Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2,219

Export CSV
CVE-2016-9079

Mozilla: Firefox SVG Animation Remote Code Execution (MFSA 2016-92)

A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild targeting Firefox and Tor Browser users on Windows. This vulnerability affects Firefox < 50.0.2, Firefox ESR < 45.5.1, and Thunderbird < 45.5.1.

CVSS 3.1 · 7.5 High EPSS 87.4% KEV · Listed
Vendors
Debian Microsoft Mozilla and 2 more
Products
Debian Linux Windows Firefox and 8 more
CVE-2021-3669

kernel: reading /proc/sysvipc/shm does not scale with large shared memory segment counts

A flaw was found in the Linux kernel. Measuring usage of the shared memory does not scale with large shared memory segment counts which could lead to resource exhaustion and DoS.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Debian Fedoraproject Ibm and 2 more
Products
Debian Linux Fedora Spectrum Copy Data Management and 21 more
CVE-2021-4091

389-ds-base: double free of the virtual attribute context in persistent search

A double-free was found in the way 389-ds-base handles virtual attributes context in persistent searches. An attacker could send a series of search requests, forcing the server to behave unexpectedly, and crash.

CVSS 3.1 · 7.5 High EPSS 2.0% KEV · Not listed
Vendors
Port389 Redhat
Products
389-ds-base Directory Server Enterprise Linux and 8 more
CVE-2021-3621

sssd: shell command injection in sssctl

A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs-fetch and cache-expire subcommands. This flaw allows an attacker to trick the root user into running a specially crafted sssctl command, such as via sudo, to gain root access. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

CVSS 3.1 · 8.8 High EPSS 2.6% KEV · Not listed
Vendors
Fedoraproject Redhat
Products
Fedora Sssd Enterprise Linux and 7 more
CVE-2019-11043

Underflow in PHP-FPM can lead to RCE

In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space reserved for FCGI protocol data, thus opening the possibility of remote code execution.

CVSS 3.1 · 8.7 High EPSS 99.8% KEV · Listed
Vendors
Canonical Debian Fedoraproject and 3 more
Products
Ubuntu Linux Debian Linux Fedora and 23 more
CVE-2019-5544

openslp: Heap-based buffer overflow in ProcessSrvRqst() in slpd_process.c leading to remote code execution

OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8.

CVSS 3.1 · 9.8 Critical EPSS 98.1% KEV · Listed
Vendors
Fedoraproject Openslp Redhat and 1 more
Products
Fedora Openslp Enterprise Linux and 14 more
CVE-2019-0211

httpd: privilege escalation from modules scripts

In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute arbitrary code with the privileges of the parent process (usually root) by manipulating the scoreboard. Non-Unix systems are not affected.

CVSS 3.1 · 7.8 High EPSS 65.0% KEV · Listed
Vendors
Apache Canonical Debian and 5 more
Products
Http Server Ubuntu Linux Debian Linux and 25 more
CVE-2020-6418

chromium-browser: Type confusion in V8

Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 78.8% KEV · Listed
Vendors
Debian Fedoraproject Google and 1 more
Products
Debian Linux Fedora Chrome and 4 more
CVE-2018-17480

chromium-browser: Out of bounds write in V8

Execution of user supplied Javascript during array deserialization leading to an out of bounds write in V8 in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 35.6% KEV · Listed
Vendors
Debian Google Redhat
Products
Debian Linux Chrome Enterprise Linux Desktop and 3 more
CVE-2018-6065

chromium-browser: integer overflow in v8

Integer overflow in computing the required allocation size when instantiating a new javascript object in V8 in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 60.3% KEV · Listed
Vendors
Debian Google Mi and 1 more
Products
Debian Linux Chrome Mi6 Browser and 4 more
CVE-2019-8506

webkitgtk: malicous web content leads to arbitrary code execution

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.

CVSS 3.1 · 8.8 High EPSS 16.2% KEV · Listed
Vendors
Apple Redhat
Products
Icloud Iphone Os Itunes and 7 more
CVE-2018-14665

xorg-x11-server: Incorrect permission check in Xorg X server allows for privilege escalation

A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options when starting Xorg. X server allows unprivileged users with the ability to log in to the system via physical console to escalate their privileges and run arbitrary code under root privileges.

CVSS 3.0 · 6.6 Medium EPSS 27.2% KEV · Not listed
Vendors
Canonical Debian Redhat and 1 more
Products
Ubuntu Linux Debian Linux Enterprise Linux and 7 more
CVE-2017-17485

jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-15095)

FasterXML jackson-databind through 2.8.10 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 deserialization flaw. This is exploitable by sending maliciously crafted JSON input to the readValue method of the ObjectMapper, bypassing a blacklist that is ineffective if the Spring libraries are available in the classpath.

CVSS 3.1 · 9.8 Critical EPSS 49.7% KEV · Not listed
Vendors
Debian Fasterxml Netapp and 1 more
Products
Debian Linux Jackson-databind E-series Santricity Os Controller and 12 more
CVE-2018-7726

zziplib: Bus error in zip.c:__zzip_parse_root_directory() cause crash via crafted zip file

An issue was discovered in ZZIPlib 0.13.68. There is a bus error caused by the __zzip_parse_root_directory function of zip.c. Attackers could leverage this vulnerability to cause a denial of service via a crafted zip file.

CVSS 3.0 · 6.5 Medium EPSS 1.7% KEV · Not listed
Vendors
Canonical Gdraheim Redhat
Products
Ubuntu Linux Zziplib Enterprise Linux and 3 more
CVE-2018-7727

zziplib: Memory leak in memdisk.c:zzip_mem_disk_new() can lead to denial of service via crafted zip

An issue was discovered in ZZIPlib 0.13.68. There is a memory leak triggered in the function zzip_mem_disk_new in memdisk.c, which will lead to a denial of service attack.

CVSS 3.0 · 6.5 Medium EPSS 1.2% KEV · Not listed
Vendors
Gdraheim Redhat
Products
Zziplib Enterprise Linux Enterprise Linux Desktop and 2 more
CVE-2018-7725

zziplib: out of bound read in mmapped.c:zzip_disk_fread() causes crash

An issue was discovered in ZZIPlib 0.13.68. An invalid memory address dereference was discovered in zzip_disk_fread in mmapped.c. The vulnerability causes an application crash, which leads to denial of service.

CVSS 3.0 · 6.5 Medium EPSS 1.7% KEV · Not listed
Vendors
Canonical Gdraheim Redhat
Products
Ubuntu Linux Zziplib Enterprise Linux and 3 more
CVE-2018-15688

Out-of-Bounds write in systemd-networkd dhcpv6 option handling

A buffer overflow vulnerability in the dhcp6 client of systemd allows a malicious dhcp6 server to overwrite heap memory in systemd-networkd. Affected releases are systemd: versions up to and including 239.

CVSS 3.1 · 8.8 High EPSS 1.8% KEV · Not listed
Vendors
Canonical Debian Redhat and 1 more
Products
Ubuntu Linux Debian Linux Enterprise Linux and 7 more
CVE-2011-3045

libpng: buffer overflow in png_inflate caused by invalid type conversions

Integer signedness error in the png_inflate function in pngrutil.c in libpng before 1.4.10beta01, as used in Google Chrome before 17.0.963.83 and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file, a different vulnerability than CVE-2011-3026.

CVSS 3.1 · 8.8 High EPSS 3.3% KEV · Not listed
Vendors
Debian Fedoraproject Google and 3 more
Products
Debian Linux Fedora Chrome and 10 more