CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2016-2794 HIGH · 8.8 The graphite2::TtfUtil::CmapSubtable12NextCodepoint function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to… Mozilla Sil Opensuse Suse
- CVE-2016-2793 HIGH · 8.8 CachedCmap.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a… Oracle Mozilla Sil Opensuse
- CVE-2016-2792 HIGH · 8.8 The graphite2::Slot::getAttr function in Slot.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote… Sil Mozilla Oracle Opensuse
- CVE-2016-2791 HIGH · 8.8 The graphite2::GlyphCache::glyph function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to… Opensuse Suse Mozilla Oracle
- CVE-2016-2790 HIGH · 8.8 The graphite2::TtfUtil::GetTableInfo function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, does not initialize memory… Opensuse Suse Mozilla Sil
- CVE-2016-1979 HIGH · 8.8 Use-after-free vulnerability in the PK11_ImportDERPrivateKeyInfoAndReturnKey function in Mozilla Network Security Services (NSS) before 3.21.1, as used in Mozilla Firefox before 45.0, allows remote attackers to… Mozilla
- CVE-2016-1978 HIGH · 7.3 Use-after-free vulnerability in the ssl3_HandleECDHServerKeyExchange function in Mozilla Network Security Services (NSS) before 3.21, as used in Mozilla Firefox before 44.0, allows remote attackers to… Mozilla
- CVE-2016-1977 HIGH · 8.8 The Machine::Code::decoder::analysis::set_ref function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to… Opensuse Suse Oracle Sil
- CVE-2016-1976 MEDIUM · 5.5 Gebruik-na-vrije kwetsbaarheid in de DesktopDisplayDevice-klasse in de WebRTC-implementatie in Mozilla Firefox vóór 45.0 op Windows kan externe aanvallers in staat stellen om een denial of… Microsoft Mozilla Webrtc Project
- CVE-2016-1975 MEDIUM · 6.3 Multiple race conditions in dom/media/systemservices/CamerasChild.cpp in the WebRTC implementation in Mozilla Firefox before 45.0 on Windows might allow remote attackers to cause a denial of… Webrtc Project Mozilla
- CVE-2016-1974 HIGH · 8.8 The nsScannerString::AppendUnicodeTo function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 does not verify that memory allocation succeeds, which allows remote attackers… Mozilla Oracle Opensuse Suse
- CVE-2016-1973 HIGH · 8.8 Raceconditie in de GetStaticInstance-functie in de WebRTC-implementatie in Mozilla Firefox vóór 45.0 kan externe aanvallers in staat stellen willekeurige code uit te voeren of een… Oracle Mozilla
- CVE-2016-1972 HIGH · 8.8 Race condition in libvpx in Mozilla Firefox before 45.0 on Windows might allow remote attackers to cause a denial of service (use-after-free) or possibly have… Mozilla Microsoft
- CVE-2016-1971 HIGH · 8.8 The I420VideoFrame::CreateFrame function in the WebRTC implementation in Mozilla Firefox before 45.0 on Windows omits an unspecified status check, which might allow remote attackers to… Mozilla Microsoft
- CVE-2016-1970 HIGH · 8.8 Integer underflow in the srtp_unprotect function in the WebRTC implementation in Mozilla Firefox before 45.0 on Windows might allow remote attackers to cause a denial… Mozilla Microsoft
- CVE-2016-1969 HIGH · 8.8 The setAttr function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.6.1, allows remote attackers to… Sil Mozilla
- CVE-2016-1968 HIGH · 8.8 Integer underflow in Brotli, as used in Mozilla Firefox before 45.0, allows remote attackers to execute arbitrary code or cause a denial of service (buffer… Mozilla
- CVE-2016-1967 MEDIUM · 6.5 Mozilla Firefox before 45.0 does not properly restrict the availability of IFRAME Resource Timing API times, which allows remote attackers to bypass the Same Origin… Mozilla
- CVE-2016-1966 HIGH · 8.8 The nsNPObjWrapper::GetNewOrUsed function in dom/plugins/base/nsJSNPRuntime.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or cause… Oracle Mozilla Opensuse
- CVE-2016-1965 MEDIUM · 4.3 Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 mishandle a navigation sequence that returns to the original page, which allows remote attackers to… Mozilla Opensuse Oracle
- CVE-2016-1964 HIGH · 8.8 Use-after-free vulnerability in the AtomicBaseIncDec function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or… Oracle Opensuse Suse Mozilla
- CVE-2016-1963 HIGH · 7.4 The FileReader class in Mozilla Firefox before 45.0 allows local users to gain privileges or cause a denial of service (memory corruption) by changing a… Mozilla
- CVE-2016-1962 CRITICAL · 9.8 Use-after-free vulnerability in the mozilla::DataChannelConnection::Close function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code by… Mozilla Opensuse Oracle
- CVE-2016-1961 HIGH · 8.8 Use-after-free vulnerability in the nsHTMLDocument::SetBody function in dom/html/nsHTMLDocument.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary… Opensuse Suse Mozilla Oracle
- CVE-2016-1960 HIGH · 8.8 Integer underflow in de nsHtml5TreeBuilder-klasse in de HTML5-tekenreeksparser in Mozilla Firefox vóór 45.0 en Firefox ESR 38.x vóór 38.7 stelt aanvallers op afstand in staat… Oracle Mozilla Opensuse Suse
- CVE-2016-1959 HIGH · 8.8 The ServiceWorkerManager class in Mozilla Firefox before 45.0 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read and memory… Mozilla
- CVE-2016-1958 MEDIUM · 4.3 browser/base/content/browser.js in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to spoof the address bar via a javascript: URL. Oracle Opensuse Mozilla
- CVE-2016-1957 MEDIUM · 4.3 Memory leak in libstagefright in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to cause a denial of service (memory… Novell Opensuse Mozilla Oracle
- CVE-2016-1956 MEDIUM · 6.5 Mozilla Firefox before 45.0 on Linux, when an Intel video driver is used, allows remote attackers to cause a denial of service (memory consumption or… Mozilla Linux Novell Opensuse
- CVE-2016-1955 MEDIUM · 4.3 Mozilla Firefox before 45.0 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information by reading a Content Security Policy (CSP) violation… Novell Opensuse Mozilla
- CVE-2016-1954 HIGH · 8.8 The nsCSPContext::SendReports function in dom/security/nsCSPContext.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 does not prevent use of a non-HTTP report-uri for… Mozilla Novell Opensuse Oracle
- CVE-2016-1953 HIGH · 8.8 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 45.0 allow remote attackers to cause a denial of service (memory corruption and application… Mozilla Novell Opensuse
- CVE-2016-1952 HIGH · 8.8 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allow remote attackers to cause a denial… Oracle Novell Opensuse Mozilla
- CVE-2016-1950 HIGH · 8.8 Heap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and 3.20.x and 3.21.x before 3.21.1, as used in Mozilla Firefox before 45.0 and… Mozilla Oracle Apple Opensuse
- CVE-2016-1621 CRITICAL · 9.8 libvpx in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.0 before 2016-03-01 allows remote attackers to execute arbitrary code or cause… Google
- CVE-2016-0832 MEDIUM · 6.1 Setup Wizard in Android 5.1.x before LMY49H and 6.x before 2016-03-01 allows physically proximate attackers to bypass the Factory Reset Protection protection mechanism and delete… Google
- CVE-2016-0831 MEDIUM · 5.5 The getDeviceIdForPhone function in internal/telephony/PhoneSubInfoController.java in Telephony in Android 5.x before 5.1.1 LMY49H and 6.x before 2016-03-01 does not check for the READ_PHONE_STATE permission, which… Google
- CVE-2016-0830 MEDIUM · 6.5 btif_config.c in Bluetooth in Android 6.x before 2016-03-01 allows remote attackers to cause a denial of service (memory corruption and persistent daemon crash) by triggering… Google
- CVE-2016-0829 HIGH · 7.5 The BnGraphicBufferProducer::onTransact function in libs/gui/IGraphicBufferConsumer.cpp in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 does not initialize a certain… Google
- CVE-2016-0828 HIGH · 7.5 The BnGraphicBufferConsumer::onTransact function in libs/gui/IGraphicBufferConsumer.cpp in mediaserver in Android 5.x before 5.1.1 LMY49H and 6.x before 2016-03-01 does not initialize a certain slot variable, which… Google
- CVE-2016-0827 HIGH · 7.8 Meerdere integer overflows in libeffects in mediaserver in Android 4.x vóór 4.4.4, 5.x vóór 5.1.1 LMY49H en 6.x vóór 2016-03-01 stellen aanvallers in staat om… Google
- CVE-2016-0826 HIGH · 7.8 libcameraservice in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 does not require use of the ICameraService::dump method for… Google
- CVE-2016-0825 MEDIUM · 5.3 The Widevine Trusted Application in Android 6.0.1 before 2016-03-01 allows attackers to obtain sensitive TrustZone secure-storage information by leveraging kernel access, as demonstrated by obtaining… Google
- CVE-2016-0824 MEDIUM · 5.3 libmpeg2 in libstagefright in Android 6.x before 2016-03-01 allows attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, via crafted Bitstream data,… Google
- CVE-2016-0823 MEDIUM · 4.0 The pagemap_open function in fs/proc/task_mmu.c in the Linux kernel before 3.19.3, as used in Android 6.0.1 before 2016-03-01, allows local users to obtain sensitive physical-address… Google Linux
- CVE-2016-0822 HIGH · 7.0 The MediaTek connectivity kernel driver in Android 6.0.1 before 2016-03-01 allows attackers to gain privileges via a crafted application that leverages conn_launcher access, aka internal… Google
- CVE-2016-0821 MEDIUM · 5.5 The LIST_POISON feature in include/linux/poison.h in the Linux kernel before 4.3, as used in Android 6.0.1 before 2016-03-01, does not properly consider the relationship to… Linux Google
- CVE-2016-0820 HIGH · 7.8 The MediaTek Wi-Fi kernel driver in Android 6.0.1 before 2016-03-01 allows attackers to gain privileges via a crafted application, aka internal bug 26267358. Google
- CVE-2016-0819 HIGH · 7.8 The Qualcomm performance component in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 allows attackers to gain privileges via a crafted… Google
- CVE-2016-0818 MEDIUM · 5.9 The caching functionality in the TrustManagerImpl class in TrustManagerImpl.java in Conscrypt in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 mishandles… Google