Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 467

Export CSV
CVE-2014-4943

kernel: net: pppol2tp: level handling in pppol2tp_[s,g]etsockopt()

The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the Linux kernel through 3.15.6 allows local users to gain privileges by leveraging data-structure differences between an l2tp socket and an inet socket.

CVSS 2.0 · 6.9 Medium EPSS 2.1% KEV · Not listed
Vendors
Debian Linux Opensuse and 2 more
Products
Debian Linux Linux Kernel Opensuse and 6 more
CVE-2014-5077

Kernel: net: SCTP: fix a NULL pointer dereference during INIT collisions

The sctp_assoc_update function in net/sctp/associola.c in the Linux kernel through 3.15.8, when SCTP authentication is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and OOPS) by starting to establish an association between two endpoints immediately after an exchange of INIT and INIT ACK chunks to establish an earlier association between these endpoints in the opposite direction.

CVSS 2.0 · 7.1 High EPSS 5.8% KEV · Not listed
Vendors
Canonical Linux Redhat and 1 more
Products
Ubuntu Linux Linux Kernel Enterprise Linux and 9 more
CVE-2014-6469

mysql: unspecified vulnerability related to SERVER:OPTIMIZER (CPU October 2014)

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:OPTIMIZER.

CVSS 2.0 · 6.8 Medium EPSS 4.4% KEV · Not listed
Vendors
Mariadb Oracle Redhat and 1 more
Products
Mariadb Mysql Solaris and 7 more
CVE-2015-8779

glibc: Unbounded stack allocation in catopen function

Stack-based buffer overflow in the catopen function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long catalog name.

CVSS 3.0 · 9.8 Critical EPSS 6.2% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 4 more
Products
Ubuntu Linux Debian Linux Fedora and 8 more
CVE-2014-6505

mysql: unspecified vulnerability related to SERVER:MEMORY STORAGE ENGINE (CPU October 2014)

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect availability via vectors related to SERVER:MEMORY STORAGE ENGINE.

CVSS 2.0 · 4.0 Medium EPSS 2.7% KEV · Not listed
Vendors
Mariadb Oracle Redhat and 1 more
Products
Mariadb Mysql Enterprise Linux and 6 more
CVE-2015-8926

libarchive: NULL pointer access in RAR parser

The archive_read_format_rar_read_data function in archive_read_support_format_rar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted rar archive.

CVSS 3.0 · 5.5 Medium EPSS 2.0% KEV · Not listed
Vendors
Canonical Libarchive Redhat and 1 more
Products
Ubuntu Linux Libarchive Enterprise Linux and 3 more
CVE-2014-4258

mysql: unspecified vulnerability related to SRINFOSC (CPU July 2014)

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier and 5.6.17 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SRINFOSC.

CVSS 2.0 · 6.5 Medium EPSS 3.5% KEV · Not listed
Vendors
Debian Mariadb Opensuse Project and 4 more
Products
Debian Linux Mariadb Suse Linux Enterprise Desktop and 12 more
CVE-2014-4243

mysql: unspecified vulnerability related to ENFED (CPU July 2014)

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via vectors related to ENFED.

CVSS 2.0 · 2.8 Low EPSS 3.4% KEV · Not listed
Vendors
Mariadb Oracle Redhat and 1 more
Products
Mariadb Mysql Solaris and 5 more
CVE-2014-4260

mysql: unspecified vulnerability related to SRCHAR (CPU July 2014)

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier, and 5.6.17 and earlier, allows remote authenticated users to affect integrity and availability via vectors related to SRCHAR.

CVSS 2.0 · 5.5 Medium EPSS 3.5% KEV · Not listed
Vendors
Debian Mariadb Oracle and 2 more
Products
Debian Linux Mariadb Mysql and 8 more
CVE-2015-8933

libarchive: Undefined behavior / signed integer overflow in TAR parser

Integer overflow in the archive_read_format_tar_skip function in archive_read_support_format_tar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted tar file.

CVSS 3.0 · 5.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Canonical Libarchive Suse
Products
Ubuntu Linux Libarchive Linux Enterprise Desktop and 2 more
CVE-2014-4207

mysql: unspecified vulnerability related to SROPTZR (CPU July 2014)

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier allows remote authenticated users to affect availability via vectors related to SROPTZR.

CVSS 2.0 · 4.0 Medium EPSS 3.9% KEV · Not listed
Vendors
Debian Mariadb Oracle and 2 more
Products
Debian Linux Mariadb Mysql and 7 more
CVE-2016-0651

mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU April 2016)

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier allows local users to affect availability via vectors related to Optimizer.

CVSS 3.1 · 5.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Mariadb Opensuse Oracle and 2 more
Products
Mariadb Leap Opensuse and 14 more
CVE-2016-1285

bind: malformed packet sent to rndc can trigger assertion failure

named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME records when parsing fetch reply messages, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed packet to the rndc (aka control channel) interface, related to alist.c and sexpr.c.

CVSS 3.1 · 6.8 Medium EPSS 57.8% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 5 more
Products
Ubuntu Linux Debian Linux Fedora and 48 more
CVE-2014-4287

mysql: unspecified vulnerability related to SERVER:CHARACTER SETS (CPU October 2014)

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:CHARACTER SETS.

CVSS 2.0 · 4.0 Medium EPSS 2.7% KEV · Not listed
Vendors
Mariadb Oracle Redhat and 1 more
Products
Mariadb Mysql Enterprise Linux and 6 more
CVE-2014-3470

openssl: client-side denial of service when using anonymous ECDH

The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h, when an anonymous ECDH cipher suite is used, allows remote attackers to cause a denial of service (NULL pointer dereference and client crash) by triggering a NULL certificate value.

CVSS 2.0 · 4.3 Medium EPSS 85.8% KEV · Not listed
Vendors
Fedoraproject Mariadb Openssl and 3 more
Products
Fedora Mariadb Openssl and 8 more
CVE-2014-3917

kernel: DoS with syscall auditing

kernel/auditsc.c in the Linux kernel through 3.14.5, when CONFIG_AUDITSYSCALL is enabled with certain syscall rules, allows local users to obtain potentially sensitive single-bit values from kernel memory or cause a denial of service (OOPS) via a large value of a syscall number.

CVSS 2.0 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Linux Redhat Suse
Products
Linux Kernel Enterprise Linux Enterprise Mrg and 1 more
CVE-2014-3468

libtasn1: asn1_get_bit_der() can return negative bit length

The asn1_get_bit_der function in GNU Libtasn1 before 3.6 does not properly report an error when a negative bit length is identified, which allows context-dependent attackers to cause out-of-bounds access via crafted ASN.1 data.

CVSS 2.0 · 7.5 High EPSS 3.8% KEV · Not listed
Vendors
Debian F5 Gnu and 2 more
Products
Debian Linux Arx Arx Firmware and 14 more
CVE-2016-4123

flash-plugin: multiple code execution issues fixed in APSB16-18

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.

CVSS 3.1 · 8.8 High EPSS 3.8% KEV · Not listed
Vendors
Adobe Apple Google and 5 more
Products
Flash Player Flash Player Desktop Runtime Mac Os X and 12 more
CVE-2014-3469

libtasn1: asn1_read_value_type() NULL pointer dereference

The (1) asn1_read_value_type and (2) asn1_read_value functions in GNU Libtasn1 before 3.6 allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via a NULL value in an ivalue argument.

CVSS 2.0 · 5.0 Medium EPSS 3.8% KEV · Not listed
Vendors
Debian Gnu Redhat and 1 more
Products
Debian Linux Gnutls Libtasn1 and 12 more