Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 24,818

Export CSV
CVE-2011-2207

dirmngr: Improper dealing with blocking system calls, when verifying a certificate

dirmngr before 2.1.0 improperly handles certain system calls, which allows remote attackers to cause a denial of service (DOS) via a specially-crafted certificate.

CVSS 3.1 · 5.3 Medium EPSS 1.2% KEV · Not listed
Vendors
Debian Gnupg Redhat
Products
Debian Linux Gnupg Enterprise Linux
CVE-2011-1145

unixODBC: possible buffer overrun in SQLDriverConnect()

The SQLDriverConnect() function in unixODBC before 2.2.14p2 have a possible buffer overflow condition when specifying a large value for SAVEFILE parameter in the connection string.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Debian Opensuse Redhat and 1 more
Products
Debian Linux Opensuse Enterprise Linux and 1 more
CVE-2010-4664

ConsoleKit: Policy restrictions break-out via remote Virtual Network Computing (VNC) session

In ConsoleKit before 0.4.2, an intended security policy restriction bypass was found. This flaw allows an authenticated system user to escalate their privileges by initiating a remote VNC session.

CVSS 3.1 · 8.8 High EPSS 1.2% KEV · Not listed
Vendors
Consolekit Project Debian Redhat
Products
Consolekit Debian Linux Enterprise Linux
CVE-2010-4657

php: XMLWriter information leak

PHP5 before 5.4.4 allows passing invalid utf-8 strings via the xmlTextWriterWriteAttribute, which are then misparsed by libxml2. This results in memory leak into the resulting output.

CVSS 3.1 · 7.5 High EPSS 1.5% KEV · Not listed
Vendors
Debian Php Redhat
Products
Debian Linux Php Enterprise Linux
CVE-2010-3282

RHDS/389: information disclosure in audit logs

389 Directory Server before 1.2.7.1 (aka Red Hat Directory Server 8.2) and HP-UX Directory Server before B.08.10.03, when audit logging is enabled, logs the Directory Manager password (nsslapd-rootpw) in cleartext when changing cn=config:nsslapd-rootpw, which might allow local users to obtain sensitive information by reading the log.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Fedoraproject Hp Redhat
Products
389 Directory Server Hp-ux Directory Server Directory Server and 1 more
CVE-2010-2783

IcedTea: 'Extended JNLP Services' arbitrary file access

IcedTea6 before 1.7.4 allow unsigned apps to read and write arbitrary files, related to Extended JNLP Services.

CVSS 3.1 · 9.1 Critical EPSS 1.9% KEV · Not listed
Vendors
Redhat
Products
Icedtea6
CVE-2010-2548

IcedTea Incomplete property access check for unsigned applications

IcedTea6 before 1.7.4 does not properly check property access, which allows unsigned apps to read and write arbitrary files.

CVSS 3.1 · 9.1 Critical EPSS 2.0% KEV · Not listed
Vendors
Redhat
Products
Icedtea6
CVE-2010-2222

redhat-ds/389: null deref in _ger_parse_control() for subjectdn can crash server

The _ger_parse_control function in Red Hat Directory Server 8 and the 389 Directory Server allows attackers to cause a denial of service (NULL pointer dereference) via a crafted search query.

CVSS 3.1 · 7.5 High EPSS 1.3% KEV · Not listed
Vendors
Redhat
Products
389 Directory Server Directory Server
CVE-2010-0737

JBoss ON CLI privilege escalation

A missing permission check was found in The CLI in JBoss Operations Network before 2.3.1 does not properly check permissions, which allows JBoss ON users to perform management tasks and configuration changes with the privileges of the administrator user.

CVSS 3.1 · 8.0 High EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Jboss Operations Network
CVE-2009-5004

qpid: large messaages cause crash when using digest-md5 and security layer

qpid-cpp 1.0 crashes when a large message is sent and the Digest-MD5 mechanism with a security layer is in use .

CVSS 3.1 · 6.5 Medium EPSS 2.6% KEV · Not listed
Vendors
Apache Redhat
Products
Qpid-cpp Enterprise Mrg
CVE-2009-4067

kernel: usb: buffer overflow in auerswald_probe()

Buffer overflow in the auerswald_probe function in the Auerswald Linux USB driver for the Linux kernel before 2.6.27 allows physically proximate attackers to execute arbitrary code, cause a denial of service via a crafted USB device, or take full control of the system.

CVSS 3.1 · 6.8 Medium EPSS 2.1% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux
CVE-2009-3552

GUI: Man in the middle attack possible on the GUI to Backend SSL connection

In RHEV-M VDC 2.2.0, it was found that the SSL certificate was not verified when using the client-side Red Hat Enterprise Virtualization Manager interface (a Windows Presentation Foundation (WPF) XAML browser application) to connect to the Red Hat Enterprise Virtualization Manager. An attacker on the local network could use this flaw to conduct a man-in-the-middle attack, tricking the user into thinking they are viewing the Red Hat Enterprise Virtualization Manager when the content is actually attacker-controlled, or modifying actions a user requested Red Hat Enterprise Virtualization Manager to perform.

CVSS 3.1 · 3.1 Low EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Enterprise Virtualization Manager
CVE-2008-5083

JON unauthorized access private property

In JON 2.1.x before 2.1.2 SP1, users can obtain unauthorized security information about private resources managed by JBoss ON.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Jboss Operations Network
CVE-2008-3278

frysk: insecure relative RPATH

frysk packages through 2008-08-05 as shipped in Red Hat Enterprise Linux 5 are built with an insecure RPATH set in the ELF header of multiple binaries in /usr/bin/f* (e.g. fcore, fcatch, fstack, fstep, ...) shipped in the package. A local attacker can exploit this vulnerability by running arbitrary code as another user.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Frysk
CVE-2005-4890

coreutils: tty hijacking possible in "su" via TIOCSTI ioctl

There is a possible tty hijacking in shadow 4.x before 4.1.5 and sudo 1.x before 1.7.4 via "su - user -c program". The user session can be escaped to the parent session by using the TIOCSTI ioctl to push characters into the input buffer to be read by the next process.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Debian Redhat Sudo Project
Products
Debian Linux Shadow Enterprise Linux and 1 more
CVE-2023-4134

Kernel: cyttsp4_core: use-after-free in cyttsp4_watchdog_work()

A use-after-free vulnerability was found in the cyttsp4_core driver in the Linux kernel. This issue occurs in the device cleanup routine due to a possible rearming of the watchdog_timer from the workqueue. This could allow a local user to crash the system, causing a denial of service.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Fedoraproject Linux Redhat
Products
Fedora Linux Kernel Enterprise Linux
CVE-2024-8376

Memory leak

In Eclipse Mosquitto up to version 2.0.18a, an attacker can achieve memory leaking, segmentation fault or heap-use-after-free by sending specific sequences of "CONNECT", "DISCONNECT", "SUBSCRIBE", "UNSUBSCRIBE" and "PUBLISH" packets.

CVSS 4.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Eclipse Redhat
Products
Mosquitto Satellite Satellite Capsule
CVE-2024-46952

ghostscript: Buffer Overflow in Ghostscript PDF XRef Stream Handling

An issue was discovered in pdf/pdf_xref.c in Artifex Ghostscript before 10.04.0. There is a buffer overflow during handling of a PDF XRef stream (related to W array values).

CVSS 3.1 · 8.4 High EPSS < 1% KEV · Not listed
Vendors
Artifex Debian Redhat
Products
Ghostscript Debian Linux Enterprise Linux