Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 826

Export CSV
CVE-2014-0473

python-django: caching of anonymous pages could reveal CSRF token

The caching framework in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 reuses a cached CSRF token for all anonymous users, which allows remote attackers to bypass CSRF protections by reading the CSRF cookie for anonymous users.

CVSS 2.0 · 5.0 Medium EPSS 2.0% KEV · Not listed
Vendors
Canonical Djangoproject Redhat
Products
Ubuntu Linux Django Openstack
CVE-2016-2857

Qemu: net: out of bounds read in net_checksum_calculate()

The net_checksum_calculate function in net/checksum.c in QEMU allows local guest OS users to cause a denial of service (out-of-bounds heap read and crash) via the payload length in a crafted packet.

CVSS 3.1 · 8.4 High EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Qemu and 1 more
Products
Ubuntu Linux Debian Linux Qemu and 9 more
CVE-2014-0472

python-django: unexpected code execution using reverse()

The django.core.urlresolvers.reverse function in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 allows remote attackers to import and execute arbitrary Python modules by leveraging a view that constructs URLs using user input and a "dotted Python path."

CVSS 2.0 · 5.1 Medium EPSS 5.8% KEV · Not listed
Vendors
Canonical Djangoproject Redhat
Products
Ubuntu Linux Django Openstack
CVE-2016-2513

python-django: User enumeration through timing difference on password hasher work factor upgrade

The password hasher in contrib/auth/hashers.py in Django before 1.8.10 and 1.9.x before 1.9.3 allows remote attackers to enumerate users via a timing attack involving login requests.

CVSS 3.0 · 3.1 Low EPSS 3.4% KEV · Not listed
Vendors
Djangoproject Redhat
Products
Django Openstack Openstack-optools
CVE-2016-2512

python-django: Malicious redirect and possible XSS attack via user-supplied redirect URLs containing basic auth

The utils.http.is_safe_url function in Django before 1.8.10 and 1.9.x before 1.9.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks or possibly conduct cross-site scripting (XSS) attacks via a URL containing basic authentication, as demonstrated by http://mysite.example.com\@attacker.com.

CVSS 3.0 · 7.4 High EPSS 4.1% KEV · Not listed
Vendors
Djangoproject Redhat
Products
Django Openstack Openstack-optools
CVE-2014-0223

Qemu: qcow1: validate image size to avoid out-of-bounds memory access

Integer overflow in the qcow_open function in block/qcow.c in QEMU before 1.7.2 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a large image size, which triggers a buffer overflow or out-of-bounds read.

CVSS 2.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Qemu Redhat Suse
Products
Qemu Enterprise Linux Openstack and 1 more
CVE-2016-2324

git: path_name() integer truncation and overflow leading to buffer overflow

Integer overflow in Git before 2.7.4 allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, which triggers a heap-based buffer overflow.

CVSS 3.1 · 9.8 Critical EPSS 18.1% KEV · Not listed
Vendors
Git-scm Opensuse Redhat and 1 more
Products
Git Leap Opensuse and 7 more
CVE-2016-2315

git: path_name() integer truncation and overflow leading to buffer overflow

revision.c in git before 2.7.4 uses an incorrect integer data type, which allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, leading to a heap-based buffer overflow.

CVSS 3.1 · 9.8 Critical EPSS 17.3% KEV · Not listed
Vendors
Git-scm Opensuse Redhat and 1 more
Products
Git Leap Opensuse and 7 more
CVE-2014-0222

Qemu: qcow1: validate L2 table size to avoid integer overflows

Integer overflow in the qcow_open function in block/qcow.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service (crash) via a large L2 table in a QCOW version 1 image.

CVSS 2.0 · 7.5 High EPSS 2.1% KEV · Not listed
Vendors
Qemu Redhat Suse
Products
Qemu Enterprise Linux Openstack and 1 more
CVE-2013-4149

qemu: virtio-net: out-of-bounds buffer write on load

Buffer overflow in virtio_net_load function in net/virtio-net.c in QEMU 1.3.0 through 1.7.x before 1.7.2 might allow remote attackers to execute arbitrary code via a large MAC table.

CVSS 2.0 · 7.5 High EPSS 5.3% KEV · Not listed
Vendors
Qemu Redhat
Products
Qemu Enterprise Linux Openstack
CVE-2016-2140

openstack-nova: Host data leak through resize/migration

The libvirt driver in OpenStack Compute (Nova) before 2015.1.4 (kilo) and 12.0.x before 12.0.3 (liberty), when using raw storage and use_cow_images is set to false, allows remote authenticated users to read arbitrary files via a crafted qcow2 header in an ephemeral or root disk.

CVSS 3.0 · 5.3 Medium EPSS 2.1% KEV · Not listed
Vendors
Openstack Redhat
Products
Nova Openstack
CVE-2014-0187

openstack-neutron: security groups bypass through invalid CIDR

The openvswitch-agent process in OpenStack Neutron 2013.1 before 2013.2.4 and 2014.1 before 2014.1.1 allows remote authenticated users to bypass security group restrictions via an invalid CIDR in a security group rule, which prevents further rules from being applied.

CVSS 2.0 · 9.0 Critical EPSS 3.0% KEV · Not listed
Vendors
Canonical Openstack Opensuse and 1 more
Products
Ubuntu Linux Neutron Opensuse and 1 more
CVE-2014-0182

qemu: virtio: out-of-bounds buffer write on state load with invalid config_len

Heap-based buffer overflow in the virtio_load function in hw/virtio/virtio.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a crafted config length in a savevm image.

CVSS 2.0 · 7.5 High EPSS 5.4% KEV · Not listed
Vendors
Qemu Redhat
Products
Qemu Enterprise Linux Openstack
CVE-2016-2074

openvswitch: MPLS buffer overflow vulnerability

Buffer overflow in lib/flow.c in ovs-vswitchd in Open vSwitch 2.2.x and 2.3.x before 2.3.3 and 2.4.x before 2.4.1 allows remote attackers to execute arbitrary code via crafted MPLS packets, as demonstrated by a long string in an ovs-appctl command.

CVSS 3.0 · 9.8 Critical EPSS 6.4% KEV · Not listed
Vendors
Openvswitch Redhat
Products
Openvswitch Openshift Openstack
CVE-2013-4148

qemu: virtio-net: buffer overflow on invalid state load

Integer signedness error in the virtio_net_load function in hw/net/virtio-net.c in QEMU 1.x before 1.7.2 allows remote attackers to execute arbitrary code via a crafted savevm image, which triggers a buffer overflow.

CVSS 2.0 · 7.5 High EPSS 4.9% KEV · Not listed
Vendors
Qemu Redhat
Products
Qemu Enterprise Linux Openstack
CVE-2016-1714

Qemu: nvram: OOB r/w access in processing firmware configurations

The (1) fw_cfg_write and (2) fw_cfg_read functions in hw/nvram/fw_cfg.c in QEMU before 2.4, when built with the Firmware Configuration device emulation support, allow guest OS users with the CAP_SYS_RAWIO privilege to cause a denial of service (out-of-bounds read or write access and process crash) or possibly execute arbitrary code via an invalid current entry value in a firmware configuration.

CVSS 3.0 · 8.1 High EPSS 6.1% KEV · Not listed
Vendors
Oracle Qemu Redhat
Products
Linux Qemu Enterprise Linux and 1 more
CVE-2016-1669

V8: integer overflow leading to buffer overflow in Zone::New

The Zone::New function in zone.cc in Google V8 before 5.0.71.47, as used in Google Chrome before 50.0.2661.102, does not properly determine when to expand certain memory allocations, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via crafted JavaScript code.

CVSS 3.1 · 8.8 High EPSS 4.3% KEV · Not listed
Vendors
Canonical Debian Google and 3 more
Products
Ubuntu Linux Debian Linux Chrome and 8 more
CVE-2014-0167

openstack-nova: RBAC policy not properly enforced in Nova EC2 API

The Nova EC2 API security group implementation in OpenStack Compute (Nova) 2013.1 before 2013.2.4 and icehouse before icehouse-rc2 does not enforce RBAC policies for (1) add_rules, (2) remove_rules, (3) destroy, and other unspecified methods in compute/api.py when using non-default policies, which allows remote authenticated users to gain privileges via these API requests.

CVSS 2.0 · 6.0 Medium EPSS 1.7% KEV · Not listed
Vendors
Openstack Redhat
Products
Compute Icehouse Openstack
CVE-2016-1568

Qemu: ide: ahci use-after-free vulnerability in aio port commands

Use-after-free vulnerability in hw/ide/ahci.c in QEMU, when built with IDE AHCI Emulation support, allows guest OS users to cause a denial of service (instance crash) or possibly execute arbitrary code via an invalid AHCI Native Command Queuing (NCQ) AIO command.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Debian Qemu Redhat
Products
Debian Linux Qemu Enterprise Linux and 2 more
CVE-2016-1286

bind: malformed signature records for DNAME records can trigger assertion failure

named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted signature record for a DNAME record, related to db.c and resolver.c.

CVSS 3.1 · 8.6 High EPSS 60.8% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 5 more
Products
Ubuntu Linux Debian Linux Fedora and 48 more