17307 vulnerabilidades Orden: CVSS EPSS Año ID
CVE-2016-1834
Software Genérico General
7.8
HIGH
EPSS
2.4%
2016 4 PoCs

Heap-based buffer overflow in the xmlStrncat function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML document.

Scanner Automatizado
Sin template local disponible
CVE-2016-0151
🔥 KEV Software Genérico Windows
7.8
HIGH
EPSS
32.4%
2016 1 PoC

The Client-Server Run-time Subsystem (CSRSS) in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mismanages process tokens, which allows local users to gain privileges via a crafted application, aka "Windows CSRSS Security Feature Bypass Vulnerability."

Scanner Automatizado
Sin template local disponible
CVE-2016-3643
🔥 KEV Software Genérico General
7.8
HIGH
EPSS
5.2%
2016 3 PoCs

SolarWinds Virtualization Manager 6.3.1 and earlier allow local users to gain privileges by leveraging a misconfiguration of sudo, as demonstrated by "sudo cat /etc/passwd."

Scanner Automatizado
Sin template local disponible
CVE-2016-8732
Dell Protected Workspace Cloud
7.8
HIGH
EPSS
0.0%
2016 2 PoCs

Multiple security flaws exists in InvProtectDrv.sys which is a part of Invincea Dell Protected Workspace 5.1.1-22303. Weak restrictions on the driver communication channel and additional insufficient checks allow any application to turn off some of the protection mechanisms provided by the Invincea product.

Scanner Automatizado
Sin template local disponible
CVE-2016-7255
🔥 KEV Software Genérico Windows
7.8
HIGH
EPSS
89.4%
2016 10 PoCs

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."

Scanner Automatizado
Sin template local disponible
CVE-2016-1019
🔥 KEV Software Genérico General
7.8
HIGH
EPSS
58.0%
2016 1 PoC

Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, as exploited in the wild in April 2016.

Scanner Automatizado
Sin template local disponible
CVE-2016-0099
🔥 KEV Software Genérico Windows
7.8
HIGH
EPSS
90.4%
2016 4 PoCs

The Secondary Logon Service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 does not properly process request handles, which allows local users to gain privileges via a crafted application, aka "Secondary Logon Elevation of Privilege Vulnerability."

Scanner Automatizado
Sin template local disponible
CVE-2016-6367
🔥 KEV Software Genérico Networking
7.8
HIGH
EPSS
18.8%
2016 1 PoC

Cisco Adaptive Security Appliance (ASA) Software before 8.4(1) on ASA 5500, ASA 5500-X, PIX, and FWSM devices allows local users to gain privileges via invalid CLI commands, aka Bug ID CSCtu74257 or EPICBANANA.

Scanner Automatizado
Sin template local disponible
CVE-2016-0185
🔥 KEV Software Genérico Windows
7.8
HIGH
EPSS
80.2%
2016 1 PoC

Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, and Windows 8.1 allows remote attackers to execute arbitrary code via a crafted Media Center link (aka .mcl) file, aka "Windows Media Center Remote Code Execution Vulnerability."

Scanner Automatizado
Sin template local disponible
CVE-2016-4117
🔥 KEV Software Genérico General
7.8
HIGH
EPSS
93.0%
2016 3 PoCs

Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in May 2016.

Scanner Automatizado
Sin template local disponible
CVE-2016-9031
SmartOS General
7.8
HIGH
EPSS
0.1%
2016 1 PoC

An exploitable integer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system. The vulnerability is present in the Ioctl system call with the command HYPRLOFS_ADD_ENTRIES when dealing with 32-bit file systems. An attacker can craft an input that can cause a kernel panic and potentially be leveraged into a full privilege escalation vulnerability. This vulnerability is distinct from CVE-2016-8733.

Scanner Automatizado
Sin template local disponible
CVE-2016-0165
🔥 KEV Software Genérico Windows
7.8
HIGH
EPSS
6.2%
2016 1 PoC

The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0143 and CVE-2016-0167.

Scanner Automatizado
Sin template local disponible
CVE-2016-4656
🔥 KEV Software Genérico General
7.8
HIGH
EPSS
66.7%
2016 1 PoC

The kernel in Apple iOS before 9.3.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

Scanner Automatizado
Sin template local disponible
CVE-2016-3309
🔥 KEV Software Genérico Windows
7.8
HIGH
EPSS
46.8%
2016 2 PoCs

The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-3308, CVE-2016-3310, and CVE-2016-3311.

Scanner Automatizado
Sin template local disponible
CVE-2016-8733
SmartOS General
7.8
HIGH
EPSS
0.1%
2016 1 PoC

An exploitable integer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system. The vulnerability is present in the Ioctl system call with the command HYPRLOFS_ADD_ENTRIES when dealing with native file systems. An attacker can craft an input that can cause a kernel panic and potentially be leveraged into a full privilege escalation vulnerability. This vulnerability is distinct from CVE-2016-9031.

Scanner Automatizado
Sin template local disponible
CVE-2018-15687
systemd General
7.8
HIGH
EPSS
0.4%
2018 1 PoC

A race condition in chown_one() of systemd allows an attacker to cause systemd to set arbitrary permissions on arbitrary files. Affected releases are systemd versions up to and including 239.

Scanner Automatizado
Sin template local disponible
CVE-2018-8611
🔥 KEV Windows 7 Windows
7.8
HIGH
EPSS
16.4%
2018 1 PoC

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.

Scanner Automatizado
Sin template local disponible
CVE-2018-9338
Android General
7.8
HIGH
EPSS
0.0%
2018 1 PoC

In ResStringPool::setTo of ResourceTypes.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Scanner Automatizado
Sin template local disponible
CVE-2018-20250
🔥 KEV WinRAR General
7.8
HIGH
EPSS
93.5%
2018 CWE-36 24 PoCs

In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field of the ACE format (in UNACEV2.dll). When the filename field is manipulated with specific patterns, the destination (extraction) folder is ignored, thus treating the filename as an absolute path.

Scanner Automatizado
Sin template local disponible
CVE-2018-10901
kernel: General
7.8
HIGH
EPSS
0.2%
2018 CWE-665 4 PoCs

A flaw was found in Linux kernel's KVM virtualization subsystem. The VMX code does not restore the GDT.LIMIT to the previous host value, but instead sets it to 64KB. With a corrupted GDT limit a host's userspace code has an ability to place malicious entries in the GDT, particularly to the per-cpu variables. An attacker can use this to escalate their privileges.

Scanner Automatizado
Sin template local disponible