CWE-17 vulnerabilities

• cisco ios xe, ios xe software 16.10.1 +1 more Cisco IOS XE Software Web UI Unauthenticated Proxy Service Vulnerability CVE-2020-3222 4.3 MediumJune 3, 2020
• cloud foundry controller, cloudfoundry capi-release, cf-release +1 more +3 more Cloud Foundry Cloud Controller, capi-release versions prior to 1.0.0 and cf-release versions... CVE-2016-2169 5.3 MediumApril 18, 2018
• qualcomm mdm9607 firmware, mdm9635m firmware, mdm9640 firmware +24 more +26 more In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and... CVE-2016-10481 9.8 CriticalApril 18, 2018
• qualcomm mdm9206 firmware, mdm9607 firmware, mdm9615 firmware +33 more +35 more In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and... CVE-2015-9213 7.5 HighApril 18, 2018
• tqdm project tqdm TDQM Arbitrary Code Execution CVE-2016-10075 Fix available 7.8 HighJanuary 19, 2017
• ietf ipv6 An issue was discovered in the IPv6 protocol specification, related to ICMP Packet Too Big (PTB)... CVE-2016-10142 Fix available 8.6 HighJanuary 14, 2017
• jenkins, redhat openshift +1 more Jenkins allows Remote Users to Inject Build Parameters CVE-2016-3721 Fix available 6.5 MediumMay 17, 2016
• redhat enterprise linux, enterprise linux desktop, enterprise linux hpc node +5 more +7 more The calloc function in the glibc package in Red Hat Enterprise Linux (RHEL) 6.7 and 7.2 does not... CVE-2015-5229 Fix available 7.5 HighApril 8, 2016
• google chrome The Web Store inline-installer implementation in the Extensions UI in Google Chrome before 49.0... CVE-2016-1640 Fix available 4.3 MediumMarch 5, 2016
• huawei mt882 firmware GlobespanVirata ftpd 1.0, as used on Huawei SmartAX MT882 devices V200R002B022 Arg, allows remote... CVE-2016-2314 4.9 MediumFebruary 15, 2016
• google android, mozilla firefox, opensuse leap +1 more +3 more Mozilla Firefox before 44.0 on Android allows remote attackers to spoof the address bar via the... CVE-2016-1943 4.7 MediumJanuary 31, 2016
• google android, mozilla firefox +1 more Mozilla Firefox before 44.0 on Android allows remote attackers to spoof the address bar via a... CVE-2016-1940 5.3 MediumJanuary 31, 2016
• xen, citrix xenserver +1 more The paging_invlpg function in include/asm-x86/paging.h in Xen 3.3.x through 4.6.x, when using... CVE-2016-1571 Fix available 6.3 MediumJanuary 22, 2016
• nodejs node.js Node.js 0.12.x before 0.12.9, 4.x before 4.2.3, and 5.x before 5.1.1 does not ensure the... CVE-2015-8027 Fix available 7.5 HighJanuary 2, 2016
• ibm sterling b2b integrator The Health Check tool in IBM Sterling B2B Integrator 5.2 does not properly use cookies in... CVE-2015-7410 7.4 HighJanuary 1, 2016
• ibm websphere mq light IBM WebSphere MQ Light 1.x before 1.0.2 allows remote attackers to cause a denial of service ... CVE-2015-4943 5.3 MediumJanuary 1, 2016
• ibm websphere mq light IBM WebSphere MQ Light 1.x before 1.0.2 mishandles abbreviated TLS handshakes, which allows... CVE-2015-4941 5.3 MediumJanuary 1, 2016
• ibm business process manager, websphere process server +1 more Remote Artifact Loader (RAL) in IBM WebSphere Process Server 7 and Business Process Manager... CVE-2015-7441 6.8 MediumJanuary 1, 2016
• corega cg-wlbaragm firmware Corega CG-WLBARAGM devices provide an open proxy service, which allows remote attackers to... CVE-2015-7793 5.8 MediumDecember 30, 2015
• xen The memory_exchange function in common/memory.c in Xen 3.2.x through 4.6.x does not properly... CVE-2015-8340 Fix available 4.7 MediumDecember 17, 2015
• quassel-irc quassel, opensuse leap, opensuse +2 more The CoreUserInputHandler::doMode function in core/coreuserinputhandler.cpp in Quassel 0.10.0... CVE-2015-8547 Fix available 7.5 HighDecember 16, 2015
• mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 more Mozilla Firefox before 43.0 does not properly store the properties of unboxed objects, which... CVE-2015-7204 Fix available 6.8 MediumDecember 15, 2015
• apple tvos, mac os x +1 more Keychain Access in Apple OS X before 10.11.2 and tvOS before 9.1 improperly interacts with... CVE-2015-7045 5.0 MediumDecember 11, 2015
• debian linux The Debian build procedure for the smokeping package in wheezy before 2.6.8-2+deb7u1 and jessie... CVE-2015-0859 Fix available 7.5 HighNovember 25, 2015
• ffmpeg The ljpeg_decode_yuv_scan function in libavcodec/mjpegdec.c in FFmpeg before 2.8.2 omits certain... CVE-2015-8216 Fix available 7.5 HighNovember 17, 2015
• ibm security access manager for web IBM Security Access Manager for Web 7.x before 7.0.0.16 and 8.x before 8.0.1.3 mishandles WebSEAL... CVE-2015-4963 7.5 HighNovember 8, 2015
• login disable project disable The Login Disable module 6.x-1.x before 6.x-1.1 and 7.x-1.x before 7.x-1.2 for Drupal does not... CVE-2015-8082 7.5 HighNovember 6, 2015
• mozilla firefox The accessibility-tools feature in Mozilla Firefox before 42.0 on OS X improperly interacts with... CVE-2015-7192 7.5 HighNovember 5, 2015
• mozilla firefox The CryptoKey interface implementation in Mozilla Firefox before 42.0 and Firefox ESR 38.x before... CVE-2015-7200 Fix available 7.5 HighNovember 4, 2015
• mozilla firefox Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4, when a Java plugin is enabled,... CVE-2015-7196 Fix available 6.8 MediumNovember 4, 2015
• apple iphone os, mac os x +1 more CFNetwork in Apple iOS before 9.1 and OS X before 10.11.1 does not properly consider the... CVE-2015-7023 5.8 MediumOctober 23, 2015
• apple mac os x Apple Mac EFI before 2015-002, as used in OS X before 10.11.1 and other products, mishandles... CVE-2015-7035 7.5 HighOctober 23, 2015
• apple xcode The Swift implementation in Apple Xcode before 7.1 mishandles type conversion, which has... CVE-2015-7030 7.5 HighOctober 23, 2015
• redhat enterprise linux, novell suse linux enterprise real time extension +1 more The usbvision driver in the Linux kernel package 3.10.0-123.20.1.el7 through 3.10.0-229.14.1.el7... CVE-2015-7833 Fix available 4.9 MediumOctober 19, 2015
• google chrome The Image11::map function in renderer/d3d/d3d11/Image11.cpp in libANGLE, as used in Google Chrome... CVE-2015-6760 Fix available 7.5 HighOctober 15, 2015
• google chrome The CPDF_Document::GetPage function in fpdfapi/fpdf_parser/fpdf_parser_document.cpp in PDFium, as... CVE-2015-6758 Fix available 6.8 MediumOctober 15, 2015
• apple mac os x Apple OS X before 10.11 does not ensure that the keychain's lock state is displayed correctly,... CVE-2015-5915 5.0 MediumOctober 9, 2015
• apple mac os x The EFI component in Apple OS X before 10.11 allows physically proximate attackers to modify... CVE-2015-5914 4.7 MediumOctober 9, 2015
• apple mac os x The X.509 certificate-trust implementation in Apple OS X before 10.11 does not recognize that the... CVE-2015-5894 4.3 MediumOctober 9, 2015
• apple mac os x The TLS Handshake Protocol implementation in Secure Transport in Apple OS X before 10.11 accepts... CVE-2015-5887 10.0 HighOctober 9, 2015
• xen libxl in Xen 4.1.x through 4.6.x does not properly handle the readonly flag on disks when using... CVE-2015-7311 Fix available 3.6 LowOctober 1, 2015
• apple iphone os, mac os x +1 more The CFNetwork FTPProtocol component in Apple iOS before 9 allows remote FTP proxy servers to... CVE-2015-5912 5.0 MediumSeptember 18, 2015
• microsoft windows server 2008, windows server 2012 +1 more Active Directory in Microsoft Windows Server 2008 SP2 and R2 SP1 and Server 2012 Gold and R2... CVE-2015-2535 EPSS 11.5% 4.0 MediumSeptember 9, 2015
• microsoft .net framework Microsoft .NET Framework 4.5, 4.5.1, 4.5.2, and 4.6 allows remote attackers to cause a denial of... CVE-2015-2526 EPSS 23.9% 5.0 MediumSeptember 9, 2015
• redhat enterprise virtualization The Web Admin interface in Red Hat Enterprise Virtualization Manager (RHEV-M) allows local users... CVE-2015-1841 3.7 LowSeptember 8, 2015
• ffmpeg The allocate_buffers function in libavcodec/alac.c in FFmpeg before 2.7.2 does not initialize... CVE-2015-6823 Fix available 7.5 HighSeptember 6, 2015
• ffmpeg The destroy_buffers function in libavcodec/sanm.c in FFmpeg before 2.7.2 does not properly... CVE-2015-6822 Fix available 7.5 HighSeptember 6, 2015
• ffmpeg, canonical ubuntu linux +1 more The decode_ihdr_chunk function in libavcodec/pngdec.c in FFmpeg before 2.7.2 does not enforce... CVE-2015-6818 Fix available 7.5 HighSeptember 5, 2015
• quiz project quiz The Quiz extension for MediaWiki allows remote attackers to cause a denial of service via regex... CVE-2015-6736 5.0 MediumSeptember 1, 2015
• timedmediahandler project timedmediahandler The reset functionality in the TimedMediaHandler extension for MediaWiki does not create a new... CVE-2015-6735 5.0 MediumSeptember 1, 2015
• Show olderLoading…