Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 303

Export CSV
CVE-2015-5239

qemu-kvm: Integer overflow in vnc_client_read() and protocol_client_msg()

Integer overflow in the VNC display driver in QEMU before 2.1.0 allows attachers to cause a denial of service (process crash) via a CLIENT_CUT_TEXT message, which triggers an infinite loop.

CVSS 3.1 · 6.5 Medium EPSS 3.6% KEV · Not listed
Vendors
Arista Canonical Fedoraproject and 2 more
Products
Eos Ubuntu Linux Fedora and 5 more
CVE-2015-1931

JDK: plain text data stored in memory dumps

IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR1 FP10, 7 R1 before SR3 FP10, 7 before SR9 FP10, 6 R1 before SR8 FP7, 6 before SR16 FP7, and 5.0 before SR16 FP13 stores plaintext information in memory dumps, which allows local users to obtain sensitive information by reading a file.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Ibm Redhat Suse
Products
Java Sdk Enterprise Linux Desktop Enterprise Linux Eus and 7 more
CVE-2014-1947

ImageMagick: PSD writing layer name buffer overflow ("L%02ld")

Stack-based buffer overflow in the WritePSDImage function in coders/psd.c in ImageMagick 6.5.4 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large number of layers in a PSD image, involving the L%02ld string, a different vulnerability than CVE-2014-2030.

CVSS 3.1 · 7.8 High EPSS 7.0% KEV · Not listed
Vendors
Imagemagick Suse
Products
Imagemagick Linux Enterprise Desktop Linux Enterprise Server and 1 more