cve.bz

Matching records, newest first, page 188

Filter
  1. 7.8CVE-2016-8806ExploitEPSS 1.6%

    For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape ID 0x5000027 where a po…

  2. 7.8CVE-2016-8805ExploitEPSS 1.5%

    For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape ID 0x7000014 where a va…

  3. 7.8CVE-2016-7391ExploitEPSS 1.6%

    For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape ID 0x100010b where a mi…

  4. 7.8CVE-2016-7390ExploitEPSS 1.5%

    For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape ID 0x7000194 where a va…

  5. 7.8CVE-2016-7387ExploitEPSS 1.5%

    For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape ID 0x600000D where a va…

  6. 5.5CVE-2016-7386ExploitEPSS 1.4%

    For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape ID 0x70000D4 which may …

  7. 7.8CVE-2016-7385ExploitEPSS 1.5%

    For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape ID 0x700010d where a va…

  8. 7.8CVE-2016-7384ExploitEPSS 1.5%

    For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) where unchecked input/output lengths in UVMLiteC…

  9. 6.1CVE-2016-7851ExploitEPSS 7.0%

    Adobe Connect version 9.5.6 and earlier does not adequately validate input in the events registration module. This vulnerability could be exploited in cross-site scripting attacks.

  10. 6.8CVE-2016-9111ExploitEPSS 1.8%

    Incorrect access control mechanisms in Citrix Receiver Desktop Lock 4.5 allow an attacker to bypass the authentication requirement by leveraging physical access to a VDI for temporary disconnection of a LAN cable. NOTE: as of 20161208, the…

  11. 8.1CVE-2016-8870ExploitEPSS 81%

    The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla! before 3.6.4, when registration has been disabled, allows remote attackers to create user accounts by leveraging failure to c…

  12. 9.8CVE-2016-8869ExploitEPSS 97%

    The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla! before 3.6.4 allows remote attackers to gain privileges by leveraging incorrect use of unfiltered data when registering on a …

  13. 5.5CVE-2016-9018ExploitEPSS 8.1%

    Improper handling of a repeating VRAT chunk in qcpfformat.dll allows attackers to cause a Null pointer dereference and crash in RealNetworks RealPlayer 18.1.5.705 through a crafted .QCP media file.

  14. 9.8CVE-2016-8582ExploitEPSS 57%

    A vulnerability exists in gauge.php of AlienVault OSSIM and USM before 5.3.2 that allows an attacker to execute an arbitrary SQL query and retrieve database information or read local system files via MySQL's LOAD_FILE.

  15. 6.1CVE-2016-8581ExploitEPSS 17%

    A persistent XSS vulnerability exists in the User-Agent header of the login process of AlienVault OSSIM and USM before 5.3.2 that allows an attacker to steal session IDs of logged in users when the current sessions are viewed by an adminis…

  16. 9.8CVE-2016-8580ExploitEPSS 6.9%

    PHP object injection vulnerabilities exist in multiple widget files in AlienVault OSSIM and USM before 5.3.2. These vulnerabilities allow arbitrary PHP code execution via magic methods in included classes.

  17. 8.8CVE-2016-5764ExploitEPSS 7.8%

    Micro Focus Rumba FTP 4.X client buffer overflow makes it possible to corrupt the stack and allow arbitrary code execution. Fixed in: Rumba FTP 4.5 (HF 14668). This can only occur if a client connects to a malicious server.

  18. 7.7CVE-2016-3473ExploitEPSS 14%

    Unspecified vulnerability in the BI Publisher (formerly XML Publisher) component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0 allows remote authenticated users to affect confidentiality via unknown vectors.

  19. 5.5CVE-2016-6828ExploitEPSS 1.2%

    The tcp_check_send_head function in include/net/tcp.h in the Linux kernel before 4.7.5 does not properly maintain certain SACK state after a failed data copy, which allows local users to cause a denial of service (tcp_xmit_retransmit_queue…

  20. 7.5CVE-2016-7194ExploitEPSS 58%

    The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different v…

  21. 7.5CVE-2016-7190ExploitEPSS 67%

    The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different v…

  22. 7.5CVE-2016-7189ExploitEPSS 48%

    The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via a crafted web site, aka "Scripting Engine Remote Code Execution Vulnerability."

  23. 7.8CVE-2016-7188ExploitEPSS 3.7%

    The Standard Collector Service in Windows Diagnostics Hub in Microsoft Windows 10 Gold, 1511, and 1607 mishandles library loading, which allows local users to gain privileges via a crafted application, aka "Windows Diagnostics Hub Elevatio…

  24. 7.8CVE-2016-7185ExploitEPSS 3.4%

    The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allow local users to gain privileg…

  25. 9.8CVE-2016-7182ExploitEPSS 30%

    The Graphics component in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; Office 2007 SP3; Office 2010 SP2; Word…

  26. 5.3CVE-2016-3388ExploitEPSS 28%

    Microsoft Internet Explorer 10 and 11 and Microsoft Edge do not properly restrict access to private namespaces, which allows remote attackers to gain privileges via unspecified vectors, aka "Microsoft Browser Elevation of Privilege Vulnera…

  27. 7.5CVE-2016-3387ExploitEPSS 20%

    Microsoft Internet Explorer 10 and 11 and Microsoft Edge do not properly restrict access to private namespaces, which allows remote attackers to gain privileges via unspecified vectors, aka "Microsoft Browser Elevation of Privilege Vulnera…

  28. 7.5CVE-2016-3386ExploitEPSS 41%

    The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different v…

  29. 7.8CVE-2016-3376ExploitEPSS 13%

    The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allow local users to gain privileg…

  30. 5.5CVE-2016-3209ExploitEPSS 54%

    Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; Office 2007 SP3; …

  31. 5.0CVE-2016-0079ExploitEPSS 5.0%

    The kernel in Microsoft Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application that makes an API call to access sensitive information in the registry, aka "Windows Kernel Local Elevation of Privileg…

  32. 5.5CVE-2016-0075ExploitEPSS 6.9%

    The kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application that makes an API call to access sensitive informatio…

  33. 5.0CVE-2016-0073ExploitEPSS 5.1%

    The kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application that makes an API call to access sensitive informatio…

  34. 5.5CVE-2016-0070ExploitEPSS 11%

    The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a cra…

  35. 8.8CVE-2016-4273ExploitEPSS 20%

    Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified v…

  36. 8.8CVE-2016-7065ExploitEPSS 12%

    The JMX servlet in Red Hat JBoss Enterprise Application Platform (EAP) 4 and 5 allows remote authenticated users to cause a denial of service and possibly execute arbitrary code via a crafted serialized Java object.

  37. 7.8CVE-2016-5425ExploitEPSS 3.8%

    The Tomcat package on Red Hat Enterprise Linux (RHEL) 7, Fedora, CentOS, Oracle Linux, and possibly other Linux distributions uses weak permissions for /usr/lib/tmpfiles.d/tomcat.conf, which allows local users to gain root privileges by le…

  38. 6.1CVE-2016-1000155ExploitEPSS 4.5%

    Reflected XSS in wordpress plugin wpsolr-search-engine v7.6

  39. 6.1CVE-2016-1000154ExploitEPSS 3.4%

    Reflected XSS in wordpress plugin whizz v1.0.7

  40. 6.1CVE-2016-1000153ExploitEPSS 4.5%

    Reflected XSS in wordpress plugin tidio-gallery v1.1

  41. 6.1CVE-2016-1000152ExploitEPSS 4.2%

    Reflected XSS in wordpress plugin tidio-form v1.0

  42. 6.1CVE-2016-1000149ExploitEPSS 4.0%

    Reflected XSS in wordpress plugin simpel-reserveren v3.5.2

  43. 6.1CVE-2016-1000148ExploitEPSS 3.2%

    Reflected XSS in wordpress plugin s3-video v0.983

  44. 6.1CVE-2016-1000146ExploitEPSS 3.5%

    Reflected XSS in wordpress plugin pondol-formmail v1.1

  45. 6.1CVE-2016-1000143ExploitEPSS 3.6%

    Reflected XSS in wordpress plugin photoxhibit v2.1.8

  46. 6.1CVE-2016-1000142ExploitEPSS 4.4%

    Reflected XSS in wordpress plugin parsi-font v4.2.5

  47. 6.1CVE-2016-1000141ExploitEPSS 3.5%

    Reflected XSS in wordpress plugin page-layout-builder v1.9.3

  48. 6.1CVE-2016-1000140ExploitEPSS 3.4%

    Reflected XSS in wordpress plugin new-year-firework v1.1.9

  49. 6.1CVE-2016-1000139ExploitEPSS 4.2%

    Reflected XSS in wordpress plugin infusionsoft v1.5.11

  50. 6.1CVE-2016-1000138ExploitEPSS 3.4%

    Reflected XSS in wordpress plugin indexisto v1.0.5