Vulnerabilities

DATE CVE VULNERABILITY TITLE RISK
2017-01-26 CVE-2016-9050 Out-of-bounds Read vulnerability in Aerospike Database Server 3.10.0.3
An exploitable out-of-bounds read vulnerability exists in the client message-parsing functionality of Aerospike Database Server 3.10.0.3.
network
low complexity
aerospike CWE-125
8.2
2017-01-26 CVE-2016-8710 Out-of-bounds Write vulnerability in Libbpg Project Libbpg 0.9.4/0.9.7
An exploitable heap write out of bounds vulnerability exists in the decoding of BPG images in Libbpg library.
local
low complexity
libbpg-project CWE-787
7.8
2017-01-26 CVE-2016-8227 Improper Access Control vulnerability in Lenovo Transition
Privilege escalation vulnerability in Lenovo Transition application used in Lenovo Yoga, Flex and Miix systems running Windows allows local users to execute code with elevated privileges.
local
low complexity
lenovo CWE-284
7.8
2017-01-26 CVE-2016-8226 Data Processing Errors vulnerability in Lenovo products
The BIOS in Lenovo System X M5, M6, and X6 systems allows administrators to cause a denial of service via updating a UEFI data structure.
network
low complexity
lenovo CWE-19
4.9
2017-01-26 CVE-2016-8225 Unquoted Search Path or Element vulnerability in Lenovo Edge Keyboard Driver and Slim USB Keyboard Driver
Unquoted service path vulnerability in Lenovo Edge and Lenovo Slim USB Keyboard Driver versions earlier than 1.21 allows local users to execute code with elevated privileges.
local
low complexity
lenovo CWE-428
7.8
2017-01-26 CVE-2016-9932 Information Exposure vulnerability in XEN
CMPXCHG8B emulation in Xen 3.3.x through 4.7.x on x86 systems allows local HVM guest OS users to obtain sensitive information from host stack memory via a "supposedly-ignored" operand size prefix.
local
low complexity
xen CWE-200
3.3
2017-01-26 CVE-2016-9317 Improper Input Validation vulnerability in Libgd
The gdImageCreate function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (system hang) via an oversized image.
local
low complexity
libgd CWE-20
5.5
2017-01-26 CVE-2016-6912 Double Free vulnerability in Libgd
Double free vulnerability in the gdImageWebPtr function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via large width and height values.
network
low complexity
libgd CWE-415
critical
9.8
2017-01-26 CVE-2016-6911 Out-of-bounds Read vulnerability in Libgd
The dynamicGetbuf function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TIFF image.
local
low complexity
libgd CWE-125
5.5
2017-01-26 CVE-2016-6908 Open Redirect vulnerability in Opera Browser 37.0.2192.105088
Characters from languages are such as Arabic, Hebrew are displayed from RTL (Right To Left) order in Opera 37.0.2192.105088 for Android, due to mishandling of several unicode characters such as U+FE70, U+0622, U+0623 etc and how they are rendered combined with (first strong character) such as an IP address or alphabet could lead to a spoofed URL.
network
low complexity
opera CWE-601
6.1