CVE List
| Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
|---|---|---|---|---|---|---|---|
| 95676 | CVE-2016-8856 | Candidate | Foxit Reader for Mac 2.1.0.0804 and earlier and Foxit Reader for Linux 2.1.0.0805 and earlier suffered from a vulnerability where weak file permissions could be exploited by attackers to execute arbitrary code. After the installation, Foxit Reader"s core files were world-writable by default, allowing an attacker to overwrite them with backdoor code, which when executed by privileged user would result in Privilege Escalation, Code Execution, or both. | Assigned (20161019) | None (candidate not yet proposed) | View | |
| 95677 | CVE-2016-8857 | Candidate | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. | Assigned (20161019) | None (candidate not yet proposed) | View | |
| 95678 | CVE-2016-8858 | Candidate | ** DISPUTED ** The kex_input_kexinit function in kex.c in OpenSSH 6.x and 7.x through 7.3 allows remote attackers to cause a denial of service (memory consumption) by sending many duplicate KEXINIT requests. NOTE: a third party reports that "OpenSSH upstream does not consider this as a security issue." | Assigned (20161019) | None (candidate not yet proposed) | View | |
| 95679 | CVE-2016-8859 | Candidate | Multiple integer overflows in the TRE library and musl libc allow attackers to cause memory corruption via a large number of (1) states or (2) tags, which triggers an out-of-bounds write. | Assigned (20161019) | None (candidate not yet proposed) | View | |
| 95680 | CVE-2016-8860 | Candidate | Tor before 0.2.8.9 and 0.2.9.x before 0.2.9.4-alpha had internal functions that were entitled to expect that buf_t data had NUL termination, but the implementation of or/buffers.c did not ensure that NUL termination was present, which allows remote attackers to cause a denial of service (client, hidden service, relay, or authority crash) via crafted data. | Assigned (20161019) | None (candidate not yet proposed) | View |
Page 19136 of 20943, showing 5 records out of 104715 total, starting on record 95676, ending on 95680
