Total
11925 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2014-8074 | 1 Foxitsoftware | 1 Foxit Pdf Sdk Activex | 2016-04-04 | 6.8 MEDIUM | N/A |
Buffer overflow in the SetLogFile method in Foxit.FoxitPDFSDKProCtrl.5 in Foxit PDF SDK ActiveX 2.3 through 5.0.1820 before 5.0.2.924 allows remote attackers to execute arbitrary code via a long string, related to global variables. | |||||
CVE-2014-2282 | 1 Wireshark | 1 Wireshark | 2016-04-04 | 4.3 MEDIUM | N/A |
The dissect_protocol_data_parameter function in epan/dissectors/packet-m3ua.c in the M3UA dissector in Wireshark 1.10.x before 1.10.6 does not properly allocate memory, which allows remote attackers to cause a denial of service (application crash) via a crafted SS7 MTP3 packet. | |||||
CVE-2015-0555 | 1 Samsung | 1 Ipolis Device Manager | 2016-04-01 | 6.8 MEDIUM | N/A |
Buffer overflow in the XnsSdkDeviceIpInstaller.ocx ActiveX control in Samsung iPOLiS Device Manager 1.12.2 allows remote attackers to execute arbitrary code via a long string in the first argument to the (1) ReadConfigValue or (2) WriteConfigValue function. | |||||
CVE-2014-1635 | 1 Belkin | 2 N750 Wireless Router, N750 Wireless Router Firmware | 2016-03-31 | 10.0 HIGH | N/A |
Buffer overflow in login.cgi in MiniHttpd in Belkin N750 Router with firmware before F9K1103_WW_1.10.17m allows remote attackers to execute arbitrary code via a long string in the jump parameter. | |||||
CVE-2016-0804 | 1 Google | 1 Android | 2016-03-14 | 10.0 HIGH | 9.8 CRITICAL |
The NuPlayer::GenericSource::notifyPreparedAndCleanup function in media/libmediaplayerservice/nuplayer/GenericSource.cpp in mediaserver in Android 5.x before 5.1.1 LMY49G and 6.x before 2016-02-01 improperly manages mDrmManagerClient objects, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 25070434. | |||||
CVE-2016-0803 | 1 Google | 1 Android | 2016-03-10 | 10.0 HIGH | 9.8 CRITICAL |
libstagefright in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file that triggers a large memory allocation in the (1) SoftMPEG4Encoder or (2) SoftVPXEncoder component, aka internal bug 25812794. | |||||
CVE-2016-0212 | 1 Ibm | 1 Tivoli Storage Manager Fastback | 2016-03-03 | 10.0 HIGH | 9.8 CRITICAL |
Stack-based buffer overflow in IBM Tivoli Storage Manager FastBack 5.5 and 6.1.x through 6.1.11.1 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors, a different vulnerability than CVE-2016-0213 and CVE-2016-0216. | |||||
CVE-2016-0213 | 1 Ibm | 1 Tivoli Storage Manager Fastback | 2016-03-03 | 10.0 HIGH | 9.8 CRITICAL |
Stack-based buffer overflow in IBM Tivoli Storage Manager FastBack 5.5 and 6.1.x through 6.1.11.1 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors, a different vulnerability than CVE-2016-0212 and CVE-2016-0216. | |||||
CVE-2016-0216 | 1 Ibm | 1 Tivoli Storage Manager Fastback | 2016-03-03 | 10.0 HIGH | 9.8 CRITICAL |
Stack-based buffer overflow in IBM Tivoli Storage Manager FastBack 5.5 and 6.1.x through 6.1.11.1 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors, a different vulnerability than CVE-2016-0212 and CVE-2016-0213. | |||||
CVE-2015-8773 | 1 Mcafee | 1 File Lock | 2016-02-25 | 7.8 HIGH | 7.5 HIGH |
Stack-based buffer overflow in McPvDrv.sys 4.6.111.0 in McAfee File Lock 5.x in McAfee Total Protection allows attackers to cause a denial of service (system crash) via a long vault GUID in an ioctl call. | |||||
CVE-2016-0869 | 1 Microsys | 1 Promotic | 2016-02-23 | 7.1 HIGH | 5.0 MEDIUM |
Heap-based buffer overflow in MICROSYS PROMOTIC before 8.3.11 allows remote authenticated users to cause a denial of service via a malformed HTML document. | |||||
CVE-2015-7909 | 1 Hospira | 2 Communication Engine, Lifecare Pca Infusion System | 2016-02-09 | 7.5 HIGH | 7.3 HIGH |
Stack-based buffer overflow in Hospira Communication Engine (CE) before 1.2 in LifeCare PCA Infusion System 5.07, Plum A+ Infusion System 13.40, and Plum A+3 Infusion System 13.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via traffic on TCP port 5000. | |||||
CVE-2016-0851 | 1 Advantech | 1 Webaccess | 2016-01-20 | 7.8 HIGH | 7.5 HIGH |
Advantech WebAccess before 8.1 allows remote attackers to cause a denial of service (out-of-bounds memory access) via unspecified vectors. | |||||
CVE-2015-8306 | 1 Huawei | 2 P8, P8 Firmware | 2016-01-20 | 9.3 HIGH | 7.8 HIGH |
Buffer overflow in the HIFI driver in Huawei P8 phones with software GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL00C92B230, GRA-CL10 before GRA-CL10C92B230, GRA-UL00 before GRA-UL00C00B230, and GRA-UL10 before GRA-UL10C00B230 allows attackers to cause a denial of service (system crash) or execute arbitrary code via an unspecified parameter. | |||||
CVE-2015-7939 | 1 Unitronics | 1 Visilogic Oplc Ide | 2016-01-18 | 9.3 HIGH | 9.6 CRITICAL |
Heap-based buffer overflow in Unitronics VisiLogic OPLC IDE before 9.8.09 allows remote attackers to execute arbitrary code via a long vlp filename. | |||||
CVE-2015-8098 | 1 F5 | 1 Big-ip Access Policy Manager | 2016-01-15 | 10.0 HIGH | 9.8 CRITICAL |
F5 BIG-IP APM 11.4.1 before 11.4.1 HF9, 11.5.x before 11.5.3, and 11.6.0 before 11.6.0 HF4 allow remote attackers to cause a denial of service or execute arbitrary code via unspecified vectors related to processing a Citrix Remote Desktop connection through a virtual server configured with a remote desktop profile, aka an "Out-of-bounds memory vulnerability." | |||||
CVE-2016-1131 | 1 Dx Library Project | 1 Dx Library | 2016-01-08 | 6.8 MEDIUM | 7.8 HIGH |
Buffer overflow in the CL_vsprintf function in Takumi Yamada DX Library before 3.16 allows remote attackers to execute arbitrary code via a crafted string. | |||||
CVE-2015-7422 | 2 Ibm, Microsoft | 2 I Access, Windows | 2016-01-07 | 2.1 LOW | 5.5 MEDIUM |
Buffer overflow in IBM i Access 7.1 on Windows allows local users to cause a denial of service (application crash) via unspecified vectors. | |||||
CVE-2015-2895 | 1 Idera | 1 Uptime Infrastructure Monitor | 2015-12-31 | 7.5 HIGH | 7.3 HIGH |
Buffer overflow in the up.time client in Idera Uptime Infrastructure Monitor 7.4 might allow remote attackers to execute arbitrary code via long command input. | |||||
CVE-2014-1371 | 1 Apple | 2 Mac Os X, Mac Os X Server | 2015-12-22 | 7.5 HIGH | N/A |
Array index error in Dock in Apple OS X before 10.9.4 allows attackers to execute arbitrary code or cause a denial of service (incorrect function-pointer dereference and application crash) by leveraging access to a sandboxed application for sending a message. |