CVE-2016-4544

Removed by vendor...

CVE-2016-4537

Removed by vendor...

Design/Logic Flaw

extensions/renderer/gccallback.cc in Google Chrome before 50.0.2661.94 does not prevent fallback execution once the Garbage Collection callback has started, which allows remote attackers to cause a denial of service use-after-free or possibly have unspecified other impact via unknown vectors...

Adobe Flash Player suffers from an unspecified vulnerability (CNVD-2016-03182)

Adobe Flash Player is a cross-platform, browser-based multimedia player product from the American company Adobe. An unspecified vulnerability exists in Adobe Flash Player 21.0.0.213 and prior versions, Microsoft Internet Explorer 10 and 11, and Microsoft Edge versions, which could be exploited by...

Adobe Flash Player suffers from an unspecified vulnerability (CNVD-2016-03176)

Adobe Flash Player is a cross-platform, browser-based multimedia player product from the American company Adobe. An unspecified vulnerability exists in Adobe Flash Player 21.0.0.213 and prior versions, Microsoft Internet Explorer 10 and 11, and Microsoft Edge versions, which could be exploited by...

Adobe Flash Player suffers from an unspecified vulnerability (CNVD-2016-03174)

Adobe Flash Player is a cross-platform, browser-based multimedia player product from the American company Adobe. An unspecified vulnerability exists in Adobe Flash Player 21.0.0.213 and prior versions, Microsoft Internet Explorer 10 and 11, and Microsoft Edge versions, which could be exploited by...

CVE-2016-4540

The graphemestripos function in ext/intl/grapheme/graphemestring.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to cause a denial of service out-of-bounds read or possibly have unspecified other impact via a negative offset...

CVE-2016-4541

The graphemestrpos function in ext/intl/grapheme/graphemestring.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to cause a denial of service out-of-bounds read or possibly have unspecified other impact via a negative offset...

Memory corruption

Memory leak in the cusechannelrelease function in fs/fuse/cuse.c in the Linux kernel before 4.4 allows local users to cause a denial of service memory consumption or possibly have unspecified other impact by opening /dev/cuse many times...

CVE-2016-2143

The fork implementation in the Linux kernel before 4.5 on s390 platforms mishandles the case of four page-table levels, which allows local users to cause a denial of service system crash or possibly have unspecified other impact via a crafted application, related to...

Out-of-bounds

The LoadBuffer implementation in Google V8, as used in Google Chrome before 50.0.2661.75, mishandles data types, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that triggers an out-of-bounds write operation, related...

CVE-2015-8710

The htmlParseComment function in HTMLparser.c in libxml2 allows attackers to obtain sensitive information, cause a denial of service out-of-bounds heap memory access and application crash, or possibly have unspecified other impact via an unclosed HTML comment...

Authorization

The XML Data Archiving Service XML DAS in SAP NetWeaver AS Java does not check authorization, which allows remote authenticated users to obtain sensitive information, gain privileges, or possibly have unspecified other impact via requests to 1 webcontent/cas/casenter.jsp, 2...

Crlf injection

CRLF injection vulnerability in CA API Gateway formerly Layer7 API Gateway 7.1 before 7.1.04, 8.0 through 8.3 before 8.3.01, and 8.4 before 8.4.01 allows remote attackers to have an unspecified impact via unknown vectors...

CVE-2016-3118

CRLF injection vulnerability in CA API Gateway formerly Layer7 API Gateway 7.1 before 7.1.04, 8.0 through 8.3 before 8.3.01, and 8.4 before 8.4.01 allows remote attackers to have an unspecified impact via unknown vectors...

Integer overflow

Integer overflow in the isofsrealreadzf function in isofs.c in FuseISO 20070708 might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a large ZF block size in an ISO file, leading to a heap-based buffer overflow...

CVE-2015-8836

Integer overflow in the isofsrealreadzf function in isofs.c in FuseISO 20070708 might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a large ZF block size in an ISO file, leading to a heap-based buffer overflow...

CVE-2016-1647

Use-after-free vulnerability in the RenderWidgetHostImpl::Destroy function in content/browser/rendererhost/renderwidgethostimpl.cc in the Navigation implementation in Google Chrome before 49.0.2623.108 allows remote attackers to cause a denial of service or possibly have unspecified other impact...

CVE-2016-1647

Use-after-free vulnerability in the RenderWidgetHostImpl::Destroy function in content/browser/rendererhost/renderwidgethostimpl.cc in the Navigation implementation in Google Chrome before 49.0.2623.108 allows remote attackers to cause a denial of service or possibly have unspecified other impact...

Race condition

Race condition in libvpx in Mozilla Firefox before 45.0 on Windows might allow remote attackers to cause a denial of service use-after-free or possibly have unspecified other impact via unknown vectors...