO Connector allows remote attackers to cause a denial of service (thread consumption) by opening a socket and not sending an SSL handshake,… Jboss
- CVE-2015-8868 HIGH · 7.8 Heap-based buffer overflow in the ExponentialFunction::ExponentialFunction function in Poppler before 0.40.0 allows remote attackers to cause a denial of service (memory corruption and crash) or… Fedoraproject Debian Canonical Freedesktop
- CVE-2015-8863 CRITICAL · 9.8 Off-by-one error in the tokenadd function in jv_parse.c in jq allows remote attackers to cause a denial of service (crash) via a long JSON-encoded number,… Opensuse Jq Project
- CVE-2015-0858 LOW · 3.3 Cool Projects TarDiff allows local users to write to arbitrary files via a symlink attack on a pathname in a /tmp/tardiff-$$ temporary directory. Debian Tardiff Project