Vulnerabilities

DATE CVE VULNERABILITY TITLE RISK
2016-12-16 CVE-2016-8813 NULL Pointer Dereference vulnerability in Nvidia GPU Driver
All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape where multiple pointers are used without checking for NULL, leading to denial of service or potential escalation of privileges.
local
low complexity
nvidia CWE-476
7.8
2016-12-16 CVE-2016-9967 7PK - Errors vulnerability in Samsung Mobile
Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5.1), M(6.0), and N(7.0) software allows attackers to crash the system easily resulting in a possible DoS attack, or possibly gain privileges.
network
low complexity
samsung CWE-388
critical
9.8
2016-12-16 CVE-2016-9966 7PK - Errors vulnerability in Samsung Mobile
Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5.1), M(6.0), and N(7.0) software allows attackers to crash the system easily resulting in a possible DoS attack, or possibly gain privileges.
network
low complexity
samsung CWE-388
critical
9.8
2016-12-16 CVE-2016-9965 7PK - Errors vulnerability in Samsung Mobile
Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5.1), M(6.0), and N(7.0) software allows attackers to crash the system easily resulting in a possible DoS attack, or possibly gain privileges.
network
low complexity
samsung CWE-388
critical
9.8
2016-12-16 CVE-2016-9964 CRLF Injection vulnerability in multiple products
redirect() in bottle.py in bottle 0.12.10 doesn't filter a "\r\n" sequence, which leads to a CRLF attack, as demonstrated by a redirect("233\r\nSet-Cookie: name=salt") call.
network
low complexity
bottlepy debian CWE-93
6.5
2016-12-16 CVE-2016-9838 Improper Access Control vulnerability in Joomla Joomla!
An issue was discovered in components/com_users/models/registration.php in Joomla! before 3.6.5.
network
low complexity
joomla CWE-284
7.5
2016-12-16 CVE-2016-9837 Permissions, Privileges, and Access Controls vulnerability in Joomla Joomla!
An issue was discovered in templates/beez3/html/com_content/article/default.php in Joomla! before 3.6.5.
network
low complexity
joomla CWE-264
7.5
2016-12-16 CVE-2016-6657 Open Redirect vulnerability in Pivotal Software products
An open redirect vulnerability has been detected with some Pivotal Cloud Foundry Elastic Runtime components.
network
low complexity
pivotal-software CWE-601
7.4
2016-12-16 CVE-2016-6656 Command Injection vulnerability in Pivotal Software Greenplum
An issue was discovered in Pivotal Greenplum before 4.3.10.0.
network
low complexity
pivotal-software CWE-77
7.2
2016-12-16 CVE-2016-3129 Unspecified vulnerability in Blackberry Good Enterprise Mobility Server 2.2.22.25
A remote shell execution vulnerability in the BlackBerry Good Enterprise Mobility Server (GEMS) implementation of the Apache Karaf command shell in GEMS versions 2.1.5.3 to 2.2.22.25 allows remote attackers to obtain local administrator rights on the GEMS server via commands executed on the Karaf command shell.
network
high complexity
blackberry
6.6