VYPR

CVEs

31,844 total · page 580 of 637

AllCriticalHighKEV
  • CVE-2016-3631HigOct 3, 2016
    LibTIFF
    Libtiff
    risk 0.49cvss 7.5epss 0.03

    The (1) cpStrips and (2) cpTiles functions in the thumbnail tool in LibTIFF 4.0.6 and earlier allow remote attackers to cause a denial of service (out-of-bounds read) via vectors related to the bytecounts[] array variable.

  • CVE-2016-3624HigOct 3, 2016
    LibTIFF
    Libtiff
    risk 0.49cvss 7.5epss 0.04

    The cvtClump function in the rgb2ycbcr tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) by setting the "-v" option to -1.

  • CVE-2016-3623HigOct 3, 2016
    LibTIFF
    Libtiff
    risk 0.49cvss 7.5epss 0.06

    The rgb2ycbcr tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (divide-by-zero) by setting the (1) v or (2) h parameter to 0.

  • CVE-2016-3621HigOct 3, 2016
    LibTIFF
    Libtiff
    risk 0.57cvss 8.8epss 0.02

    The LZWEncode function in tif_lzw.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the "-c lzw" option is used, allows remote attackers to cause a denial of service (buffer over-read) via a crafted BMP image.

  • CVE-2016-3620HigOct 3, 2016
    LibTIFF
    Libtiff
    risk 0.49cvss 7.5epss 0.03

    The ZIPEncode function in tif_zip.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the "-c zip" option is used, allows remote attackers to cause a denial of service (buffer over-read) via a crafted BMP image.

  • CVE-2016-1240HigOct 3, 2016
    Apache
    Tomcat
    risk 0.55cvss 7.8epss 0.10

    The Tomcat init script in the tomcat7 package before 7.0.56-3+deb8u4 and tomcat8 package before 8.0.14-1+deb8u3 on Debian jessie and the tomcat6 and libtomcat6-java packages before 6.0.35-1ubuntu3.8 on Ubuntu 12.04 LTS, the tomcat7 and libtomcat7-java packages before…

  • CVE-2016-5995HigOct 1, 2016
    IBM
    Db2
    risk 0.47cvss 7.3epss 0.00

    Untrusted search path vulnerability in IBM DB2 9.7 through FP11, 10.1 through FP5, 10.5 before FP8, and 11.1 GA on Linux, AIX, and HP-UX allows local users to gain privileges via a Trojan horse library that is accessed by a setuid or setgid program.

  • CVE-2016-5986HigOct 1, 2016
    IBM
    Websphere Application Server
    risk 0.49cvss 7.5epss 0.02

    IBM WebSphere Application Server (WAS) 7.x before 7.0.0.43, 8.0.x before 8.0.0.13, 8.5.x before 8.5.5.11, 9.0.x before 9.0.0.2, and Liberty before 16.0.0.3 mishandles responses, which allows remote attackers to obtain sensitive information via unspecified vectors.

  • CVE-2016-6651HigSep 30, 2016
    Pivot
    Ops Manager
    risk 0.57cvss 8.8epss 0.02

    The UAA /oauth/token endpoint in Pivotal Cloud Foundry (PCF) before 243; UAA 2.x before 2.7.4.8, 3.x before 3.3.0.6, and 3.4.x before 3.4.5; UAA BOSH before 11.7 and 12.x before 12.6; Elastic Runtime before 1.6.40, 1.7.x before 1.7.21, and 1.8.x before 1.8.2; and Ops Manager…

  • CVE-2016-4386HigSep 29, 2016
    HPE
    Network Automation Software
    risk 0.51cvss 7.8epss 0.01

    HPE Network Automation Software 10.10 allows local users to write to arbitrary files via unspecified vectors.

  • CVE-2016-4385HigSep 29, 2016
    HPE
    Network Automation Software
    risk 0.48cvss 7.3epss 0.04

    The RMI service in HP Network Automation Software 9.1x, 9.2x, 10.0x before 10.00.02.01, and 10.1x before 10.11.00.01 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) and Commons BeanUtils…

  • CVE-2016-7191HigSep 28, 2016
    risk 0.53cvss 8.1epss 0.29

    The Microsoft Azure Active Directory Passport (aka Passport-Azure-AD) library 1.x before 1.4.6 and 2.x before 2.0.1 for Node.js does not recognize the validateIssuer setting, which allows remote attackers to bypass authentication via a crafted token.

  • CVE-2016-2776HigSep 28, 2016
    Isc
    Bind
    risk 0.59cvss 7.5epss 0.89

    buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly construct responses, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query.

  • CVE-2016-7444HigSep 27, 2016
    mod_gnutls
    mod_gnutls
    risk 0.49cvss 7.5epss 0.02

    The gnutls_ocsp_resp_check_crt function in lib/x509/ocsp.c in GnuTLS before 3.4.15 and 3.5.x before 3.5.4 does not verify the serial length of an OCSP response, which might allow remote attackers to bypass an intended certificate validation mechanism via vectors involving…

  • CVE-2016-7045HigSep 27, 2016
    Irssi
    Irssi
    risk 0.49cvss 7.5epss 0.05

    The format_send_to_gui function in the format parsing code in Irssi before 0.8.20 allows remote attackers to cause a denial of service (heap corruption and crash) via vectors involving the length of a string.

  • CVE-2016-7044HigSep 27, 2016
    Irssi
    Irssi
    risk 0.49cvss 7.5epss 0.05

    The unformat_24bit_color function in the format parsing code in Irssi before 0.8.20, when compiled with true-color enabled, allows remote attackers to cause a denial of service (heap corruption and crash) via an incomplete 24bit color code.

  • CVE-2016-4978HigSep 27, 2016
    risk 0.47cvss 7.2epss 0.07

    The getObject method of the javax.jms.ObjectMessage class in the (1) JMS Core client, (2) Artemis broker, and (3) Artemis REST component in Apache ActiveMQ Artemis before 1.4.0 might allow remote authenticated users with permission to send messages to the Artemis broker to…

  • CVE-2016-7052HigSep 26, 2016
    OpenSSL Project
    OpenSSL
    risk 0.49cvss 7.5epss 0.30

    crypto/x509/x509_vfy.c in OpenSSL 1.0.2i allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) by triggering a CRL operation.

  • CVE-2016-6305HigSep 26, 2016
    OpenSSL Project
    OpenSSL
    risk 0.52cvss 7.5epss 0.16

    The ssl3_read_bytes function in record/rec_layer_s3.c in OpenSSL 1.1.0 before 1.1.0a allows remote attackers to cause a denial of service (infinite loop) by triggering a zero-length record in an SSL_peek call.

  • CVE-2016-6304HigSep 26, 2016
    OpenSSL Project
    OpenSSL
    risk 0.51cvss 7.5epss 0.63

    Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow remote attackers to cause a denial of service (memory consumption) via large OCSP Status Request extensions.

  • CVE-2016-6142HigSep 26, 2016
    SAP
    Hana
    risk 0.49cvss 7.5epss 0.03

    SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allows remote attackers to inject arbitrary audit trail fields into the SYSLOG via vectors related to the SQL protocol, aka SAP Security Note 2197459.

  • CVE-2016-7162HigSep 26, 2016
    File Roller Project
    File Roller
    risk 0.49cvss 7.5epss 0.03

    The _g_file_remove_directory function in file-utils.c in File Roller 3.5.4 through 3.20.2 allows remote attackers to delete arbitrary files via a symlink attack on a folder in an archive.

  • CVE-2016-6518HigSep 26, 2016
    Huawei
    S7700, S9300, S9700, S12700
    risk 0.49cvss 7.5epss 0.01

    Memory leak in Huawei S9300, S5300, S5700, S6700, S7700, S9700, and S12700 devices allows remote attackers to cause a denial of service (memory consumption and restart) via a large number of malformed packets.

  • CVE-2016-7098HigSep 26, 2016
    risk 0.56cvss 8.1epss 0.07

    Race condition in wget 1.17 and earlier, when used in recursive or mirroring mode to download a single file, might allow remote servers to bypass intended access list restrictions by keeping an HTTP connection open.

  • CVE-2016-6276HigSep 26, 2016
    Citrix Systems
    Virtual Delivery Agent
    risk 0.51cvss 7.8epss 0.00

    Citrix Linux Virtual Delivery Agent (aka VDA, formerly Linux Virtual Desktop) before 1.4.0 allows local users to gain root privileges via unspecified vectors.

  • CVE-2016-5406HigSep 26, 2016
    Red Hat
    Jboss Enterprise Application Platform
    risk 0.57cvss 8.8epss 0.03

    The domain controller in Red Hat JBoss Enterprise Application Platform (EAP) 7.x before 7.0.2 allows remote authenticated users to gain privileges by leveraging failure to propagate administrative RBAC configuration to all slaves.

  • CVE-2016-3110HigSep 26, 2016
    Fedoraproject
    Fedora
    risk 0.49cvss 7.5epss 0.04

    mod_cluster, as used in Red Hat JBoss Web Server 2.1, allows remote attackers to cause a denial of service (Apache http server crash) via an MCMP message containing a series of = (equals) characters after a legitimate element.

  • CVE-2016-5996HigSep 26, 2016
    IBM
    Tealeaf Customer Experience
    risk 0.49cvss 7.5epss 0.01

    The web portal in IBM Tealeaf Customer Experience before 8.7.1.8847 FP10, 8.8 before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.5108_9.0.1A FP5, 9.0.2 before 9.0.2.1223 FP3, and 9.0.2A before 9.0.2.5224_9.0.2A FP3 does not enforce password-length…

  • CVE-2016-5971HigSep 26, 2016
    IBM
    Security Privileged Identity Manager
    risk 0.46cvss 7.1epss 0.01

    IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance 2.x before 2.0.2 FP8 allows remote authenticated users to read arbitrary files or cause a denial of service (memory consumption) via an XML document containing an external entity declaration in conjunction with…

  • CVE-2016-5963HigSep 26, 2016
    IBM
    Security Privileged Identity Manager
    risk 0.57cvss 8.8epss 0.02

    IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance 2.x before 2.0.2 FP8 does not properly validate updates, which allows remote authenticated users to execute arbitrary code via unspecified vectors.

  • CVE-2016-5957HigSep 26, 2016
    IBM
    Security Privileged Identity Manager
    risk 0.49cvss 7.5epss 0.01

    IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance 2.x before 2.0.2 FP8 allows remote attackers to defeat cryptographic protection mechanisms and obtain sensitive information by leveraging a weak algorithm.

  • CVE-2016-3007HigSep 26, 2016
    IBM
    Connections
    risk 0.57cvss 8.8epss 0.01

    Cross-site request forgery (CSRF) vulnerability in IBM Connections 4.x through 4.5 CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to hijack the authentication of arbitrary users.

  • CVE-2016-7549HigSep 25, 2016
    Google
    Chrome
    risk 0.57cvss 8.8epss 0.01

    Google Chrome before 53.0.2785.113 does not ensure that the recipient of a certain IPC message is a valid RenderFrame or RenderWidget, which allows remote attackers to cause a denial of service (invalid pointer dereference and application crash) or possibly have unspecified…

  • CVE-2016-5175HigSep 25, 2016
    Google
    Chrome
    risk 0.57cvss 8.8epss 0.01

    Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.113 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.

  • CVE-2016-5173HigSep 25, 2016
    Google
    Chrome
    risk 0.46cvss 7.1epss 0.01

    The extensions subsystem in Google Chrome before 53.0.2785.113 does not properly restrict access to Object.prototype, which allows remote attackers to load unintended resources, and consequently trigger unintended JavaScript function calls and bypass the Same Origin Policy via…

  • CVE-2016-5171HigSep 25, 2016
    Google
    Chrome
    risk 0.57cvss 8.8epss 0.01

    WebKit/Source/bindings/templates/interface.cpp in Blink, as used in Google Chrome before 53.0.2785.113, does not prevent certain constructor calls, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted…

  • CVE-2016-5170HigSep 25, 2016
    Google
    Chrome
    risk 0.57cvss 8.8epss 0.01

    WebKit/Source/bindings/modules/v8/V8BindingForModules.cpp in Blink, as used in Google Chrome before 53.0.2785.113, does not properly consider getter side effects during array key conversion, which allows remote attackers to cause a denial of service (use-after-free) or possibly…

  • CVE-2016-5169HigSep 25, 2016
    Google
    Chrome
    risk 0.57cvss 8.8epss 0.01

    Format string vulnerability in Google Chrome OS before 53.0.2785.103 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

  • CVE-2016-4779HigSep 25, 2016
    Apple Inc.
    OS X
    risk 0.51cvss 7.8epss 0.02

    Apple Type Services (ATS) in Apple OS X before 10.12 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file.

  • CVE-2016-4778HigSep 25, 2016
    Apple Inc.
    tvOS
    risk 0.51cvss 7.8epss 0.02

    The kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

  • CVE-2016-4777HigSep 25, 2016
    Apple Inc.
    tvOS
    risk 0.51cvss 7.8epss 0.02

    The kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (invalid pointer dereference) via a crafted app.

  • CVE-2016-4776HigSep 25, 2016
    Apple Inc.
    tvOS
    risk 0.46cvss 7.1epss 0.01

    The kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to obtain sensitive memory-layout information or cause a denial of service (out-of-bounds read) via a crafted app, a different vulnerability than CVE-2016-4773 and…

  • CVE-2016-4775HigSep 25, 2016
    Apple Inc.
    tvOS
    risk 0.51cvss 7.8epss 0.00

    The kernel in Apple OS X before 10.12, tvOS before 10, and watchOS before 3 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.

  • CVE-2016-4774HigSep 25, 2016
    Apple Inc.
    tvOS
    risk 0.46cvss 7.1epss 0.01

    The kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to obtain sensitive memory-layout information or cause a denial of service (out-of-bounds read) via a crafted app, a different vulnerability than CVE-2016-4773 and…

  • CVE-2016-4773HigSep 25, 2016
    Apple Inc.
    tvOS
    risk 0.46cvss 7.1epss 0.01

    The kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to obtain sensitive memory-layout information or cause a denial of service (out-of-bounds read) via a crafted app, a different vulnerability than CVE-2016-4774 and…

  • CVE-2016-4772HigSep 25, 2016
    Apple Inc.
    tvOS
    risk 0.49cvss 7.5epss 0.02

    The kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to cause a denial of service (unintended lock) via unspecified vectors.

  • CVE-2016-4769HigSep 25, 2016
    Apple Inc.
    Safari
    risk 0.57cvss 8.8epss 0.02

    WebKit in Apple iTunes before 12.5.1 on Windows and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

  • CVE-2016-4768HigSep 25, 2016
    Apple Inc.
    Safari
    risk 0.57cvss 8.8epss 0.02

    WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4759,…

  • CVE-2016-4767HigSep 25, 2016
    Apple Inc.
    Safari
    risk 0.57cvss 8.8epss 0.02

    WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4759,…

  • CVE-2016-4766HigSep 25, 2016
    Apple Inc.
    Safari
    risk 0.57cvss 8.8epss 0.02

    WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4759,…