CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2016-2847 MEDIUM · 6.2 fs/pipe.c in the Linux kernel before 4.5 does not limit the amount of unread data in pipes, which allows local users to cause a denial… Linux Novell
- CVE-2016-2782 MEDIUM · 4.6 The treo_attach function in drivers/usb/serial/visor.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and… Linux Suse
- CVE-2016-2550 MEDIUM · 5.5 The Linux kernel before 4.5 allows local users to bypass file-descriptor limits and cause a denial of service (memory consumption) by leveraging incorrect tracking of… Linux
- CVE-2016-2549 MEDIUM · 6.2 sound/core/hrtimer.c in the Linux kernel before 4.4.1 does not prevent recursive callback access, which allows local users to cause a denial of service (deadlock) via… Linux
- CVE-2016-2548 MEDIUM · 6.2 sound/core/timer.c in the Linux kernel before 4.4.1 retains certain linked lists after a close or stop action, which allows local users to cause a denial… Linux
- CVE-2016-2547 MEDIUM · 5.1 sound/core/timer.c in de Linux-kernel vóór 4.4.1 maakt gebruik van een vergrendelingsbenadering die geen rekening houdt met slave-timerinstanties, waardoor lokale gebruikers een denial of service (raceconditie,… Linux
- CVE-2016-2546 MEDIUM · 5.1 sound/core/timer.c in the Linux kernel before 4.4.1 uses an incorrect type of mutex, which allows local users to cause a denial of service (race condition,… Linux
- CVE-2016-2545 MEDIUM · 5.1 The snd_timer_interrupt function in sound/core/timer.c in the Linux kernel before 4.4.1 does not properly maintain a certain linked list, which allows local users to cause… Linux
- CVE-2016-2544 MEDIUM · 5.1 Race condition in the queue_delete function in sound/core/seq/seq_queue.c in the Linux kernel before 4.4.1 allows local users to cause a denial of service (use-after-free and… Linux
- CVE-2016-2543 MEDIUM · 6.2 The snd_seq_ioctl_remove_events function in sound/core/seq/seq_clientmgr.c in the Linux kernel before 4.4.1 does not verify FIFO assignment before proceeding with FIFO clearing, which allows local users… Linux
- CVE-2016-2384 MEDIUM · 4.6 Double free vulnerability in the snd_usbmidi_create function in sound/usb/midi.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service… Linux Novell
- CVE-2016-2383 MEDIUM · 5.5 The adjust_branches function in kernel/bpf/verifier.c in the Linux kernel before 4.5 does not consider the delta in the backward-jump case, which allows local users to… Linux Canonical Opensuse
- CVE-2016-2184 MEDIUM · 4.6 The create_fixed_stream_quirk function in sound/usb/quirks.c in the snd-usb-audio driver in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service… Linux Canonical Novell
- CVE-2016-2143 HIGH · 7.8 The fork implementation in the Linux kernel before 4.5 on s390 platforms mishandles the case of four page-table levels, which allows local users to cause… Linux Debian Redhat Oracle
- CVE-2016-2085 MEDIUM · 5.5 De functie evm_verify_hmac in security/integrity/evm/evm_main.c in de Linux-kernel voor 4.5 kopieert gegevens niet goed, waardoor het voor lokale gebruikers gemakkelijker wordt om Mac-waarden te vervalsen… Linux
- CVE-2016-2069 HIGH · 7.4 Race condition in arch/x86/mm/tlb.c in the Linux kernel before 4.4.1 allows local users to gain privileges by triggering access to a paging structure by a… Canonical Linux
- CVE-2016-0774 MEDIUM · 6.8 The (1) pipe_read and (2) pipe_write implementations in fs/pipe.c in a certain Linux kernel backport in the linux package before 3.2.73-2+deb7u3 on Debian wheezy and… Linux Google
- CVE-2015-8845 MEDIUM · 5.5 The tm_reclaim_thread function in arch/powerpc/kernel/process.c in the Linux kernel before 4.4.1 on powerpc platforms does not ensure that TM suspend mode exists before proceeding with… Linux Suse Novell
- CVE-2015-8844 MEDIUM · 5.5 The signal implementation in the Linux kernel before 4.3.5 on powerpc platforms does not check for an MSR with both the S and T bits… Linux
- CVE-2015-8816 MEDIUM · 6.8 De hub_activate-functie in drivers/usb/core/hub.c in de Linux-kernel vóór 4.3.5 onderhoudt niet correct een gegevensstructuur voor de hub-interface, waardoor fysiek nabije aanvallers een denial of service… Novell Linux Suse
- CVE-2015-8812 CRITICAL · 9.8 drivers/infiniband/hw/cxgb3/iwch_cm.c in the Linux kernel before 4.5 does not properly identify error conditions, which allows remote attackers to execute arbitrary code or cause a denial… Novell Linux Canonical
- CVE-2015-7515 MEDIUM · 4.6 The aiptek_probe function in drivers/input/tablet/aiptek.c in the Linux kernel before 4.4 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and… Linux
- CVE-2015-1339 MEDIUM · 6.2 Memory leak in the cuse_channel_release function in fs/fuse/cuse.c in the Linux kernel before 4.4 allows local users to cause a denial of service (memory consumption)… Linux Novell
- CVE-2016-4002 CRITICAL · 9.8 Buffer overflow in the mipsnet_receive function in hw/net/mipsnet.c in QEMU, when the guest NIC is configured to accept large packets, allows remote attackers to cause… Qemu Fedoraproject Canonical Debian
- CVE-2016-3082 CRITICAL · 9.8 XSLTResult in Apache Struts 2.x voor 2.3.20.2, 2.3.24.x voor 2.3.24.2 en 2.3.28.x voor 2.3.28.1 stelt externe aanvallers in staat om willekeurige code uit te voeren… Apache
- CVE-2016-3074 CRITICAL · 9.8 Integer-ondertekeningsfout in GD Graphics Library 2.1.1 (ook bekend als libgd of libgd2) stelt externe aanvallers in staat om een denial of service (crash) te veroorzaken… Libgd Debian Fedoraproject Canonical
- CVE-2016-1601 CRITICAL · 9.8 yast2-users before 3.1.47, as used in SUSE Linux Enterprise 12 SP1, does not properly set empty password fields in /etc/shadow during an AutoYaST installation when… Suse
- CVE-2016-2346 HIGH · 8.1 Allround Automations PL/SQL Developer 11 before 11.0.6 relies on unverified HTTP data for updates, which allows man-in-the-middle attackers to execute arbitrary code by modifying fields… Allroundautomations
- CVE-2016-2333 HIGH · 7.5 SysLINK SL-1000 Machine-to-Machine (M2M) Modular Gateway devices with firmware before 01A.8 use the same hardcoded encryption key across different customers' installations, which allows attackers to… Systech
- CVE-2016-2332 HIGH · 8.8 flu.cgi in the web interface on SysLINK SL-1000 Machine-to-Machine (M2M) Modular Gateway devices with firmware before 01A.8 allows remote authenticated users to execute arbitrary commands… Systech
- CVE-2016-2331 CRITICAL · 9.8 The web interface on SysLINK SL-1000 Machine-to-Machine (M2M) Modular Gateway devices with firmware before 01A.8 has a default password, which makes it easier for remote… Systech
- CVE-2016-1202 HIGH · 7.8 Untrusted search path vulnerability in Atom Electron before 0.33.5 allows local users to gain privileges via a Trojan horse Node.js module in a parent directory… Atom
- CVE-2016-1185 LOW · 2.5 The Cybozu kintone mobile application 1.x before 1.0.6 for Android allows attackers to discover an authentication token via a crafted application. Cybozu
- CVE-2016-4054 HIGH · 8.1 Buffer overflow in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allows remote attackers to execute arbitrary code via crafted Edge Side Includes (ESI) responses. Canonical Squid-cache Oracle
- CVE-2016-4053 LOW · 3.7 Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote attackers to obtain sensitive stack layout information via crafted Edge Side Includes (ESI) responses, related… Squid-cache Oracle Canonical
- CVE-2016-4052 HIGH · 8.1 Multiple stack-based buffer overflows in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote HTTP servers to cause a denial of service or execute… Canonical Squid-cache
- CVE-2016-4051 HIGH · 8.8 Een bufferoverflow in cachemgr.cgi in Squid 2.x, 3.x vóór 3.5.17 en 4.x vóór 4.0.9 kan aanvallers op afstand in staat stellen een denial-of-service te veroorzaken… Canonical Oracle Squid-cache
- CVE-2015-8852 HIGH · 7.5 Varnish 3.x before 3.0.7, when used in certain stacked installations, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via… Varnish Cache Project Debian
- CVE-2016-4085 MEDIUM · 5.9 Stack-based buffer overflow in epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 1.12.x before 1.12.11 allows remote attackers to cause a denial of service (application crash)… Oracle Debian Wireshark
- CVE-2016-4084 MEDIUM · 5.9 Integer signedness error in epan/dissectors/packet-mswsp.c in the MS-WSP dissector in Wireshark 2.0.x before 2.0.3 allows remote attackers to cause a denial of service (integer overflow… Wireshark
- CVE-2016-4083 MEDIUM · 5.9 epan/dissectors/packet-mswsp.c in the MS-WSP dissector in Wireshark 2.0.x before 2.0.3 does not ensure that data is available before array allocation, which allows remote attackers to… Wireshark
- CVE-2016-4082 MEDIUM · 5.9 epan/dissectors/packet-gsm_cbch.c in the GSM CBCH dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 uses the wrong variable to index an array, which allows… Wireshark Debian Oracle
- CVE-2016-4081 MEDIUM · 5.9 epan/dissectors/packet-iax2.c in the IAX2 dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 uses an incorrect integer data type, which allows remote attackers to… Wireshark
- CVE-2016-4080 MEDIUM · 5.9 epan/dissectors/packet-pktc.c in the PKTC dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 misparses timestamp fields, which allows remote attackers to cause a denial… Wireshark
- CVE-2016-4079 MEDIUM · 5.9 epan/dissectors/packet-pktc.c in the PKTC dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 does not verify BER identifiers, which allows remote attackers to cause… Debian Oracle Wireshark
- CVE-2016-4078 MEDIUM · 5.9 The IEEE 802.11 dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 does not properly restrict element lists, which allows remote attackers to cause… Wireshark
- CVE-2016-4077 MEDIUM · 5.9 epan/reassemble.c in TShark in Wireshark 2.0.x before 2.0.3 relies on incorrect special-case handling of truncated Tvb data structures, which allows remote attackers to cause a… Wireshark
- CVE-2016-4076 MEDIUM · 5.9 epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 2.0.x before 2.0.3 does not properly initialize memory for search patterns, which allows remote attackers to cause a… Wireshark
- CVE-2016-4006 MEDIUM · 5.9 epan/proto.c in Wireshark 1.12.x vóór 1.12.11 en 2.0.x vóór 2.0.3 beperkt de diepte van de protocolboom niet, waardoor externe aanvallers een denial of service (stapelgeheugenverbruik… Wireshark
- CVE-2016-2115 MEDIUM · 5.9 Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not require SMB signing within a DCERPC session over ncacn_np, which… Canonical Samba