Export limit exceeded: 425865 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4,594

Export CSV
CVE-2016-6297

php: Stack-based buffer overflow vulnerability in php_stream_zip_opener

Integer overflow in the php_stream_zip_opener function in ext/zip/zip_stream.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impact via a crafted zip:// URL.

CVSS 3.0 · 8.8 High EPSS 5.2% KEV · Not listed
Vendors
Php Redhat
Products
Php Rhel Software Collections
CVE-2016-4608

libxslt: stack-based buffer overflow at exsltDateFormat()

libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2016-4607, CVE-2016-4609, CVE-2016-4610, and CVE-2016-4612.

CVSS 3.1 · 9.8 Critical EPSS 4.9% KEV · Not listed
Vendors
Apple Fedoraproject Microsoft and 1 more
Products
Icloud Iphone Os Itunes and 6 more
CVE-2016-4429

glibc: libtirpc: stack (frame) overflow in Sun RPC clntudp_call()

Stack-based buffer overflow in the clntudp_call function in sunrpc/clnt_udp.c in the GNU C Library (aka glibc or libc6) allows remote servers to cause a denial of service (crash) or possibly unspecified other impact via a flood of crafted ICMP and UDP packets.

CVSS 3.1 · 5.9 Medium EPSS 4.6% KEV · Not listed
Vendors
Canonical Gnu Opensuse
Products
Ubuntu Linux Glibc Leap and 1 more
CVE-2016-4301

libarchive: Stack buffer overflow in the mtree parse_device

Stack-based buffer overflow in the parse_device function in archive_read_support_format_mtree.c in libarchive before 3.2.1 allows remote attackers to execute arbitrary code via a crafted mtree file.

CVSS 3.0 · 7.8 High EPSS 3.7% KEV · Not listed
Vendors
Libarchive
Products
Libarchive
CVE-2016-3706

glibc: stack (frame) overflow in getaddrinfo() when called with AF_INET, AF_INET6 (incomplete fix for CVE-2013-4458)

Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in the GNU C Library (aka glibc or libc6) allows remote attackers to cause a denial of service (crash) via vectors involving hostent conversion. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-4458.

CVSS 3.1 · 7.5 High EPSS 5.9% KEV · Not listed
Vendors
Gnu Opensuse
Products
Glibc Opensuse
CVE-2016-3075

glibc: Stack overflow in nss_dns_getnetbyname_r

Stack-based buffer overflow in the nss_dns implementation of the getnetbyname function in GNU C Library (aka glibc) before 2.24 allows context-dependent attackers to cause a denial of service (stack consumption and application crash) via a long name.

CVSS 3.0 · 7.5 High EPSS 7.3% KEV · Not listed
Vendors
Canonical Fedoraproject Gnu and 2 more
Products
Ubuntu Linux Fedora Glibc and 2 more
CVE-2016-1234

glibc: Stack-based buffer overflow in glob with GLOB_ALTDIRFUNC and crafted directory

Stack-based buffer overflow in the glob implementation in GNU C Library (aka glibc) before 2.24, when GLOB_ALTDIRFUNC is used, allows context-dependent attackers to cause a denial of service (crash) via a long name.

CVSS 3.0 · 7.5 High EPSS 5.4% KEV · Not listed
Vendors
Fedoraproject Gnu Opensuse
Products
Fedora Glibc Leap and 1 more
CVE-2015-8837

fuseiso: Stack-based buffer overflow when scanning directory structure for absolute path entries

Stack-based buffer overflow in the isofs_real_readdir function in isofs.c in FuseISO 20070708 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long pathname in an ISO file.

CVSS 3.0 · 7.3 High EPSS 2.9% KEV · Not listed
Vendors
Debian Fedoraproject Fuseiso Project
Products
Debian Linux Fedora Fuseiso
CVE-2015-7547

glibc: getaddrinfo stack-based buffer overflow

Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C Library (aka glibc or libc6) before 2.23 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted DNS response that triggers a call to the getaddrinfo function with the AF_UNSPEC or AF_INET6 address family, related to performing "dual A/AAAA DNS queries" and the libnss_dns.so.2 NSS module.

CVSS 3.0 · 8.1 High EPSS 92.4% KEV · Not listed
Vendors
Canonical Debian F5 and 7 more
Products
Ubuntu Linux Debian Linux Big-ip Access Policy Manager and 31 more
CVE-2015-1473

glibc: Stack-overflow in glibc swscanf

The ADDW macro in stdio-common/vfscanf.c in the GNU C Library (aka glibc or libc6) before 2.21 does not properly consider data-type size during a risk-management decision for use of the alloca function, which might allow context-dependent attackers to cause a denial of service (segmentation violation) or overwrite memory locations beyond the stack boundary via a long line containing wide characters that are improperly handled in a wscanf call.

CVSS 2.0 · 6.4 Medium EPSS 2.1% KEV · Not listed
Vendors
Canonical Gnu Redhat
Products
Ubuntu Linux Glibc Enterprise Linux and 1 more
CVE-2014-9912

php: stack buffer overflow in locale_get_display_name

The get_icu_disp_value_src_php function in ext/intl/locale/locale_methods.c in PHP before 5.3.29, 5.4.x before 5.4.30, and 5.5.x before 5.5.14 does not properly restrict calls to the ICU uresbund.cpp component, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a locale_get_display_name call with a long first argument.

CVSS 3.0 · 9.8 Critical EPSS 4.9% KEV · Not listed
Vendors
Php
Products
Php
CVE-2014-9911

icu: stack-based buffer overflow in uloc_getDisplayName

Stack-based buffer overflow in the ures_getByKeyWithFallback function in common/uresbund.cpp in International Components for Unicode (ICU) before 54.1 for C/C++ allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted uloc_getDisplayName call.

CVSS 3.0 · 9.8 Critical EPSS 5.6% KEV · Not listed
Vendors
Icu-project
Products
International Components For Unicode
CVE-2013-4290

openjpeg: multiple stack-based buffer overflows

Stack-based buffer overflow in OpenJPEG before 1.5.2 allows remote attackers to have unspecified impact via unknown vectors to (1) lib/openjp3d/opj_jp3d_compress.c, (2) bin/jp3d/convert.c, or (3) lib/openjp3d/event.c.

CVSS 2.0 · 10.0 Critical EPSS 3.0% KEV · Not listed
Vendors
Uclouvain
Products
Openjpeg
CVE-2014-2015

freeradius: stack-based buffer overflow flaw in rlm_pap module

Stack-based buffer overflow in the normify function in the rlm_pap module (modules/rlm_pap/rlm_pap.c) in FreeRADIUS 2.x, possibly 2.2.3 and earlier, and 3.x, possibly 3.0.1 and earlier, might allow attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long password hash, as demonstrated by an SSHA hash.

CVSS 2.0 · 7.5 High EPSS 3.9% KEV · Not listed
Vendors
Freeradius Redhat
Products
Freeradius Enterprise Linux
CVE-2014-8626

php: xmlrpc ISO8601 date format parsing buffer overflow

Stack-based buffer overflow in the date_from_ISO8601 function in ext/xmlrpc/libxmlrpc/xmlrpc.c in PHP before 5.2.7 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code by including a timezone field in a date, leading to improper XML-RPC encoding.

CVSS 2.0 · 7.5 High EPSS 5.8% KEV · Not listed
Vendors
Php Redhat
Products
Php Enterprise Linux Rhel Els
CVE-2014-8504

binutils: stack overflow in the SREC parser

Stack-based buffer overflow in the srec_scan function in bfd/srec.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possibly have other unspecified impact via a crafted file.

CVSS 2.0 · 7.5 High EPSS 6.2% KEV · Not listed
Vendors
Canonical Fedoraproject Gnu and 1 more
Products
Ubuntu Linux Fedora Binutils and 1 more
CVE-2014-8503

binutils: stack overflow in objdump when parsing specially crafted ihex file

Stack-based buffer overflow in the ihex_scan function in bfd/ihex.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possibly have other unspecified impact via a crafted ihex file.

CVSS 2.0 · 7.5 High EPSS 6.2% KEV · Not listed
Vendors
Canonical Fedoraproject Gnu and 1 more
Products
Ubuntu Linux Fedora Binutils and 1 more
CVE-2014-2240

freetype: OOB stack-based read/write in cf2_hintmap_build()

Stack-based buffer overflow in the cf2_hintmap_build function in cff/cf2hints.c in FreeType before 2.5.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large number of stem hints in a font file.

CVSS 2.0 · 7.5 High EPSS 7.0% KEV · Not listed
Vendors
Freetype
Products
Freetype
CVE-2014-6055

libvncserver: server stacked-based buffer overflow flaws in file transfer handling

Multiple stack-based buffer overflows in the File Transfer feature in rfbserver.c in LibVNCServer 0.9.9 and earlier allow remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a (1) long file or (2) directory name or the (3) FileTime attribute in a rfbFileTransferOffer message.

CVSS 2.0 · 6.5 Medium EPSS 7.8% KEV · Not listed
Vendors
Debian Fedoraproject Libvncserver and 1 more
Products
Debian Linux Fedora Libvncserver and 4 more