Archive
23 May 2016
Vulnerabilities first published on this day (UTC), newest first.
28 results · Feed
-
Unscored —
The ehci_process_itd function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators to cause a denial of se…
-
Unscored —
Buffer overflow in the stellaris_enet_receive function in hw/net/stellaris_enet.c in QEMU, when the Stellaris ethernet …
-
Unscored —
Cross-site scripting (XSS) vulnerability in Lenovo SHAREit before 3.5.98_ww on Android before 4.4 allows remote attacke…
-
Unscored —
The ehci_advance_state function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators to cause a denial of …
-
Unscored —
Buffer overflow in the Smart DNS functionality in the Huawei NGFW Module and Secospace USG6300, USG6500, USG6600, and U…
-
Unscored —
Buffer overflow in the Application Specific Packet Filtering (ASPF) functionality in the Huawei IPS Module, NGFW Module…
-
Unscored —
Lenovo SHAREit before 3.5.98_ww on Android before 4.2 allows remote attackers to have unspecified impact via a crafted …
-
Unscored —
Huawei S12700 switches with software before V200R008C00SPC500 and S5700 switches with software before V200R005SPH010, w…
-
Unscored —
The bgp_dump_routes_func function in bgpd/bgp_dump.c in Quagga does not perform size checks when dumping data, which mi…
-
Unscored —CVE-2016-3959 Public exploit
Denial of service due to unchecked parameters in crypto/dsa
The Verify function in crypto/dsa/dsa.go in Go before 1.5.4 and 1.6.x before 1.6.1 does not properly check parameters passed to the big integer library, which might allow remote attackers to cause a denial of service (infinite loop) via a crafted public key t…
-
Unscored —
Trend Micro Mobile Security for iOS before 3.2.1188 does not verify the X.509 certificate of the mobile application log…
-
Unscored —
Privilege escalation on Windows via malicious DLL in syscall
Untrusted search path vulnerability in Go before 1.5.4 and 1.6.x before 1.6.1 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory, related to use of the LoadLibrary function.
-
Unscored —
The Huawei Mobile Broadband HL Service 22.001.25.00.03 and earlier uses a weak ACL for the MobileBrServ program data di…
-
Unscored —
drivers/media/v4l2-core/videobuf2-v4l2.c in the Linux kernel before 4.5.3 allows local users to cause a denial of servi…
-
Unscored —CVE-2016-4486 Public exploit
The rtnl_fill_link_ifmap function in net/core/rtnetlink.c in the Linux kernel before 4.5.5 does not initialize a certai…
-
Unscored —CVE-2016-4578 Public exploit
sound/core/timer.c in the Linux kernel through 4.6 does not initialize certain r1 data structures, which allows local u…
-
Unscored —
The snd_timer_user_params function in sound/core/timer.c in the Linux kernel through 4.6 does not initialize a certain …
-
Unscored —
The replace_map_fd_with_map_ptr function in kernel/bpf/verifier.c in the Linux kernel before 4.5.5 does not properly ma…
-
Unscored —
The tipc_nl_publ_dump function in net/tipc/socket.c in the Linux kernel through 4.6 does not verify socket existence, w…
-
Unscored —
The proc_connectinfo function in drivers/usb/core/devio.c in the Linux kernel through 4.6 does not initialize a certain…
-
Unscored —
fs/pnode.c in the Linux kernel before 4.5.4 does not properly traverse a mount propagation tree in a certain case invol…
-
Unscored —
Use-after-free vulnerability in mm/percpu.c in the Linux kernel through 4.6 allows local users to cause a denial of ser…
-
Unscored —
The x25_negotiate_facilities function in net/x25/x25_facilities.c in the Linux kernel before 4.5.5 does not properly in…
-
Unscored —
The get_rock_ridge_filename function in fs/isofs/rock.c in the Linux kernel before 4.5.5 mishandles NM (aka alternate n…
-
Unscored —CVE-2016-4558 Public exploit
The BPF subsystem in the Linux kernel before 4.5.5 mishandles reference counts, which allows local users to cause a den…
-
Unscored —
The llc_cmsg_rcv function in net/llc/af_llc.c in the Linux kernel before 4.5.5 does not initialize a certain data struc…
-
Unscored —
The InfiniBand (aka IB) stack in the Linux kernel before 4.5.3 incorrectly relies on the write system call, which allow…
-
Unscored —
Use-after-free vulnerability in drivers/net/ppp/ppp_generic.c in the Linux kernel before 4.5.2 allows local users to ca…