CVE & Exploit Intelligence Database

Updated 2h ago

Search and track vulnerabilities with real-time exploit intelligence. Cross-reference CVEs against public exploits from ExploitDB, Metasploit, GitHub, and Nuclei — with CVSS and EPSS scoring, CISA KEV monitoring, and AI-powered exploit analysis.

338,223 CVEs tracked 53,293 with exploits 4,731 exploited in wild 1,542 CISA KEV 3,930 Nuclei templates 37,826 vendors 42,585 researchers

110,849 results Clear all

CVE-2016-5351 5.9 MEDIUM EPSS 0.00

Wireshark - Improper Input Validation

epan/crypt/airpdcap.c in the IEEE 802.11 dissector in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles the lack of an EAPOL_RSN_KEY, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.

CWE-20 Aug 07, 2016

CVE-2015-8935 6.1 MEDIUM EPSS 0.01

Php < 5.4.37 - XSS

The sapi_header_op function in main/SAPI.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 supports deprecated line folding without considering browser compatibility, which allows remote attackers to conduct cross-site scripting (XSS) attacks against Internet Explorer by leveraging (1) %0A%20 or (2) %0D%0A%20 mishandling in the header function.

CWE-79 Aug 07, 2016

CVE-2016-6513 5.9 MEDIUM EPSS 0.00

Wireshark <2.0.5 - DoS

epan/dissectors/packet-wbxml.c in the WBXML dissector in Wireshark 2.x before 2.0.5 does not restrict the recursion depth, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.

CWE-399 Aug 06, 2016

CVE-2016-6512 5.9 MEDIUM 1 PoC Analysis EPSS 0.02

Wireshark 2.x <2.0.5 - DoS

epan/dissectors/packet-wap.c in Wireshark 2.x before 2.0.5 omits an overflow check in the tvb_get_guintvar function, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet, related to the MMSE, WAP, WBXML, and WSP dissectors.

CWE-20 Aug 06, 2016

CVE-2016-6511 5.9 MEDIUM EPSS 0.00

Wireshark <1.12.13, <2.0.5 - DoS

epan/proto.c in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allows remote attackers to cause a denial of service (OpenFlow dissector large loop) via a crafted packet.

CWE-399 Aug 06, 2016

CVE-2016-6510 5.9 MEDIUM EPSS 0.00

Wireshark <1.12.13, <2.0.5 - DoS

Off-by-one error in epan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) via a crafted packet.

CWE-189 Aug 06, 2016

CVE-2016-6509 5.9 MEDIUM EPSS 0.00

Wireshark <1.12.13-2.0.5 - DoS

epan/dissectors/packet-ldss.c in the LDSS dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 mishandles conversations, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.

CWE-20 Aug 06, 2016

CVE-2016-6508 5.9 MEDIUM EPSS 0.00

Wireshark <1.12.13-2.0.5 - DoS

epan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 uses an incorrect integer data type, which allows remote attackers to cause a denial of service (large loop) via a crafted packet.

CWE-399 Aug 06, 2016

CVE-2016-6507 5.9 MEDIUM EPSS 0.00

Wireshark 1.12.x <1.12.13 - DoS

epan/dissectors/packet-mmse.c in the MMSE dissector in Wireshark 1.12.x before 1.12.13 allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.

CWE-399 Aug 06, 2016

CVE-2016-6506 5.9 MEDIUM EPSS 0.00

Wireshark <2.0.5 - DoS

epan/dissectors/packet-wsp.c in the WSP dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.

CWE-399 Aug 06, 2016

CVE-2016-6505 5.9 MEDIUM 1 PoC Analysis EPSS 0.02

Wireshark <1.12.13, <2.0.5 - DoS

epan/dissectors/packet-packetbb.c in the PacketBB dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted packet.

CWE-369 Aug 06, 2016

CVE-2016-6504 5.9 MEDIUM 1 PoC Analysis EPSS 0.02

Wireshark <1.12.13 - DoS

epan/dissectors/packet-ncp2222.inc in the NDS dissector in Wireshark 1.12.x before 1.12.13 does not properly maintain a ptvc data structure, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted packet.

CWE-476 Aug 06, 2016

CVE-2016-6503 5.9 MEDIUM 1 PoC Analysis EPSS 0.02

Wireshark <2.0.5 - DoS

The CORBA IDL dissectors in Wireshark 2.x before 2.0.5 on 64-bit Windows platforms do not properly interact with Visual C++ compiler options, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.

CWE-20 Aug 06, 2016

CVE-2016-6480 5.1 MEDIUM EPSS 0.00

Linux Kernel <4.7 - DoS

Race condition in the ioctl_send_fib function in drivers/scsi/aacraid/commctrl.c in the Linux kernel through 4.7 allows local users to cause a denial of service (out-of-bounds access or system crash) by changing a certain size value, aka a "double fetch" vulnerability.

CWE-362 Aug 06, 2016

CVE-2016-6198 5.5 MEDIUM EPSS 0.00

Linux kernel <4.5.5 - DoS

The filesystem layer in the Linux kernel before 4.5.5 proceeds with post-rename operations after an OverlayFS file is renamed to a self-hardlink, which allows local users to cause a denial of service (system crash) via a rename system call, related to fs/namei.c and fs/open.c.

CWE-284 Aug 06, 2016

CVE-2016-6197 5.5 MEDIUM EPSS 0.00

Linux kernel <4.6 - DoS

fs/overlayfs/dir.c in the OverlayFS filesystem implementation in the Linux kernel before 4.6 does not properly verify the upper dentry before proceeding with unlink and rename system-call processing, which allows local users to cause a denial of service (system crash) via a rename system call that specifies a self-hardlink.

CWE-20 Aug 06, 2016

CVE-2016-6156 5.1 MEDIUM EPSS 0.00

Linux Kernel <4.7 - DoS

Race condition in the ec_device_ioctl_xcmd function in drivers/platform/chrome/cros_ec_dev.c in the Linux kernel before 4.7 allows local users to cause a denial of service (out-of-bounds array access) by changing a certain size value, aka a "double fetch" vulnerability.

CWE-362 Aug 06, 2016

CVE-2016-6136 4.7 MEDIUM EPSS 0.00

Linux kernel <4.7 - Info Disclosure

Race condition in the audit_log_single_execve_arg function in kernel/auditsc.c in the Linux kernel through 4.7 allows local users to bypass intended character-set restrictions or disrupt system-call auditing by changing a certain string, aka a "double fetch" vulnerability.

CWE-362 Aug 06, 2016

CVE-2016-5696 4.8 MEDIUM 5 PoCs Analysis EPSS 0.33

Linux kernel <4.7 - RCE

net/ipv4/tcp_input.c in the Linux kernel before 4.7 does not properly determine the rate of challenge ACK segments, which makes it easier for remote attackers to hijack TCP sessions via a blind in-window attack.

CWE-200 Aug 06, 2016

CVE-2016-5412 6.5 MEDIUM EPSS 0.00

Linux Kernel < 4.7 - Resource Management Error

arch/powerpc/kvm/book3s_hv_rmhandlers.S in the Linux kernel through 4.7 on PowerPC platforms, when CONFIG_KVM_BOOK3S_64_HV is enabled, allows guest OS users to cause a denial of service (host OS infinite loop) by making a H_CEDE hypercall during the existence of a suspended transaction.

CWE-399 Aug 06, 2016