Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5,222

Export CSV
CVE-2015-7182

nss: ASN.1 decoder heap overflow when decoding constructed OCTET STRING that mixes indefinite and definite length encodings (MFSA 2015-133)

Heap-based buffer overflow in the ASN.1 decoder in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firefox before 42.0 and Firefox ESR 38.x before 38.4 and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted OCTET STRING data.

CVSS 3.0 · 9.8 Critical EPSS 10.2% KEV · Not listed
Vendors
Mozilla Oracle Redhat
Products
Firefox Network Security Services Glassfish Server and 8 more
CVE-2015-7183

nspr: heap-buffer overflow in PL_ARENA_ALLOCATE (MFSA 2015-133)

Integer overflow in the PL_ARENA_ALLOCATE implementation in Netscape Portable Runtime (NSPR) in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firefox before 42.0 and Firefox ESR 38.x before 38.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unspecified vectors.

CVSS 2.0 · 7.5 High EPSS 6.8% KEV · Not listed
Vendors
Mozilla Redhat
Products
Firefox Network Security Services Enterprise Linux and 3 more
CVE-2015-7805

libsndfile: Heap overflow vulnerability when parsing specially crafted AIFF header

Heap-based buffer overflow in libsndfile 1.0.25 allows remote attackers to have unspecified impact via the headindex value in the header in an AIFF file.

CVSS 2.0 · 9.3 Critical EPSS 14.3% KEV · Not listed
Vendors
Mega-nerd Opensuse
Products
Libsndfile Opensuse
CVE-2015-7942

libxml2: heap-based buffer overflow in xmlParseConditionalSections()

The xmlParseConditionalSections function in parser.c in libxml2 does not properly skip intermediary entities when it stops parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via crafted XML data, a different vulnerability than CVE-2015-7941.

CVSS 2.0 · 6.8 Medium EPSS 4.5% KEV · Not listed
Vendors
Apple Canonical Debian and 3 more
Products
Iphone Os Mac Os X Tvos and 8 more
CVE-2015-8384

pcre: buffer overflow caused by recursive back reference by name within certain group (8.38/4)

PCRE before 8.38 mishandles the /(?J)(?'d'(?'d'\g{d}))/ pattern and related patterns with certain recursive back references, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, a related issue to CVE-2015-8392 and CVE-2015-8395.

CVSS 2.0 · 7.5 High EPSS 3.4% KEV · Not listed
Vendors
Pcre Redhat
Products
Perl Compatible Regular Expression Library Rhel Software Collections
CVE-2016-4344

php: Multiple heap overflows due to integer overflows

Integer overflow in the xml_utf8_encode function in ext/xml/xml.c in PHP before 7.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a long argument to the utf8_encode function, leading to a heap-based buffer overflow.

CVSS 3.1 · 9.8 Critical EPSS 5.2% KEV · Not listed
Vendors
Php
Products
Php
CVE-2016-4333

hdf5: H5T_COMPOUND heap buffer overflow

The HDF5 1.8.16 library allocating space for the array using a value from the file has an impact within the loop for initializing said array allowing a value within the file to modify the loop's terminator. Due to this, an aggressor can cause the loop's index to point outside the bounds of the array when initializing it.

CVSS 3.0 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Hdfgroup
Products
Hdf5
CVE-2016-4331

hdf5: H5Z_NBIT heap buffer overflow

When decoding data out of a dataset encoded with the H5Z_NBIT decoding, the HDF5 1.8.16 library will fail to ensure that the precision is within the bounds of the size leading to arbitrary code execution.

CVSS 3.0 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Hdfgroup
Products
Hdf5
CVE-2015-8388

pcre: buffer overflow for forward reference within backward assertion with excess closing parenthesis (8.38/18)

PCRE before 8.38 mishandles the /(?=di(?<=(?1))|(?=(.))))/ pattern and related patterns with an unmatched closing parenthesis, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.

CVSS 2.0 · 7.5 High EPSS 6.6% KEV · Not listed
Vendors
Oracle Pcre Redhat
Products
Linux Perl Compatible Regular Expression Library Enterprise Linux and 1 more
CVE-2015-8806

libxml2: heap-buffer overread in dict.c

dict.c in libxml2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via an unexpected character immediately after the "<!DOCTYPE html" substring in a crafted HTML document.

CVSS 3.1 · 7.5 High EPSS 5.0% KEV · Not listed
Vendors
Canonical Debian Xmlsoft
Products
Ubuntu Linux Debian Linux Libxml2
CVE-2015-8836

fuseiso: Integer overflow, leading to heap buffer overflow when reading certain ISO ZF blocks

Integer overflow in the isofs_real_read_zf function in isofs.c in FuseISO 20070708 might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a large ZF block size in an ISO file, leading to a heap-based buffer overflow.

CVSS 3.0 · 7.3 High EPSS 1.8% KEV · Not listed
Vendors
Fedoraproject Fuseiso Project
Products
Fedora Fuseiso
CVE-2016-1541

libarchive: zip_read_mac_metadata() heap-based buffer overflow

Heap-based buffer overflow in the zip_read_mac_metadata function in archive_read_support_format_zip.c in libarchive before 3.2.0 allows remote attackers to execute arbitrary code via crafted entry-size values in a ZIP archive.

CVSS 3.0 · 8.8 High EPSS 10.3% KEV · Not listed
Vendors
Libarchive Redhat
Products
Libarchive Enterprise Linux
CVE-2015-8863

jq: heap-buffer-overflow in tokenadd() function

Off-by-one error in the tokenadd function in jv_parse.c in jq allows remote attackers to cause a denial of service (crash) via a long JSON-encoded number, which triggers a heap-based buffer overflow.

CVSS 3.0 · 9.8 Critical EPSS 7.3% KEV · Not listed
Vendors
Jq Project Opensuse Redhat
Products
Jq Leap Opensuse and 1 more
CVE-2016-4330

hdf5: H5T_ARRAY heap buffer overflow

In the HDF5 1.8.16 library's failure to check if the number of dimensions for an array read from the file is within the bounds of the space allocated for it, a heap-based buffer overflow will occur, potentially leading to arbitrary code execution.

CVSS 3.0 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Hdfgroup
Products
Hdf5
CVE-2015-8868

poppler: heap buffer overflow in ExponentialFunction

Heap-based buffer overflow in the ExponentialFunction::ExponentialFunction function in Poppler before 0.40.0 allows remote attackers to cause a denial of service (memory corruption and crash) or possibly execute arbitrary code via an invalid blend mode in the ExtGState dictionary in a crafted PDF document.

CVSS 3.0 · 7.8 High EPSS 4.6% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 2 more
Products
Ubuntu Linux Debian Linux Fedora and 2 more
CVE-2016-2533

python-pillow: Buffer overflow in PCD decoding

Buffer overflow in the ImagingPcdDecode function in PcdDecode.c in Pillow before 3.1.1 and Python Imaging Library (PIL) 1.1.7 and earlier allows remote attackers to cause a denial of service (crash) via a crafted PhotoCD file.

CVSS 3.0 · 6.5 Medium EPSS 4.0% KEV · Not listed
Vendors
Debian Python Python Imaging Project
Products
Debian Linux Pillow Python Imaging
CVE-2016-3947

squid: buffer overrun in Squid proxy pinger

Heap-based buffer overflow in the Icmp6::Recv function in icmp/Icmp6.cc in the pinger utility in Squid before 3.5.16 and 4.x before 4.0.8 allows remote servers to cause a denial of service (performance degradation or transition failures) or write sensitive information to log files via an ICMPv6 packet.

CVSS 3.0 · 8.2 High EPSS 14.6% KEV · Not listed
Vendors
Canonical Squid-cache
Products
Ubuntu Linux Squid
CVE-2016-4300

libarchive: Heap buffer overflow vulnerability in the 7zip read_SubStreamsInfo

Integer overflow in the read_SubStreamsInfo function in archive_read_support_format_7zip.c in libarchive before 3.2.1 allows remote attackers to execute arbitrary code via a 7zip file with a large number of substreams, which triggers a heap-based buffer overflow.

CVSS 3.0 · 7.8 High EPSS 4.9% KEV · Not listed
Vendors
Libarchive Redhat
Products
Libarchive Enterprise Linux Enterprise Linux Desktop and 6 more
CVE-2016-3981

optipng: heap buffer overflow in the bmp_read_rows function

Heap-based buffer overflow in the bmp_read_rows function in pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers to cause a denial of service (out-of-bounds read or write access and crash) or possibly execute arbitrary code via a crafted image file.

CVSS 3.0 · 7.8 High EPSS 4.4% KEV · Not listed
Vendors
Canonical Debian Optipng Project
Products
Ubuntu Linux Debian Linux Optipng
CVE-2016-3977

giflib: heap buffer overflow in gif2rgb

Heap-based buffer overflow in util/gif2rgb.c in gif2rgb in giflib 5.1.2 allows remote attackers to cause a denial of service (application crash) via the background color index in a GIF file.

CVSS 3.0 · 5.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Giflib Project Opensuse
Products
Giflib Opensuse