| Max CVSS | 9.3 | Min CVSS | 3.7 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2016-9446 | 5.0 |
The vmnc decoder in the gstreamer does not initialize the render canvas, which allows remote attackers to obtain sensitive information as demonstrated by thumbnailing a simple 1 frame vmnc movie that does not draw to the allocated render canvas.
|
30-11-2021 - 22:12 | 23-01-2017 - 21:59 | |
| CVE-2016-9560 | 6.8 |
Stack-based buffer overflow in the jpc_tsfb_getbands2 function in jpc_tsfb.c in JasPer before 1.900.30 allows remote attackers to have unspecified impact via a crafted image.
|
15-03-2021 - 22:08 | 15-02-2017 - 19:59 | |
| CVE-2016-9445 | 5.0 |
Integer overflow in the vmnc decoder in the gstreamer allows remote attackers to cause a denial of service (crash) via large width and height values, which triggers a buffer overflow.
|
24-02-2020 - 19:23 | 23-01-2017 - 21:59 | |
| CVE-2016-9448 | 5.0 |
The TIFFFetchNormalTag function in LibTiff 4.0.6 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) by setting the tags TIFF_SETGET_C16ASCII or TIFF_SETGET_C32_ASCII to values that access 0-byte arrays. NOTE: t
|
30-10-2018 - 16:27 | 27-01-2017 - 17:59 | |
| CVE-2016-4406 | 4.3 |
A remote cross site scripting vulnerability was identified in HPE iLO 3 all version prior to v1.88 and HPE iLO 4 all versions prior to v2.44.
|
04-10-2018 - 18:29 | 06-08-2018 - 20:29 | |
| CVE-2016-9447 | 6.8 |
The ROM mappings in the NSF decoder in gstreamer 0.10.x allow remote attackers to cause a denial of service (out-of-bounds read or write) and possibly execute arbitrary code via a crafted NSF music file.
|
05-01-2018 - 02:31 | 23-01-2017 - 21:59 | |
| CVE-2006-4072 | 6.5 |
Multiple SQL injection vulnerabilities in Club-Nuke [XP] 2.0 LCID 2048 allow remote attackers to execute arbitrary SQL commands via the (1) haber_id parameter to haber_detay.asp, and allow remote authenticated users to execute arbitrary SQL commands
|
19-10-2017 - 01:29 | 11-08-2006 - 01:04 | |
| CVE-2003-0924 | 3.7 |
netpbm 9.25 and earlier does not properly create temporary files, which allows local users to overwrite arbitrary files.
|
10-10-2017 - 01:30 | 17-02-2004 - 05:00 | |
| CVE-2014-3345 | 5.0 |
The web framework in Cisco Transport Gateway for Smart Call Home (aka TG-SCH or Transport Gateway Installation Software) 4.0 does not properly check authorization for administrative web pages, which allows remote attackers to modify the product via a
|
29-08-2017 - 01:34 | 28-08-2014 - 23:55 | |
| CVE-2017-8502 | 9.3 |
Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8501.
|
14-07-2017 - 12:41 | 11-07-2017 - 21:29 | |
| CVE-2016-7577 | 4.3 |
An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. The issue involves the "FaceTime" component, which allows remote attackers to trigger memory corruption and obtain audio data from a cal
|
21-02-2017 - 16:16 | 20-02-2017 - 08:59 | |
| CVE-2016-4721 | 4.3 |
An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. The issue involves the "IDS - Connectivity" component, which allows man-in-the-middle attackers to spoof calls via a "switch caller" not
|
21-02-2017 - 15:03 | 20-02-2017 - 08:59 | |
| CVE-2016-9532 | 4.3 |
Integer overflow in the writeBufferToSeparateStrips function in tiffcrop.c in LibTIFF before 4.0.7 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted tif file.
|
08-02-2017 - 18:43 | 06-02-2017 - 17:59 | |
| CVE-2010-0856 | 5.0 |
Unspecified vulnerability in the Portal component in Oracle Fusion Middleware 10.1.2.3 and 10.1.4.2 allows remote attackers to affect availability via unknown vectors.
|
23-10-2012 - 03:20 | 13-04-2010 - 22:30 |