CVE-2016-5626
- EPSS 0.8%
- Published 25.10.2016 14:31:40
- Last modified 12.04.2025 10:46:40
Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to GIS.
CVE-2016-5624
- EPSS 1.34%
- Published 25.10.2016 14:31:38
- Last modified 12.04.2025 10:46:40
Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier allows remote authenticated users to affect availability via vectors related to DML.
CVE-2016-5612
- EPSS 1.53%
- Published 25.10.2016 14:31:26
- Last modified 12.04.2025 10:46:40
Unspecified vulnerability in Oracle MySQL 5.5.50 and earlier, 5.6.31 and earlier, and 5.7.13 and earlier allows remote authenticated users to affect availability via vectors related to DML.
CVE-2016-3492
- EPSS 1.11%
- Published 25.10.2016 14:29:10
- Last modified 12.04.2025 10:46:40
Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to Server: Optimizer.
CVE-2016-7166
- EPSS 0.25%
- Published 21.09.2016 14:25:29
- Last modified 12.04.2025 10:46:40
libarchive before 3.2.0 does not limit the number of recursive decompressions, which allows remote attackers to cause a denial of service (memory consumption and application crash) via a crafted gzip file.
CVE-2016-7163
- EPSS 0.34%
- Published 21.09.2016 14:25:28
- Last modified 12.04.2025 10:46:40
Integer overflow in the opj_pi_create_decode function in pi.c in OpenJPEG allows remote attackers to execute arbitrary code via a crafted JP2 file, which triggers an out-of-bounds read or write.
CVE-2016-5844
- EPSS 2.48%
- Published 21.09.2016 14:25:16
- Last modified 12.04.2025 10:46:40
Integer overflow in the ISO parser in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) via a crafted ISO file.
CVE-2016-5418
- EPSS 5.22%
- Published 21.09.2016 14:25:13
- Last modified 12.04.2025 10:46:40
The sandboxing code in libarchive 3.2.0 and earlier mishandles hardlink archive entries of non-zero data size, which might allow remote attackers to write to arbitrary files via a crafted archive file.
CVE-2016-4809
- EPSS 2.26%
- Published 21.09.2016 14:25:05
- Last modified 12.04.2025 10:46:40
The archive_read_format_cpio_read_header function in archive_read_support_format_cpio.c in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) via a CPIO archive with a large symlink.
CVE-2016-4302
- EPSS 2.34%
- Published 21.09.2016 14:25:04
- Last modified 12.04.2025 10:46:40
Heap-based buffer overflow in the parse_codes function in archive_read_support_format_rar.c in libarchive before 3.2.1 allows remote attackers to execute arbitrary code via a RAR file with a zero-sized dictionary.