Vulnerabilities > Medium

DATE CVE VULNERABILITY TITLE RISK
2017-04-12 CVE-2017-0164 Improper Input Validation vulnerability in Microsoft Windows 10 and Windows Server 2016
A denial of service vulnerability exists in Windows 10 1607 and Windows Server 2016 Active Directory when an authenticated attacker sends malicious search queries, aka "Active Directory Denial of Service Vulnerability."
network
high complexity
microsoft CWE-20
4.4
2017-04-12 CVE-2017-0058 Information Exposure vulnerability in Microsoft products
A Win32k information disclosure vulnerability exists in Microsoft Windows when the win32k component improperly provides kernel information.
local
high complexity
microsoft CWE-200
4.7
2017-04-11 CVE-2017-7697 Out-of-bounds Read vulnerability in multiple products
In libsamplerate before 0.1.9, a buffer over-read occurs in the calc_output_single function in src_sinc.c via a crafted audio file.
local
low complexity
libsamplerate-project debian CWE-125
5.5
2017-04-11 CVE-2015-8613 Out-of-bounds Write vulnerability in multiple products
Stack-based buffer overflow in the megasas_ctrl_get_info function in QEMU, when built with SCSI MegaRAID SAS HBA emulation support, allows local guest users to cause a denial of service (QEMU instance crash) via a crafted SCSI controller CTRL_GET_INFO command.
local
low complexity
qemu debian CWE-787
6.5
2017-04-11 CVE-2015-8568 Missing Release of Resource after Effective Lifetime vulnerability in multiple products
Memory leak in QEMU, when built with a VMWARE VMXNET3 paravirtual NIC emulator support, allows local guest users to cause a denial of service (host memory consumption) by trying to activate the vmxnet3 device repeatedly.
local
low complexity
qemu debian CWE-772
6.5
2017-04-11 CVE-2015-8504 Divide By Zero vulnerability in multiple products
Qemu, when built with VNC display driver support, allows remote attackers to cause a denial of service (arithmetic exception and application crash) via crafted SetPixelFormat messages from a client.
network
low complexity
qemu debian CWE-369
6.5
2017-04-11 CVE-2014-9837 Out-of-bounds Read vulnerability in Imagemagick 6.9.01
coders/pnm.c in ImageMagick 6.9.0-1 Beta and earlier allows remote attackers to cause a denial of service (crash) via a crafted png file.
network
low complexity
imagemagick CWE-125
6.5
2017-04-11 CVE-2014-8716 Out-of-bounds Read vulnerability in Imagemagick
The JPEG decoder in ImageMagick before 6.8.9-9 allows local users to cause a denial of service (out-of-bounds memory access and crash).
local
low complexity
imagemagick CWE-125
6.2
2017-04-11 CVE-2014-8562 Out-of-bounds Read vulnerability in Imagemagick
DCM decode in ImageMagick before 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds read).
local
low complexity
imagemagick CWE-125
5.5
2017-04-11 CVE-2014-8355 Out-of-bounds Read vulnerability in Imagemagick
PCX parser code in ImageMagick before 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds read).
local
low complexity
imagemagick CWE-125
5.5