Archive
May 2016
Vulnerabilities first published in this month (UTC), newest first.
612 results · Feed
-
Unscored —CVE-2016-2784 Public exploit
CMS Made Simple 2.x before 2.1.3 and 1.x before 1.12.2, when Smarty Cache is activated, allow remote attackers to condu…
-
Unscored —
The (1) S_reghop3, (2) S_reghop4, and (3) S_reghopmaybe3 functions in regexec.c in Perl before 5.24.0 allow context-dep…
-
Unscored —
The qemu implementation in libvirt before 1.3.0 and Xen allows local guest OS users to cause a denial of service (host …
-
Unscored —CVE-2016-1887 Public exploit
Integer signedness error in the sockargs function in sys/kern/uipc_syscalls.c in FreeBSD 10.1 before p34, 10.2 before p…
-
Unscored —CVE-2016-1886 Public exploit
Integer signedness error in the genkbd_commonioctl function in sys/dev/kbd/kbd.c in FreeBSD 9.3 before p42, 10.1 before…
-
Unscored —
The patch_instruction function in hw/i386/kvmvapic.c in QEMU does not initialize the imm32 variable, which allows local…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the email APP in Huawei PLK smartphones with software AL10C00 before AL10C0…
-
Unscored —
Cisco TelePresence Video Communications Server (VCS) X8.x before X8.7.2 allows remote attackers to cause a denial of se…
-
Unscored —
Memory leak in Cisco AsyncOS 8.5 through 9.0 before 9.0.1-162 on Web Security Appliance (WSA) devices allows remote att…
-
Unscored —
The API web interface in Cisco Prime Infrastructure before 3.1 and Cisco Evolved Programmable Network Manager before 1.…
-
Unscored —
Cisco AsyncOS before 8.5.3-069 and 8.6 through 8.8 on Web Security Appliance (WSA) devices mishandles memory allocation…
-
Unscored —
Cisco AsyncOS 8.0 before 8.0.6-119 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of…
-
Unscored —
Cisco IOS XR through 5.3.2 mishandles Local Packet Transport Services (LPTS) flow-base entries, which allows remote att…
-
Unscored —
Memory leak in Cisco AsyncOS through 8.8 on Web Security Appliance (WSA) devices allows remote attackers to cause a den…
-
Unscored —
Buffer overflow in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6…
-
Unscored —
The ehci_process_itd function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators to cause a denial of se…
-
Unscored —
Buffer overflow in the stellaris_enet_receive function in hw/net/stellaris_enet.c in QEMU, when the Stellaris ethernet …
-
Unscored —
Cross-site scripting (XSS) vulnerability in Lenovo SHAREit before 3.5.98_ww on Android before 4.4 allows remote attacke…
-
Unscored —
The ehci_advance_state function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators to cause a denial of …
-
Unscored —
Buffer overflow in the Smart DNS functionality in the Huawei NGFW Module and Secospace USG6300, USG6500, USG6600, and U…
-
Unscored —
Buffer overflow in the Application Specific Packet Filtering (ASPF) functionality in the Huawei IPS Module, NGFW Module…
-
Unscored —
Lenovo SHAREit before 3.5.98_ww on Android before 4.2 allows remote attackers to have unspecified impact via a crafted …
-
Unscored —
Huawei S12700 switches with software before V200R008C00SPC500 and S5700 switches with software before V200R005SPH010, w…
-
Unscored —
The bgp_dump_routes_func function in bgpd/bgp_dump.c in Quagga does not perform size checks when dumping data, which mi…
-
Unscored —CVE-2016-3959 Public exploit
Denial of service due to unchecked parameters in crypto/dsa
The Verify function in crypto/dsa/dsa.go in Go before 1.5.4 and 1.6.x before 1.6.1 does not properly check parameters passed to the big integer library, which might allow remote attackers to cause a denial of service (infinite loop) via a crafted public key t…
-
Unscored —
Trend Micro Mobile Security for iOS before 3.2.1188 does not verify the X.509 certificate of the mobile application log…
-
Unscored —
Privilege escalation on Windows via malicious DLL in syscall
Untrusted search path vulnerability in Go before 1.5.4 and 1.6.x before 1.6.1 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory, related to use of the LoadLibrary function.
-
Unscored —
The Huawei Mobile Broadband HL Service 22.001.25.00.03 and earlier uses a weak ACL for the MobileBrServ program data di…
-
Unscored —
drivers/media/v4l2-core/videobuf2-v4l2.c in the Linux kernel before 4.5.3 allows local users to cause a denial of servi…
-
Unscored —CVE-2016-4486 Public exploit
The rtnl_fill_link_ifmap function in net/core/rtnetlink.c in the Linux kernel before 4.5.5 does not initialize a certai…
-
Unscored —CVE-2016-4578 Public exploit
sound/core/timer.c in the Linux kernel through 4.6 does not initialize certain r1 data structures, which allows local u…
-
Unscored —
The snd_timer_user_params function in sound/core/timer.c in the Linux kernel through 4.6 does not initialize a certain …
-
Unscored —
The replace_map_fd_with_map_ptr function in kernel/bpf/verifier.c in the Linux kernel before 4.5.5 does not properly ma…
-
Unscored —
The tipc_nl_publ_dump function in net/tipc/socket.c in the Linux kernel through 4.6 does not verify socket existence, w…
-
Unscored —
The proc_connectinfo function in drivers/usb/core/devio.c in the Linux kernel through 4.6 does not initialize a certain…
-
Unscored —
fs/pnode.c in the Linux kernel before 4.5.4 does not properly traverse a mount propagation tree in a certain case invol…
-
Unscored —
Use-after-free vulnerability in mm/percpu.c in the Linux kernel through 4.6 allows local users to cause a denial of ser…
-
Unscored —
The x25_negotiate_facilities function in net/x25/x25_facilities.c in the Linux kernel before 4.5.5 does not properly in…
-
Unscored —
The get_rock_ridge_filename function in fs/isofs/rock.c in the Linux kernel before 4.5.5 mishandles NM (aka alternate n…
-
Unscored —CVE-2016-4558 Public exploit
The BPF subsystem in the Linux kernel before 4.5.5 mishandles reference counts, which allows local users to cause a den…