Skip to main content
CVE-2016-4306 Jan 06, 21:59 MEDIUM POC This Month

Multiple information leaks exist in various IOCTL handlers of the Kaspersky Internet Security KLDISK driver. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Total Security Kaspersky
NVD
CVSS 3.0
5.5
EPSS
0.1%
CVE-2016-4307 Jan 06, 21:59 MEDIUM POC This Month

A denial of service vulnerability exists in the IOCTL handling functionality of Kaspersky Internet Security KL1 driver. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Denial Of Service Internet Security Kaspersky
NVD
CVSS 3.0
5.5
EPSS
0.1%
CVE-2016-4305 Jan 06, 21:59 MEDIUM POC This Month

A denial of service vulnerability exists in the syscall filtering functionality of Kaspersky Internet Security KLIF driver. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Denial Of Service Internet Security Kaspersky
NVD
CVSS 3.0
5.5
EPSS
0.1%
CVE-2016-4304 Jan 06, 21:59 MEDIUM POC This Month

A denial of service vulnerability exists in the syscall filtering functionality of the Kaspersky Internet Security KLIF driver. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Denial Of Service Internet Security Kaspersky
NVD
CVSS 3.0
5.5
EPSS
0.1%
CVE-2016-4329 Jan 06, 21:59 MEDIUM POC This Month

A local denial of service vulnerability exists in window broadcast message handling functionality of Kaspersky Anti-Virus software. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Internet Security Total Security Anti Virus Kaspersky
NVD
CVSS 3.0
5.5
EPSS
0.1%
CVE-2016-8334 Jan 06, 21:59 MEDIUM This Month

A large out-of-bounds read on the heap vulnerability in Foxit PDF Reader can potentially be abused for information disclosure. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable, no authentication required. Epss exploitation probability 13.5% and no vendor patch available.

Buffer Overflow Information Disclosure Reader Foxitsoftware
NVD
CVSS 3.0
6.8
EPSS
13.5%
CVE-2016-1549 Jan 06, 21:59 MEDIUM This Month

A malicious authenticated peer can create arbitrarily-many ephemeral associations in order to win the clock selection algorithm in ntpd in NTP 4.2.8p4 and earlier and NTPsec. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Ntp
NVD
CVSS 3.0
6.5
EPSS
1.0%
CVE-2016-2369 Jan 06, 21:59 MEDIUM PATCH This Month

A NULL pointer dereference vulnerability exists in the handling of the MXIT protocol in Pidgin. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required.

Denial Of Service Null Pointer Dereference Debian Canonical Debian Linux +2
NVD
CVSS 3.0
5.9
EPSS
3.3%
CVE-2016-2365 Jan 06, 21:59 MEDIUM PATCH This Month

A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. This NULL Pointer Dereference vulnerability could allow attackers to crash the application by dereferencing a null pointer.

Denial Of Service Null Pointer Dereference Debian Canonical Debian Linux +2
NVD
CVSS 3.0
5.9
EPSS
3.3%
CVE-2016-2373 Jan 06, 21:59 MEDIUM PATCH This Month

A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. This Out-of-bounds Read vulnerability could allow attackers to read data from memory outside the intended buffer boundaries.

Buffer Overflow Denial Of Service Information Disclosure Debian Canonical +3
NVD
CVSS 3.0
5.9
EPSS
2.0%
CVE-2016-2370 Jan 06, 21:59 MEDIUM PATCH This Month

A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. This Out-of-bounds Read vulnerability could allow attackers to read data from memory outside the intended buffer boundaries.

Buffer Overflow Denial Of Service Information Disclosure Debian Canonical +3
NVD
CVSS 3.0
5.9
EPSS
2.0%
CVE-2016-2366 Jan 06, 21:59 MEDIUM PATCH This Month

A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. This Out-of-bounds Read vulnerability could allow attackers to read data from memory outside the intended buffer boundaries.

Buffer Overflow Denial Of Service Information Disclosure Debian Canonical +3
NVD
CVSS 3.0
5.9
EPSS
2.0%
CVE-2016-2367 Jan 06, 21:59 MEDIUM PATCH This Month

An information leak exists in the handling of the MXIT protocol in Pidgin. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. This Out-of-bounds Read vulnerability could allow attackers to read data from memory outside the intended buffer boundaries.

Buffer Overflow Denial Of Service Information Disclosure Debian Canonical +3
NVD
CVSS 3.0
5.9
EPSS
1.9%
CVE-2016-2372 Jan 06, 21:59 MEDIUM PATCH This Month

An information leak exists in the handling of the MXIT protocol in Pidgin. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable. This Out-of-bounds Read vulnerability could allow attackers to read data from memory outside the intended buffer boundaries.

Buffer Overflow Denial Of Service Information Disclosure Debian Canonical +3
NVD
CVSS 3.0
5.9
EPSS
1.2%
CVE-2016-1547 Jan 06, 21:59 MEDIUM This Month

An off-path attacker can cause a preemptible client association to be demobilized in NTP 4.2.8p4 and earlier and NTPSec a5fb34b9cc89b92a8fef2f459004865c93bb7f92 by sending a crypto NAK packet to a. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Ntp
NVD
CVSS 3.0
5.3
EPSS
3.7%
CVE-2016-1550 Jan 06, 21:59 MEDIUM This Month

An exploitable vulnerability exists in the message authentication functionality of libntp in ntp 4.2.8p4 and NTPSec a5fb34b9cc89b92a8fef2f459004865c93bb7f92. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Ntp
NVD
CVSS 3.0
5.3
EPSS
3.1%
CVE-2016-9868 Jan 06, 22:59 MEDIUM This Month

An issue was discovered in EMC ScaleIO versions before 2.0.1.1. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Scaleio Emc
NVD
CVSS 3.0
5.5
EPSS
0.1%
CVE-2016-9869 Jan 06, 22:59 MEDIUM This Month

An issue was discovered in EMC ScaleIO versions before 2.0.1.1. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Scaleio Emc
NVD
CVSS 3.0
5.5
EPSS
0.0%
CVE-2016-2375 Jan 06, 21:59 MEDIUM PATCH This Month

An exploitable out-of-bounds read exists in the handling of the MXIT protocol in Pidgin. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Buffer Overflow Information Disclosure Debian Canonical Debian Linux +2
NVD
CVSS 3.0
5.3
EPSS
0.5%

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy