CVE List

Id CVE No. Status Description Phase Votes Comments Actions
87698  CVE-2016-10189  Candidate  BitlBee before 3.5 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) and possibly execute arbitrary code via a file transfer request for a contact that is not in the contact list.  Assigned (20170131)  None (candidate not yet proposed)    View
102656  CVE-2017-5836  Candidate  The plist_free_data function in plist.c in libplist allows attackers to cause a denial of service (crash) via vectors involving an integer node that is treated as a PLIST_KEY and then triggers an invalid free.  Assigned (20170201)  None (candidate not yet proposed)    View
102657  CVE-2017-5837  Candidate  The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (floating point exception and crash) via a crafted video file.  Assigned (20170201)  None (candidate not yet proposed)    View
102658  CVE-2017-5838  Candidate  The gst_date_time_new_from_iso8601_string function in gst/gstdatetime.c in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a malformed datetime string.  Assigned (20170201)  None (candidate not yet proposed)    View
102659  CVE-2017-5839  Candidate  The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 does not properly limit recursion, which allows remote attackers to cause a denial of service (stack overflow and crash) via vectors involving nested WAVEFORMATEX.  Assigned (20170201)  None (candidate not yet proposed)    View

Page 19873 of 20943, showing 5 records out of 104715 total, starting on record 99361, ending on 99365

Actions