Browse CVEs

HIGH 7.5 CVE-2016-9934EPSS 7% ext/wddx/wddx.c in PHP before 5.6.28 and 7.x before 7.0.13 allows remote attackers to cause a denial of service (NULL pointer dereference) via crafte… PHP after 5.6.27 Fix from $1,9502017-01-04 MEDIUM 5.5 CVE-2016-1922 QEMU (aka Quick Emulator) built with the TPR optimization for 32-bit Windows guests support is vulnerable to a null pointer dereference flaw. It occu… Debian Linux after 2.5.1.1 Fix from $1,6002016-12-29 MEDIUM 5.5 CVE-2016-2197 QEMU (aka Quick Emulator) built with an IDE AHCI emulation support is vulnerable to a null pointer dereference flaw. It occurs while unmapping the Fr… Qemu after 2.5.1.1 Fix from $1,6002016-12-29 MEDIUM 5.5 CVE-2016-2198 QEMU (aka Quick Emulator) built with the USB EHCI emulation support is vulnerable to a null pointer dereference flaw. It could occur when an applicat… Debian Linux after 2.5.1.1 Fix from $1,6002016-12-29 HIGH 7.8 CVE-2016-7079 The graphic acceleration functions in VMware Tools 9.x and 10.x before 10.0.9 on OS X allow local users to gain privileges or cause a denial of servi… Tools after 10.0.8 Fix from $1,9502016-12-29 HIGH 7.8 CVE-2016-7080 The graphic acceleration functions in VMware Tools 9.x and 10.x before 10.0.9 on OS X allow local users to gain privileges or cause a denial of servi… Tools after 10.0.8 Fix from $1,9502016-12-29 MEDIUM 5.5 CVE-2016-7905 The read_gab2_sub function in libavformat/avidec.c in FFmpeg before 3.1.4 allows remote attackers to cause a denial of service (NULL pointer used) vi… Ffmpeg after 3.1.3 Fix from $1,6002016-12-23 HIGH 7.8 CVE-2016-8813 All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape where mult… Gpu Driver Patch available Fix from $1,9502016-12-16 HIGH 7.8 CVE-2016-8814 All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape where mult… Gpu Driver Patch available Fix from $1,9502016-12-16 CRITICAL 9.8 CVE-2014-8241 XRegion in TigerVNC allows remote VNC servers to cause a denial of service (NULL pointer dereference) by leveraging failure to check a malloc return … Enterprise Linux Desktop Mitigation only Fix from $2,3002016-12-14 CRITICAL 9.8 CVE-2016-5690EPSS 5% The ReadDCMImage function in DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact via v… Solaris after 6.9.4-4 Fix from $2,3002016-12-13 CRITICAL 9.8 CVE-2016-5689EPSS 5% The DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact by leveraging lack of NULL poi… Solaris after 6.9.4-4 Fix from $2,3002016-12-13 MEDIUM 6.5 CVE-2016-9631 An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (segmentation fau… W3m after 0.5.3-32 Fix from $1,6002016-12-12 MEDIUM 6.5 CVE-2016-9629 An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (segmentation fau… W3m after 0.5.3-32 Fix from $1,6002016-12-12 MEDIUM 6.5 CVE-2016-9628 An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (segmentation fau… W3m after 0.5.3-32 Fix from $1,6002016-12-12 MEDIUM 6.5 CVE-2016-9624 An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (segmentation fau… W3m after 0.5.3-32 Fix from $1,6002016-12-12 MEDIUM 6.5 CVE-2016-9623 An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (segmentation fau… W3m after 0.5.3-32 Fix from $1,6002016-12-12 MEDIUM 6.5 CVE-2016-9622 An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (segmentation fau… W3m after 0.5.3-32 Fix from $1,6002016-12-12 MEDIUM 6.5 CVE-2016-9443 An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (segmentation fau… W3m after 0.5.3-30 Fix from $1,6002016-12-12 MEDIUM 6.5 CVE-2016-9441 An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (segmentation fau… W3m after 0.5.3-30 Fix from $1,6002016-12-12 MEDIUM 6.5 CVE-2016-9440 An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (segmentation fau… W3m after 0.5.3-30 Fix from $1,6002016-12-12 MEDIUM 6.5 CVE-2016-9438 An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (segmentation fau… W3m after 0.5.3-30 Fix from $1,6002016-12-12 MEDIUM 6.5 CVE-2016-9434 An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (segmentation fau… W3m after 0.5.3-30 Fix from $1,6002016-12-12 MEDIUM 6.5 CVE-2016-9430 An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (segmentation fau… W3m after 0.5.3-30 Fix from $1,6002016-12-12 HIGH 8.3 CVE-2016-5423EPSS 6% PostgreSQL before 9.1.23, 9.2.x before 9.2.18, 9.3.x before 9.3.14, 9.4.x before 9.4.9, and 9.5.x before 9.5.4 allow remote authenticated users to ca… Debian Linux after 9.1.22 Fix from $1,9502016-12-09 MEDIUM 5.5 CVE-2016-9888 An error within the "tar_directory_for_file()" function (gsf-infile-tar.c) in GNOME Structured File Library before 1.14.41 can be exploited to trigge… Libgsf after 1.14.40 Fix from $1,6002016-12-08 HIGH 7.8 CVE-2016-9313 security/keys/big_key.c in the Linux kernel before 4.8.7 mishandles unsuccessful crypto registration in conjunction with successful key-type registra… Linux Kernel 4.8.7+ Fix from $1,9502016-11-28 MEDIUM 5.5 CVE-2016-8646 The hash_accept function in crypto/algif_hash.c in the Linux kernel before 4.3.6 allows local users to cause a denial of service (OOPS) by attempting… Linux Kernel after 4.3.5 Fix from $1,6002016-11-28 MEDIUM 5.5 CVE-2016-8630 The x86_decode_insn function in arch/x86/kvm/emulate.c in the Linux kernel before 4.8.7, when KVM is enabled, allows local users to cause a denial of… Linux Kernel after 4.8.6 Fix from $1,6002016-11-28 MEDIUM 5.5 CVE-2015-8970 crypto/algif_skcipher.c in the Linux kernel before 4.4.2 does not verify that a setkey operation has been performed on an AF_ALG socket before an acc… Linux Kernel after 4.4.1 Fix from $1,6002016-11-28