Export limit exceeded: 425880 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 6,068

Export CSV
CVE-2016-1957

Mozilla: Memory leak in libstagefright when deleting an array during MP4 processing (MFSA 2016-20)

Memory leak in libstagefright in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to cause a denial of service (memory consumption) via an MPEG-4 file that triggers a delete operation on an array.

CVSS 3.0 · 4.3 Medium EPSS 2.2% KEV · Not listed
Vendors
Mozilla Novell Opensuse and 2 more
Products
Firefox Thunderbird Suse Package Hub For Suse Linux Enterprise and 4 more
CVE-2016-1958

Mozilla: Displayed page address can be overridden (MFSA 2016-21)

browser/base/content/browser.js in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to spoof the address bar via a javascript: URL.

CVSS 3.0 · 4.3 Medium EPSS 2.2% KEV · Not listed
Vendors
Mozilla Opensuse Oracle and 1 more
Products
Firefox Opensuse Linux and 1 more
CVE-2016-1960

Mozilla: Use-after-free in HTML5 string parser (MFSA 2016-23)

Integer underflow in the nsHtml5TreeBuilder class in the HTML5 string parser in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) by leveraging mishandling of end tags, as demonstrated by incorrect SVG processing, aka ZDI-CAN-3545.

CVSS 3.0 · 8.8 High EPSS 30.9% KEV · Not listed
Vendors
Mozilla Opensuse Oracle and 2 more
Products
Firefox Thunderbird Leap and 4 more
CVE-2016-1961

Mozilla: Use-after-free in SetBody (MFSA 2016-24)

Use-after-free vulnerability in the nsHTMLDocument::SetBody function in dom/html/nsHTMLDocument.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code by leveraging mishandling of a root element, aka ZDI-CAN-3574.

CVSS 3.0 · 8.8 High EPSS 2.9% KEV · Not listed
Vendors
Mozilla Opensuse Oracle and 2 more
Products
Firefox Thunderbird Leap and 4 more
CVE-2016-1962

Mozilla: Use-after-free when using multiple WebRTC data channels (MFSA 2016-25)

Use-after-free vulnerability in the mozilla::DataChannelConnection::Close function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code by leveraging mishandling of WebRTC data-channel connections.

CVSS 3.0 · 9.8 Critical EPSS 6.1% KEV · Not listed
Vendors
Mozilla Opensuse Oracle and 1 more
Products
Firefox Opensuse Linux and 1 more
CVE-2016-1964

Mozilla: Use-after-free during XML transformations (MFSA 2016-27)

Use-after-free vulnerability in the AtomicBaseIncDec function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by leveraging mishandling of XML transformations.

CVSS 3.0 · 8.8 High EPSS 2.8% KEV · Not listed
Vendors
Mozilla Opensuse Oracle and 2 more
Products
Firefox Thunderbird Leap and 4 more
CVE-2016-1965

Mozilla: Addressbar spoofing though history navigation and Location protocol property (MFSA 2016-28)

Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 mishandle a navigation sequence that returns to the original page, which allows remote attackers to spoof the address bar via vectors involving the history.back method and the location.protocol property.

CVSS 3.0 · 4.3 Medium EPSS 2.2% KEV · Not listed
Vendors
Mozilla Opensuse Oracle and 1 more
Products
Firefox Opensuse Linux and 1 more
CVE-2016-1966

Mozilla: Memory corruption with malicious NPAPI plugin (MFSA 2016-31)

The nsNPObjWrapper::GetNewOrUsed function in dom/plugins/base/nsJSNPRuntime.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or cause a denial of service (invalid pointer dereference and memory corruption) via a crafted NPAPI plugin.

CVSS 3.0 · 8.8 High EPSS 2.9% KEV · Not listed
Vendors
Mozilla Opensuse Oracle and 1 more
Products
Firefox Thunderbird Opensuse and 2 more
CVE-2016-1973

Mozilla: Use-after-free in GetStaticInstance in WebRTC (MFSA 2016-33)

Race condition in the GetStaticInstance function in the WebRTC implementation in Mozilla Firefox before 45.0 might allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via unspecified vectors.

CVSS 3.0 · 8.8 High EPSS 3.0% KEV · Not listed
Vendors
Mozilla Oracle Redhat
Products
Firefox Linux Enterprise Linux
CVE-2016-1974

Mozilla: Out-of-bounds read in HTML parser following a failed allocation (MFSA 2016-34)

The nsScannerString::AppendUnicodeTo function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 does not verify that memory allocation succeeds, which allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via crafted Unicode data in an HTML, XML, or SVG document.

CVSS 3.0 · 8.8 High EPSS 3.0% KEV · Not listed
Vendors
Mozilla Opensuse Oracle and 2 more
Products
Firefox Thunderbird Leap and 4 more
CVE-2016-1977

graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)

The Machine::Code::decoder::analysis::set_ref function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via a crafted Graphite smart font.

CVSS 3.0 · 8.8 High EPSS 2.9% KEV · Not listed
Vendors
Mozilla Opensuse Oracle and 3 more
Products
Firefox Leap Opensuse and 4 more
CVE-2016-2047

mysql: ssl-validate-cert incorrect hostname check

The ssl_verify_server_cert function in sql-common/client.c in MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10; Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier; and Percona Server do not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a "/CN=" string in a field in a certificate, as demonstrated by "/OU=/CN=bar.com/CN=foo.com."

CVSS 3.0 · 5.9 Medium EPSS 3.7% KEV · Not listed
Vendors
Canonical Debian Mariadb and 3 more
Products
Ubuntu Linux Debian Linux Mariadb and 5 more
CVE-2016-2053

kernel: Kernel panic and system lockup by triggering BUG_ON() in public_key_verify_signature()

The asn1_ber_decoder function in lib/asn1_decoder.c in the Linux kernel before 4.3 allows attackers to cause a denial of service (panic) via an ASN.1 BER file that lacks a public key, leading to mishandling by the public_key_verify_signature function in crypto/asymmetric_keys/public_key.c.

CVSS 3.0 · 4.7 Medium EPSS < 1% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux Rhel Extras Rt
CVE-2016-2117

kernel: Kernel memory leakage to ethernet frames due to buffer overflow in ethernet drivers

The atl2_probe function in drivers/net/ethernet/atheros/atlx/atl2.c in the Linux kernel through 4.5.2 incorrectly enables scatter/gather I/O, which allows remote attackers to obtain sensitive information from kernel memory by reading packet data.

CVSS 3.0 · 7.5 High EPSS 6.4% KEV · Not listed
Vendors
Canonical Linux Oracle and 1 more
Products
Ubuntu Linux Linux Kernel Vm Server and 2 more
CVE-2016-2143

kernel: Fork of large process causes memory corruption

The fork implementation in the Linux kernel before 4.5 on s390 platforms mishandles the case of four page-table levels, which allows local users to cause a denial of service (system crash) or possibly have unspecified other impact via a crafted application, related to arch/s390/include/asm/mmu_context.h and arch/s390/include/asm/pgalloc.h.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Debian Linux Oracle and 1 more
Products
Debian Linux Linux Kernel Linux and 1 more
CVE-2016-2177

openssl: Possible integer overflow vulnerabilities in codebase

OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which might allow remote attackers to cause a denial of service (integer overflow and application crash) or possibly have unspecified other impact by leveraging unexpected malloc behavior, related to s3_srvr.c, ssl_sess.c, and t1_lib.c.

CVSS 3.0 · 9.8 Critical EPSS 44.5% KEV · Not listed
Vendors
Hp Openssl Oracle and 1 more
Products
Icewall Mcrp Icewall Sso Icewall Sso Agent Option and 6 more
CVE-2016-2178

openssl: Non-constant time codepath followed for certain operations in DSA implementation

The dsa_sign_setup function in crypto/dsa/dsa_ossl.c in OpenSSL through 1.0.2h does not properly ensure the use of constant-time operations, which makes it easier for local users to discover a DSA private key via a timing side-channel attack.

CVSS 3.1 · 5.5 Medium EPSS 1.2% KEV · Not listed
Vendors
Canonical Debian Nodejs and 4 more
Products
Ubuntu Linux Debian Linux Node.js and 7 more
CVE-2016-2179

openssl: DTLS memory exhaustion DoS when messages are not removed from fragment buffer

The DTLS implementation in OpenSSL before 1.1.0 does not properly restrict the lifetime of queue entries associated with unused out-of-order messages, which allows remote attackers to cause a denial of service (memory consumption) by maintaining many crafted DTLS sessions simultaneously, related to d1_lib.c, statem_dtls.c, statem_lib.c, and statem_srvr.c.

CVSS 3.0 · 7.5 High EPSS 26.6% KEV · Not listed
Vendors
Openssl Oracle Redhat
Products
Openssl Linux Enterprise Linux
CVE-2016-2180

OpenSSL: OOB read in TS_OBJ_print_bio()

The TS_OBJ_print_bio function in crypto/ts/ts_lib.c in the X.509 Public Key Infrastructure Time-Stamp Protocol (TSP) implementation in OpenSSL through 1.0.2h allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted time-stamp file that is mishandled by the "openssl ts" command.

CVSS 3.0 · 7.5 High EPSS 30.0% KEV · Not listed
Vendors
Openssl Oracle Redhat
Products
Openssl Linux Enterprise Linux