Export limit exceeded: 425825 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2,030

Export CSV
CVE-2004-0079

security flaw

The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.

CVSS 3.1 · 7.5 High EPSS 9.5% KEV · Not listed
Vendors
4d Apple Avaya and 20 more
Products
Webstar Mac Os X Mac Os X Server and 64 more
CVE-2002-2185

security flaw

The Internet Group Management Protocol (IGMP) allows local users to cause a denial of service via an IGMP membership report to a target's Ethernet address instead of the Multicast group address, which causes the target to stop sending reports to the router and effectively disconnect the group from the network.

CVSS 2.0 · 4.9 Medium EPSS 2.5% KEV · Not listed
Vendors
Debian Mandrakesoft Microsoft and 3 more
Products
Debian Linux Mandrake Linux Windows 98 and 8 more
CVE-2005-0988

security flaw

Race condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by gzip after the decompression is complete.

CVSS 2.0 · 3.7 Low EPSS < 1% KEV · Not listed
Vendors
Freebsd Gentoo Gnu and 4 more
Products
Freebsd Linux Gzip and 10 more
CVE-2004-0812

security flaw

Unknown vulnerability in the Linux kernel before 2.4.23, on the AMD AMD64 and Intel EM64T architectures, associated with "setting up TSS limits," allows local users to cause a denial of service (crash) and possibly execute arbitrary code.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux Enterprise Linux Desktop
CVE-2005-0757

security flaw

The xattr file system code, as backported in Red Hat Enterprise Linux 3 on 64-bit systems, does not properly handle certain offsets, which allows local users to cause a denial of service (system crash) via certain actions on an ext3 file system with extended attributes enabled.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Enterprise Linux Desktop
CVE-2005-0750

security flaw

The bluez_sock_create function in the Bluetooth stack for Linux kernel 2.4.6 through 2.4.30-rc1 and 2.6 through 2.6.11.5 allows local users to gain privileges via (1) socket or (2) socketpair call with a negative protocol value.

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Conectiva Linux Redhat and 2 more
Products
Linux Linux Kernel Enterprise Linux and 5 more
CVE-2005-0699

security flaw

Multiple buffer overflows in the dissect_a11_radius function in the CDMA A11 (3G-A11) dissector (packet-3g-a11.c) for Ethereal 0.10.9 and earlier allow remote attackers to execute arbitrary code via RADIUS authentication packets with large length values.

CVSS 2.0 · 7.5 High EPSS 6.5% KEV · Not listed
Vendors
Altlinux Conectiva Ethereal Group and 1 more
Products
Alt Linux Linux Ethereal and 3 more
CVE-2004-0957

security flaw

Unknown vulnerability in MySQL 3.23.58 and earlier, when a local user has privileges for a database whose name includes a "_" (underscore), grants privileges to other databases that have similar names, which can allow the user to conduct unauthorized activities.

CVSS 2.0 · 6.8 Medium EPSS 2.4% KEV · Not listed
Vendors
Openpkg Oracle Redhat and 3 more
Products
Openpkg Mysql Enterprise Linux and 5 more
CVE-2004-0809

security flaw

The mod_dav module in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (child process crash) via a certain sequence of LOCK requests for a location that allows WebDAV authoring access.

CVSS 2.0 · 5.0 Medium EPSS 17.2% KEV · Not listed
Vendors
Apache Debian Gentoo and 5 more
Products
Http Server Debian Linux Linux and 9 more
CVE-2004-0557

security flaw

Multiple buffer overflows in the st_wavstartread function in wav.c for Sound eXchange (SoX) 12.17.2 through 12.17.4 allow remote attackers to execute arbitrary code via certain WAV file header fields.

CVSS 2.0 · 10.0 Critical EPSS 25.1% KEV · Not listed
Vendors
Conectiva Gentoo Redhat and 1 more
Products
Linux Linux Enterprise Linux and 3 more
CVE-2018-1000301

curl: Out-of-bounds heap read when missing RTSP headers allows information leak or denial of service

curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read vulnerability in denial of service that can result in curl can be tricked into reading data beyond the end of a heap based buffer used to store downloaded RTSP content.. This vulnerability appears to have been fixed in curl < 7.20.0 and curl >= 7.60.0.

CVSS 3.1 · 9.1 Critical EPSS 5.8% KEV · Not listed
Vendors
Canonical Debian Haxx and 2 more
Products
Ubuntu Linux Debian Linux Curl and 12 more
CVE-2016-9446

gstreamer-plugins-bad-free: Missing initialization of allocated heap memory leads to information leak

The vmnc decoder in the gstreamer does not initialize the render canvas, which allows remote attackers to obtain sensitive information as demonstrated by thumbnailing a simple 1 frame vmnc movie that does not draw to the allocated render canvas.

CVSS 3.1 · 7.5 High EPSS 3.6% KEV · Not listed
Vendors
Fedoraproject Gstreamer Redhat
Products
Fedora Gstreamer Enterprise Linux and 6 more
CVE-2017-5848

gstreamer-plugins-bad-free: Invalid memory read in gst_ps_demux_parse_psm

The gst_ps_demux_parse_psm function in gst/mpegdemux/gstmpegdemux.c in gst-plugins-bad in GStreamer allows remote attackers to cause a denial of service (invalid memory read and crash) via vectors involving PSM parsing.

CVSS 3.1 · 7.5 High EPSS 4.4% KEV · Not listed
Vendors
Debian Gstreamer Redhat
Products
Debian Linux Gstreamer Enterprise Linux and 6 more