Browse CVEs

HIGH 7.8 CVE-2014-9787 Integer overflow in drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 (2013) devices allows attackers to gain… Android after 6.0.1 Fix from $1,9502016-07-11 CRITICAL 9.8 CVE-2016-3645EPSS 25% Integer overflow in the TNEF unpacker in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:… Norton Security after 2016.0 Fix from $2,3002016-06-30 HIGH 7.1 CVE-2016-2538 Multiple integer overflows in the USB Net device emulator (hw/usb/dev-network.c) in QEMU before 2.5.1 allow local guest OS administrators to cause a … Qemu after 2.5.0 Fix from $1,9502016-06-16 HIGH 7.5 CVE-2016-4574 Off-by-one error in the append_utf8_value function in the DN decoder (dn.c) in Libksba before 1.3.4 allows remote attackers to cause a denial of serv… Ubuntu Linux after 1.3.3 Fix from $1,9502016-06-13 HIGH 8.4 CVE-2016-2463 Multiple integer overflows in the h264dec component in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.… Android Mitigation only Fix from $1,9502016-06-13 MEDIUM 6.2 CVE-2015-8872 The set_fat function in fat.c in dosfstools before 4.0 might allow attackers to corrupt a FAT12 filesystem or cause a denial of service (invalid memo… Ubuntu Linux after 3.0.28 Fix from $1,6002016-06-03 HIGH 7.8 CVE-2015-8875 Multiple integer overflows in the (1) pixops_composite_nearest, (2) pixops_composite_color_nearest, and (3) pixops_process functions in pixops/pixops… Debian Linux after 2.33 Fix from $1,9502016-06-01 HIGH 7.8 CVE-2015-8312 Off-by-one error in afs_pioctl.c in OpenAFS before 1.6.16 might allow local users to cause a denial of service (memory overwrite and system crash) vi… Debian Linux after 1.6.15 Fix from $1,9502016-05-13 HIGH 7.5 CVE-2014-9763 imlib2 before 1.4.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted PNM file. Debian Linux after 1.4.6 Fix from $1,9502016-05-13 HIGH 7.5 CVE-2011-5326 imlib2 before 1.4.9 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) by drawing a 2x1 ellipse. Debian Linux after 1.4.8 Fix from $1,9502016-05-13 HIGH 7.5 CVE-2016-2106EPSS 27% Integer overflow in the EVP_EncryptUpdate function in crypto/evp/evp_enc.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers t… OpenSSL after 1.0.1s Fix from $1,9502016-05-05 HIGH 7.5 CVE-2016-2070 The tcp_cwnd_reduction function in net/ipv4/tcp_input.c in the Linux kernel before 4.3.5 allows remote attackers to cause a denial of service (divide… Linux Kernel 4.3.5+ Fix from $1,9502016-05-02 HIGH 7.8 CVE-2016-3135 Integer overflow in the xt_alloc_table_info function in net/netfilter/x_tables.c in the Linux kernel through 4.5.2 on 32-bit platforms allows local u… Linux Kernel 4.4.21 / 4.6+ Fix from $1,9502016-04-27 CRITICAL 9.1 CVE-2015-8776 The strftime function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (applicat… Ubuntu Linux Mitigation only Fix from $2,3002016-04-19 MEDIUM 6.5 CVE-2015-5479 The ff_h263_decode_mba function in libavcodec/ituh263dec.c in Libav before 11.5 allows remote attackers to cause a denial of service (divide-by-zero … Ubuntu after 11.4 Fix from $1,6002016-04-19 HIGH 8.4 CVE-2016-0849 Multiple integer overflows in minzip/SysUtil.c in the Recovery Procedure in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01… Android Patch available Fix from $1,9502016-04-18 HIGH 8.8 CVE-2015-8540EPSS 6% Integer underflow in the png_check_keyword function in pngwutil.c in libpng 0.90 through 0.99, 1.0.x before 1.0.66, 1.1.x and 1.2.x before 1.2.56, 1.… Enterprise Linux Desktop Supplementary Patch available Fix from $1,9502016-04-14 CRITICAL 9.8 CVE-2014-9766EPSS 6% Integer overflow in the create_bits function in pixman-bits-image.c in Pixman before 0.32.6 allows remote attackers to cause a denial of service (app… Ubuntu Linux after 0.32.5 Fix from $2,3002016-04-13 HIGH 8.8 CVE-2016-1968 Integer underflow in Brotli, as used in Mozilla Firefox before 45.0, allows remote attackers to execute arbitrary code or cause a denial of service (… Firefox after 44.0.2 Fix from $1,9502016-03-13 HIGH 7.8 CVE-2016-0827 Multiple integer overflows in libeffects in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 allow attacke… Android Mitigation only Fix from $1,9502016-03-12 CRITICAL 9.8 CVE-2016-1946EPSS 6% The MoofParser::Metadata function in binding/MoofParser.cpp in libstagefright in Mozilla Firefox before 44.0 does not limit the size of read operatio… Firefox after 43.0.4 Fix from $2,3002016-01-31 MEDIUM 6.5 CVE-2016-1933 Integer overflow in the image-deinterlacing functionality in Mozilla Firefox before 44.0 allows remote attackers to cause a denial of service (memory… Firefox after 43.0.4 Fix from $1,6002016-01-31 HIGH 7.3 CVE-2016-1904 Multiple integer overflows in ext/standard/exec.c in PHP 7.x before 7.0.2 allow remote attackers to cause a denial of service or possibly have unspec… PHP Patch available Fix from $1,9502016-01-19 CRITICAL 9.8 CVE-2016-0859EPSS 8% Integer overflow in the Kernel service in Advantech WebAccess before 8.1 allows remote attackers to execute arbitrary code or cause a denial of servi… Webaccess after 8.0 Fix from $2,3002016-01-15 MEDIUM 6.6 CVE-2016-1715 The swin.sys kernel driver in McAfee Application Control (MAC) 6.1.0 before build 706, 6.1.1 before build 404, 6.1.2 before build 449, 6.1.3 before b… Windows Patch available Fix from $1,6002016-01-12 CRITICAL 10.0 CVE-2015-8396EPSS 16% Integer overflow in the ImageRegionReader::ReadIntoBuffer function in MediaStorageAndFileFormat/gdcmImageRegionReader.cxx in Grassroots DICOM (aka GD… Grassroots Dicom after 2.6.0 Fix from $2,3002016-01-12 HIGH 8.6 CVE-2015-5259EPSS 57% Integer overflow in the read_string function in libsvn_ra_svn/marshal.c in Apache Subversion 1.9.x before 1.9.3 allows remote attackers to execute ar… Subversion Mitigation only Fix from $1,9502016-01-08 MEDIUM 5.3 CVE-2015-3223EPSS 7% The ldb_wildcard_compare function in ldb_match.c in ldb before 1.1.24, as used in the AD LDAP server in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, … Samba Mitigation only Fix from $1,6002015-12-29 HIGH 8.8 CVE-2015-8664EPSS 5% Integer overflow in the WebCursor::Deserialize function in content/common/cursors/webcursor.cc in Google Chrome before 47.0.2526.106 allows remote at… Chrome after 47.0.2526.80 Fix from $1,9502015-12-24 MEDIUM 6.8 CVE-2015-7222 Integer underflow in the Metadata::setData function in MetaData.cpp in libstagefright in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5… Firefox after 42.0 Fix from $1,6002015-12-16