Archive
November 2016
Vulnerabilities first published in this month (UTC), newest first.
386 results · Feed
-
Critical 9.8
tif_predict.h and tif_predict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or …
-
Unscored —
tools/tiffcrop.c in libtiff 4.0.6 reads an undefined buffer in readContigStripsIntoBuffer() because of a uint16 integer…
-
Unscored —
tools/tiffcrop.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in buffers. Reported as MSVR 35093, MSVR 3509…
-
Unscored —
tools/tiffcrop.c in libtiff 4.0.6 has an out-of-bounds read in readContigTilesIntoBuffer(). Reported as MSVR 35092.
-
Unscored —
tools/tiff2pdf.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in heap allocated buffers in t2p_process_jpeg…
-
Unscored —
tif_write.c in libtiff 4.0.6 has an issue in the error code path of TIFFFlushData1() that didn't reset the tif_rawcc an…
-
Unscored —
tif_pixarlog.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in heap allocated buffers. Reported as MSVR 350…
-
Unscored —
In Soap Lite (aka the SOAP::Lite extension for Perl) 1.14 and earlier, an example attack consists of defining 10 or mor…
-
Unscored —
The following SIEMENS branded IP Camera Models CCMW3025, CVMW3025-IR, CFMW3025 prior to version 1.41_SP18_S1; CCPW3025,…
-
Unscored —
Buffer overflow in the management web interface in Palo Alto Networks PAN-OS before 5.0.20, 5.1.x before 5.1.13, 6.0.x …
-
Unscored —
The Addresses Object parser in Palo Alto Networks PAN-OS before 5.0.20, 5.1.x before 5.1.13, 6.0.x before 6.0.15, 6.1.x…
-
Unscored —CVE-2016-9151 Public exploit
Palo Alto Networks PAN-OS before 5.0.20, 5.1.x before 5.1.13, 6.0.x before 6.0.15, 6.1.x before 6.1.15, 7.0.x before 7.…
-
Unscored —
Cisco TelePresence endpoints running either CE or TC software contain a vulnerability that could allow an authenticated…
-
Unscored —
A vulnerability in the email filtering functionality of Cisco AsyncOS Software for Cisco Email Security Appliances coul…
-
Unscored —
A vulnerability in several parameters of the ccmivr page of Cisco Unified Communication Manager (CallManager) could all…
-
Unscored —
A vulnerability in the FTP Representational State Transfer Application Programming Interface (REST API) for Cisco Firep…
-
Unscored —
A vulnerability in the package unbundle utility of Cisco IOS XE Software could allow an authenticated, local attacker t…
-
Unscored —
A vulnerability in the email filtering functionality of Cisco AsyncOS Software for Cisco Email Security Appliances coul…
-
Unscored —
A vulnerability in the Cisco Nexus 9000 Series Platform Leaf Switches for Application Centric Infrastructure (ACI) coul…
-
Unscored —
A vulnerability in the HTTP web-based management interface of the Cisco Adaptive Security Appliance (ASA) could allow a…
-
Unscored —
A vulnerability in the IPsec component of StarOS for Cisco ASR 5000 Series routers could allow an unauthenticated, remo…
-
Unscored —
A vulnerability in the content filtering functionality of Cisco AsyncOS Software for Cisco Email Security Appliances co…
-
Unscored —
A vulnerability has been identified in SIMATIC CP 1543-1 (All versions < V2.0.28), SIPLUS NET CP 1543-1 (All versions <…
-
High 7.5CVE-2016-8562 Exploited
A vulnerability has been identified in SIMATIC CP 1543-1 (All versions < V2.0.28), SIPLUS NET CP 1543-1 (All versions <…
KEV Mar 3, 2022 -
Unscored —
In the HDF5 1.8.16 library's failure to check if the number of dimensions for an array read from the file is within the…
-
Unscored —
The library's failure to check if certain message types support a particular flag, the HDF5 1.8.16 library will cast th…
-
Unscored —
The HDF5 1.8.16 library allocating space for the array using a value from the file has an impact within the loop for in…
-
Unscored —
When decoding data out of a dataset encoded with the H5Z_NBIT decoding, the HDF5 1.8.16 library will fail to ensure tha…
-
Unscored —
In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the DCERPC dissector could crash with a use-after-free, triggered by ne…
-
Unscored —
In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the OpenFlow dissector could crash with memory exhaustion, triggered by…
-
Unscored —
In Wireshark 2.2.0 to 2.2.1, the Profinet I/O dissector could loop excessively, triggered by network traffic or a captu…
-
Unscored —
In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the DTN dissector could go into an infinite loop, triggered by network …
-
Unscored —
In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the AllJoyn dissector could crash with a buffer over-read, triggered by…
-
Unscored —
The __ext4_journal_stop function in fs/ext4/ext4_jbd2.c in the Linux kernel before 4.3.3 allows local users to gain pri…
-
Unscored —
The tty_set_termios_ldisc function in drivers/tty/tty_ldisc.c in the Linux kernel before 4.5 allows local users to obta…
-
Unscored —
Double free vulnerability in the sg_common_write function in drivers/scsi/sg.c in the Linux kernel before 4.4 allows lo…
-
High 7.0
Race condition in kernel/events/core.c in the Linux kernel before 4.4 allows local users to gain privileges or cause a …
-
Unscored —
Race condition in the environ_read function in fs/proc/base.c in the Linux kernel before 4.5.4 allows local users to ob…
-
Unscored —
Use-after-free vulnerability in the disk_seqf_stop function in block/genhd.c in the Linux kernel before 4.7.1 allows lo…
-
Unscored —
The nfnetlink_rcv_batch function in net/netfilter/nfnetlink.c in the Linux kernel before 4.5 does not check whether a b…