Show filters
280 Total Results
Displaying 191-200 of 280
Sort by:
Attacker Value
Unknown
CVE-2016-9675
Disclosure Date: December 22, 2016 (last updated November 25, 2024)
openjpeg: A heap-based buffer overflow flaw was found in the patch for CVE-2013-6045. A crafted j2k image could cause the application to crash, or potentially execute arbitrary code.
0
Attacker Value
Unknown
CVE-2016-8864
Disclosure Date: November 02, 2016 (last updated November 25, 2024)
named in ISC BIND 9.x before 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-P1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a DNAME record in the answer section of a response to a recursive query, related to db.c and resolver.c.
0
Attacker Value
Unknown
CVE-2016-5624
Disclosure Date: October 25, 2016 (last updated November 25, 2024)
Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier allows remote authenticated users to affect availability via vectors related to DML.
0
Attacker Value
Unknown
CVE-2016-5626
Disclosure Date: October 25, 2016 (last updated November 25, 2024)
Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to GIS.
0
Attacker Value
Unknown
CVE-2016-5612
Disclosure Date: October 25, 2016 (last updated November 25, 2024)
Unspecified vulnerability in Oracle MySQL 5.5.50 and earlier, 5.6.31 and earlier, and 5.7.13 and earlier allows remote authenticated users to affect availability via vectors related to DML.
0
Attacker Value
Unknown
CVE-2016-5629
Disclosure Date: October 25, 2016 (last updated November 25, 2024)
Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote administrators to affect availability via vectors related to Server: Federated.
0
Attacker Value
Unknown
CVE-2016-3492
Disclosure Date: October 25, 2016 (last updated November 25, 2024)
Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to Server: Optimizer.
0
Attacker Value
Unknown
CVE-2016-7163
Disclosure Date: September 21, 2016 (last updated November 08, 2023)
Integer overflow in the opj_pi_create_decode function in pi.c in OpenJPEG allows remote attackers to execute arbitrary code via a crafted JP2 file, which triggers an out-of-bounds read or write.
0
Attacker Value
Unknown
CVE-2016-5403
Disclosure Date: August 02, 2016 (last updated November 25, 2024)
The virtqueue_pop function in hw/virtio/virtio.c in QEMU allows local guest OS administrators to cause a denial of service (memory consumption and QEMU process crash) by submitting requests without waiting for completion.
0
Attacker Value
Unknown
CVE-2016-5387
Disclosure Date: July 19, 2016 (last updated November 08, 2023)
The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an "httpoxy" issue. NOTE: the vendor states "This mitigation has been assigned the identifier CVE-2016-5387"; in other words, this is not a CVE ID for a vulnerability.
0
