Security Vulnerabilities Related To CWE-172

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2016-6691	172	DoS	2016-10-10	2016-12-06	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
service/jni/com_android_server_wifi_Gbk2Utf.cpp in the Qualcomm Wi-Fi gbk2utf module in Android before 2016-10-05 allows remote attackers to cause a denial of service (framework crash) or possibly have unspecified other impact via an access point that has a malformed SSID with GBK encoding, aka Qualcomm internal bug CR 978452.
2	CVE-2018-3777	172		2018-08-03	2019-10-09	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Insufficient URI encoding in restforce before 3.0.0 allows attacker to inject arbitrary parameters into Salesforce API requests.
3	CVE-2016-3827	172	DoS	2016-08-05	2016-11-28	7.1	None	Remote	Medium	Not required	None	None	Complete
codecs/hevcdec/SoftHEVC.cpp in libstagefright in mediaserver in Android 6.0.1 before 2016-08-01 mishandles decoder errors, which allows remote attackers to cause a denial of service (device hang or reboot) via a crafted media file, aka internal bug 28816956.
4	CVE-2016-3828	172	DoS	2016-08-05	2016-11-28	7.1	None	Remote	Medium	Not required	None	None	Complete
decoder/ih264d_api.c in mediaserver in Android 6.x before 2016-08-01 mishandles invalid PPS and SPS NAL units, which allows remote attackers to cause a denial of service (device hang or reboot) via a crafted media file, aka internal bug 28835995.
5	CVE-2016-3829	172	DoS	2016-08-05	2016-11-28	7.1	None	Remote	Medium	Not required	None	None	Complete
The ih264d decoder in mediaserver in Android 6.x before 2016-08-01 does not initialize certain structure members, which allows remote attackers to cause a denial of service (device hang or reboot) via a crafted media file, aka internal bug 29023649.
6	CVE-2018-2415	172		2018-05-09	2019-10-09	4.3	None	Remote	Medium	Not required	None	Partial	None
SAP NetWeaver Application Server Java Web Container and HTTP Service (Engine API, from 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50; J2EE Engine Server Core 7.11, 7.30, 7.31, 7.40, 7.50) do not sufficiently encode user controlled inputs, resulting in a content spoofing vulnerability when error pages are displayed.
7	CVE-2018-7173	172	DoS	2018-02-15	2018-03-09	4.3	None	Remote	Medium	Not required	None	None	Partial
A large loop in JBIG2Stream::readSymbolDictSeg in xpdf 4.00 allows an attacker to cause denial of service via a specific file due to inappropriate decoding.
8	CVE-2018-7289	172	Bypass	2018-02-21	2018-03-17	4.3	None	Remote	Medium	Not required	None	Partial	None
An issue was discovered in armadito-windows-driver/src/communication.c in Armadito 0.12.7.2. Malware with filenames containing pure UTF-16 characters can bypass detection. The user-mode service will fail to open the file for scanning after the conversion is done from Unicode to ANSI. This happens because characters that cannot be converted from Unicode are replaced with '?' characters.
9	CVE-2019-10153	172		2019-07-30	2019-10-09	4.0	None	Remote	Low	???	None	None	Partial
A flaw was discovered in fence-agents, prior to version 4.3.4, where using non-ASCII characters in a guest VM's comment or other fields would cause fence_rhevm to exit with an exception. In cluster environments, this could lead to preventing automated recovery or otherwise denying service to clusters of which that VM is a member.

Total number of vulnerabilities : 9 Page : 1 (This Page)