Browse CVEs

MEDIUM 5.5 CVE-2016-8461 An information disclosure vulnerability in the bootloader could enable a local attacker to access data outside of its permission level. This issue is… Linux Kernel Mitigation only Fix from $1,6002017-01-12 MEDIUM 5.5 CVE-2016-8462 An information disclosure vulnerability in the bootloader could enable a local attacker to access data outside of its permission level. This issue is… Android after 7.1.0 Fix from $1,6002017-01-12 MEDIUM 5.5 CVE-2016-8396 An information disclosure vulnerability in the MediaTek video driver could enable a local malicious application to access data outside of its permiss… Android after 7.1.0 Fix from $1,6002017-01-12 MEDIUM 5.5 CVE-2016-8397 An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of its permissio… Linux Kernel Mitigation only Fix from $1,6002017-01-12 MEDIUM 5.5 CVE-2016-8400 An information disclosure vulnerability in the NVIDIA librm library (libnvrm) could enable a local malicious application to access data outside of it… Linux Kernel Mitigation only Fix from $1,6002017-01-12 MEDIUM 5.5 CVE-2016-6773 An information disclosure vulnerability in the ih264d decoder in Mediaserver could enable a local malicious application to access data outside of its… Android Mitigation only Fix from $1,6002017-01-12 HIGH 7.5 CVE-2016-4806EPSS 10% Web2py versions 2.14.5 and below was affected by Local File Inclusion vulnerability, which allows a malicious intended user to read/access web server… Web2py after 2.14.5 Fix from $1,9502017-01-11 HIGH 7.5 CVE-2016-6820 MetroCluster Tiebreaker for clustered Data ONTAP in versions before 1.2 discloses sensitive information in cleartext which may be viewed by an unauth… Metrocluster Tiebreaker after 1.1 Fix from $1,9502017-01-11 CRITICAL 9.8 CVE-2016-9885 An issue was discovered in Pivotal GemFire for PCF 1.6.x versions prior to 1.6.5 and 1.7.x versions prior to 1.7.1. The gfsh (Geode Shell) endpoint, … Gemfire For Pivotal Cloud Foundry Mitigation only Fix from $2,3002017-01-06 MEDIUM 5.5 CVE-2016-4306 Multiple information leaks exist in various IOCTL handlers of the Kaspersky Internet Security KLDISK driver. Specially crafted IOCTL requests can cau… Total Security No fix yet Fix from $1,6002017-01-06 MEDIUM 5.3 CVE-2016-1550 An exploitable vulnerability exists in the message authentication functionality of libntp in ntp 4.2.8p4 and NTPSec a5fb34b9cc89b92a8fef2f459004865c9… Ntp No fix yet Fix from $1,6002017-01-06 MEDIUM 5.9 CVE-2016-2367 An information leak exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the server could potentially result i… Ubuntu Linux after 2.10.12 Fix from $1,6002017-01-06 MEDIUM 5.9 CVE-2016-2372 An information leak exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the server could potentially result i… Ubuntu Linux after 2.10.12 Fix from $1,6002017-01-06 HIGH 8.1 CVE-2016-2374 An exploitable memory corruption vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT MultiMX message sent via… Ubuntu Linux after 2.10.12 Fix from $1,9502017-01-06 CRITICAL 9.8 CVE-2016-10105 admin/plugin.php in Piwigo through 2.8.3 doesn't validate the sections variable while using it to include files. This can cause information disclosur… Piwigo after 2.8.3 Fix from $2,3002017-01-03 MEDIUM 6.5 CVE-2016-9845 QEMU (aka Quick Emulator) built with the Virtio GPU Device emulator support is vulnerable to an information leakage issue. It could occur while proce… Qemu 2.8.0+ Fix from $1,6002016-12-29 MEDIUM 5.5 CVE-2016-5328 VMware Tools 9.x and 10.x before 10.1.0 on OS X, when System Integrity Protection (SIP) is enabled, allows local users to determine kernel memory add… Tools after 10.0.8 Fix from $1,6002016-12-29 MEDIUM 5.5 CVE-2016-5329 VMware Fusion 8.x before 8.5 on OS X, when System Integrity Protection (SIP) is enabled, allows local users to determine kernel memory addresses and … Fusion Mitigation only Fix from $1,6002016-12-29 MEDIUM 5.5 CVE-2016-9756 arch/x86/kvm/emulate.c in the Linux kernel before 4.8.12 does not properly initialize Code Segment (CS) in certain error cases, which allows local us… Linux Kernel after 4.8.11 Fix from $1,6002016-12-28 MEDIUM 5.5 CVE-2016-6910 The non-existent notification listener vulnerability was introduced in the initial Android 5.0.2 builds for the Samsung Galaxy S6 Edge devices, but t… Android Mitigation only Fix from $1,6002016-12-23 MEDIUM 5.5 CVE-2016-7555 The avi_read_header function in libavformat/avidec.c in FFmpeg before 3.1.4 is vulnerable to memory leak when decoding an AVI file that has a crafted… Ffmpeg after 3.1.3 Fix from $1,6002016-12-23 HIGH 7.5 CVE-2016-7172 NetApp Snap Creator Framework before 4.3.1 discloses sensitive information which could be viewed by an unauthorized user. Snap Creator Framework after 4.3.0 Fix from $1,9502016-12-21 MEDIUM 5.5 CVE-2016-7295 The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Serv… Windows 10 Mitigation only Fix from $1,6002016-12-20 MEDIUM 5.5 CVE-2016-7219 The Crypto driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Wi… Windows 10 Mitigation only Fix from $1,6002016-12-20 MEDIUM 6.5 CVE-2016-7257EPSS 23% The GDI component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Office for Mac 2011, and Office 2016 for Mac all… Office For Mac Mitigation only Fix from $1,6002016-12-20 MEDIUM 5.5 CVE-2016-7258 The kernel in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 mishandles page-fault system calls, which allows local users to obtai… Windows 10 Mitigation only Fix from $1,6002016-12-20 HIGH 7.5 CVE-2016-10005 Webdynpro in SAP Solman 7.1 through 7.31 allows remote attackers to obtain sensitive information via webdynpro/dispatcher/sap.com/caf~eu~gp~example~t… Solution Manager No fix yet Fix from $1,9502016-12-19 MEDIUM 5.9 CVE-2016-9159 A vulnerability has been identified in SIMATIC S7-300 CPU family (All versions), SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS varia… Simatic S7 300 Cpu Firmware Mitigation only Fix from $1,6002016-12-17 MEDIUM 6.1 CVE-2016-8820 All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape where a ch… Gpu Driver Patch available Fix from $1,6002016-12-16 MEDIUM 5.3 CVE-2015-3271EPSS 7% Apache Tika server (aka tika-server) in Apache Tika 1.9 might allow remote attackers to read arbitrary files via the HTTP fileUrl header. Tika Mitigation only Fix from $1,6002016-12-15