Lucene search
+L

868 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/06/13 12:00 a.m.•2 views

CVE-2016-2061: Improper Privilege Management

Integer signedness error in the MSM V4L2 video driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allows attackers to gain privileges or cause a denial of service array overflow and memory corruption via a crafted...

7.8CVSS7.2AI score0.01143EPSS
SaveExploits0References2
NVD
NVD
•added 2016/05/25 3:59 p.m.•23 views

CVE-2016-1887

Integer signedness error in the sockargs function in sys/kern/uipcsyscalls.c in FreeBSD 10.1 before p34, 10.2 before p17, and 10.3 before p3 allows local users to cause a denial of service memory overwrite and kernel panic or gain privileges via a negative buflen argument, which triggers a...

7.8CVSS7.4AI score0.01111EPSS
SaveExploits3References3
OSV
OSV
•added 2016/05/25 3:59 p.m.•11 views

CVE-2016-1886

Integer signedness error in the genkbdcommonioctl function in sys/dev/kbd/kbd.c in FreeBSD 9.3 before p42, 10.1 before p34, 10.2 before p17, and 10.3 before p3 allows local users to obtain sensitive information from kernel memory, cause a denial of service memory overwrite and kernel crash, or ga...

7.8CVSS7.4AI score0.01143EPSS
SaveExploits3References5
NVD
NVD
•added 2016/05/25 3:59 p.m.•23 views

CVE-2016-1886

Integer signedness error in the genkbdcommonioctl function in sys/dev/kbd/kbd.c in FreeBSD 9.3 before p42, 10.1 before p34, 10.2 before p17, and 10.3 before p3 allows local users to obtain sensitive information from kernel memory, cause a denial of service memory overwrite and kernel crash, or ga...

7.8CVSS7.4AI score0.01143EPSS
SaveExploits3References5
Debian CVE
Debian CVE
•added 2016/05/25 3:00 p.m.•34 views

CVE-2016-1886

Removed by vendor...

7.8CVSS7.8AI score0.01143EPSS
SaveExploits3
CVE
CVE
•added 2016/05/25 3:00 p.m.•111 views

CVE-2016-1886

CVE-2016-1886 is a local kernel vulnerability in FreeBSD where an integer signedness error in genkbd_commonioctl (kbd.c) enables a local user to leak kernel memory, cause memory corruption leading to a kernel crash, or gain privileges via a negative flen value in an arg to a SETFKEY ioctl. Affect...

7.8CVSS7.2AI score0.01143EPSS
SaveExploits3References5Affected Software1
Cvelist
Cvelist
•added 2016/05/25 3:00 p.m.•44 views

CVE-2016-1887

Integer signedness error in the sockargs function in sys/kern/uipcsyscalls.c in FreeBSD 10.1 before p34, 10.2 before p17, and 10.3 before p3 allows local users to cause a denial of service memory overwrite and kernel panic or gain privileges via a negative buflen argument, which triggers a...

7.3AI score0.01111EPSS
SaveExploits3References3
Cvelist
Cvelist
•added 2016/05/25 3:00 p.m.•39 views

CVE-2016-1886

Integer signedness error in the genkbdcommonioctl function in sys/dev/kbd/kbd.c in FreeBSD 9.3 before p42, 10.1 before p34, 10.2 before p17, and 10.3 before p3 allows local users to obtain sensitive information from kernel memory, cause a denial of service memory overwrite and kernel crash, or ga...

7.3AI score0.01143EPSS
SaveExploits3References5
CVE
CVE
•added 2016/05/25 3:00 p.m.•70 views

CVE-2016-1887

CVE-2016-1887 is a vulnerability in FreeBSD where an integer signedness error in sockargs (sys/kern/uipc_syscalls.c) affects FreeBSD 10.1 before p34, 10.2 before p17, and 10.3 before p3. The underlying cause is a signedness issue in buflen handling, enabling a local attacker to trigger a heap-bas...

7.8CVSS7.1AI score0.01111EPSS
SaveExploits3References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/05/25 12:00 a.m.•4 views

CVE-2016-1886: Improper Restriction of Operations within the Bounds of a Memory Buffer

Integer signedness error in the genkbdcommonioctl function in sys/dev/kbd/kbd.c in FreeBSD 9.3 before p42, 10.1 before p34, 10.2 before p17, and 10.3 before p3 allows local users to obtain sensitive information from kernel memory, cause a denial of service memory overwrite and kernel crash, or ga...

7.8CVSS7.4AI score0.01143EPSS
SaveExploits3References2
ArchLinux
ArchLinux
•added 2016/05/06 12:00 a.m.•64 views

gd: arbitrary code execution

A heap-based buffer overflow caused by an integer signedness error has been found in the libgd code handling compressed gd2 chunks...

7.5CVSS3.2AI score0.37226EPSS
SaveExploits8References3
OSV
OSV
•added 2016/05/05 6:59 p.m.•18 views

CVE-2016-4535

Integer signedness error in the AV engine before DAT 8145, as used in McAfee LiveSafe 14.0, allows remote attackers to cause a denial of service memory corruption and crash via a crafted packed executable...

7.5CVSS5.8AI score0.09751EPSS
SaveExploits3References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/05/05 12:00 a.m.•5 views

CVE-2016-4535: Improper Input Validation

Integer signedness error in the AV engine before DAT 8145, as used in McAfee LiveSafe 14.0, allows remote attackers to cause a denial of service memory corruption and crash via a crafted packed executable...

7.8CVSS7.5AI score0.09751EPSS
SaveExploits3References2
OSV
OSV
•added 2016/04/26 2:59 p.m.•9 views

DEBIAN-CVE-2016-3074

Integer signedness error in GD Graphics Library 2.1.1 aka libgd or libgd2 allows remote attackers to cause a denial of service crash or potentially execute arbitrary code via crafted compressed gd2 data, which triggers a heap-based buffer overflow...

9.8CVSS8.1AI score0.37226EPSS
SaveExploits8References1
Cvelist
Cvelist
•added 2016/04/26 2:00 p.m.•45 views

CVE-2016-3074

Integer signedness error in GD Graphics Library 2.1.1 aka libgd or libgd2 allows remote attackers to cause a denial of service crash or potentially execute arbitrary code via crafted compressed gd2 data, which triggers a heap-based buffer overflow...

9.8AI score0.37226EPSS
SaveExploits8References18
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/04/26 12:00 a.m.•5 views

CVE-2016-3074: Incorrect Conversion between Numeric Types

Integer signedness error in GD Graphics Library 2.1.1 aka libgd or libgd2 allows remote attackers to cause a denial of service crash or potentially execute arbitrary code via crafted compressed gd2 data, which triggers a heap-based buffer overflow...

9.8CVSS8.5AI score0.37226EPSS
SaveExploits8References2
NVD
NVD
•added 2016/04/25 10:59 a.m.•23 views

CVE-2016-4084

Integer signedness error in epan/dissectors/packet-mswsp.c in the MS-WSP dissector in Wireshark 2.0.x before 2.0.3 allows remote attackers to cause a denial of service integer overflow and application crash via a crafted packet that triggers an unexpected array size...

5.9CVSS5.8AI score0.0185EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2016/04/25 10:59 a.m.•32 views

CVE-2016-4084

Integer signedness error in epan/dissectors/packet-mswsp.c in the MS-WSP dissector in Wireshark 2.0.x before 2.0.3 allows remote attackers to cause a denial of service integer overflow and application crash via a crafted packet that triggers an unexpected array size...

5.9CVSS6.7AI score0.0185EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2016/04/25 10:00 a.m.•49 views

CVE-2016-4084

Integer signedness error in epan/dissectors/packet-mswsp.c in the MS-WSP dissector in Wireshark 2.0.x before 2.0.3 allows remote attackers to cause a denial of service integer overflow and application crash via a crafted packet that triggers an unexpected array size...

5.5AI score0.0185EPSS
SaveExploits0References4
CVE
CVE
•added 2016/04/25 10:00 a.m.•78 views

CVE-2016-4084

Wireshark 2.0.x before 2.0.3 is affected by CVE-2016-4084 due to an integer signedness error in the MS-WSP dissector (epan/dissectors/packet-mswsp.c). A crafted MS-WSP packet can trigger an unexpected array size, leading to an overflow and denial of service (application crash). Affected component...

5.9CVSS5.5AI score0.0185EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder