Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 17,088

Export CSV
CVE-2007-5958

Xorg / XFree86 file existence disclosure vulnerability

X.Org Xserver before 1.4.1 allows local users to determine the existence of arbitrary files via a filename argument in the -sp option to the X program, which produces different error messages depending on whether the filename exists.

CVSS 2.0 · 5.0 Medium EPSS 5.3% KEV · Not listed
Vendors
Redhat X.org
Products
Enterprise Linux Xserver
CVE-2007-5959

Multiple flaws in Firefox

Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors that trigger memory corruption.

CVSS 2.0 · 9.3 Critical EPSS 5.4% KEV · Not listed
Vendors
Mozilla Redhat
Products
Firefox Seamonkey Enterprise Linux and 1 more
CVE-2007-5960

Mozilla Cross-site Request Forgery flaw

Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 sets the Referer header to the window or frame in which script is running, instead of the address of the content that initiated the script, which allows remote attackers to spoof HTTP Referer headers and bypass Referer-based CSRF protection schemes by setting window.location and using a modal alert dialog that causes the wrong Referer to be sent.

CVSS 2.0 · 4.3 Medium EPSS 1.5% KEV · Not listed
Vendors
Mozilla Redhat
Products
Firefox Seamonkey Enterprise Linux and 1 more
CVE-2007-5962

vsftpd: memory leak when deny_file option is set

Memory leak in a certain Red Hat patch, applied to vsftpd 2.0.5 on Red Hat Enterprise Linux (RHEL) 5 and Fedora 6 through 8, and on Foresight Linux and rPath appliances, allows remote attackers to cause a denial of service (memory consumption) via a large number of CWD commands, as demonstrated by an attack on a daemon with the deny_file configuration option.

CVSS 2.0 · 7.1 High EPSS 12.1% KEV · Not listed
Vendors
Foresight Linux Redhat Rpath
Products
Appliances Enterprise Linux Fedora and 1 more
CVE-2007-5964

autofs defaults don't restrict suid in /net

The default configuration of autofs 5 in some Linux distributions, such as Red Hat Enterprise Linux (RHEL) 5, omits the nosuid option for the hosts (/net filesystem) map, which allows local users to gain privileges via a setuid program on a remote NFS server.

CVSS 2.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux
CVE-2007-5966

kernel: non-root can trigger cpu_idle soft lockup

Integer overflow in the hrtimer_start function in kernel/hrtimer.c in the Linux kernel before 2.6.23.10 allows local users to execute arbitrary code or cause a denial of service (panic) via a large relative timeout value. NOTE: some of these details are obtained from third party information.

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux Enterprise Mrg and 1 more
CVE-2007-5969

mysql: possible system table information overwrite using symlinks

MySQL Community Server 5.0.x before 5.0.51, Enterprise Server 5.0.x before 5.0.52, Server 5.1.x before 5.1.23, and Server 6.0.x before 6.0.4, when a table relies on symlinks created through explicit DATA DIRECTORY and INDEX DIRECTORY options, allows remote authenticated users to overwrite system table information and gain privileges via a RENAME TABLE statement that changes the symlink to point to an existing file.

CVSS 2.0 · 7.1 High EPSS 14.3% KEV · Not listed
Vendors
Mysql Redhat
Products
Community Server Mysql Enterprise Server Mysql Server and 2 more
CVE-2007-5971

krb5: double free in gssapi lib

Double free vulnerability in the gss_krb5int_make_seal_token_v3 function in lib/gssapi/krb5/k5sealv3.c in MIT Kerberos 5 (krb5) has unknown impact and attack vectors.

CVSS 2.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Apple Mit Redhat
Products
Mac Os X Mac Os X Server Kerberos 5 and 1 more
CVE-2007-6015

samba: send_mailslot() buffer overflow

Stack-based buffer overflow in the send_mailslot function in nmbd in Samba 3.0.0 through 3.0.27a, when the "domain logons" option is enabled, allows remote attackers to execute arbitrary code via a GETDC mailslot request composed of a long GETDC string following an offset username in a SAMLOGON logon request.

CVSS 2.0 · 9.3 Critical EPSS 27.5% KEV · Not listed
Vendors
Redhat Samba
Products
Enterprise Linux Rhel Eus Samba
CVE-2007-6063

Linux Kernel isdn_net_setcfg buffer overflow

Buffer overflow in the isdn_net_setcfg function in isdn_net.c in Linux kernel 2.6.23 allows local users to have an unknown impact via a crafted argument to the isdn_ioctl function.

CVSS 2.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux
CVE-2007-6067

postgresql: tempory DoS caused by slow regex NFA cleanup

Algorithmic complexity vulnerability in the regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows remote authenticated users to cause a denial of service (memory consumption) via a crafted "complex" regular expression with doubly-nested states.

CVSS 2.0 · 6.8 Medium EPSS 3.9% KEV · Not listed
Vendors
Postgresql Redhat Tcl Tk
Products
Postgresql Enterprise Linux Rhel Application Stack and 1 more
CVE-2007-6110

htdig htsearch XSS vulnerability

Cross-site scripting (XSS) vulnerability in htsearch in htdig 3.2.0b6 allows remote attackers to inject arbitrary web script or HTML via the sort parameter.

CVSS 2.0 · 4.3 Medium EPSS 4.4% KEV · Not listed
Vendors
Htdig Redhat
Products
Htdig Enterprise Linux
CVE-2007-6112

wireshark ppp flaws

Buffer overflow in the PPP dissector Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors.

CVSS 2.0 · 10.0 Critical EPSS 6.2% KEV · Not listed
Vendors
Redhat Wireshark
Products
Enterprise Linux Wireshark
CVE-2007-6113

wireshark DNP3 flaws

Integer signedness error in the DNP3 dissector in Wireshark (formerly Ethereal) 0.10.12 to 0.99.6 allows remote attackers to cause a denial of service (long loop) via a malformed DNP3 packet.

CVSS 2.0 · 4.3 Medium EPSS 7.0% KEV · Not listed
Vendors
Redhat Wireshark
Products
Enterprise Linux Wireshark
CVE-2007-6114

wireshark SSL and OS/400 trace flaws

Multiple buffer overflows in Wireshark (formerly Ethereal) 0.99.0 through 0.99.6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) the SSL dissector or (2) the iSeries (OS/400) Communication trace file parser.

CVSS 2.0 · 10.0 Critical EPSS 6.2% KEV · Not listed
Vendors
Redhat Wireshark
Products
Enterprise Linux Wireshark
CVE-2007-6115

wireshark ANSI MAP flaws

Buffer overflow in the ANSI MAP dissector for Wireshark (formerly Ethereal) 0.99.5 to 0.99.6, when running on unspecified platforms, allows remote attackers to cause a denial of service and possibly execute arbitrary code via unknown vectors.

CVSS 2.0 · 10.0 Critical EPSS 6.2% KEV · Not listed
Vendors
Redhat Wireshark
Products
Enterprise Linux Wireshark
CVE-2007-6116

wireshark firebird/interbase flaws

The Firebird/Interbase dissector in Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service (infinite loop or crash) via unknown vectors.

CVSS 2.0 · 5.0 Medium EPSS 2.9% KEV · Not listed
Vendors
Redhat Wireshark
Products
Enterprise Linux Wireshark
CVE-2007-6117

wireshark HTTP dissector flaws

Unspecified vulnerability in the HTTP dissector for Wireshark (formerly Ethereal) 0.10.14 to 0.99.6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted chunked messages.

CVSS 2.0 · 5.0 Medium EPSS 3.4% KEV · Not listed
Vendors
Redhat Wireshark
Products
Enterprise Linux Wireshark