Total
11483 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2016-1424 | 1 Cisco | 1 Ios | 2016-06-20 | 6.1 MEDIUM | 6.5 MEDIUM |
Cisco IOS 15.2(1)T1.11 and 15.2(2)TST allows remote attackers to cause a denial of service (device crash) via a crafted LLDP packet, aka Bug ID CSCun63132. | |||||
CVE-2016-4167 | 1 Adobe | 1 Dng Software Development Kit | 2016-06-17 | 7.5 HIGH | 9.8 CRITICAL |
Adobe DNG Software Development Kit (SDK) before 1.4 2016 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors. | |||||
CVE-2007-4629 | 1 University Of Minnesota | 1 Mapserver | 2016-06-15 | 7.5 HIGH | N/A |
Buffer overflow in the processLine function in maptemplate.c in MapServer before 4.10.3 allows attackers to cause a denial of service and possibly execute arbitrary code via a mapfile with a long layer name, group name, or metadata entry name. | |||||
CVE-2011-5165 | 1 Cleanersoft | 1 Free Mp3 Cd Ripper | 2016-06-15 | 9.3 HIGH | N/A |
Stack-based buffer overflow in Free MP3 CD Ripper 1.1, 2.6 and earlier, when converting a file, allows user-assisted remote attackers to execute arbitrary code via a crafted .wav file. | |||||
CVE-2016-2463 | 1 Google | 1 Android | 2016-06-14 | 7.5 HIGH | 8.4 HIGH |
Multiple integer overflows in the h264dec component in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file that triggers a large memory allocation, aka internal bug 27855419. | |||||
CVE-2016-2484 | 1 Google | 1 Android | 2016-06-13 | 9.3 HIGH | 7.8 HIGH |
libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not validate OMX buffer sizes for the GSM and G711 codecs, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 27793163. | |||||
CVE-2016-2481 | 1 Google | 1 Android | 2016-06-13 | 9.3 HIGH | 7.8 HIGH |
The mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishandles a buffer count, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 27532497. | |||||
CVE-2016-2482 | 1 Google | 1 Android | 2016-06-13 | 9.3 HIGH | 7.8 HIGH |
The mm-video-v4l2 vdec component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishandles a buffer count, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 27661749. | |||||
CVE-2016-2479 | 1 Google | 1 Android | 2016-06-13 | 9.3 HIGH | 7.8 HIGH |
The mm-video-v4l2 vdec component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishandles a buffer count, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 27532282. | |||||
CVE-2016-2485 | 1 Google | 1 Android | 2016-06-13 | 9.3 HIGH | 7.8 HIGH |
libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not validate OMX buffer sizes for the GSM and G711 codecs, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 27793367. | |||||
CVE-2016-2483 | 1 Google | 1 Android | 2016-06-13 | 9.3 HIGH | 7.8 HIGH |
The mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishandles a buffer count, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 27662502. | |||||
CVE-2016-2476 | 1 Google | 1 Android | 2016-06-13 | 9.3 HIGH | 7.8 HIGH |
mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not validate OMX buffer sizes, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 27207275. | |||||
CVE-2015-4469 | 1 Libmspack Project | 1 Libmspack | 2016-06-09 | 4.3 MEDIUM | N/A |
The chmd_read_headers function in chmd.c in libmspack before 0.5 does not validate name lengths, which allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted CHM file. | |||||
CVE-2014-2299 | 1 Wireshark | 1 Wireshark | 2016-06-01 | 9.3 HIGH | N/A |
Buffer overflow in the mpeg_read function in wiretap/mpeg.c in the MPEG parser in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a large record in MPEG data. | |||||
CVE-2016-3681 | 1 Huawei | 2 Mate 8, Mate 8 Firmware | 2016-05-27 | 9.3 HIGH | 7.8 HIGH |
Buffer overflow in the Wi-Fi driver in Huawei Mate 8 NXT-AL before NXT-AL10C00B182, NXT-CL before NXT-CL00C92B182, NXT-DL before NXT-DL00C17B182, and NXT-TL before NXT-TL00C01B182 allows attackers to cause a denial of service (crash) or possibly gain privileges via a crafted application, aka HWPSIRT-2016-03021. | |||||
CVE-2005-3065 | 1 Multitheftauto | 1 Multitheftauto | 2016-05-27 | 5.0 MEDIUM | N/A |
MultiTheftAuto 0.5 patch 1 and earlier allows remote attackers to cause a denial of service (application crash) via a crafted command 40 that causes a -1 length to be used and triggers an out-of-bounds read. | |||||
CVE-2016-3680 | 1 Huawei | 2 Mate 8, Mate 8 Firmware | 2016-05-27 | 9.3 HIGH | 7.8 HIGH |
Buffer overflow in the Wi-Fi driver in Huawei Mate 8 NXT-AL before NXT-AL10C00B182, NXT-CL before NXT-CL00C92B182, NXT-DL before NXT-DL00C17B182, and NXT-TL before NXT-TL00C01B182 allows attackers to cause a denial of service (crash) or possibly gain privileges via a crafted application, aka HWPSIRT-2016-03020. | |||||
CVE-2001-0775 | 2 Xli, Xloadimage | 2 Xli, Xloadimage | 2016-05-19 | 7.5 HIGH | N/A |
Buffer overflow in xloadimage 4.1 (aka xli 1.16 and 1.17) in Linux allows remote attackers to execute arbitrary code via a FACES format image containing a long (1) Firstname or (2) Lastname field. | |||||
CVE-2016-3628 | 1 Tibco | 3 Enterprise Message Service, Enterprise Message Service Appliance, Enterprise Message Service Appliance Firmware | 2016-05-18 | 6.5 MEDIUM | 8.8 HIGH |
Buffer overflow in tibemsd in the server in TIBCO Enterprise Message Service (EMS) before 8.3.0 and EMS Appliance before 2.4.0 allows remote authenticated users to cause a denial of service or possibly execute arbitrary code via crafted inbound data. | |||||
CVE-2013-4473 | 2 Canonical, Freedesktop | 2 Ubuntu Linux, Poppler | 2016-05-18 | 7.5 HIGH | N/A |
Stack-based buffer overflow in the extractPages function in utils/pdfseparate.cc in poppler before 0.24.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a source filename. |