Show filters
710 Total Results
Displaying 141-150 of 710
Sort by:
Attacker Value
Unknown

CVE-2016-4482

Disclosure Date: May 23, 2016 (last updated November 25, 2024)
The proc_connectinfo function in drivers/usb/core/devio.c in the Linux kernel through 4.6 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted USBDEVFS_CONNECTINFO ioctl call.
0
Attacker Value
Unknown

CVE-2016-3627

Disclosure Date: May 17, 2016 (last updated February 10, 2024)
The xmlStringGetNodeList function in tree.c in libxml2 2.9.3 and earlier, when used in recovery mode, allows context-dependent attackers to cause a denial of service (infinite recursion, stack consumption, and application crash) via a crafted XML document.
Attacker Value
Unknown

CVE-2016-4117

Disclosure Date: May 11, 2016 (last updated July 17, 2024)
Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in May 2016.
Attacker Value
Unknown

CVE-2016-3718

Disclosure Date: May 05, 2016 (last updated July 25, 2024)
The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image.
Attacker Value
Unknown

CVE-2016-3715

Disclosure Date: May 05, 2016 (last updated July 25, 2024)
The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.
Attacker Value
Unknown

CVE-2016-3137

Disclosure Date: May 02, 2016 (last updated November 08, 2023)
drivers/usb/serial/cypress_m8.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a USB device without both an interrupt-in and an interrupt-out endpoint descriptor, related to the cypress_generic_port_probe and cypress_open functions.
0
Attacker Value
Unknown

CVE-2016-3138

Disclosure Date: May 02, 2016 (last updated November 08, 2023)
The acm_probe function in drivers/usb/class/cdc-acm.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a USB device without both a control and a data endpoint descriptor.
0
Attacker Value
Unknown

CVE-2016-2186

Disclosure Date: May 02, 2016 (last updated November 25, 2024)
The powermate_probe function in drivers/input/misc/powermate.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device descriptor.
0
Attacker Value
Unknown

CVE-2016-3140

Disclosure Date: May 02, 2016 (last updated November 08, 2023)
The digi_port_init function in drivers/usb/serial/digi_acceleport.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device descriptor.
0
Attacker Value
Unknown

CVE-2016-2188

Disclosure Date: May 02, 2016 (last updated November 25, 2024)
The iowarrior_probe function in drivers/usb/misc/iowarrior.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device descriptor.
0