1184 matches found
UBUNTU-CVE-2016-5037
The dwarfloadsection function in libdwarf before 20160923 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...
DEBIAN-CVE-2016-5036
The dumpblock function in printsections.c in libdwarf before 20160923 allows remote attackers to cause a denial of service out-of-bounds read via crafted frame data...
DEBIAN-CVE-2016-5417
Memory leak in the resvinit function in the IPv6 name server management code in libresolv in GNU C Library aka glibc or libc6 before 2.24 allows remote attackers to cause a denial of service memory consumption by leveraging partial initialization of internal resolver data structures...
CVE-2016-7499
The sbrmakefmaster function in aacsbr.c in Libav 11.7 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted mp3 file...
UBUNTU-CVE-2016-7499
The sbrmakefmaster function in aacsbr.c in Libav 11.7 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted mp3 file...
CVE-2016-9706
IBM Integration Bus 9.0 and 10.0 and WebSphere Message Broker SOAP FLOWS is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all...
CVE-2016-0203
A vulnerability has been identified in the IBM Cloud Orchestrator task API. The task API might allow an authenticated user to view background information associated with actions performed on virtual machines in projects where the user belongs to...
CVE-2016-9748
IBM Rational DOORS Next Generation 5.0 and 6.0 discloses sensitive information in error response messages that could be used for further attacks against the system...
DEBIAN-CVE-2016-3124
The sanitycheck module in SimpleSAMLphp before 1.14.1 allows remote attackers to learn the PHP version on the system via unspecified vectors...
BELL-CVE-2016-4796 CVE-2016-4796 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2016-3183 CVE-2016-3183 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2016-8569 CVE-2016-8569 does not affect BellSoft software
Bulletin has no description...
CVE-2016-8919
IBM WebSphere Application Server may be vulnerable to a denial of service, caused by allowing serialized objects from untrusted sources to run and cause the consumption of resources...
CVE-2016-2941
IBM UrbanCode Deploy creates temporary files during step execution that could contain sensitive information including passwords that could be read by a local user...
CVE-2016-8920
IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...
CVE-2016-6042
IBM AppScan Enterprise Edition could allow a remote attacker to execute arbitrary code on the system, caused by improper handling of objects in memory. By persuading a victim to open specially-crafted content, an attacker could exploit this vulnerability to execute arbitrary code on the system in...
CVE-2016-3022
IBM Security Access Manager for Web could allow an authenticated user to gain access to highly sensitive information due to incorrect file permissions...