Vulnerabilities > High

DATE CVE VULNERABILITY TITLE RISK
2017-02-15 CVE-2016-8682 Out-of-bounds Read vulnerability in multiple products
The ReadSCTImage function in coders/sct.c in GraphicsMagick 1.3.25 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted SCT header.
network
low complexity
graphicsmagick opensuse debian CWE-125
7.5
2017-02-15 CVE-2016-6866 NULL Pointer Dereference vulnerability in multiple products
slock allows attackers to bypass the screen lock via vectors involving an invalid password hash, which triggers a NULL pointer dereference and crash.
network
low complexity
suckless fedoraproject CWE-476
7.5
2017-02-15 CVE-2016-6079 Permissions, Privileges, and Access Controls vulnerability in IBM AIX and Vios
IBM AIX 5.3, 6.1, 7.1, and 7.2 contains an unspecified vulnerability that would allow a locally authenticated user to obtain root level privileges.
local
low complexity
ibm CWE-264
7.8
2017-02-15 CVE-2016-6033 Cross-Site Request Forgery (CSRF) vulnerability in IBM products
IBM Tivoli Storage Manager for Virtual Environments 7.1 (VMware) is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.
network
low complexity
ibm CWE-352
8.8
2017-02-15 CVE-2016-1889 Integer Overflow or Wraparound vulnerability in Freebsd
Integer overflow in the bhyve hypervisor in FreeBSD 10.1, 10.2, 10.3, and 11.0 when configured with a large amount of guest memory, allows local users to gain privilege via a crafted device descriptor.
local
low complexity
freebsd CWE-190
7.8
2017-02-15 CVE-2016-1888 Improper Authentication vulnerability in Freebsd
The telnetd service in FreeBSD 9.3, 10.1, 10.2, 10.3, and 11.0 allows remote attackers to inject arguments to login and bypass authentication via vectors involving a "sequence of memory allocation failures."
network
low complexity
freebsd CWE-287
7.5
2017-02-15 CVE-2016-1883 Permissions, Privileges, and Access Controls vulnerability in Freebsd 10.1/10.2/9.3
The issetugid system call in the Linux compatibility layer in FreeBSD 9.3, 10.1, and 10.2 allows local users to gain privilege via unspecified vectors.
local
low complexity
freebsd CWE-264
7.8
2017-02-15 CVE-2016-1881 Permissions, Privileges, and Access Controls vulnerability in Freebsd 10.1/10.2/9.3
The kernel in FreeBSD 9.3, 10.1, and 10.2 allows local users to cause a denial of service (crash) or potentially gain privilege via a crafted Linux compatibility layer setgroups system call.
local
low complexity
freebsd CWE-264
7.8
2017-02-15 CVE-2016-1880 Permissions, Privileges, and Access Controls vulnerability in Freebsd 10.1/10.2/9.3
The Linux compatibility layer in the kernel in FreeBSD 9.3, 10.1, and 10.2 allows local users to read portions of kernel memory and potentially gain privilege via unspecified vectors, related to "handling of Linux futex robust lists."
local
low complexity
freebsd CWE-264
7.8
2017-02-15 CVE-2016-10089 Permissions, Privileges, and Access Controls vulnerability in Nagios
Nagios 4.3.2 and earlier allows local users to gain root privileges via a hard link attack on the Nagios init script file, related to CVE-2016-8641.
local
low complexity
nagios CWE-264
7.8