CVE-2016-0647

mysql: unspecified vulnerability in subcomponent: Server: FTS (CPU April 2016)

Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier and MariaDB before 5.5.49, 10.0.x before 10.0.25, and 10.1.x before 10.1.14 allows local users to affect availability via vectors related to FTS.

CVSS 3.0 · 5.5 Medium EPSS 1.7% KEV · Not listed

Vendors

Debian Ibm Mariadb and 3 more

Products

Debian Linux Powerkvm Mariadb and 5 more

CVE-2016-2799

graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)

Heap-based buffer overflow in the graphite2::Slot::setAttr function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted Graphite smart font.

CVSS 3.0 · 8.8 High EPSS 4.9% KEV · Not listed

Vendors

Mozilla Opensuse Oracle and 3 more

Products

Firefox Leap Opensuse and 4 more

CVE-2016-2798

graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)

The graphite2::GlyphCache::Loader::Loader function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.

CVSS 3.0 · 8.8 High EPSS 2.3% KEV · Not listed

Vendors

Mozilla Opensuse Oracle and 3 more

Products

Firefox Leap Opensuse and 4 more

CVE-2015-4792

mysql: unspecified vulnerability related to Server:Partition (CPU October 2015)

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Partition, a different vulnerability than CVE-2015-4802.

CVSS 2.0 · 1.7 Low EPSS 3.9% KEV · Not listed

Vendors

Canonical Debian Fedoraproject and 4 more

Products

Ubuntu Linux Debian Linux Fedora and 14 more

CVE-2016-2797

graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)

The graphite2::TtfUtil::CmapSubtable12Lookup function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font, a different vulnerability than CVE-2016-2801.

CVSS 3.0 · 8.8 High EPSS 2.7% KEV · Not listed

Vendors

Mozilla Opensuse Oracle and 3 more

Products

Firefox Leap Opensuse and 4 more

CVE-2016-0646

mysql: unspecified vulnerability in subcomponent: Server: DML (CPU April 2016)

Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect availability via vectors related to DML.

CVSS 3.0 · 5.5 Medium EPSS 1.8% KEV · Not listed

Vendors

Debian Ibm Mariadb and 3 more

Products

Debian Linux Powerkvm Mariadb and 5 more

CVE-2016-2796

graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)

Heap-based buffer overflow in the graphite2::vm::Machine::Code::Code function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted Graphite smart font.

CVSS 3.0 · 8.8 High EPSS 3.9% KEV · Not listed

Vendors

Mozilla Opensuse Oracle and 3 more

Products

Firefox Leap Opensuse and 4 more

CVE-2015-7213

Mozilla: Integer overflow in MP4 playback in 64-bit versions (MFSA 2015-146)

Integer overflow in the MPEG4Extractor::readMetaData function in MPEG4Extractor.cpp in libstagefright in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 on 64-bit platforms allows remote attackers to execute arbitrary code via a crafted MP4 video file that triggers a buffer overflow.

CVSS 2.0 · 6.8 Medium EPSS 4.1% KEV · Not listed

Vendors

Fedoraproject Mozilla Opensuse and 1 more

Products

Fedora Firefox Leap and 2 more

CVE-2016-2795

graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)

The graphite2::FileFace::get_table_fn function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, does not initialize memory for an unspecified data structure, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted Graphite smart font.

CVSS 3.0 · 8.8 High EPSS 2.3% KEV · Not listed

Vendors

Mozilla Opensuse Oracle and 3 more

Products

Firefox Leap Opensuse and 4 more

CVE-2016-0644

mysql: unspecified vulnerability in subcomponent: Server: DDL (CPU April 2016)

Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect availability via vectors related to DDL.

CVSS 3.0 · 5.5 Medium EPSS 1.8% KEV · Not listed

Vendors

Debian Ibm Mariadb and 3 more

Products

Debian Linux Powerkvm Mariadb and 5 more

CVE-2016-2794

graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)

The graphite2::TtfUtil::CmapSubtable12NextCodepoint function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.

CVSS 3.0 · 8.8 High EPSS 3.5% KEV · Not listed

Vendors

Mozilla Opensuse Oracle and 3 more

Products

Firefox Leap Opensuse and 4 more

CVE-2015-7212

Mozilla: Integer overflow allocating extremely large textures (MFSA 2015-139)

Integer overflow in the mozilla::layers::BufferTextureClient::AllocateForSurface function in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allows remote attackers to execute arbitrary code by triggering a graphics operation that requires a large texture allocation.

CVSS 2.0 · 7.5 High EPSS 4.0% KEV · Not listed

Vendors

Fedoraproject Mozilla Opensuse and 1 more

Products

Fedora Firefox Leap and 2 more

CVE-2016-2793

graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)

CachedCmap.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.

CVSS 3.0 · 8.8 High EPSS 2.7% KEV · Not listed

Vendors

Mozilla Opensuse Oracle and 3 more

Products

Firefox Leap Opensuse and 4 more

CVE-2016-2792

graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)

The graphite2::Slot::getAttr function in Slot.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font, a different vulnerability than CVE-2016-2800.

CVSS 3.0 · 8.8 High EPSS 2.3% KEV · Not listed

Vendors

Mozilla Opensuse Oracle and 3 more

Products

Firefox Leap Opensuse and 4 more

CVE-2016-0643

mysql: unspecified vulnerability in subcomponent: Server: DML (CPU April 2016)

Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier and MariaDB before 5.5.49, 10.0.x before 10.0.25, and 10.1.x before 10.1.14 allows local users to affect confidentiality via vectors related to DML.

CVSS 3.0 · 3.3 Low EPSS 1.6% KEV · Not listed

Vendors

Debian Ibm Mariadb and 3 more

Products

Debian Linux Powerkvm Mariadb and 4 more

CVE-2016-2791

graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)

The graphite2::GlyphCache::glyph function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.

CVSS 3.0 · 8.8 High EPSS 2.3% KEV · Not listed

Vendors

Mozilla Opensuse Oracle and 3 more

Products

Firefox Leap Opensuse and 4 more

CVE-2016-2790

graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)

The graphite2::TtfUtil::GetTableInfo function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, does not initialize memory for an unspecified data structure, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted Graphite smart font.

CVSS 3.0 · 8.8 High EPSS 2.3% KEV · Not listed

Vendors

Mozilla Opensuse Oracle and 3 more

Products

Firefox Leap Opensuse and 4 more

CVE-2016-0642

mysql: unspecified vulnerability in subcomponent: Server: Federated (CPU April 2016)

Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier allows local users to affect integrity and availability via vectors related to Federated.

CVSS 3.1 · 4.7 Medium EPSS 1.2% KEV · Not listed

Vendors

Canonical Debian Mariadb and 4 more

Products

Ubuntu Linux Debian Linux Mariadb and 16 more

CVE-2015-7211

Mozilla: Hash in data: URI is incorrectly parsed (MFSA 2015-141)

Mozilla Firefox before 43.0 mishandles the # (number sign) character in a data: URI, which allows remote attackers to spoof web sites via unspecified vectors.

CVSS 2.0 · 5.0 Medium EPSS 2.5% KEV · Not listed

Vendors

Fedoraproject Mozilla Opensuse

Products

Fedora Firefox Leap and 1 more

CVE-2015-4116

php: Use-after-free vulnerability in the spl_ptr_heap_insert function

Use-after-free vulnerability in the spl_ptr_heap_insert function in ext/spl/spl_heap.c in PHP before 5.5.27 and 5.6.x before 5.6.11 allows remote attackers to execute arbitrary code by triggering a failed SplMinHeap::compare operation.

CVSS 3.0 · 9.8 Critical EPSS 5.5% KEV · Not listed

Vendors

Opensuse Php

Products

Leap Php