Export limit exceeded: 425825 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 615

Export CSV
CVE-2016-3477

mysql: unspecified vulnerability in subcomponent: Server: Parser (CPU July 2016)

Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows local users to affect confidentiality, integrity, and availability via vectors related to Server: Parser.

CVSS 3.0 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Ibm and 3 more
Products
Ubuntu Linux Debian Linux Powerkvm and 5 more
CVE-2016-3500

OpenJDK: maximum XML name limit not applied to namespace URIs (JAXP, 8148872)

Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; Java SE Embedded 8u91; and JRockit R28.3.10 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2016-3508.

CVSS 3.0 · 5.3 Medium EPSS 4.8% KEV · Not listed
Vendors
Oracle Redhat
Products
Jdk Jre Jrockit and 3 more
CVE-2016-3508

OpenJDK: missing entity replacement limits (JAXP, 8149962)

Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; Java SE Embedded 8u91; and JRockit R28.3.10 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2016-3500.

CVSS 3.0 · 5.3 Medium EPSS 4.8% KEV · Not listed
Vendors
Oracle Redhat
Products
Jdk Jre Jrockit and 3 more
CVE-2016-3521

mysql: unspecified vulnerability in subcomponent: Server: Types (CPU July 2016)

Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows remote authenticated users to affect availability via vectors related to Server: Types.

CVSS 3.0 · 6.5 Medium EPSS 10.4% KEV · Not listed
Vendors
Canonical Debian Ibm and 3 more
Products
Ubuntu Linux Debian Linux Powerkvm and 5 more
CVE-2016-3550

OpenJDK: integer overflows in bytecode streams (Hotspot, 8152479)

Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality via vectors related to Hotspot.

CVSS 3.0 · 4.3 Medium EPSS 3.1% KEV · Not listed
Vendors
Oracle Redhat
Products
Jdk Jre Linux and 2 more
CVE-2016-3587

OpenJDK: insufficient protection of MethodHandle.invokeBasic() (Hotspot, 8154475)

Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Hotspot.

CVSS 3.0 · 9.6 Critical EPSS 5.9% KEV · Not listed
Vendors
Oracle Redhat
Products
Jdk Jre Linux and 2 more
CVE-2016-3598

OpenJDK: incorrect handling of MethodHandles.dropArguments() argument (Libraries, 8155985)

Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Libraries, a different vulnerability than CVE-2016-3610.

CVSS 3.0 · 9.6 Critical EPSS 6.7% KEV · Not listed
Vendors
Oracle Redhat
Products
Jdk Jre Linux and 4 more
CVE-2016-3606

OpenJDK: insufficient bytecode verification (Hotspot, 8155981)

Unspecified vulnerability in Oracle Java SE 7u101 and 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Hotspot.

CVSS 3.0 · 9.6 Critical EPSS 3.8% KEV · Not listed
Vendors
Oracle Redhat
Products
Jdk Jre Linux and 2 more
CVE-2016-3610

OpenJDK: insufficient value count check in MethodHandles.filterReturnValue() (Libraries, 8158571)

Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Libraries, a different vulnerability than CVE-2016-3598.

CVSS 3.0 · 9.6 Critical EPSS 5.9% KEV · Not listed
Vendors
Oracle Redhat
Products
Jdk Jre Linux and 2 more
CVE-2016-3615

mysql: unspecified vulnerability in subcomponent: Server: DML (CPU July 2016)

Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows remote authenticated users to affect availability via vectors related to Server: DML.

CVSS 3.0 · 5.3 Medium EPSS 5.7% KEV · Not listed
Vendors
Canonical Debian Ibm and 3 more
Products
Ubuntu Linux Debian Linux Powerkvm and 5 more
CVE-2016-3710

qemu: incorrect banked access bounds checking in vga module

The VGA module in QEMU improperly performs bounds checking on banked access to video memory, which allows local guest OS administrators to execute arbitrary code on the host by changing access modes after setting the bank register, aka the "Dark Portal" issue.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Canonical Citrix Debian and 4 more
Products
Ubuntu Linux Xenserver Debian Linux and 14 more
CVE-2016-4051

squid: buffer overflow in cachemgr.cgi

Buffer overflow in cachemgr.cgi in Squid 2.x, 3.x before 3.5.17, and 4.x before 4.0.9 might allow remote attackers to cause a denial of service or execute arbitrary code by seeding manager reports with crafted data.

CVSS 3.0 · 8.8 High EPSS 18.3% KEV · Not listed
Vendors
Canonical Oracle Redhat and 1 more
Products
Ubuntu Linux Linux Enterprise Linux and 1 more
CVE-2016-4053

squid: multiple issues in ESI processing

Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote attackers to obtain sensitive stack layout information via crafted Edge Side Includes (ESI) responses, related to incorrect use of assert and compiler optimization.

CVSS 3.0 · 3.7 Low EPSS 14.4% KEV · Not listed
Vendors
Canonical Oracle Redhat and 1 more
Products
Ubuntu Linux Linux Enterprise Linux and 1 more
CVE-2016-4054

squid: multiple issues in ESI processing

Buffer overflow in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allows remote attackers to execute arbitrary code via crafted Edge Side Includes (ESI) responses.

CVSS 3.0 · 8.1 High EPSS 77.6% KEV · Not listed
Vendors
Canonical Oracle Redhat and 1 more
Products
Ubuntu Linux Linux Enterprise Linux and 1 more
CVE-2016-4448

libxml2: Format string vulnerability

Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string specifiers in unknown vectors.

CVSS 3.1 · 9.8 Critical EPSS 7.0% KEV · Not listed
Vendors
Apple Hp Mcafee and 6 more
Products
Icloud Iphone Os Itunes and 19 more
CVE-2016-4470

kernel: Uninitialized variable in request_key handling causes kernel crash in error handling path

The key_reject_and_link function in security/keys/key.c in the Linux kernel through 4.6.3 does not ensure that a certain data structure is initialized, which allows local users to cause a denial of service (system crash) via vectors involving a crafted keyctl request2 command.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Linux Novell Oracle and 1 more
Products
Linux Kernel Suse Linux Enterprise Real Time Extension Linux and 14 more
CVE-2016-4553

squid: Cache poisoning issue in HTTP Request handling

client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI is provided, which allows remote attackers to conduct cache-poisoning attacks via an HTTP request.

CVSS 3.0 · 8.6 High EPSS 80.0% KEV · Not listed
Vendors
Canonical Oracle Redhat and 1 more
Products
Ubuntu Linux Linux Enterprise Linux and 1 more
CVE-2016-4554

squid: Header Smuggling issue in HTTP Request processing

mime_header.cc in Squid before 3.5.18 allows remote attackers to bypass intended same-origin restrictions and possibly conduct cache-poisoning attacks via a crafted HTTP Host header, aka a "header smuggling" issue.

CVSS 3.0 · 8.6 High EPSS 38.9% KEV · Not listed
Vendors
Canonical Oracle Redhat and 1 more
Products
Ubuntu Linux Linux Enterprise Linux and 1 more
CVE-2016-4555

squid: SegFault from ESIInclude::Start

client_side_request.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a denial of service (crash) via crafted Edge Side Includes (ESI) responses.

CVSS 3.0 · 7.5 High EPSS 18.2% KEV · Not listed
Vendors
Canonical Oracle Redhat and 1 more
Products
Ubuntu Linux Linux Enterprise Linux and 1 more
CVE-2016-4556

squid: SIGSEGV in ESIContext response handling

Double free vulnerability in Esi.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a denial of service (crash) via a crafted Edge Side Includes (ESI) response.

CVSS 3.0 · 7.5 High EPSS 23.1% KEV · Not listed
Vendors
Canonical Oracle Redhat and 1 more
Products
Ubuntu Linux Linux Enterprise Linux and 1 more