Vulnerabilities > Improper Input Validation

DATE CVE VULNERABILITY TITLE RISK
2017-01-12 CVE-2016-8442 Improper Input Validation vulnerability in Linux Kernel 3.18
Possible unauthorized memory access in the hypervisor.
local
low complexity
linux CWE-20
7.8
2017-01-12 CVE-2016-8437 Improper Input Validation vulnerability in Linux Kernel 3.18
Improper input validation in Access Control APIs.
network
low complexity
linux CWE-20
critical
9.8
2017-01-12 CVE-2016-9444 Improper Input Validation vulnerability in ISC Bind
named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted DS resource record in an answer.
network
low complexity
isc CWE-20
7.5
2017-01-12 CVE-2016-9147 Improper Input Validation vulnerability in ISC Bind 9.10.4/9.11.0/9.9.9
named in ISC BIND 9.9.9-P4, 9.9.9-S6, 9.10.4-P4, and 9.11.0-P1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a response containing an inconsistency among the DNSSEC-related RRsets.
network
low complexity
isc CWE-20
7.5
2017-01-12 CVE-2016-9131 Improper Input Validation vulnerability in multiple products
named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed response to an RTYPE ANY query.
network
low complexity
isc debian redhat netapp CWE-20
7.5
2017-01-11 CVE-2017-2947 Improper Input Validation vulnerability in Adobe products
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have a security bypass vulnerability when manipulating Form Data Format (FDF).
local
low complexity
adobe CWE-20
5.5
2017-01-10 CVE-2017-0004 Improper Input Validation vulnerability in Microsoft Windows 7, Windows Server 2008 and Windows Vista
The Local Security Authority Subsystem Service (LSASS) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to cause a denial of service (reboot) via a crafted authentication request, aka "Local Security Authority Subsystem Service Denial of Service Vulnerability."
network
low complexity
microsoft CWE-20
7.5
2017-01-10 CVE-2016-9247 Improper Input Validation vulnerability in F5 products
Under certain conditions for BIG-IP systems using a virtual server with an associated FastL4 profile and TCP analytics profile, a specific sequence of packets may cause the Traffic Management Microkernel (TMM) to restart.
network
high complexity
f5 CWE-20
5.9
2017-01-09 CVE-2016-8106 Improper Input Validation vulnerability in multiple products
A Denial of Service in Intel Ethernet Controller's X710/XL710 with Non-Volatile Memory Images before version 5.05 allows a remote attacker to stop the controller from processing network traffic working under certain network use conditions.
network
high complexity
intel hp lenovo CWE-20
5.9
2017-01-09 CVE-2017-5217 Improper Input Validation vulnerability in Samsung Mobile
Installing a zero-permission Android application on certain Samsung Android devices with KK(4.4), L(5.0/5.1), and M(6.0) software can continually crash the system_server process in the Android OS.
local
low complexity
samsung CWE-20
5.5