Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2,030

Export CSV
CVE-2004-0081

security flaw

OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool.

CVSS 2.0 · 5.0 Medium EPSS 7.2% KEV · Not listed
Vendors
4d Apple Avaya and 20 more
Products
Webstar Mac Os X Mac Os X Server and 64 more
CVE-2005-3631

security flaw

udev does not properly set permissions on certain files in /dev/input, which allows local users to obtain sensitive data that is entered at the console, such as user passwords.

CVSS 2.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Enterprise Linux Desktop
CVE-2005-3626

security flaw

Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted FlateDecode stream that triggers a null dereference.

CVSS 2.0 · 5.0 Medium EPSS 3.4% KEV · Not listed
Vendors
Conectiva Debian Easy Software Products and 15 more
Products
Linux Debian Linux Cups and 30 more
CVE-2004-1072

security flaw

The binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, may create an interpreter name string that is not NULL terminated, which could cause strings longer than PATH_MAX to be used, leading to buffer overflows that allow local users to cause a denial of service (hang) and possibly execute arbitrary code.

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Linux Redhat Suse and 2 more
Products
Linux Kernel Enterprise Linux Enterprise Linux Desktop and 6 more
CVE-2005-3625

security flaw

Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams that end prematurely, as demonstrated using the (1) CCITTFaxDecode and (2) DCTDecode streams, aka "Infinite CPU spins."

CVSS 2.0 · 10.0 Critical EPSS 3.8% KEV · Not listed
Vendors
Conectiva Debian Easy Software Products and 15 more
Products
Linux Debian Linux Cups and 30 more
CVE-2005-3624

security flaw

The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via negative or large integers in a CCITTFaxDecode stream, which lead to integer overflows and integer underflows.

CVSS 2.0 · 5.0 Medium EPSS 2.3% KEV · Not listed
Vendors
Conectiva Debian Easy Software Products and 15 more
Products
Linux Debian Linux Cups and 30 more
CVE-2004-1071

security flaw

The binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, does not properly handle a failed call to the mmap function, which causes an incorrect mapped image and may allow local users to execute arbitrary code.

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Linux Redhat Suse and 2 more
Products
Linux Kernel Enterprise Linux Enterprise Linux Desktop and 5 more
CVE-2005-2970

security flaw

Memory leak in the worker MPM (worker.c) for Apache 2, in certain circumstances, allows remote attackers to cause a denial of service (memory consumption) via aborted connections, which prevents the memory for the transaction pool from being reused for other connections.

CVSS 2.0 · 5.0 Medium EPSS 14.2% KEV · Not listed
Vendors
Apache Canonical Fedoraproject and 1 more
Products
Http Server Ubuntu Linux Fedora Core and 4 more
CVE-2004-0827

security flaw

Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6.0.6.2, allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via malformed (1) AVI, (2) BMP, or (3) DIB files.

CVSS 2.0 · 7.5 High EPSS 5.5% KEV · Not listed
Vendors
Conectiva Enlightenment Imagemagick and 6 more
Products
Linux Imlib Imlib2 and 11 more
CVE-2005-2100

security flaw

The rw_vm function in usercopy.c in the 4GB split patch for the Linux kernel in Red Hat Enterprise Linux 4 does not perform proper bounds checking, which allows local users to cause a denial of service (crash).

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Enterprise Linux Desktop
CVE-2004-1070

security flaw

The load_elf_binary function in the binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, does not properly check return values from calls to the kernel_read function, which may allow local users to modify sensitive memory in a setuid program and execute arbitrary code.

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Linux Redhat Suse and 2 more
Products
Linux Kernel Enterprise Linux Enterprise Linux Desktop and 5 more
CVE-2005-1918

tar archive path traversal issue

The original patch for a GNU tar directory traversal vulnerability (CVE-2002-0399) in Red Hat Enterprise Linux 3 and 2.1 uses an "incorrect optimization" that allows user-assisted attackers to overwrite arbitrary files via a crafted tar file, probably involving "/../" sequences with a leading "/".

CVSS 2.0 · 2.6 Low EPSS 2.9% KEV · Not listed
Vendors
Gnu Redhat
Products
Tar Enterprise Linux Enterprise Linux Desktop and 1 more
CVE-2005-1268

security flaw

Off-by-one error in the mod_ssl Certificate Revocation List (CRL) verification callback in Apache, when configured to use a CRL, allows remote attackers to cause a denial of service (child process crash) via a CRL that causes a buffer overflow of one null byte.

CVSS 2.0 · 5.0 Medium EPSS 8.4% KEV · Not listed
Vendors
Apache Debian Redhat
Products
Http Server Debian Linux Enterprise Linux and 3 more
CVE-2004-0079

security flaw

The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.

CVSS 3.1 · 7.5 High EPSS 9.5% KEV · Not listed
Vendors
4d Apple Avaya and 20 more
Products
Webstar Mac Os X Mac Os X Server and 64 more