Vulnerability index

Browse CVEs

5,206 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness NULL Pointer DereferenceCWE-476 × clear
Gpu Driver HIGH 8.8
CVE-2017-0321

All versions of NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where a NULL pointer dereference caused by invalid…

Mitigation only
Fix from $1,950 2017-02-15
Gpu Driver HIGH 7.8
CVE-2017-0323

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler where a NULL pointer dereference caused by…

Mitigation only
Fix from $1,950 2017-02-15
Libav MEDIUM 5.5
CVE-2016-7477

The ff_put_pixels8_xy2_mmx function in rnd_template.c in Libav 11.7 allows remote attackers to cause a denial of service (invalid memory access and c…

Mitigation only
Fix from $1,600 2017-02-15
Libav MEDIUM 5.5
CVE-2016-8675

The get_vlc2 function in get_bits.h in Libav before 11.9 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) vi…

Fix: after 11.8
Fix from $1,600 2017-02-15
Libav MEDIUM 5.5
CVE-2016-8676

The get_vlc2 function in get_bits.h in Libav 11.9 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a cra…

Fix: after 11.8
Fix from $1,600 2017-02-15
Fedora HIGH 7.5
CVE-2016-6866

slock allows attackers to bypass the screen lock via vectors involving an invalid password hash, which triggers a NULL pointer dereference and crash.

Fix: after 1.3
Fix from $1,950 2017-02-15
Fedora MEDIUM 5.5
CVE-2016-8690

The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer before 1.900.5 allows remote attackers to cause a denial of service (NULL pointer deref…

Fix: after 1.900.29
Fix from $1,600 2017-02-15
Debian Linux HIGH 7.5
CVE-2017-5991EPSS 15%

An issue was discovered in Artifex MuPDF before 1912de5f08e90af1d9d0a9791f58ba3afdb9d465. The pdf_run_xobject function in pdf-op-run.c encounters a N…

Fix: 1.11+
Fix from $1,950 2017-02-15
Linux Kernel HIGH 7.5
CVE-2017-5970

The ipv4_pktinfo_prepare function in net/ipv4/ip_sockglue.c in the Linux kernel through 4.9.9 allows attackers to cause a denial of service (system c…

Fix: after 4.9.9
Fix from $1,950 2017-02-14
Merlin\@home Firmware HIGH 8.9
CVE-2017-5149

An issue was discovered in St. Jude Medical Merlin@home, versions prior to Version 8.2.2 (RF models: EX1150; Inductive models: EX1100; and Inductive …

Fix: after 8.0
Fix from $1,950 2017-02-13
Libdwarf MEDIUM 6.5
CVE-2015-8750

libdwarf 20151114 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a debug_abbrev section ma…

Fix: after 2015-11-14
Fix from $1,600 2017-02-13
Enterprise Linux HIGH 8.8
CVE-2016-3616

The cjpeg utility in libjpeg allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or execute arbitra…

Mitigation only
Fix from $1,950 2017-02-13
Debian Linux MEDIUM 5.5
CVE-2016-2318

GraphicsMagick 1.3.23 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted SVG file, related to the (1) Draw…

Mitigation only
Fix from $1,600 2017-02-03
Fedora MEDIUM 5.5
CVE-2016-8569

The git_oid_nfmt function in commit.c in libgit2 before 0.24.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via a …

Fix: after 0.24.2
Fix from $1,600 2017-02-03
Potrace MEDIUM 5.5
CVE-2016-8694

The bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to cause a denial of service (NULL pointer dereference and…

Fix: after 1.12
Fix from $1,600 2017-01-31
Potrace MEDIUM 5.5
CVE-2016-8695

The bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to cause a denial of service (NULL pointer dereference and…

Fix: after 1.12
Fix from $1,600 2017-01-31
Potrace MEDIUM 5.5
CVE-2016-8696

The bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to cause a denial of service (NULL pointer dereference and…

Fix: after 1.12
Fix from $1,600 2017-01-31
Libpng HIGH 7.5
CVE-2016-10087EPSS 6%

The png_set_text_2 function in libpng 0.71 before 1.0.67, 1.2.x before 1.2.57, 1.4.x before 1.4.20, 1.5.x before 1.5.28, and 1.6.x before 1.6.27 allo…

Mitigation only
Fix from $1,950 2017-01-30
Exynos Fimg2d CRITICAL 9.8
CVE-2016-6604

NULL pointer dereference in Samsung Exynos fimg2d driver for Android L(5.0/5.1) and M(6.0) allows attackers to have unspecified impact via unknown ve…

Mitigation only
Fix from $2,300 2017-01-30
Linux MEDIUM 5.9
CVE-2015-7977EPSS 6%

ntpd in NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (NULL pointer dereference) via a ntpdc reslis…

Fix: 4.3.90+
Fix from $1,600 2017-01-30
Libtiff HIGH 7.5
CVE-2016-9448

The TIFFFetchNormalTag function in LibTiff 4.0.6 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) by setting…

Mitigation only
Fix from $1,950 2017-01-27
Xenserver MEDIUM 5.5
CVE-2016-10025

VMFUNC emulation in Xen 4.6.x through 4.8.x on x86 systems using AMD virtualization extensions (aka SVM) allows local HVM guest OS users to cause a d…

Patch available
Fix from $1,600 2017-01-26
PHP HIGH 7.5
CVE-2016-10162EPSS 6%

The php_wddx_pop_element function in ext/wddx/wddx.c in PHP 7.0.x before 7.0.15 and 7.1.x before 7.1.1 allows remote attackers to cause a denial of s…

Patch available
Fix from $1,950 2017-01-24
Linux Kernel MEDIUM 5.5
CVE-2016-10147

crypto/mcryptd.c in the Linux kernel before 4.8.15 allows local users to cause a denial of service (NULL pointer dereference and system crash) by usi…

Fix: after 4.8.14
Fix from $1,600 2017-01-18
Graphicsmagick HIGH 7.5
CVE-2016-7997

The WPG format reader in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service (assertion failure and crash) via vec…

Fix: after 1.3.25
Fix from $1,950 2017-01-18
Gstreamer MEDIUM 5.5
CVE-2016-9813EPSS 8%

The _parse_pat function in the mpegts parser in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (NULL pointer dereferenc…

Fix: after 1.10.1
Fix from $1,600 2017-01-13
Jasper MEDIUM 5.5
CVE-2016-8882

The jpc_dec_tilefini function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.8 allows remote attackers to cause a denial of service (NULL pointer …

Fix: after 1.900.7
Fix from $1,600 2017-01-13
Ntp MEDIUM 5.9
CVE-2016-9311EPSS 11%

ntpd in NTP before 4.2.8p9, when the trap service is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and cras…

Fix: after 4.2.8
Fix from $1,600 2017-01-13
Ubuntu Linux MEDIUM 5.9
CVE-2016-2365

A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the server could potent…

Fix: after 2.10.12
Fix from $1,600 2017-01-06
Ubuntu Linux MEDIUM 5.9
CVE-2016-2369

A NULL pointer dereference vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the server could…

Fix: after 2.10.12
Fix from $1,600 2017-01-06