Show filters
550 Total Results
Displaying 441-450 of 550
Sort by:
Attacker Value
Unknown
CVE-2016-9811
Disclosure Date: January 13, 2017 (last updated November 08, 2023)
The windows_icon_typefind function in gst-plugins-base in GStreamer before 1.10.2, when G_SLICE is set to always-malloc, allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted ico file.
0
Attacker Value
Unknown
CVE-2016-9131
Disclosure Date: January 12, 2017 (last updated November 25, 2024)
named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed response to an RTYPE ANY query.
0
Attacker Value
Unknown
CVE-2016-8864
Disclosure Date: November 02, 2016 (last updated November 25, 2024)
named in ISC BIND 9.x before 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-P1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a DNAME record in the answer section of a response to a recursive query, related to db.c and resolver.c.
0
Attacker Value
Unknown
CVE-2016-5624
Disclosure Date: October 25, 2016 (last updated November 25, 2024)
Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier allows remote authenticated users to affect availability via vectors related to DML.
0
Attacker Value
Unknown
CVE-2016-5626
Disclosure Date: October 25, 2016 (last updated November 25, 2024)
Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to GIS.
0
Attacker Value
Unknown
CVE-2016-5612
Disclosure Date: October 25, 2016 (last updated November 25, 2024)
Unspecified vulnerability in Oracle MySQL 5.5.50 and earlier, 5.6.31 and earlier, and 5.7.13 and earlier allows remote authenticated users to affect availability via vectors related to DML.
0
Attacker Value
Unknown
CVE-2016-5629
Disclosure Date: October 25, 2016 (last updated November 25, 2024)
Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote administrators to affect availability via vectors related to Server: Federated.
0
Attacker Value
Unknown
CVE-2016-3492
Disclosure Date: October 25, 2016 (last updated November 25, 2024)
Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to Server: Optimizer.
0
Attacker Value
Unknown
CVE-2016-7163
Disclosure Date: September 21, 2016 (last updated November 08, 2023)
Integer overflow in the opj_pi_create_decode function in pi.c in OpenJPEG allows remote attackers to execute arbitrary code via a crafted JP2 file, which triggers an out-of-bounds read or write.
0
Attacker Value
Unknown
CVE-2016-6662
Disclosure Date: September 20, 2016 (last updated November 25, 2024)
Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.27, and 10.1.x before 10.1.17; and Percona Server before 5.5.51-38.1, 5.6.x before 5.6.32-78.0, and 5.7.x before 5.7.14-7 allow local users to create arbitrary configurations and bypass certain protection mechanisms by setting general_log_file to a my.cnf configuration. NOTE: this can be leveraged to execute arbitrary code with root privileges by setting malloc_lib. NOTE: the affected MySQL version information is from Oracle's October 2016 CPU. Oracle has not commented on third-party claims that the issue was silently patched in MySQL 5.5.52, 5.6.33, and 5.7.15.
0
