Количество 26 087
Количество 26 087
CVE-2016-0002
Scripting Engine Memory Corruption Vulnerability
CVE-2015-9541
Qt through 5.14 allows an exponential XML entity expansion attack via a crafted SVG document that is mishandled in QXmlStreamReader a related issue to CVE-2003-1564.
CVE-2015-9251
CVE-2015-8863
CVE-2015-8472
Buffer overflow in libpng allows remote attackers to cause a denial of service
CVE-2015-8370
CVE-2015-8126
Multiple buffer overflows in libpng allow remote attackers to cause a denial of service
CVE-2015-8100
CVE-2015-7981
The png_convert_to_rfc1123 function in png.c allows remote attackers to obtain sensitive process memory information
CVE-2015-7747
CVE-2015-7697
CVE-2015-7696
CVE-2015-7511
Libgcrypt before 1.6.5 does not properly perform elliptic-point curve multiplication during decryption, which makes it easier for physically proximate attackers to extract ECDH keys by measuring electromagnetic emanations.
CVE-2015-7504
CVE-2015-7309
The theme editor in Bolt allows remote authenticated users to execute arbitrary code by renaming a crafted file
CVE-2015-6749
CVE-2015-6117
CVE-2015-5741
The net/http library in net/http/transfer.go in Go before 1.4.3 does not properly parse HTTP headers, which allows remote attackers to conduct HTTP request smuggling attacks via a request that contains Content-Length and Transfer-Encoding header fields.
CVE-2015-5738
CVE-2015-5157
arch/x86/entry/entry_64.S in the Linux kernel before 4.1.6 on the x86_64 platform mishandles IRET faults in processing NMIs that occurred during userspace execution which might allow local users to gain privileges by triggering an NMI.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2016-0002 Scripting Engine Memory Corruption Vulnerability | 23% Средний | больше 10 лет назад | |
| CVE-2015-9541 Qt through 5.14 allows an exponential XML entity expansion attack via a crafted SVG document that is mishandled in QXmlStreamReader a related issue to CVE-2003-1564. | CVSS3: 7.5 | 2% Низкий | около 5 лет назад |
| CVSS3: 6.1 | 30% Средний | почти 2 года назад | |
| CVSS3: 9.8 | 7% Низкий | почти 6 лет назад | |
| CVE-2015-8472 Buffer overflow in libpng allows remote attackers to cause a denial of service | CVSS3: 7.3 | 6% Низкий | больше 1 года назад |
| 1% Низкий | почти 6 лет назад | ||
| CVE-2015-8126 Multiple buffer overflows in libpng allow remote attackers to cause a denial of service | 10% Средний | 6 месяцев назад | |
| 1% Низкий | почти 6 лет назад | ||
| CVE-2015-7981 The png_convert_to_rfc1123 function in png.c allows remote attackers to obtain sensitive process memory information | 6% Низкий | больше 1 года назад | |
| CVSS3: 8.8 | 9% Низкий | около 2 лет назад | |
| 6% Низкий | почти 6 лет назад | ||
| 7% Низкий | почти 6 лет назад | ||
| CVE-2015-7511 Libgcrypt before 1.6.5 does not properly perform elliptic-point curve multiplication during decryption, which makes it easier for physically proximate attackers to extract ECDH keys by measuring electromagnetic emanations. | 0% Низкий | 11 месяцев назад | |
| CVSS3: 8.8 | 1% Низкий | почти 6 лет назад | |
| CVE-2015-7309 The theme editor in Bolt allows remote authenticated users to execute arbitrary code by renaming a crafted file | 39% Средний | 10 месяцев назад | |
| 4% Низкий | больше 4 лет назад | ||
| 7% Низкий | больше 10 лет назад | ||
| CVE-2015-5741 The net/http library in net/http/transfer.go in Go before 1.4.3 does not properly parse HTTP headers, which allows remote attackers to conduct HTTP request smuggling attacks via a request that contains Content-Length and Transfer-Encoding header fields. | 3% Низкий | 6 месяцев назад | |
| CVSS3: 7.5 | 2% Низкий | почти 6 лет назад | |
| CVE-2015-5157 arch/x86/entry/entry_64.S in the Linux kernel before 4.1.6 on the x86_64 platform mishandles IRET faults in processing NMIs that occurred during userspace execution which might allow local users to gain privileges by triggering an NMI. | 1% Низкий | 6 месяцев назад |
Уязвимостей на страницу