CVE-2016-8864
- EPSS 38.73%
- Veröffentlicht 02.11.2016 17:59:00
- Zuletzt bearbeitet 06.05.2026 22:30:45
named in ISC BIND 9.x before 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-P1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a DNAME record in the answer section of a response to a recursive...
CVE-2016-5629
- EPSS 3.16%
- Veröffentlicht 25.10.2016 14:31:44
- Zuletzt bearbeitet 06.05.2026 22:30:45
Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote administrators to affect availability via vectors related to Server: Federated.
CVE-2016-5626
- EPSS 6.05%
- Veröffentlicht 25.10.2016 14:31:40
- Zuletzt bearbeitet 06.05.2026 22:30:45
Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to GIS.
CVE-2016-5624
- EPSS 4.63%
- Veröffentlicht 25.10.2016 14:31:38
- Zuletzt bearbeitet 06.05.2026 22:30:45
Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier allows remote authenticated users to affect availability via vectors related to DML.
CVE-2016-5612
- EPSS 3.36%
- Veröffentlicht 25.10.2016 14:31:26
- Zuletzt bearbeitet 06.05.2026 22:30:45
Unspecified vulnerability in Oracle MySQL 5.5.50 and earlier, 5.6.31 and earlier, and 5.7.13 and earlier allows remote authenticated users to affect availability via vectors related to DML.
CVE-2016-3492
- EPSS 6.5%
- Veröffentlicht 25.10.2016 14:29:10
- Zuletzt bearbeitet 06.05.2026 22:30:45
Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to Server: Optimizer.
CVE-2016-7163
- EPSS 7.11%
- Veröffentlicht 21.09.2016 14:25:28
- Zuletzt bearbeitet 06.05.2026 22:30:45
Integer overflow in the opj_pi_create_decode function in pi.c in OpenJPEG allows remote attackers to execute arbitrary code via a crafted JP2 file, which triggers an out-of-bounds read or write.
CVE-2016-2775
- EPSS 63.35%
- Veröffentlicht 19.07.2016 22:59:00
- Zuletzt bearbeitet 06.05.2026 22:30:45
ISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or the named lwres option is enabled, allows remote attackers to cause a denial of service (daemon crash) via a long request that uses the lightweight reso...
CVE-2016-5387
- EPSS 55.72%
- Veröffentlicht 19.07.2016 02:00:19
- Zuletzt bearbeitet 06.05.2026 22:30:45
The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an app...
CVE-2016-5126
- EPSS 0.7%
- Veröffentlicht 01.06.2016 22:59:08
- Zuletzt bearbeitet 06.05.2026 22:30:45
Heap-based buffer overflow in the iscsi_aio_ioctl function in block/iscsi.c in QEMU allows local guest OS users to cause a denial of service (QEMU process crash) or possibly execute arbitrary code via a crafted iSCSI asynchronous I/O ioctl call.