Browse CVEs

HIGH 8.8 CVE-2017-0321 All versions of NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where a NULL pointer dereference caused by invalid… Gpu Driver Mitigation only Fix from $1,9502017-02-15 HIGH 7.8 CVE-2017-0323 All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler where a NULL pointer dereference caused by… Gpu Driver Mitigation only Fix from $1,9502017-02-15 MEDIUM 5.5 CVE-2016-7477 The ff_put_pixels8_xy2_mmx function in rnd_template.c in Libav 11.7 allows remote attackers to cause a denial of service (invalid memory access and c… Libav Mitigation only Fix from $1,6002017-02-15 MEDIUM 5.5 CVE-2016-8675 The get_vlc2 function in get_bits.h in Libav before 11.9 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) vi… Libav after 11.8 Fix from $1,6002017-02-15 MEDIUM 5.5 CVE-2016-8676 The get_vlc2 function in get_bits.h in Libav 11.9 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a cra… Libav after 11.8 Fix from $1,6002017-02-15 HIGH 7.5 CVE-2016-6866 slock allows attackers to bypass the screen lock via vectors involving an invalid password hash, which triggers a NULL pointer dereference and crash. Fedora after 1.3 Fix from $1,9502017-02-15 MEDIUM 5.5 CVE-2016-8690 The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer before 1.900.5 allows remote attackers to cause a denial of service (NULL pointer deref… Fedora after 1.900.29 Fix from $1,6002017-02-15 HIGH 7.5 CVE-2017-5991EPSS 15% An issue was discovered in Artifex MuPDF before 1912de5f08e90af1d9d0a9791f58ba3afdb9d465. The pdf_run_xobject function in pdf-op-run.c encounters a N… Debian Linux 1.11+ Fix from $1,9502017-02-15 HIGH 7.5 CVE-2017-5970 The ipv4_pktinfo_prepare function in net/ipv4/ip_sockglue.c in the Linux kernel through 4.9.9 allows attackers to cause a denial of service (system c… Linux Kernel after 4.9.9 Fix from $1,9502017-02-14 HIGH 8.9 CVE-2017-5149 An issue was discovered in St. Jude Medical Merlin@home, versions prior to Version 8.2.2 (RF models: EX1150; Inductive models: EX1100; and Inductive … Merlin\@home Firmware after 8.0 Fix from $1,9502017-02-13 MEDIUM 6.5 CVE-2015-8750 libdwarf 20151114 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a debug_abbrev section ma… Libdwarf after 2015-11-14 Fix from $1,6002017-02-13 HIGH 8.8 CVE-2016-3616 The cjpeg utility in libjpeg allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or execute arbitra… Enterprise Linux Mitigation only Fix from $1,9502017-02-13 MEDIUM 5.5 CVE-2016-2318 GraphicsMagick 1.3.23 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted SVG file, related to the (1) Draw… Debian Linux Mitigation only Fix from $1,6002017-02-03 MEDIUM 5.5 CVE-2016-8569 The git_oid_nfmt function in commit.c in libgit2 before 0.24.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via a … Fedora after 0.24.2 Fix from $1,6002017-02-03 MEDIUM 5.5 CVE-2016-8694 The bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to cause a denial of service (NULL pointer dereference and… Potrace after 1.12 Fix from $1,6002017-01-31 MEDIUM 5.5 CVE-2016-8695 The bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to cause a denial of service (NULL pointer dereference and… Potrace after 1.12 Fix from $1,6002017-01-31 MEDIUM 5.5 CVE-2016-8696 The bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to cause a denial of service (NULL pointer dereference and… Potrace after 1.12 Fix from $1,6002017-01-31 HIGH 7.5 CVE-2016-10087EPSS 6% The png_set_text_2 function in libpng 0.71 before 1.0.67, 1.2.x before 1.2.57, 1.4.x before 1.4.20, 1.5.x before 1.5.28, and 1.6.x before 1.6.27 allo… Libpng Mitigation only Fix from $1,9502017-01-30 CRITICAL 9.8 CVE-2016-6604 NULL pointer dereference in Samsung Exynos fimg2d driver for Android L(5.0/5.1) and M(6.0) allows attackers to have unspecified impact via unknown ve… Exynos Fimg2d Mitigation only Fix from $2,3002017-01-30 MEDIUM 5.9 CVE-2015-7977EPSS 6% ntpd in NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (NULL pointer dereference) via a ntpdc reslis… Linux 4.3.90+ Fix from $1,6002017-01-30 HIGH 7.5 CVE-2016-9448 The TIFFFetchNormalTag function in LibTiff 4.0.6 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) by setting… Libtiff Mitigation only Fix from $1,9502017-01-27 MEDIUM 5.5 CVE-2016-10025 VMFUNC emulation in Xen 4.6.x through 4.8.x on x86 systems using AMD virtualization extensions (aka SVM) allows local HVM guest OS users to cause a d… Xenserver Patch available Fix from $1,6002017-01-26 HIGH 7.5 CVE-2016-10162EPSS 6% The php_wddx_pop_element function in ext/wddx/wddx.c in PHP 7.0.x before 7.0.15 and 7.1.x before 7.1.1 allows remote attackers to cause a denial of s… PHP Patch available Fix from $1,9502017-01-24 MEDIUM 5.5 CVE-2016-10147 crypto/mcryptd.c in the Linux kernel before 4.8.15 allows local users to cause a denial of service (NULL pointer dereference and system crash) by usi… Linux Kernel after 4.8.14 Fix from $1,6002017-01-18 HIGH 7.5 CVE-2016-7997 The WPG format reader in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service (assertion failure and crash) via vec… Graphicsmagick after 1.3.25 Fix from $1,9502017-01-18 MEDIUM 5.5 CVE-2016-9813EPSS 8% The _parse_pat function in the mpegts parser in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (NULL pointer dereferenc… Gstreamer after 1.10.1 Fix from $1,6002017-01-13 MEDIUM 5.5 CVE-2016-8882 The jpc_dec_tilefini function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.8 allows remote attackers to cause a denial of service (NULL pointer … Jasper after 1.900.7 Fix from $1,6002017-01-13 MEDIUM 5.9 CVE-2016-9311EPSS 11% ntpd in NTP before 4.2.8p9, when the trap service is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and cras… Ntp after 4.2.8 Fix from $1,6002017-01-13 MEDIUM 5.9 CVE-2016-2365 A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the server could potent… Ubuntu Linux after 2.10.12 Fix from $1,6002017-01-06 MEDIUM 5.9 CVE-2016-2369 A NULL pointer dereference vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the server could… Ubuntu Linux after 2.10.12 Fix from $1,6002017-01-06