Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 24,818

Export CSV
CVE-2016-7071

CFME: bypass authorization by altering VM ID

It was found that the CloudForms before 5.6.2.2, and 5.7.0.7 did not properly apply permissions controls to VM IDs passed by users. A remote, authenticated attacker could use this flaw to execute arbitrary VMs on systems managed by CloudForms if they know the ID of the VM.

CVSS 3.0 · 8.8 High EPSS 2.2% KEV · Not listed
Vendors
Redhat
Products
Cloudforms Cloudforms Management Engine Cloudforms Managementengine
CVE-2016-7070

Tower: PostgreSQL privilege escalation in Tower-deployed setups

A privilege escalation flaw was found in the Ansible Tower. When Tower before 3.0.3 deploys a PostgreSQL database, it incorrectly configures the trust level of postgres user. An attacker could use this vulnerability to gain admin level access to the database.

CVSS 3.0 · 8 High EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Ansible Tower
CVE-2016-7066

admin-cli: Any local users can connect to jboss-cli

It was found that the improper default permissions on /tmp/auth directory in JBoss Enterprise Application Platform before 7.1.0 can allow any local user to connect to CLI and allow the user to execute any arbitrary operations.

CVSS 3.0 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Jboss Enterprise Application Platform
CVE-2016-7061

EAP: Sensitive data can be exposed at the server level in domain mode

An information disclosure vulnerability was found in JBoss Enterprise Application Platform before 7.0.4. It was discovered that when configuring RBAC and marking information as sensitive, users with a Monitor role are able to view the sensitive information.

CVSS 3.0 · 3.5 Low EPSS 1.8% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Jboss Enterprise Application Platform
CVE-2016-7056

openssl: ECDSA P-256 timing attack key recovery

A timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user with local access to recover ECDSA P-256 private keys.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Openssl and 1 more
Products
Ubuntu Linux Debian Linux Openssl and 3 more
CVE-2016-7047

cfme: API leaks any MiqReportResult

A flaw was found in the CloudForms API before 5.6.3.0, 5.7.3.1 and 5.8.1.2. A user with permissions to use the MiqReportResults capability within the API could potentially view data from other tenants or groups to which they should not have access.

CVSS 3.0 · 4.3 Medium EPSS 1.3% KEV · Not listed
Vendors
Redhat
Products
Cloudforms Cloudforms Management Engine Cloudforms Managementengine
CVE-2016-7043

kie-server: Plaintext password storage in kie-server and busitess-central

It has been reported that KIE server and Busitess Central before version 7.21.0.Final contain username and password as plaintext Java properties. Any app deployed on the same server would have access to these properties, thus granting access to ther services.

CVSS 3.0 · 5.9 Medium EPSS 1.5% KEV · Not listed
Vendors
Redhat
Products
Kie-server
CVE-2016-7041

Workbench: Path traversal vulnerability

Drools Workbench contains a path traversal vulnerability. The vulnerability allows a remote, authenticated attacker to bypass the directory restrictions and retrieve arbitrary files from the affected host.

CVSS 3.0 · 6.5 Medium EPSS 4.0% KEV · Not listed
Vendors
Redhat
Products
Jboss Bpms Jboss Brms Jboss Drools and 1 more
CVE-2016-7035

pacemaker: Privilege escalation due to improper guarding of IPC communication

An authorization flaw was found in Pacemaker before 1.1.16, where it did not properly guard its IPC interface. An attacker with an unprivileged account on a Pacemaker node could use this flaw to, for example, force the Local Resource Manager daemon to execute a script as root and thereby gain root access on the machine.

CVSS 3.0 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Clusterlabs Redhat
Products
Pacemaker Enterprise Linux Enterprise Linux Server and 1 more
CVE-2016-6814

Groovy: Remote code execution via deserialization

When an application with unsupported Codehaus versions of Groovy from 1.7.0 to 2.4.3, Apache Groovy 2.4.4 to 2.4.7 on classpath uses standard Java serialization mechanisms, e.g. to communicate between servers or to store local data, it was possible for an attacker to bake a special serialized object that will execute code directly when deserialized. All applications which rely on serialization and do not isolate the code which deserializes objects were subject to this vulnerability.

CVSS 3.0 · 9.8 Critical EPSS 17.2% KEV · Not listed
Vendors
Apache Redhat
Products
Groovy Enterprise Linux Enterprise Linux Server and 4 more
CVE-2016-6343

Dashbuilder: Reflected XSS

JBoss BPM Suite 6 is vulnerable to a reflected XSS via dashbuilder. Remote attackers can entice authenticated users that have privileges to access dashbuilder (usually admins) to click on links to /dashbuilder/Controller containing malicious scripts. Successful exploitation would allow execution of script code within the context of the affected user.

CVSS 3.0 · 6.1 Medium EPSS 1.7% KEV · Not listed
Vendors
Redhat
Products
Jboss Bpm Suite Jboss Bpms Jboss Data Virtualization
CVE-2016-5402

cfme: RCE via Capacity & Utilization feature

A code injection flaw was found in the way capacity and utilization imported control files are processed. A remote, authenticated attacker with access to the capacity and utilization feature could use this flaw to execute arbitrary code as the user CFME runs as.

CVSS 3.0 · 8.8 High EPSS 5.9% KEV · Not listed
Vendors
Redhat
Products
Cloudforms Cloudforms Management Engine Cloudforms Managementengine
CVE-2016-5397

thrift: Improper file path sanitization in t_go_generator.cc:format_go_output() of the go client library can allow an attacker to inject commands

The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an external formatting tool. Affected Apache Thrift 0.9.3 and older, Fixed in Apache Thrift 0.10.0.

CVSS 3.0 · 8.8 High EPSS 6.9% KEV · Not listed
Vendors
Apache Redhat
Products
Thrift Jboss Data Virtualization Jboss Fuse
CVE-2016-5314

libtiff: Out-of-bounds write in PixarLogDecode() function

Buffer overflow in the PixarLogDecode function in tif_pixarlog.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted TIFF image, as demonstrated by overwriting the vgetparent function pointer with rgb2ycbcr.

CVSS 3.0 · 8.8 High EPSS 4.4% KEV · Not listed
Vendors
Debian Libtiff Opensuse and 1 more
Products
Debian Linux Libtiff Leap and 2 more
CVE-2016-5285

nss: Missing NULL check in PK11_SignWithSymKey / ssl3_ComputeRecordMACConstantTime causes server crash

A Null pointer dereference vulnerability exists in Mozilla Network Security Services due to a missing NULL check in PK11_SignWithSymKey / ssl3_ComputeRecordMACConstantTime, which could let a remote malicious user cause a Denial of Service.

CVSS 3.1 · 7.5 High EPSS 2.3% KEV · Not listed
Vendors
Avaya Debian Mozilla and 2 more
Products
Aura Application Enablement Services Aura Application Server 5300 Aura Communication Manager and 29 more
CVE-2016-5202

chromium-browser: various fixes from internal audits

browser/extensions/api/dial/dial_registry.cc in Google Chrome before 54.0.2840.98 on macOS, before 54.0.2840.99 on Windows, and before 54.0.2840.100 on Linux neglects to copy a device ID before an erase() call, which causes the erase operation to access data that that erase operation will destroy.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed
Vendors
Apple Google Linux and 2 more
Products
Macos Chrome Linux Kernel and 2 more
CVE-2016-5194

chromium-browser: various fixes from internal audits

Unspecified vulnerabilities in Google Chrome before 54.0.2840.59.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Google Redhat
Products
Chrome Rhel Extras
CVE-2016-4983

dovecot insecure SSL/TLS key and certificate file creation

A postinstall script in the dovecot rpm allows local users to read the contents of newly created SSL/TLS key files.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Dovecot Opensuse Redhat
Products
Dovecot Leap Opensuse and 1 more
CVE-2016-4975

mod_userdir CRLF injection

Possible CRLF injection allowing HTTP response splitting attacks for sites which use mod_userdir. This issue was mitigated by changes made in 2.4.25 and 2.2.32 which prohibit CR or LF injection into the "Location" or other outbound header key or value. Fixed in Apache HTTP Server 2.4.25 (Affected 2.4.1-2.4.23). Fixed in Apache HTTP Server 2.2.32 (Affected 2.2.0-2.2.31).

CVSS 3.0 · 6.1 Medium EPSS 19.9% KEV · Not listed
Vendors
Apache Redhat
Products
Http Server Enterprise Linux Jboss Core Services