CVE & Exploit Intelligence Database

Updated 40m ago

Search and track vulnerabilities with real-time exploit intelligence. Cross-reference CVEs against public exploits from ExploitDB, Metasploit, GitHub, and Nuclei — with CVSS and EPSS scoring, CISA KEV monitoring, and AI-powered exploit analysis.

338,527 CVEs tracked 53,314 with exploits 4,732 exploited in wild 1,543 CISA KEV 3,934 Nuclei templates 48,968 vendors 42,617 researchers

111,005 results Clear all

CVE-2016-7995 6.0 MEDIUM EPSS 0.00

QEMU - Memory Corruption

Memory leak in the ehci_process_itd function in hw/usb/hcd-ehci.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption) via a large number of crafted buffer page select (PG) indexes.

CWE-772 Dec 10, 2016

CVE-2016-7994 6.0 MEDIUM EPSS 0.00

QEMU - Memory Corruption

Memory leak in the virtio_gpu_resource_create_2d function in hw/display/virtio-gpu.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption) via a large number of VIRTIO_GPU_CMD_RESOURCE_CREATE_2D commands.

CWE-772 Dec 10, 2016

CVE-2016-7466 6.0 MEDIUM EPSS 0.00

Qemu < 2.7.1 - Resource Leak

Memory leak in the usb_xhci_exit function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator), when the xhci uses msix, allows local guest OS administrators to cause a denial of service (memory consumption and possibly QEMU process crash) by repeatedly unplugging a USB device.

CWE-772 Dec 10, 2016

CVE-2016-7422 6.0 MEDIUM EPSS 0.00

Qemu < 2.7.1 - Buffer Overflow

The virtqueue_map_desc function in hw/virtio/virtio.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) via a large I/O descriptor buffer length value.

CWE-120 Dec 10, 2016

CVE-2016-7421 4.4 MEDIUM EPSS 0.00

Qemu < 2.7.1 - Denial of Service

The pvscsi_ring_pop_req_descr function in hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) by leveraging failure to limit process IO loop to the ring size.

CWE-834 Dec 10, 2016

CVE-2016-7170 4.4 MEDIUM EPSS 0.00

Qemu < 2.7.1 - Improper Array Index Validation

The vmsvga_fifo_run function in hw/display/vmware_vga.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) via vectors related to cursor.mask[] and cursor.image[] array sizes when processing a DEFINE_CURSOR svga command.

CWE-129 Dec 10, 2016

CVE-2016-7157 4.4 MEDIUM EPSS 0.00

Qemu < 2.7.1 - Denial of Service

The (1) mptsas_config_manufacturing_1 and (2) mptsas_config_ioc_0 functions in hw/scsi/mptconfig.c in QEMU (aka Quick Emulator) allow local guest OS administrators to cause a denial of service (QEMU process crash) via vectors involving MPTSAS_CONFIG_PACK.

CVE-2016-7156 4.4 MEDIUM EPSS 0.00

Qemu < 2.7.1 - Denial of Service

The pvscsi_convert_sglist function in hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) by leveraging an incorrect cast.

CWE-704 Dec 10, 2016

CVE-2016-7155 4.4 MEDIUM EPSS 0.00

Qemu < 2.7.1 - Denial of Service

hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (out-of-bounds access or infinite loop, and QEMU process crash) via a crafted page count for descriptor rings.

CVE-2016-7116 6.0 MEDIUM EPSS 0.01

Qemu < 2.6.2 - Path Traversal

Directory traversal vulnerability in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to access host files outside the export path via a .. (dot dot) in an unspecified string.

CWE-22 Dec 10, 2016

CVE-2016-6888 4.4 MEDIUM EPSS 0.00

Qemu < 2.6.2 - Integer Overflow

Integer overflow in the net_tx_pkt_init function in hw/net/net_tx_pkt.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (QEMU process crash) via the maximum fragmentation count, which triggers an unchecked multiplication and NULL pointer dereference.

CWE-190 Dec 10, 2016

CVE-2016-6836 6.0 MEDIUM EPSS 0.00

QEMU - Info Disclosure

The vmxnet3_complete_packet function in hw/net/vmxnet3.c in QEMU (aka Quick Emulator) allows local guest OS administrators to obtain sensitive host memory information by leveraging failure to initialize the txcq_descr object.

CWE-665 Dec 10, 2016

CVE-2016-6835 6.0 MEDIUM EPSS 0.00

Qemu < 2.6.0 - Denial of Service

The vmxnet_tx_pkt_parse_headers function in hw/net/vmxnet_tx_pkt.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (buffer over-read) by leveraging failure to check IP header length.

CVE-2016-6834 4.4 MEDIUM EPSS 0.00

Qemu < 2.6.2 - Buffer Overflow

The net_tx_pkt_do_sw_fragmentation function in hw/net/net_tx_pkt.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via a zero length for the current fragment length.

CWE-120 Dec 10, 2016

CVE-2016-6833 4.4 MEDIUM EPSS 0.00

Qemu < 2.6.2 - Use After Free

Use-after-free vulnerability in the vmxnet3_io_bar0_write function in hw/net/vmxnet3.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (QEMU instance crash) by leveraging failure to check if the device is active.

CWE-416 Dec 10, 2016

CVE-2016-6490 4.4 MEDIUM EPSS 0.00

The virtqueue_map_desc function in hw/virtio/virtio.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via a zero length for the descriptor buffer.

CWE-120 Dec 10, 2016

CVE-2016-4964 6.0 MEDIUM EPSS 0.00

Qemu < 2.6.2 - Denial of Service

The mptsas_fetch_requests function in hw/scsi/mptsas.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop, and CPU consumption or QEMU process crash) via vectors involving s->state.

CVE-2016-9106 6.0 MEDIUM EPSS 0.00

Memory leak in the v9fs_write function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption) by leveraging failure to free an IO vector.

CWE-772 Dec 09, 2016

CVE-2016-9105 6.0 MEDIUM EPSS 0.00

QEMU - Memory Corruption

Memory leak in the v9fs_link function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption) via vectors involving a reference to the source fid object.

CWE-772 Dec 09, 2016

CVE-2016-9104 4.4 MEDIUM EPSS 0.00

Multiple integer overflows in the (1) v9fs_xattr_read and (2) v9fs_xattr_write functions in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allow local guest OS administrators to cause a denial of service (QEMU process crash) via a crafted offset, which triggers an out-of-bounds access.

CWE-190 Dec 09, 2016