VYPR

CVEs

128,454 total · page 2482 of 2,570

AllCriticalHighKEV
  • CVE-2016-7582HigFeb 20, 2017
    Apple Inc.
    macOS
    risk 0.57cvss 8.8epss 0.02

    An issue was discovered in certain Apple products. macOS before 10.12 is affected. The issue involves the "Intel Graphics Driver" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

  • CVE-2016-7578HigFeb 20, 2017
    Apple Inc.
    Safari
    risk 0.57cvss 8.8epss 0.02

    An issue was discovered in certain Apple products. iOS before 10.1 is affected. Safari before 10.0.1 is affected. iCloud before 6.0.1 is affected. iTunes before 12.5.2 is affected. tvOS before 10.0.1 is affected. The issue involves the "WebKit" component. It allows remote…

  • CVE-2016-4780HigFeb 20, 2017
    Apple Inc.
    macOS
    risk 0.51cvss 7.8epss 0.01

    An issue was discovered in certain Apple products. macOS before 10.12.1 is affected. The issue involves the "Thunderbolt" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via a crafted app.

  • CVE-2016-4764HigFeb 20, 2017
    Apple Inc.
    Safari
    risk 0.57cvss 8.8epss 0.02

    An issue was discovered in certain Apple products. iOS before 10 is affected. Safari before 10 is affected. iTunes before 12.5.1 is affected. tvOS before 10 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a…

  • CVE-2016-4743HigFeb 20, 2017
    Apple Inc.
    Safari
    risk 0.46cvss 7.1epss 0.01

    An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to obtain sensitive…

  • CVE-2016-4693HigFeb 20, 2017
    Apple Inc.
    watchOS
    risk 0.49cvss 7.5epss 0.01

    An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "Security" component, which makes it easier for attackers to bypass cryptographic protection mechanisms by…

  • CVE-2016-4692HigFeb 20, 2017
    Apple Inc.
    Safari
    risk 0.57cvss 8.8epss 0.02

    An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or…

  • CVE-2016-4691HigFeb 20, 2017
    Apple Inc.
    watchOS
    risk 0.57cvss 8.8epss 0.02

    An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "FontParser" component. It allows remote attackers to execute arbitrary code or cause a denial of service…

  • CVE-2016-4689HigFeb 20, 2017
    Apple Inc.
    iOS
    risk 0.49cvss 7.5epss 0.01

    An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "Mail" component, which does not alert the user to an S/MIME email signature that used a revoked certificate.

  • CVE-2016-4688HigFeb 20, 2017
    Apple Inc.
    tvOS
    risk 0.57cvss 8.8epss 0.03

    An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. watchOS before 3.1.3 is affected. The issue involves the "FontParser" component. It allows remote…

  • CVE-2016-4683HigFeb 20, 2017
    Apple Inc.
    macOS
    risk 0.51cvss 7.8epss 0.01

    An issue was discovered in certain Apple products. macOS before 10.12.1 is affected. The issue involves the "ImageIO" component. It allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds memory access and application crash) via a crafted…

  • CVE-2016-4682HigFeb 20, 2017
    Apple Inc.
    macOS
    risk 0.46cvss 7.1epss 0.01

    An issue was discovered in certain Apple products. macOS before 10.12 is affected. macOS before 10.12.1 is affected. The issue involves the "ImageIO" component. It allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and…

  • CVE-2016-4681HigFeb 20, 2017
    Apple Inc.
    macOS
    risk 0.51cvss 7.8epss 0.01

    An issue was discovered in certain Apple products. macOS before 10.12.1 is affected. The issue involves the "Core Image" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted JPEG file.

  • CVE-2016-4678HigFeb 20, 2017
    Apple Inc.
    macOS
    risk 0.51cvss 7.8epss 0.00

    An issue was discovered in certain Apple products. macOS before 10.12.1 is affected. The issue involves the "AppleSMC" component. It allows local users to gain privileges or cause a denial of service (NULL pointer dereference) via unspecified vectors.

  • CVE-2016-4677HigFeb 20, 2017
    Apple Inc.
    Safari
    risk 0.57cvss 8.8epss 0.02

    An issue was discovered in certain Apple products. iOS before 10.1 is affected. Safari before 10.0.1 is affected. tvOS before 10.0.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory…

  • CVE-2016-4675HigFeb 20, 2017
    Apple Inc.
    tvOS
    risk 0.51cvss 7.8epss 0.02

    An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. The issue involves the "libxpc" component. It allows attackers to execute arbitrary code in a…

  • CVE-2016-4674HigFeb 20, 2017
    Apple Inc.
    macOS
    risk 0.51cvss 7.8epss 0.00

    An issue was discovered in certain Apple products. macOS before 10.12.1 is affected. The issue involves the "ATS" component. It allows local users to gain privileges or cause a denial of service (memory corruption and application crash) via unspecified vectors.

  • CVE-2016-4673HigFeb 20, 2017
    Apple Inc.
    tvOS
    risk 0.51cvss 7.8epss 0.02

    An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. The issue involves the "CoreGraphics" component. It allows remote attackers to execute arbitrary code…

  • CVE-2016-4671HigFeb 20, 2017
    Apple Inc.
    macOS
    risk 0.51cvss 7.8epss 0.03

    An issue was discovered in certain Apple products. macOS before 10.12.1 is affected. The issue involves the "ImageIO" component. It allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write and application crash) via a crafted PDF file.

  • CVE-2016-4669HigFeb 20, 2017
    Apple Inc.
    tvOS
    risk 0.54cvss 7.8epss 0.04

    An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. The issue involves the "Kernel" component. It allows local users to execute arbitrary code in a…

  • CVE-2016-4667HigFeb 20, 2017
    Apple Inc.
    macOS
    risk 0.57cvss 8.8epss 0.02

    An issue was discovered in certain Apple products. macOS before 10.12.1 is affected. The issue involves the "ATS" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted font.

  • CVE-2016-4666HigFeb 20, 2017
    Apple Inc.
    Safari
    risk 0.57cvss 8.8epss 0.02

    An issue was discovered in certain Apple products. iOS before 10.1 is affected. Safari before 10.0.1 is affected. tvOS before 10.0.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory…

  • CVE-2016-4662HigFeb 20, 2017
    Apple Inc.
    macOS
    risk 0.51cvss 7.8epss 0.01

    An issue was discovered in certain Apple products. macOS before 10.12.1 is affected. The issue involves the "AppleGraphicsControl" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

  • CVE-2016-4660HigFeb 20, 2017
    Apple Inc.
    tvOS
    risk 0.46cvss 7.1epss 0.02

    An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. The issue involves the "FontParser" component. It allows remote attackers to obtain sensitive…

  • CVE-2016-4617HigFeb 20, 2017
    Apple Inc.
    macOS
    risk 0.57cvss 8.8epss 0.00

    An issue was discovered in certain Apple products. macOS before 10.12 is affected. The issue involves a sandbox escape related to launchctl process spawning in the "libxpc" component.

  • CVE-2017-6074HigFeb 18, 2017
    Linux
    Kernel
    risk 0.54cvss 7.8epss 0.06

    The dccp_rcv_state_process function in net/dccp/input.c in the Linux kernel through 4.9.11 mishandles DCCP_PKT_REQUEST packet data structures in the LISTEN state, which allows local users to obtain root privileges or cause a denial of service (double free) via an application…

  • CVE-2017-6001HigFeb 18, 2017
    Linux
    Kernel
    risk 0.46cvss 7.0epss 0.02

    Race condition in kernel/events/core.c in the Linux kernel before 4.9.7 allows local users to gain privileges via a crafted application that makes concurrent perf_event_open system calls for moving a software group into a hardware context. NOTE: this vulnerability exists…

  • CVE-2017-6065HigFeb 17, 2017
    Genixcms
    Genixcms
    risk 0.57cvss 8.8epss 0.01

    SQL injection vulnerability in inc/lib/Control/Backend/menus.control.php in GeniXCMS through 1.0.2 allows remote authenticated users to execute arbitrary SQL commands via the order parameter.

  • CVE-2017-6055HigFeb 17, 2017
    Eparaksts
    Eparakstitajs 3
    risk 0.51cvss 7.8epss 0.02

    XML external entity (XXE) vulnerability in eParakstitajs 3 before 1.3.9 and eParaksts Java lib before 2.5.13 allows remote attackers to read arbitrary files or possibly have unspecified other impact via a crafted edoc file.

  • CVE-2016-6252HigFeb 17, 2017
    Shadow Project
    Shadow
    risk 0.51cvss 7.8epss 0.00

    Integer overflow in shadow 4.2.1 allows local users to gain privileges via crafted input to newuidmap.

  • CVE-2016-5044HigFeb 17, 2017
    Libdwarf Project
    Libdwarf
    risk 0.49cvss 7.5epss 0.04

    The WRITE_UNALIGNED function in dwarf_elf_access.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds write and crash) via a crafted DWARF section.

  • CVE-2016-5043HigFeb 17, 2017
    Libdwarf Project
    Libdwarf
    risk 0.49cvss 7.5epss 0.04

    The dwarf_dealloc function in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted DWARF section.

  • CVE-2016-5042HigFeb 17, 2017
    Libdwarf Project
    Libdwarf
    risk 0.49cvss 7.5epss 0.04

    The dwarf_get_aranges_list function in libdwarf before 20160923 allows remote attackers to cause a denial of service (infinite loop and crash) via a crafted DWARF section.

  • CVE-2016-5040HigFeb 17, 2017
    Libdwarf Project
    Libdwarf
    risk 0.49cvss 7.5epss 0.04

    libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a large length value in a compilation unit header.

  • CVE-2016-5039HigFeb 17, 2017
    Libdwarf Project
    Libdwarf
    risk 0.49cvss 7.5epss 0.04

    The get_attr_value function in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted object with all-bits on.

  • CVE-2016-5038HigFeb 17, 2017
    Libdwarf Project
    Libdwarf
    risk 0.49cvss 7.5epss 0.04

    The dwarf_get_macro_startend_file function in dwarf_macro5.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted string offset for .debug_str.

  • CVE-2016-5036HigFeb 17, 2017
    Libdwarf Project
    Libdwarf
    risk 0.49cvss 7.5epss 0.04

    The dump_block function in print_sections.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read) via crafted frame data.

  • CVE-2017-6056HigFeb 17, 2017
    Apache
    Tomcat
    risk 0.49cvss 7.5epss 0.08

    It was discovered that a programming error in the processing of HTTPS requests in the Apache Tomcat servlet and JSP engine may result in denial of service via an infinite loop. The denial of service is easily achievable as a consequence of backporting a CVE-2016-6816 fix but not…

  • CVE-2017-6014HigFeb 17, 2017
    Wireshark
    Wireshark
    risk 0.49cvss 7.5epss 0.03

    In Wireshark 2.2.4 and earlier, a crafted or malformed STANAG 4607 capture file will cause an infinite loop and memory exhaustion. If the packet size field in a packet header is null, the offset to read from will not advance, causing continuous attempts to read the same zero…

  • CVE-2017-5012HigFeb 17, 2017
    Google
    Chrome
    risk 0.57cvss 8.8epss 0.02

    A heap buffer overflow in V8 in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

  • CVE-2017-5009HigFeb 17, 2017
    Google
    Chrome
    risk 0.57cvss 8.8epss 0.01

    WebRTC in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to perform proper bounds checking, which allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

  • CVE-2017-5357HigFeb 17, 2017
    GNU
    Ed
    risk 0.49cvss 7.5epss 0.03

    regex.c in GNU ed before 1.14.1 allows attackers to cause a denial of service (crash) via a malformed command, which triggers an invalid free.

  • CVE-2016-9831HigFeb 17, 2017
    Libming
    Libming
    risk 0.51cvss 7.8epss 0.02

    Heap-based buffer overflow in the parseSWF_RGBA function in parser.c in the listswf tool in libming 0.4.7 allows remote attackers to have unspecified impact via a crafted SWF file.

  • CVE-2016-9829HigFeb 17, 2017
    Libming
    Libming
    risk 0.51cvss 7.8epss 0.02

    Heap-based buffer overflow in the parseSWF_DEFINEFONT function in parser.c in the listswf tool in libming 0.4.7 allows remote attackers to have unspecified impact via a crafted SWF file.

  • CVE-2016-9637HigFeb 17, 2017
    Xen
    Xen
    risk 0.49cvss 7.5epss 0.00

    The (1) ioport_read and (2) ioport_write functions in Xen, when qemu is used as a device model within Xen, might allow local x86 HVM guest OS administrators to gain qemu process privileges via vectors involving an out-of-range ioport access.

  • CVE-2016-5417HigFeb 17, 2017
    GNU
    Glibc
    risk 0.49cvss 7.5epss 0.03

    Memory leak in the __res_vinit function in the IPv6 name server management code in libresolv in GNU C Library (aka glibc or libc6) before 2.24 allows remote attackers to cause a denial of service (memory consumption) by leveraging partial initialization of internal resolver data…

  • CVE-2016-4312HigFeb 17, 2017
    risk 0.52cvss 7.5epss 0.06

    XML external entity (XXE) vulnerability in the XACML flow feature in WSO2 Identity Server 5.1.0 before WSO2-CARBON-PATCH-4.4.0-0231 allows remote authenticated users with access to XACML features to read arbitrary files, cause a denial of service, conduct server-side request…

  • CVE-2016-4311HigFeb 17, 2017
    risk 0.60cvss 8.8epss 0.03

    Cross-site request forgery (CSRF) vulnerability in the XACML flow feature in WSO2 Identity Server 5.1.0 allows remote attackers to hijack the authentication of privileged users for requests that process XACML requests via an entitlement/eval-policy-submit.jsp request.

  • CVE-2016-5919HigFeb 16, 2017
    IBM
    Security Access Manager for Web
    risk 0.49cvss 7.5epss 0.01

    IBM Security Access Manager for Web 7.0.0, 8.0.0, and 9.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM Reference #: 1996868.

  • CVE-2017-6004HigFeb 16, 2017
    Pcre
    Pcre
    risk 0.49cvss 7.5epss 0.05

    The compile_bracket_matchingpath function in pcre_jit_compile.c in PCRE through 8.x before revision 1680 (e.g., the PHP 7.1.1 bundled version) allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted regular expression.