Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Total 210374 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2016-5042 1 Libdwarf Project 1 Libdwarf 2022-03-01 5.0 MEDIUM 7.5 HIGH
The dwarf_get_aranges_list function in libdwarf before 20160923 allows remote attackers to cause a denial of service (infinite loop and crash) via a crafted DWARF section.
CVE-2016-5041 1 Libdwarf Project 1 Libdwarf 2022-03-01 5.0 MEDIUM 7.5 HIGH
dwarf_macro5.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereference) via a debugging information entry using DWARF5 and without a DW_AT_name.
CVE-2016-5040 1 Libdwarf Project 1 Libdwarf 2022-03-01 5.0 MEDIUM 7.5 HIGH
libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a large length value in a compilation unit header.
CVE-2016-5039 1 Libdwarf Project 1 Libdwarf 2022-03-01 5.0 MEDIUM 7.5 HIGH
The get_attr_value function in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted object with all-bits on.
CVE-2016-5038 1 Libdwarf Project 1 Libdwarf 2022-03-01 5.0 MEDIUM 7.5 HIGH
The dwarf_get_macro_startend_file function in dwarf_macro5.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted string offset for .debug_str.
CVE-2016-5037 1 Libdwarf Project 1 Libdwarf 2022-03-01 4.3 MEDIUM 6.5 MEDIUM
The _dwarf_load_section function in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.
CVE-2016-5036 1 Libdwarf Project 1 Libdwarf 2022-03-01 5.0 MEDIUM 7.5 HIGH
The dump_block function in print_sections.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read) via crafted frame data.
CVE-2016-5035 1 Libdwarf Project 1 Libdwarf 2022-03-01 4.3 MEDIUM 6.5 MEDIUM
The _dwarf_read_line_table_header function in dwarf_line_table_reader.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file.
CVE-2016-5034 1 Libdwarf Project 1 Libdwarf 2022-03-01 4.3 MEDIUM 6.5 MEDIUM
dwarf_elf_access.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted file, related to relocation records.
CVE-2016-5033 1 Libdwarf Project 1 Libdwarf 2022-03-01 4.3 MEDIUM 6.5 MEDIUM
The print_exprloc_content function in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file.
CVE-2016-5032 1 Libdwarf Project 1 Libdwarf 2022-03-01 4.3 MEDIUM 6.5 MEDIUM
The dwarf_get_xu_hash_entry function in libdwarf before 20160923 allows remote attackers to cause a denial of service (crash) via a crafted file.
CVE-2016-5031 1 Libdwarf Project 1 Libdwarf 2022-03-01 4.3 MEDIUM 5.5 MEDIUM
The print_frame_inst_bytes function in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file.
CVE-2016-5028 1 Libdwarf Project 1 Libdwarf 2022-03-01 4.3 MEDIUM 6.5 MEDIUM
The print_frame_inst_bytes function in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereference) via an object file with empty bss-like sections.
CVE-2015-8750 1 Libdwarf Project 1 Libdwarf 2022-03-01 4.3 MEDIUM 6.5 MEDIUM
libdwarf 20151114 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a debug_abbrev section marked NOBITS in an ELF file.
CVE-2016-2050 1 Libdwarf Project 1 Libdwarf 2022-03-01 4.3 MEDIUM 6.5 MEDIUM
The get_abbrev_array_info function in libdwarf-20151114 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted elf file.
CVE-2015-8880 1 Php 1 Php 2022-03-01 10.0 HIGH 9.8 CRITICAL
Double free vulnerability in the format printer in PHP 7.x before 7.0.1 allows remote attackers to have an unspecified impact by triggering an error.
CVE-2016-5029 1 Libdwarf Project 1 Libdwarf 2022-03-01 4.3 MEDIUM 6.5 MEDIUM
The create_fullest_file_path function in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted dwarf file.
CVE-2016-5030 1 Libdwarf Project 1 Libdwarf 2022-03-01 4.3 MEDIUM 6.5 MEDIUM
The _dwarf_calculate_info_section_end_ptr function in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.
CVE-2021-3541 4 Netapp, Oracle, Redhat and 1 more 27 Active Iq Unified Manager, Cloud Backup, Clustered Data Ontap and 24 more 2022-03-01 4.0 MEDIUM 6.5 MEDIUM
A flaw was found in libxml2. Exponential entity expansion attack its possible bypassing all existing protection mechanisms and leading to denial of service.
CVE-2021-26272 2 Ckeditor, Oracle 10 Ckeditor, Agile Plm, Application Express and 7 more 2022-03-01 4.3 MEDIUM 6.5 MEDIUM
It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted URL-like text into the editor, and then press Enter or Space (in the Autolink plugin).