CWE-264 (page 11)
Page 11 of 55 — CVEs classified under CWE-264, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-3808 | High | 7.8 | 2016-07-11 | The serial peripheral interface driver in Android before 2016-07-05 on Pixel C devices allows attackers to gain privileges via a crafted application, aka inter… |
CVE-2016-3807 | High | 7.8 | 2016-07-11 | The serial peripheral interface driver in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application, a… |
CVE-2016-3806 | High | 7.8 | 2016-07-11 | The MediaTek display driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, aka Android inte… |
CVE-2016-3805 | High | 7.8 | 2016-07-11 | The MediaTek power management driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, aka And… |
CVE-2016-3804 | High | 7.8 | 2016-07-11 | The MediaTek power management driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, aka And… |
CVE-2016-3803 | High | 7.8 | 2016-07-11 | The kernel filesystem implementation in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application, aka… |
CVE-2016-3802 | High | 7.8 | 2016-07-11 | The kernel filesystem implementation in Android before 2016-07-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka interna… |
CVE-2016-3801 | High | 7.8 | 2016-07-11 | The MediaTek GPS driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, aka Android internal… |
CVE-2016-3800 | High | 7.8 | 2016-07-11 | The MediaTek video driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, aka Android intern… |
CVE-2016-3799 | High | 7.8 | 2016-07-11 | The MediaTek video driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, aka Android intern… |
CVE-2016-3798 | High | 7.8 | 2016-07-11 | The MediaTek hardware sensor driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, aka Andr… |
CVE-2016-3796 | High | 7.8 | 2016-07-11 | The MediaTek power driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, aka Android intern… |
CVE-2016-3795 | High | 7.8 | 2016-07-11 | The MediaTek power driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, aka Android intern… |
CVE-2016-3793 | High | 7.8 | 2016-07-11 | The NVIDIA camera driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka Android internal bu… |
CVE-2016-3792 | High | 7.8 | 2016-07-11 | CORE/HDD/src/wlan_hdd_hostapd.c in the Qualcomm Wi-Fi driver in Android before 2016-07-05 on Nexus 7 (2013) devices mishandles userspace data copying, which al… |
CVE-2016-3775 | High | 7.8 | 2016-07-11 | The kernel filesystem implementation in Android before 2016-07-05 on Nexus 5X, Nexus 6, Nexus 6P, Nexus Player, and Pixel C devices allows attackers to gain pr… |
CVE-2016-3774 | High | 7.8 | 2016-07-11 | The MediaTek drivers in Android before 2016-07-05 on Android One devices allow attackers to gain privileges via a crafted application, aka Android internal bug… |
CVE-2016-3773 | High | 7.8 | 2016-07-11 | The MediaTek drivers in Android before 2016-07-05 on Android One devices allow attackers to gain privileges via a crafted application, aka Android internal bug… |
CVE-2016-3772 | High | 7.8 | 2016-07-11 | The MediaTek drivers in Android before 2016-07-05 on Android One devices allow attackers to gain privileges via a crafted application, aka Android internal bug… |
CVE-2016-3771 | High | 7.8 | 2016-07-11 | The MediaTek drivers in Android before 2016-07-05 on Android One devices allow attackers to gain privileges via a crafted application, aka Android internal bug… |
CVE-2016-3770 | High | 7.8 | 2016-07-11 | The MediaTek drivers in Android before 2016-07-05 on Android One devices allow attackers to gain privileges via a crafted application, aka Android internal bug… |
CVE-2016-3769 | High | 7.8 | 2016-07-11 | The NVIDIA video driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka Android internal bug… |
CVE-2016-3768 | High | 7.8 | 2016-07-11 | The Qualcomm performance component in Android before 2016-07-05 on Nexus 5, 6, 5X, 6P, and 7 (2013) devices allows attackers to gain privileges via a crafted a… |
CVE-2016-3762 | High | 7.8 | 2016-07-11 | The sockets subsystem in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows attackers to gain privileges via a crafted applicatio… |
CVE-2016-3758 | High | 7.8 | 2016-07-11 | Multiple buffer overflows in libdex/OptInvocation.cpp in DexClassLoader in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 201… |
CVE-2016-3748 | High | 8.4 | 2016-07-11 | The sockets subsystem in Android 6.x before 2016-07-01 allows attackers to bypass intended system-call restrictions via a crafted application that makes an ioc… |
CVE-2016-2503 | High | 7.8 | 2016-07-11 | The Qualcomm GPU driver in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application, aka Android inte… |
CVE-2016-2502 | High | 7.8 | 2016-07-11 | drivers/usb/gadget/f_serial.c in the Qualcomm USB driver in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a larg… |
CVE-2016-2501 | High | 7.8 | 2016-07-11 | The Qualcomm camera driver in Android before 2016-07-05 on Nexus 5X, 6, 6P, and 7 (2013) devices allows attackers to gain privileges via a crafted application… |
CVE-2015-8892 | High | 7.8 | 2016-07-11 | platform/msm_shared/boot_verifier.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to bypass intended acce… |
CVE-2015-8890 | High | 7.8 | 2016-07-11 | platform/msm_shared/partition_parser.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices does not validate certain GUID P… |
CVE-2015-8889 | High | 7.8 | 2016-07-11 | The aboot implementation in the Qualcomm components in Android before 2016-07-05 on Nexus 6P devices omits the recovery PIN feature, which has unspecified impa… |
CVE-2015-8888 | High | 7.8 | 2016-07-11 | Integer overflow in app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allows attackers to bypass intended access res… |
CVE-2014-9802 | High | 7.8 | 2016-07-11 | Multiple integer overflows in lib/libfdt/fdt.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices allow attackers to gain… |
CVE-2014-9800 | High | 7.8 | 2016-07-11 | Integer overflow in lib/heap/heap.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices allows attackers to gain privileges… |
CVE-2014-9799 | High | 7.8 | 2016-07-11 | The makefile in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices omits the -fno-strict-overflow option to gcc, which might… |
CVE-2014-9796 | High | 7.8 | 2016-07-11 | app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices does not validate the page size in the kernel header… |
CVE-2014-9790 | High | 7.8 | 2016-07-11 | drivers/mmc/core/debugfs.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices does not validate pointers used in read and… |
CVE-2014-9789 | High | 7.8 | 2016-07-11 | The (1) alloc and (2) free APIs in arch/arm/mach-msm/qdsp6v2/msm_audio_ion.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices do not… |
CVE-2014-9785 | High | 7.8 | 2016-07-11 | drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 (2013) devices does not validate addresses before copying data, which… |
CVE-2014-9783 | High | 7.8 | 2016-07-11 | drivers/media/platform/msm/camera_v2/sensor/cci/msm_cci.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 (2013) devices does not validate c… |
CVE-2014-9782 | High | 7.8 | 2016-07-11 | drivers/media/platform/msm/camera_v2/sensor/actuator/msm_actuator.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices doe… |
CVE-2014-9780 | High | 7.8 | 2016-07-11 | drivers/video/msm/mdss/mdp3_ctrl.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5, 5X, and 6P devices does not validate start and length va… |
CVE-2014-9779 | High | 7.8 | 2016-07-11 | arch/arm/mach-msm/qdsp6v2/msm_audio_ion.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allows attackers to obtain sensitive infor… |
CVE-2016-2945 | High | 7.5 | 2016-07-08 | The API Discovery implementation in IBM WebSphere Application Server (WAS) 8.5.5.8 through 8.5.5.9 Liberty before Liberty Fix Pack 16.0.0.2 allows remote authe… |
CVE-2016-0271 | High | 8.2 | 2016-07-08 | The agents in IBM UrbanCode Deploy 6.x before 6.0.1.14, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 do not verify a server's identity in a JMS session or an… |
CVE-2016-0230 | Medium | 6.8 | 2016-07-07 | IBM Power Hardware Management Console (HMC) 7.3 through 7.3.0 SP7, 7.9 through 7.9.0 SP3, 8.1 through 8.1.0 SP3, 8.2 through 8.2.0 SP2, 8.3 through 8.3.0 SP2… |
CVE-2016-4997 | High | 7.8 | 2016-07-03 | The compat IPT_SO_SET_REPLACE and IP6T_SO_SET_REPLACE setsockopt implementations in the netfilter subsystem in the Linux kernel before 4.6.3 allow local users… |
CVE-2016-1337 | High | 8.1 | 2016-07-03 | Cisco EPC3928 devices allow remote attackers to obtain sensitive configuration and credential information by making requests during the early part of the boot… |
CVE-2016-3989 | High | 8.1 | 2016-07-03 | The NTP time-server interface on Meinberg IMS-LANTIME M3000, IMS-LANTIME M1000, IMS-LANTIME M500, LANTIME M900, LANTIME M600, LANTIME M400, LANTIME M300, LANTI… |
CVE-2016-1394 | High | 8.6 | 2016-07-03 | Cisco Firepower System Software 6.0.0 through 6.1.0 has a hardcoded account, which allows remote attackers to obtain CLI access by leveraging knowledge of the… |
CVE-2016-2968 | Medium | 6.5 | 2016-07-02 | IBM Security QRadar Incident Forensics 7.2.x before 7.2.7 allows remote attackers to bypass authentication, and obtain sensitive information or modify data, vi… |
CVE-2016-1416 | Critical | 9.8 | 2016-07-02 | Cisco Prime Collaboration Provisioning 10.6 SP2 (aka 10.6.0.10602) mishandles LDAP authentication, which allows remote attackers to obtain administrator privil… |
CVE-2016-0375 | High | 8.8 | 2016-07-01 | JMS Client in IBM MessageSight 1.1.x through 1.1.0.1, 1.2.x through 1.2.0.3, and 2.0.x through 2.0.0.0 allows remote authenticated users to obtain administrato… |
CVE-2016-0374 | High | 8.8 | 2016-07-01 | The builder tools in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allow remote authenticated users to gain p… |
CVE-2016-5020 | High | 8.8 | 2016-06-30 | F5 BIG-IP before 12.0.0 HF3 allows remote authenticated users to modify the account configuration of users with the Resource Administration role and gain privi… |
CVE-2016-5729 | High | 8.2 | 2016-06-30 | Lenovo BIOS EFI Driver allows local administrators to execute arbitrary code with System Management Mode (SMM) privileges via unspecified vectors. |
CVE-2016-5249 | High | 7.8 | 2016-06-30 | Lenovo Solution Center (LSC) before 3.3.003 allows local users to execute arbitrary code with LocalSystem privileges via vectors involving the LSC.Services.Sys… |
CVE-2016-5248 | Medium | 5.5 | 2016-06-30 | The StopProxy command in LSC.Services.SystemService in Lenovo Solution Center before 3.3.003 allows local users to terminate arbitrary processes via the PID ar… |
CVE-2016-5231 | High | 7.8 | 2016-06-30 | Huawei Mate8 NXT-AL before NXT-AL10C00B182, NXT-CL before NXT-CL00C92B182, NXT-DL before NXT-DL00C17B182, and NXT-TL before NXT-TL00C01B182 allows attackers to… |
CVE-2016-5230 | High | 8.8 | 2016-06-30 | Huawei Mate8 NXT-AL before NXT-AL10C00B182, NXT-CL before NXT-CL00C92B182, NXT-DL before NXT-DL00C17B182, and NXT-TL before NXT-TL00C01B182 allows attackers to… |
CVE-2016-0263 | High | 7.0 | 2016-06-29 | IBM Spectrum Scale 4.1 before 4.1.1.5 and 4.2 before 4.2.0.2 and General Parallel File System 3.5 before 3.5.0.30 allow local users to gain privileges or cause… |
CVE-2016-4440 | High | 7.8 | 2016-06-27 | arch/x86/kvm/vmx.c in the Linux kernel through 4.6.3 mishandles the APICv on/off state, which allows guest OS users to obtain direct APIC MSR access on the hos… |
CVE-2016-5087 | Medium | 4.4 | 2016-06-26 | Alertus Desktop Notification before 2.9.31.1710 on OS X uses weak permissions for configuration files and unspecified other files, which allows local users to… |
CVE-2016-5723 | High | 7.8 | 2016-06-24 | Huawei FusionInsight HD before V100R002C60SPC200 allows local users to gain root privileges via unspecified vectors. |
CVE-2016-4802 | High | 7.8 | 2016-06-24 | Multiple untrusted search path vulnerabilities in cURL and libcurl before 7.49.1, when built with SSPI or telnet is enabled, allow local users to execute arbit… |
CVE-2016-1435 | High | 7.0 | 2016-06-23 | Cisco 8800 phones with software 11.0(1) do not properly enforce mounted-filesystem permissions, which allows local users to write to arbitrary files by leverag… |
CVE-2016-2363 | High | 7.8 | 2016-06-20 | Fonality (previously trixbox Pro) 12.6 through 14.1i before 2016-06-01 uses weak permissions for the /var/www/rpc/surun script, which allows local users to obt… |
CVE-2016-1196 | Medium | 4.3 | 2016-06-19 | Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote authenticated users to bypass intended access restrictions and obtain sensitive Address Book information v… |
CVE-2016-0912 | Critical | 9.8 | 2016-06-19 | EMC Data Domain OS 5.4 through 5.7 before 5.7.2.0 allows remote authenticated users to bypass intended password-change restrictions by leveraging access to (1)… |
CVE-2016-0911 | High | 8.2 | 2016-06-19 | EMC Data Domain OS 5.4 through 5.7 before 5.7.2.0 has a default no_root_squash option for NFS exports, which makes it easier for remote attackers to obtain fil… |
CVE-2016-1183 | Low | 3.7 | 2016-06-19 | NTT Data TERASOLUNA Server Framework for Java(WEB) 2.0.0.1 through 2.0.6.1, as used in Fujitsu Interstage Business Application Server and other products, allow… |
CVE-2016-3643 | High | 7.8 | 2016-06-17 | SolarWinds Virtualization Manager 6.3.1 and earlier allow local users to gain privileges by leveraging a misconfiguration of sudo, as demonstrated by "sudo cat… |
CVE-2016-4158 | High | 7.3 | 2016-06-16 | Unquoted Windows search path vulnerability in Adobe Creative Cloud Desktop Application before 3.7.0.272 on Windows allows local users to gain privileges via a… |
CVE-2016-4157 | High | 7.3 | 2016-06-16 | Untrusted search path vulnerability in the installer in Adobe Creative Cloud Desktop Application before 3.7.0.272 on Windows allows local users to gain privile… |
CVE-2016-3225 | High | 7.8 | 2016-06-16 | The SMB server component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windo… |
CVE-2016-3223 | High | 8.1 | 2016-06-16 | Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Go… |
CVE-2016-3221 | High | 7.8 | 2016-06-16 | The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Window… |
CVE-2016-3220 | High | 7.8 | 2016-06-16 | atmfd.dll in the Adobe Type Manager Font Driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server… |
CVE-2016-3219 | High | 7.8 | 2016-06-16 | The kernel-mode driver in Microsoft Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privileg… |
CVE-2016-3218 | High | 7.8 | 2016-06-16 | The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Window… |
CVE-2016-3213 | High | 8.8 | 2016-06-16 | The Web Proxy Auto Discovery (WPAD) protocol implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Win… |
CVE-2016-5365 | Critical | 9.8 | 2016-06-14 | Stack-based buffer overflow in Huawei Honor WS851 routers with software 1.1.21.1 and earlier allows remote attackers to execute arbitrary commands with root pr… |
CVE-2016-2826 | High | 7.8 | 2016-06-13 | The maintenance service in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 on Windows does not prevent MAR extracted-file modification during upda… |
CVE-2016-2494 | High | 7.8 | 2016-06-13 | Off-by-one error in sdcard/sdcard.c in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 allows attackers to gain pri… |
CVE-2016-2493 | High | 7.8 | 2016-06-13 | The Broadcom Wi-Fi driver in Android before 2016-06-01 on Nexus 5, Nexus 6, Nexus 6P, Nexus 7 (2013), Nexus Player, and Pixel C devices allows attackers to gai… |
CVE-2016-2492 | High | 7.8 | 2016-06-13 | The MediaTek power-management driver in Android before 2016-06-01 on Android One devices allows attackers to gain privileges via a crafted application, aka int… |
CVE-2016-2491 | High | 7.8 | 2016-06-13 | The NVIDIA camera driver in Android before 2016-06-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 275564… |
CVE-2016-2490 | High | 7.8 | 2016-06-13 | The NVIDIA camera driver in Android before 2016-06-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 275333… |
CVE-2016-2489 | High | 7.8 | 2016-06-13 | The Qualcomm video driver in Android before 2016-06-01 on Nexus 5, 5X, 6, and 6P devices allows attackers to gain privileges via a crafted application, aka int… |
CVE-2016-2488 | High | 7.8 | 2016-06-13 | The Qualcomm camera driver in Android before 2016-06-01 on Nexus 5, 5X, 6, 6P, and 7 (2013) devices allows attackers to gain privileges via a crafted applicati… |
CVE-2016-0910 | High | 8.8 | 2016-06-10 | EMC Data Domain OS 5.5 before 5.5.4.0, 5.6 before 5.6.1.004, and 5.7 before 5.7.2.0 stores session identifiers of GUI users in a world-readable file, which all… |
CVE-2016-3738 | High | 8.8 | 2016-06-08 | Red Hat OpenShift Enterprise 3.2 does not properly restrict access to STI builds, which allows remote authenticated users to access the Docker socket and gain… |
CVE-2016-2160 | High | 8.8 | 2016-06-08 | Red Hat OpenShift Enterprise 3.2 and OpenShift Origin allow remote authenticated users to execute commands with root privileges by changing the root password i… |
CVE-2016-4962 | Medium | 6.7 | 2016-06-07 | The libxl device-handling in Xen 4.6.x and earlier allows local OS guest administrators to cause a denial of service (resource consumption or management facili… |
CVE-2015-5723 | High | 7.8 | 2016-06-07 | Doctrine Annotations before 1.2.7, Cache before 1.3.2 and 1.4.x before 1.4.2, Common before 2.4.3 and 2.5.x before 2.5.1, ORM before 2.4.8 or 2.5.x before 2.5… |
CVE-2015-5228 | High | 7.8 | 2016-06-07 | The service daemon in CRIU creates log and dump files insecurely, which allows local users to create arbitrary files and take ownership of existing files via u… |
CVE-2016-0908 | Medium | 6.7 | 2016-06-04 | EMC Isilon OneFS 7.1.x before 7.1.1.9 and 7.2.x before 7.2.1.2 allows local users to obtain root shell access by leveraging administrative privileges. |
CVE-2016-3697 | High | 7.8 | 2016-06-01 | libcontainer/user/user.go in runC before 0.1.0, as used in Docker before 1.11.2, improperly treats a numeric UID as a potential username, which allows local us… |
CVE-2016-4505 | High | 8.8 | 2016-05-31 | Resource Data Management (RDM) Intuitive 650 TDB Controller devices before 2.1.24 allow remote authenticated users to modify arbitrary passwords via unspecifie… |