CVE-2014-3565

net-snmp: snmptrapd crash when handling an SNMP trap containing a ifMtu with a NULL type

snmplib/mib.c in net-snmp 5.7.0 and earlier, when the -OQ option is used, allows remote attackers to cause a denial of service (snmptrapd crash) via a crafted SNMP trap message, which triggers a conversion to the variable type designated in the MIB file, as demonstrated by a NULL type in an ifMtu trap message.

CVSS 2.0 · 5.0 Medium EPSS 4.4% KEV · Not listed

Vendors

Apple Canonical Net-snmp and 1 more

Products

Mac Os X Ubuntu Linux Net-snmp and 1 more

CVE-2016-6992

flash-plugin: multiple code execution issues fixed in APSB16-32

Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code by leveraging an unspecified "type confusion."

CVSS 3.1 · 8.8 High EPSS 6.2% KEV · Not listed

Vendors

Adobe Apple Google and 3 more

Products

Flash Player Flash Player Desktop Runtime Mac Os X and 6 more

CVE-2016-5582

OpenJDK: incomplete type checks of System.arraycopy arguments (Hotspot, 8160591)

Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Hotspot, a different vulnerability than CVE-2016-5573.

CVSS 3.0 · 9.6 Critical EPSS 5.2% KEV · Not listed

Vendors

Oracle Redhat

Products

Jdk Jre Enterprise Linux and 1 more

CVE-2016-3185

php: Type confusion vulnerability in make_http_soap_request()

The make_http_soap_request function in ext/soap/php_http.c in PHP before 5.4.44, 5.5.x before 5.5.28, 5.6.x before 5.6.12, and 7.x before 7.0.4 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (type confusion and application crash) via crafted serialized _cookies data, related to the SoapClient::__call method in ext/soap/soap.c.

CVSS 3.0 · 7.1 High EPSS 3.1% KEV · Not listed

Vendors

Php

Products

Php

CVE-2014-1730

v8: type confusion issue fixed in Google Chrome 34.0.1847.131

Google V8, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, does not properly store internationalization metadata, which allows remote attackers to bypass intended access restrictions by leveraging "type confusion" and reading property values, related to i18n.js and runtime.cc.

CVSS 2.0 · 7.8 High EPSS 3.2% KEV · Not listed

Vendors

Apple Google Linux and 1 more

Products

Mac Os X Chrome Linux Kernel and 1 more

CVE-2016-1643

chromium-browser: type confusion in Blink

The ImageInputType::ensurePrimaryContent function in WebKit/Source/core/html/forms/ImageInputType.cpp in Blink, as used in Google Chrome before 49.0.2623.87, does not properly maintain the user agent shadow DOM, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion."

CVSS 3.0 · 8.8 High EPSS 2.7% KEV · Not listed

Vendors

Google Redhat

Products

Chrome Rhel Extras

CVE-2015-6836

php: SOAP serialize_function_call() type confusion

The SoapClient __call method in ext/soap/soap.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 does not properly manage headers, which allows remote attackers to execute arbitrary code via crafted serialized data that triggers a "type confusion" in the serialize_function_call function.

CVSS 3.0 · 7.3 High EPSS 10.3% KEV · Not listed

Vendors

Php Redhat

Products

Php Rhel Software Collections

CVE-2015-6788

chromium-browser: Type confusion in extensions

The ObjectBackedNativeHandler class in extensions/renderer/object_backed_native_handler.cc in the extensions subsystem in Google Chrome before 47.0.2526.80 improperly implements handler functions, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion."

CVSS 2.0 · 10.0 Critical EPSS 3.1% KEV · Not listed

Vendors

Google Redhat

Products

Chrome Rhel Extras

CVE-2015-6775

chromium-browser: Type confusion in PDFium

fpdfsdk/src/jsapi/fxjs_v8.cpp in PDFium, as used in Google Chrome before 47.0.2526.73, does not use signatures, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion."

CVSS 2.0 · 7.5 High EPSS 2.0% KEV · Not listed

Vendors

Google Redhat

Products

Chrome Rhel Extras

CVE-2015-4603

php: exception:: getTraceAsString type confusion issue after unserialize

The exception::getTraceAsString function in Zend/zend_exceptions.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to execute arbitrary code via an unexpected data type, related to a "type confusion" issue.

CVSS 3.0 · 9.8 Critical EPSS 10.6% KEV · Not listed

Vendors

Php Redhat

Products

Php Enterprise Linux Enterprise Linux Desktop and 6 more

CVE-2015-4602

php: Incomplete Class unserialization type confusion

The __PHP_Incomplete_Class function in ext/standard/incomplete_class.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an unexpected data type, related to a "type confusion" issue.

CVSS 3.0 · 9.8 Critical EPSS 10.3% KEV · Not listed

Vendors

Php Redhat

Products

Php Enterprise Linux Enterprise Linux Desktop and 6 more

CVE-2015-4601

php: type confusion issue in unserialize() with various SOAP methods

PHP before 5.6.7 might allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an unexpected data type, related to "type confusion" issues in (1) ext/soap/php_encoding.c, (2) ext/soap/php_http.c, and (3) ext/soap/soap.c, a different issue than CVE-2015-4600.

CVSS 3.0 · 9.8 Critical EPSS 7.9% KEV · Not listed

Vendors

Php Redhat

Products

Php Enterprise Linux Enterprise Linux Desktop and 6 more

CVE-2015-4600

php: type confusion issue in unserialize() with various SOAP methods

The SoapClient implementation in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an unexpected data type, related to "type confusion" issues in the (1) SoapClient::__getLastRequest, (2) SoapClient::__getLastResponse, (3) SoapClient::__getLastRequestHeaders, (4) SoapClient::__getLastResponseHeaders, (5) SoapClient::__getCookies, and (6) SoapClient::__setCookie methods.

CVSS 3.0 · 9.8 Critical EPSS 10.3% KEV · Not listed

Vendors

Php Redhat

Products

Php Enterprise Linux Enterprise Linux Desktop and 6 more

CVE-2015-4599

php: type confusion issue in unserialize() with various SOAP methods

The SoapFault::__toString method in ext/soap/soap.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to obtain sensitive information, cause a denial of service (application crash), or possibly execute arbitrary code via an unexpected data type, related to a "type confusion" issue.

CVSS 3.0 · 9.8 Critical EPSS 10.3% KEV · Not listed

Vendors

Php Redhat

Products

Php Enterprise Linux Enterprise Linux Desktop and 6 more

CVE-2014-3515

php: unserialize() SPL ArrayObject / SPLObjectStorage type confusion flaw

The SPL component in PHP before 5.4.30 and 5.5.x before 5.5.14 incorrectly anticipates that certain data structures will have the array data type after unserialization, which allows remote attackers to execute arbitrary code via a crafted string that triggers use of a Hashtable destructor, related to "type confusion" issues in (1) ArrayObject and (2) SPLObjectStorage.

CVSS 2.0 · 7.5 High EPSS 30.1% KEV · Not listed

Vendors

Debian Php Redhat

Products

Debian Linux Php Enterprise Linux and 1 more

CVE-2014-1731

webkitgtk: improper renderer state check in core/html/HTMLSelectElement.cpp (WSA-2015-0001)

core/html/HTMLSelectElement.cpp in the DOM implementation in Blink, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, does not properly check renderer state upon a focus event, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion" for SELECT elements.

CVSS 2.0 · 7.5 High EPSS 3.2% KEV · Not listed

Vendors

Apple Google Linux and 1 more

Products

Mac Os X Chrome Linux Kernel and 1 more

CVE-2015-4148

php: SoapClient's do_soap_call() type confusion after unserialize()

The do_soap_call function in ext/soap/soap.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 does not verify that the uri property is a string, which allows remote attackers to obtain sensitive information by providing crafted serialized data with an int data type, related to a "type confusion" issue.

CVSS 2.0 · 5.0 Medium EPSS 19.8% KEV · Not listed

Vendors

Apple Php Redhat

Products

Mac Os X Php Enterprise Linux and 7 more

CVE-2014-4721

php: type confusion issue in phpinfo() leading to information leak

The phpinfo implementation in ext/standard/info.c in PHP before 5.4.30 and 5.5.x before 5.5.14 does not ensure use of the string data type for the PHP_AUTH_PW, PHP_AUTH_TYPE, PHP_AUTH_USER, and PHP_SELF variables, which might allow context-dependent attackers to obtain sensitive information from process memory by using the integer data type with crafted values, related to a "type confusion" vulnerability, as demonstrated by reading a private SSL key in an Apache HTTP Server web-hosting environment with mod_ssl and a PHP 5.3.x mod_php.

CVSS 2.0 · 2.6 Low EPSS 5.9% KEV · Not listed

Vendors

Debian Php Redhat

Products

Debian Linux Php Enterprise Linux and 1 more

CVE-2015-1217

chromium-browser: Type confusion in v8 bindings

The V8LazyEventListener::prepareListenerObject function in bindings/core/v8/V8LazyEventListener.cpp in the V8 bindings in Blink, as used in Google Chrome before 41.0.2272.76, does not properly compile listeners, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion."

CVSS 2.0 · 7.5 High EPSS 2.1% KEV · Not listed

Vendors

Canonical Google Redhat

Products

Ubuntu Linux Chrome Enterprise Linux Desktop Supplementary and 4 more

CVE-2016-8331

libtiff: FAX IFD Entry Parsing Type Confusion

An exploitable remote code execution vulnerability exists in the handling of TIFF images in LibTIFF version 4.0.6. A crafted TIFF document can lead to a type confusion vulnerability resulting in remote code execution. This vulnerability can be triggered via a TIFF file delivered to the application using LibTIFF's tag extension functionality.

CVSS 3.0 · 8.1 High EPSS 6.6% KEV · Not listed

Vendors

Libtiff

Products

Libtiff