CWE-20 · Improper Input Validation (page 92)
Page 92 of 100 — CVEs classified under CWE-20, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2014-9410 | Critical | 9.8 | 2016-08-07 | The vfe31_proc_general function in drivers/media/video/msm/vfe/msm_vfe31.c in the MSM-VFE31 driver for the Linux kernel 3.x, as used in Qualcomm Innovation Cen… |
CVE-2016-5141 | High | 7.5 | 2016-08-07 | Blink, as used in Google Chrome before 52.0.2743.116, allows remote attackers to spoof the address bar via vectors involving a provisional URL for an initially… |
CVE-2016-5358 | Medium | 5.9 | 2016-08-07 | epan/dissectors/packet-pktap.c in the Ethernet dissector in Wireshark 2.x before 2.0.4 mishandles the packet-header data type, which allows remote attackers to… |
CVE-2016-5357 | Medium | 5.9 | 2016-08-07 | wiretap/netscreen.c in the NetScreen file parser in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles sscanf unsigned-integer processing, which a… |
CVE-2016-5355 | Medium | 5.9 | 2016-08-07 | wiretap/toshiba.c in the Toshiba file parser in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles sscanf unsigned-integer processing, which allow… |
CVE-2016-5353 | Medium | 5.9 | 2016-08-07 | epan/dissectors/packet-umts_fp.c in the UMTS FP dissector in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles the reserved C/T value, which allo… |
CVE-2016-5351 | Medium | 5.9 | 2016-08-07 | epan/crypt/airpdcap.c in the IEEE 802.11 dissector in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles the lack of an EAPOL_RSN_KEY, which allow… |
CVE-2016-6128 | High | 7.5 | 2016-08-07 | The gdImageCropThreshold function in gd_crop.c in the GD Graphics Library (aka libgd) before 2.2.3, as used in PHP before 7.0.9, allows remote attackers to cau… |
CVE-2016-6512 | Medium | 5.9 | 2016-08-06 | epan/dissectors/packet-wap.c in Wireshark 2.x before 2.0.5 omits an overflow check in the tvb_get_guintvar function, which allows remote attackers to cause a d… |
CVE-2016-6509 | Medium | 5.9 | 2016-08-06 | epan/dissectors/packet-ldss.c in the LDSS dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 mishandles conversations, which allows remote attac… |
CVE-2016-6503 | Medium | 5.9 | 2016-08-06 | The CORBA IDL dissectors in Wireshark 2.x before 2.0.5 on 64-bit Windows platforms do not properly interact with Visual C++ compiler options, which allows remo… |
CVE-2016-6197 | Medium | 5.5 | 2016-08-06 | fs/overlayfs/dir.c in the OverlayFS filesystem implementation in the Linux kernel before 4.6 does not properly verify the upper dentry before proceeding with u… |
CVE-2016-6162 | High | 7.8 | 2016-08-06 | net/core/skbuff.c in the Linux kernel 4.7-rc6 allows local users to cause a denial of service (panic) or possibly have unspecified other impact via certain IPv… |
CVE-2014-9889 | High | 7.8 | 2016-08-06 | drivers/media/platform/msm/camera_v2/pproc/cpp/msm_cpp.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not validate CPP frame… |
CVE-2014-9886 | High | 7.8 | 2016-08-06 | arch/arm/mach-msm/qdsp6v2/ultrasound/usf.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices does not properly validate i… |
CVE-2014-9884 | High | 7.8 | 2016-08-06 | drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices does not validate certain pointers, which allows… |
CVE-2014-9872 | High | 7.8 | 2016-08-06 | The diag driver in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not ensure unique identifiers in a DCI client table, which allo… |
CVE-2014-9866 | High | 7.8 | 2016-08-06 | drivers/media/platform/msm/camera_v2/sensor/csid/msm_csid.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices does not va… |
CVE-2014-9864 | High | 7.8 | 2016-08-06 | drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices does not validate ioctl calls, which allows atta… |
CVE-2016-3831 | High | 7.5 | 2016-08-05 | The telephony component in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows remote attackers to cause a denia… |
CVE-2016-3830 | Medium | 5.5 | 2016-08-05 | codecs/aacdec/SoftAAC2.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allo… |
CVE-2016-3826 | High | 7.8 | 2016-08-05 | services/audioflinger/Effects.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 does not valida… |
CVE-2016-6148 | High | 7.5 | 2016-08-05 | SAP HANA DB 1.00.73.00.389160 allows remote attackers to cause a denial of service (process termination) or execute arbitrary code via vectors related to an IM… |
CVE-2016-5267 | Medium | 5.3 | 2016-08-05 | Mozilla Firefox before 48.0 on Android allows remote attackers to spoof the address bar via left-to-right characters in conjunction with a right-to-left charac… |
CVE-2016-5251 | Medium | 4.3 | 2016-08-05 | Mozilla Firefox before 48.0 allows remote attackers to spoof the location bar via crafted characters in the media type of a data: URL. |
CVE-2016-2839 | Medium | 6.5 | 2016-08-05 | Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 on Linux make cairo _cairo_surface_get_extents calls that do not properly interact with libav head… |
CVE-2016-6259 | Medium | 6.2 | 2016-08-02 | Xen 4.5.x through 4.7.x do not implement Supervisor Mode Access Prevention (SMAP) whitelisting in 32-bit exception and event delivery, which allows local 32-bi… |
CVE-2016-6178 | Critical | 9.8 | 2016-08-02 | Huawei NE40E and CX600 devices with software before V800R007SPH017; PTN 6900-2-M8 devices with software before V800R007SPH019; NE5000E devices with software be… |
CVE-2016-1712 | High | 7.8 | 2016-08-02 | Palo Alto Networks PAN-OS before 5.0.19, 5.1.x before 5.1.12, 6.0.x before 6.0.14, 6.1.x before 6.1.12, and 7.0.x before 7.0.8 might allow local users to gain… |
CVE-2016-3737 | Critical | 9.8 | 2016-08-02 | The server in Red Hat JBoss Operations Network (JON) before 3.3.6 allows remote attackers to execute arbitrary code via a crafted HTTP request, related to mess… |
CVE-2016-5672 | High | 8.1 | 2016-08-01 | Intel Crosswalk before 19.49.514.5, 20.x before 20.50.533.11, 21.x before 21.51.546.0, and 22.x before 22.51.549.0 interprets a user's acceptance of one invali… |
CVE-2016-1461 | High | 7.5 | 2016-08-01 | Cisco AsyncOS on Email Security Appliance (ESA) devices through 9.7.0-125 allows remote attackers to bypass malware detection via a crafted attachment in an e-… |
CVE-2016-1463 | High | 7.5 | 2016-07-28 | Cisco FireSIGHT System Software 5.3.0, 5.3.1, 5.4.0, 6.0, and 6.0.1 allows remote attackers to bypass Snort rules via crafted parameters in the header of an HT… |
CVE-2016-1374 | High | 8.8 | 2016-07-28 | The web framework in Cisco Unified Computing System (UCS) Performance Manager 2.0.0 and earlier allows remote authenticated users to execute arbitrary commands… |
CVE-2016-5135 | Medium | 6.5 | 2016-07-23 | WebKit/Source/core/html/parser/HTMLPreloadScanner.cpp in Blink, as used in Google Chrome before 52.0.2743.82, does not consider referrer-policy information ins… |
CVE-2016-1707 | Medium | 6.5 | 2016-07-23 | ios/web/web_state/ui/crw_web_controller.mm in Google Chrome before 52.0.2743.82 on iOS does not ensure that an invalid URL is replaced with the about:blank URL… |
CVE-2016-1706 | Critical | 9.6 | 2016-07-23 | The PPAPI implementation in Google Chrome before 52.0.2743.82 does not validate the origin of IPC messages to the plugin broker process that should have come f… |
CVE-2016-5874 | High | 7.5 | 2016-07-22 | Siemens SIMATIC NET PC-Software before 13 SP2 allows remote attackers to cause a denial of service (OPC UA service outage) via crafted TCP packets. |
CVE-2016-5743 | Critical | 9.8 | 2016-07-22 | Siemens SIMATIC WinCC before 7.3 Update 10 and 7.4 before Update 1, SIMATIC BATCH before 8.1 SP1 Update 9 as distributed in SIMATIC PCS 7 through 8.1 SP1, SIMA… |
CVE-2016-6224 | Low | 3.3 | 2016-07-22 | ecryptfs-setup-swap in eCryptfs does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning on a (1) NVMe or (2) MM… |
CVE-2015-8946 | Low | 3.3 | 2016-07-22 | ecryptfs-setup-swap in eCryptfs before 111 does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning and certain… |
CVE-2016-4641 | High | 7.3 | 2016-07-22 | Login Window in Apple OS X before 10.11.6 allows attackers to execute arbitrary code in a privileged context or obtain sensitive user information via a crafted… |
CVE-2016-4594 | High | 7.8 | 2016-07-22 | The Sandbox Profiles component in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows attackers to access the proce… |
CVE-2016-4590 | Medium | 5.4 | 2016-07-22 | WebKit in Apple iOS before 9.3.3 and Safari before 9.1.2 mishandles about: URLs, which allows remote attackers to bypass the Same Origin Policy via a crafted w… |
CVE-2016-2775 | Medium | 5.9 | 2016-07-19 | ISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or the named lwres option is enabled, allows remote attackers to… |
CVE-2016-4372 | Critical | 9.8 | 2016-07-15 | HPE iMC PLAT before 7.2 E0403P04, iMC EAD before 7.2 E0405P05, iMC APM before 7.2 E0401P04, iMC NTA before 7.2 E0401P01, iMC BIMS before 7.2 E0402P02, and iMC… |
CVE-2016-1450 | High | 7.5 | 2016-07-15 | Cisco WebEx Meetings Server 2.6 allows remote authenticated users to conduct command-injection attacks via vectors related to an upload's file type, aka Bug ID… |
CVE-2016-4974 | High | 7.5 | 2016-07-13 | Apache Qpid AMQP 0-x JMS client before 6.0.4 and JMS (AMQP 1.0) before 0.10.0 does not restrict the use of classes available on the classpath, which might allo… |
CVE-2016-5009 | Medium | 6.5 | 2016-07-12 | The handle_command function in mon/Monitor.cc in Ceph allows remote authenticated users to cause a denial of service (segmentation fault and ceph monitor crash… |
CVE-2016-3766 | High | 7.5 | 2016-07-11 | MPEG4Extractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not che… |
CVE-2016-3764 | Medium | 4.0 | 2016-07-11 | media/libmediaplayerservice/MetadataRetrieverClient.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016… |
CVE-2016-3763 | Low | 3.3 | 2016-07-11 | net/PacProxySelector.java in the Proxy Auto-Config (PAC) feature in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01… |
CVE-2016-3760 | High | 7.5 | 2016-07-11 | Bluetooth in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows local users to gain privileges by establishing a pairing that rem… |
CVE-2016-3757 | High | 7.0 | 2016-07-11 | The print_maps function in toolbox/lsof.c in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows user-assisted a… |
CVE-2016-3756 | High | 7.5 | 2016-07-11 | Tremolo/res012.c in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not validate the number of… |
CVE-2016-3755 | High | 7.5 | 2016-07-11 | decoder/ih264d_parse_pslice.c in mediaserver in Android 6.x before 2016-07-01 does not properly select concealment frames, which allows remote attackers to cau… |
CVE-2016-3750 | High | 7.8 | 2016-07-11 | libs/binder/Parcel.cpp in the Parcels Framework APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not va… |
CVE-2016-3743 | Critical | 9.8 | 2016-07-11 | decoder/ih264d_api.c in mediaserver in Android 6.x before 2016-07-01 does not initialize certain data structures, which allows remote attackers to execute arbi… |
CVE-2016-3742 | Critical | 9.8 | 2016-07-11 | decoder/ih264d_process_intra_mb.c in mediaserver in Android 6.x before 2016-07-01 mishandles intra mode, which allows remote attackers to execute arbitrary cod… |
CVE-2016-3741 | Critical | 9.8 | 2016-07-11 | The H.264 decoder in mediaserver in Android 6.x before 2016-07-01 does not initialize certain slice data, which allows remote attackers to execute arbitrary co… |
CVE-2016-4324 | High | 7.8 | 2016-07-08 | Use-after-free vulnerability in LibreOffice before 5.1.4 allows remote attackers to execute arbitrary code via a crafted RTF file, related to stylesheet and su… |
CVE-2016-1444 | Medium | 6.5 | 2016-07-07 | The Mobile and Remote Access (MRA) component in Cisco TelePresence Video Communication Server (VCS) X8.1 through X8.7 and Expressway X8.1 through X8.6 mishandl… |
CVE-2016-1442 | High | 8.8 | 2016-07-07 | The administrative web interface in Cisco Prime Infrastructure (PI) before 3.1.1 allows remote authenticated users to execute arbitrary commands via crafted fi… |
CVE-2016-6170 | Medium | 6.5 | 2016-07-06 | ISC BIND through 9.9.9-P1, 9.10.x through 9.10.4-P1, and 9.11.x through 9.11.0b1 allows primary DNS servers to cause a denial of service (secondary DNS server… |
CVE-2016-4465 | Medium | 5.3 | 2016-07-04 | The URLValidator class in Apache Struts 2 2.3.20 through 2.3.28.1 and 2.5.x before 2.5.1 allows remote attackers to cause a denial of service via a null value… |
CVE-2016-4438 | Critical | 9.8 | 2016-07-04 | The REST plugin in Apache Struts 2 2.3.19 through 2.3.28.1 allows remote attackers to execute arbitrary code via a crafted expression. |
CVE-2016-4433 | High | 7.5 | 2016-07-04 | Apache Struts 2 2.3.20 through 2.3.28.1 allows remote attackers to bypass intended access restrictions and conduct redirection attacks via a crafted request. |
CVE-2016-4431 | High | 7.5 | 2016-07-04 | Apache Struts 2 2.3.20 through 2.3.28.1 allows remote attackers to bypass intended access restrictions and conduct redirection attacks by leveraging a default… |
CVE-2016-3092 | High | 7.5 | 2016-07-04 | The MultipartStream class in Apache Commons Fileupload before 1.3.2, as used in Apache Tomcat 7.x before 7.0.70, 8.x before 8.0.36, 8.5.x before 8.5.3, and 9.x… |
CVE-2016-1182 | High | 8.2 | 2016-07-04 | ActionServlet.java in Apache Struts 1 1.x through 1.3.10 does not properly restrict the Validator configuration, which allows remote attackers to conduct cross… |
CVE-2015-0899 | High | 7.5 | 2016-07-04 | The MultiPageValidator implementation in Apache Struts 1 1.1 through 1.3.10 allows remote attackers to bypass intended access restrictions via a modified page… |
CVE-2016-1336 | High | 7.5 | 2016-07-03 | goform/Docsis_system on Cisco EPC3928 devices allows remote attackers to cause a denial of service (device crash) via a long LanguageSelect parameter, related… |
CVE-2016-1328 | High | 7.5 | 2016-07-03 | goform/WClientMACList on Cisco EPC3928 devices allows remote attackers to cause a denial of service (device crash) via a long h_sortWireless parameter, related… |
CVE-2016-1441 | High | 8.2 | 2016-07-03 | Cisco Cloud Network Automation Provisioner (CNAP) 1.0(0) in Cisco Configuration Assistant (CCA) allows remote attackers to bypass intended filesystem and admin… |
CVE-2016-1408 | High | 8.8 | 2016-07-02 | Cisco Prime Infrastructure 1.2 through 3.1 and Evolved Programmable Network Manager (EPNM) 1.2 and 2.0 allow remote authenticated users to execute arbitrary co… |
CVE-2016-0398 | Medium | 4.3 | 2016-07-02 | IBM Cognos Analytics (CA) 11.0 before 11.0.2 allows remote attackers to conduct content-spoofing attacks via a crafted URL. |
CVE-2016-3646 | High | 8.4 | 2016-06-30 | The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web G… |
CVE-2016-3644 | High | 8.4 | 2016-06-30 | The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web G… |
CVE-2016-2207 | High | 8.4 | 2016-06-30 | The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web G… |
CVE-2016-5301 | High | 7.5 | 2016-06-30 | The parse_chunk_header function in libtorrent before 1.1.1 allows remote attackers to cause a denial of service (crash) via a crafted (1) HTTP response or poss… |
CVE-2015-8899 | High | 7.5 | 2016-06-30 | Dnsmasq before 2.76 allows remote servers to cause a denial of service (crash) via a reply with an empty DNS address that has an (1) A or (2) AAAA record defin… |
CVE-2016-5840 | High | 7.2 | 2016-06-30 | hotfix_upload.cgi in Trend Micro Deep Discovery Inspector (DDI) 3.7, 3.8 SP1 (3.81), and 3.8 SP2 (3.82) allows remote administrators to execute arbitrary code… |
CVE-2016-5828 | High | 7.8 | 2016-06-27 | The start_thread function in arch/powerpc/kernel/process.c in the Linux kernel through 4.6.3 on powerpc platforms mishandles transactional state, which allows… |
CVE-2016-4825 | Medium | 5.6 | 2016-06-25 | The Collne Welcart e-Commerce plugin before 1.8.3 for WordPress allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code… |
CVE-2016-1438 | High | 7.5 | 2016-06-23 | Cisco AsyncOS 9.7.0-125 on Email Security Appliance (ESA) devices allows remote attackers to bypass intended spam filtering via crafted executable content in a… |
CVE-2016-1434 | Medium | 6.5 | 2016-06-23 | The license-certificate upload functionality on Cisco 8800 phones with software 11.0(1) allows remote authenticated users to delete arbitrary files via an inva… |
CVE-2016-4530 | Medium | 6.5 | 2016-06-19 | OSIsoft PI SQL Data Access Server (aka OLE DB) 2016 1.5 allows remote authenticated users to cause a denial of service (service outage and data loss) via a mes… |
CVE-2016-4518 | Medium | 6.5 | 2016-06-19 | OSIsoft PI AF Server before 2016 2.8.0 allows remote authenticated users to cause a denial of service (service outage) via a message. |
CVE-2016-1395 | Critical | 9.8 | 2016-06-19 | The web-based management interface on Cisco RV110W devices with firmware before 1.2.1.7, RV130W devices with firmware before 1.0.3.16, and RV215W devices with… |
CVE-2016-5433 | Medium | 6.1 | 2016-06-17 | Citrix iOS Receiver before 7.0 allows attackers to cause TLS certificates to be incorrectly validated via unspecified vectors. |
CVE-2016-2841 | Medium | 6.0 | 2016-06-16 | The ne2000_receive function in the NE2000 NIC emulation support (hw/net/ne2000.c) in QEMU before 2.5.1 allows local guest OS administrators to cause a denial o… |
CVE-2016-5361 | High | 7.5 | 2016-06-16 | programs/pluto/ikev1.c in libreswan before 3.17 retransmits in initial-responder states, which allows remote attackers to cause a denial of service (traffic am… |
CVE-2016-4165 | Critical | 9.8 | 2016-06-16 | The extension manager in Adobe Brackets before 1.7 allows attackers to have an unspecified impact via invalid input. |
CVE-2016-3230 | Medium | 5.0 | 2016-06-16 | The Search component in Microsoft Windows 7, Windows Server 2008 R2 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and… |
CVE-2016-3228 | High | 8.8 | 2016-06-16 | Microsoft Windows Server 2008 SP2 and R2 SP1 and Windows Server 2012 Gold and R2 allow remote authenticated users to execute arbitrary code via a crafted NetLo… |
CVE-2016-3207 | High | 7.5 | 2016-06-16 | The Microsoft (1) JScript 5.8 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to exe… |
CVE-2016-3206 | High | 7.5 | 2016-06-16 | The Microsoft (1) JScript 5.8 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to exe… |
CVE-2016-3205 | High | 7.5 | 2016-06-16 | The Microsoft (1) JScript 5.8 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to exe… |
CVE-2016-3203 | High | 7.8 | 2016-06-16 | Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 Gold and 1511, and Microsoft Edge allow remote attackers to execute arbitrary code via a cra… |
CVE-2016-3202 | High | 7.5 | 2016-06-16 | The Microsoft (1) Chakra JavaScript, (2) JScript, and (3) VBScript engines, as used in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, allow remote a… |