Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 34

Export CSV
CVE-2022-21434

OpenJDK: Improper object-to-string conversion in AnnotationInvocationHandler (Libraries, 8277672)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1 and 22.0.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).

CVSS 3.1 · 5.3 Medium EPSS 2.6% KEV · Not listed
Vendors
Azul Debian Netapp and 2 more
Products
Zulu Debian Linux 7-mode Transition Tool and 19 more
CVE-2022-21426

OpenJDK: Unbounded memory allocation when compiling crafted XPath expressions (JAXP, 8270504)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1 and 22.0.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).

CVSS 3.1 · 5.3 Medium EPSS 3.2% KEV · Not listed
Vendors
Azul Debian Netapp and 2 more
Products
Zulu Debian Linux 7-mode Transition Tool and 19 more
CVE-2021-45485

kernel: information leak in the IPv6 implementation

In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/output_core.c has an information leak because of certain use of a hash table which, although big, doesn't properly consider that IPv6-based attackers can typically choose among many IPv6 source addresses.

CVSS 3.1 · 7.5 High EPSS 3.8% KEV · Not listed
Vendors
Linux Netapp Oracle and 1 more
Products
Linux Kernel Aff A400 Aff A400 Firmware and 43 more
CVE-2021-20322

kernel: new DNS Cache Poisoning Attack based on ICMP fragment needed packets replies

A flaw in the processing of received ICMP errors (ICMP fragment needed and ICMP redirect) in the Linux kernel functionality was found to allow the ability to quickly scan open UDP ports. This flaw allows an off-path remote user to effectively bypass the source port UDP randomization. The highest threat from this vulnerability is to confidentiality and possibly integrity, because software that relies on UDP source port randomization are indirectly affected as well.

CVSS 3.1 · 7.4 High EPSS 6.9% KEV · Not listed
Vendors
Debian Fedoraproject Linux and 3 more
Products
Debian Linux Fedora Linux Kernel and 31 more
CVE-2020-29370

kernel: Race condition in SLUB bulk alloc slowpath

An issue was discovered in kmem_cache_alloc_bulk in mm/slub.c in the Linux kernel before 5.5.11. The slowpath lacks the required TID increment, aka CID-fd4d9c7d0c71.

CVSS 3.1 · 7.0 High EPSS < 1% KEV · Not listed
Vendors
Linux Netapp
Products
Linux Kernel Cloud Backup H410c and 7 more
CVE-2020-12653

kernel: buffer overflow in mwifiex_cmd_append_vsie_tlv function in drivers/net/wireless/marvell/mwifiex/scan.c

An issue was found in Linux kernel before 5.5.4. The mwifiex_cmd_append_vsie_tlv() function in drivers/net/wireless/marvell/mwifiex/scan.c allows local users to gain privileges or cause a denial of service because of an incorrect memcpy and buffer overflow, aka CID-b70261a288ea.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Debian Linux Netapp and 2 more
Products
Debian Linux Linux Kernel A700s and 39 more
CVE-2019-19063

kernel: Two memory leaks in the rtl_usb_probe() function in drivers/net/wireless/realtek/rtlwifi/usb.c allow for a DoS

Two memory leaks in the rtl_usb_probe() function in drivers/net/wireless/realtek/rtlwifi/usb.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption), aka CID-3f9361695113.

CVSS 3.1 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Broadcom Canonical Fedoraproject and 5 more
Products
Brocade Fabric Operating System Firmware Ubuntu Linux Fedora and 19 more
CVE-2019-19061

kernel: A memory leak in the adis_update_scan_mode_burst() function in drivers/iio/imu/adis_buffer.c allows for a DoS

A memory leak in the adis_update_scan_mode_burst() function in drivers/iio/imu/adis_buffer.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-9c0530e898f3.

CVSS 3.1 · 7.5 High EPSS 3.4% KEV · Not listed
Vendors
Broadcom Canonical Linux and 1 more
Products
Brocade Fabric Operating System Firmware Ubuntu Linux Linux Kernel and 14 more
CVE-2019-19060

kernel: A memory leak in the adis_update_scan_mode() function in drivers/iio/imu/adis_buffer.c allows for a DoS

A memory leak in the adis_update_scan_mode() function in drivers/iio/imu/adis_buffer.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-ab612b1daf41.

CVSS 3.1 · 7.5 High EPSS 3.6% KEV · Not listed
Vendors
Broadcom Canonical Linux and 2 more
Products
Brocade Fabric Operating System Firmware Ubuntu Linux Linux Kernel and 15 more
CVE-2019-19057

kernel: Two memory leaks in the mwifiex_pcie_init_evt_ring() function in drivers/net/wireless/marvell/mwifiex/pcie.c allows for a DoS

Two memory leaks in the mwifiex_pcie_init_evt_ring() function in drivers/net/wireless/marvell/mwifiex/pcie.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering mwifiex_map_pci_memory() failures, aka CID-d10dcb615c8e.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Broadcom Canonical Debian and 5 more
Products
Brocade Fabric Operating System Firmware Ubuntu Linux Debian Linux and 18 more
CVE-2019-19053

kernel: A memory leak in the rpmsg_eptdev_write_iter() function in drivers/rpmsg/rpmsg_char.c allows attackers to cause a DoS

A memory leak in the rpmsg_eptdev_write_iter() function in drivers/rpmsg/rpmsg_char.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering copy_from_iter_full() failures, aka CID-bbe692e349e2.

CVSS 3.1 · 7.5 High EPSS 3.3% KEV · Not listed
Vendors
Broadcom Canonical Linux and 1 more
Products
Brocade Fabric Operating System Firmware Ubuntu Linux Linux Kernel and 14 more
CVE-2019-19052

kernel: dos in gs_can_open() function in drivers/net/can/usb/gs_usb.c

A memory leak in the gs_can_open() function in drivers/net/can/usb/gs_usb.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering usb_submit_urb() failures, aka CID-fb5be6a7b486.

CVSS 3.1 · 7.5 High EPSS 5.2% KEV · Not listed
Vendors
Broadcom Canonical Debian and 4 more
Products
Brocade Fabric Operating System Firmware Ubuntu Linux Debian Linux and 17 more
CVE-2019-19044

kernel: dos in v3d_submit_cl_ioctl() function in drivers/gpu/drm/v3d/v3d_gem.c

Two memory leaks in the v3d_submit_cl_ioctl() function in drivers/gpu/drm/v3d/v3d_gem.c in the Linux kernel before 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering kcalloc() or v3d_job_init() failures, aka CID-29cd13cfd762.

CVSS 3.1 · 7.5 High EPSS 4.0% KEV · Not listed
Vendors
Broadcom Canonical Linux and 1 more
Products
Brocade Fabric Operating System Firmware Ubuntu Linux Linux Kernel and 14 more