Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5,222

Export CSV
CVE-2013-1985

libXinerama: Integer overflow leading to heap-based buffer overflow

Integer overflow in X.org libXinerama 1.1.2 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the XineramaQueryScreens function.

CVSS 2.0 · 6.8 Medium EPSS 1.8% KEV · Not listed
Vendors
Redhat X
Products
Enterprise Linux Libxinerama
CVE-2013-1984

libXi: Multiple integer overflows leading to heap-based buffer-overflows

Multiple integer overflows in X.org libXi 1.7.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XGetDeviceControl, (2) XGetFeedbackControl, (3) XGetDeviceDontPropagateList, (4) XGetDeviceMotionEvents, (5) XIGetProperty, (6) XIGetSelectedEvents, (7) XGetDeviceProperties, and (8) XListInputDevices functions.

CVSS 2.0 · 6.8 Medium EPSS 1.8% KEV · Not listed
Vendors
Redhat X.org
Products
Enterprise Linux Libxi
CVE-2013-1983

libXfixes: Integer overflow leading to heap-based buffer overflow

Integer overflow in X.org libXfixes 5.0 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the XFixesGetCursorImage function.

CVSS 2.0 · 6.8 Medium EPSS 2.1% KEV · Not listed
Vendors
Redhat X
Products
Enterprise Linux Libxfixes
CVE-2013-1982

libXext: Multiple integer overflows leading to heap-based buffer-overflows

Multiple integer overflows in X.org libXext 1.3.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XcupGetReservedColormapEntries, (2) XcupStoreColors, (3) XdbeGetVisualInfo, (4) XeviGetVisualInfo, (5) XShapeGetRectangles, and (6) XSyncListSystemCounters functions.

CVSS 2.0 · 6.8 Medium EPSS 1.7% KEV · Not listed
Vendors
Redhat X
Products
Enterprise Linux Libxext
CVE-2013-1981

libX11: Multiple integer overflows leading to heap-based buffer-overflows

Multiple integer overflows in X.org libX11 1.5.99.901 (1.6 RC1) and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XQueryFont, (2) _XF86BigfontQueryFont, (3) XListFontsWithInfo, (4) XGetMotionEvents, (5) XListHosts, (6) XGetModifierMapping, (7) XGetPointerMapping, (8) XGetKeyboardMapping, (9) XGetWindowProperty, (10) XGetImage, (11) LoadColornameDB, (12) XrmGetFileDatabase, (13) _XimParseStringFile, or (14) TransFileName functions.

CVSS 2.0 · 6.8 Medium EPSS 1.4% KEV · Not listed
Vendors
Canonical Redhat X
Products
Ubuntu Linux Enterprise Linux Libx11
CVE-2013-1978

gimp: XWD plugin color map heap-based buffer overflow

Heap-based buffer overflow in the read_xwd_cols function in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.6.9 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an X Window System (XWD) image dump with more colors than color map entries.

CVSS 2.0 · 6.8 Medium EPSS 4.2% KEV · Not listed
Vendors
Gimp Gnome Redhat
Products
Gimp Glib Enterprise Linux
CVE-2013-2174

curl: Loop counter error, leading to heap-based buffer overflow when decoding certain URLs

Heap-based buffer overflow in the curl_easy_unescape function in lib/escape.c in cURL and libcurl 7.7 through 7.30.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted string ending in a "%" (percent) character.

CVSS 2.0 · 6.8 Medium EPSS 9.8% KEV · Not listed
Vendors
Canonical Haxx Opensuse and 1 more
Products
Ubuntu Linux Curl Libcurl and 2 more
CVE-2013-2850

kernel: iscsi-target: heap buffer overflow on large key error

Heap-based buffer overflow in the iscsi_add_notunderstood_response function in drivers/target/iscsi/iscsi_target_parameters.c in the iSCSI target subsystem in the Linux kernel through 3.9.4 allows remote attackers to cause a denial of service (memory corruption and OOPS) or possibly execute arbitrary code via a long key that is not properly handled during construction of an error-response packet.

CVSS 2.0 · 7.9 High EPSS 7.3% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Mrg
CVE-2011-4516

jasper: heap buffer overflow flaws lead to arbitrary code execution (CERT VU#887409)

Heap-based buffer overflow in the jpc_cox_getcompparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted numrlvls value in a coding style default (COD) marker segment in a JPEG2000 file.

CVSS 2.0 · 6.8 Medium EPSS 10.5% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 4 more
Products
Ubuntu Linux Debian Linux Fedora and 7 more
CVE-2011-3919

libxml2: Heap-based buffer overflow when decoding an entity reference with a long name

Heap-based buffer overflow in libxml2, as used in Google Chrome before 16.0.912.75, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

CVSS 2.0 · 7.5 High EPSS 2.5% KEV · Not listed
Vendors
Apple Debian Google and 2 more
Products
Iphone Os Mac Os X Debian Linux and 8 more
CVE-2013-2889

Kernel: HID: zeroplus: heap overflow flaw

drivers/hid/hid-zpff.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_ZEROPLUS is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device.

CVSS 2.0 · 4.7 Medium EPSS < 1% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux
CVE-2013-2892

Kernel: HID: pantherlord: heap overflow flaw

drivers/hid/hid-pl.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_PANTHERLORD is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device.

CVSS 2.0 · 4.7 Medium EPSS < 1% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux Enterprise Mrg
CVE-2013-2893

Kernel: HID: LG: heap overflow flaw

The Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_LOGITECH_FF, CONFIG_LOGIG940_FF, or CONFIG_LOGIWHEELS_FF is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device, related to (1) drivers/hid/hid-lgff.c, (2) drivers/hid/hid-lg3ff.c, and (3) drivers/hid/hid-lg4ff.c.

CVSS 2.0 · 4.7 Medium EPSS < 1% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Mrg
CVE-2013-2895

Kernel: HID: logitech-dj: heap overflow flaw

drivers/hid/hid-logitech-dj.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_LOGITECH_DJ is enabled, allows physically proximate attackers to cause a denial of service (NULL pointer dereference and OOPS) or obtain sensitive information from kernel memory via a crafted device.

CVSS 2.0 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Mrg
CVE-2011-2939

Perl decode_xs heap-based buffer overflow

Off-by-one error in the decode_xs function in Unicode/Unicode.xs in the Encode module before 2.44, as used in Perl before 5.15.6, might allow context-dependent attackers to cause a denial of service (memory corruption) via a crafted Unicode string, which triggers a heap-based buffer overflow.

CVSS 2.0 · 5.1 Medium EPSS 2.6% KEV · Not listed
Vendors
Dan Kogai Perl Redhat
Products
Encode Module Perl Enterprise Linux
CVE-2013-4391

systemd: Integer overflow, leading to heap-based buffer overflow by processing native messages

Integer overflow in the valid_user_field function in journal/journald-native.c in systemd allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large journal data field, which triggers a heap-based buffer overflow.

CVSS 2.0 · 7.5 High EPSS 5.4% KEV · Not listed
Vendors
Debian Systemd Project
Products
Debian Linux Systemd
CVE-2013-6490

pidgin: Heap-based buffer overflow in SIMPLE protocol plugin

The SIMPLE protocol functionality in Pidgin before 2.10.8 allows remote attackers to have an unspecified impact via a negative Content-Length header, which triggers a buffer overflow.

CVSS 2.0 · 10.0 Critical EPSS 14.8% KEV · Not listed
Vendors
Pidgin Redhat
Products
Pidgin Enterprise Linux
CVE-2013-6489

pidgin: Heap-based buffer overflow in MXit emoticon parsing

Integer signedness error in the MXit functionality in Pidgin before 2.10.8 allows remote attackers to cause a denial of service (segmentation fault) via a crafted emoticon value, which triggers an integer overflow and a buffer overflow.

CVSS 2.0 · 5.0 Medium EPSS 5.8% KEV · Not listed
Vendors
Pidgin Redhat
Products
Pidgin Enterprise Linux
CVE-2012-5667

grep: Integer overflow leading to heap-based buffer-overflow when reading large lines

Multiple integer overflows in GNU Grep before 2.11 might allow context-dependent attackers to execute arbitrary code via vectors involving a long input line that triggers a heap-based buffer overflow.

CVSS 2.0 · 4.4 Medium EPSS 1.0% KEV · Not listed
Vendors
Gnu Redhat
Products
Grep Enterprise Linux
CVE-2012-5612

mysql: MDL subsystem heap-based buffer overflow

Heap-based buffer overflow in Oracle MySQL 5.5.19 and other versions through 5.5.28, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code, as demonstrated using certain variations of the (1) USE, (2) SHOW TABLES, (3) DESCRIBE, (4) SHOW FIELDS FROM, (5) SHOW COLUMNS FROM, (6) SHOW INDEX FROM, (7) CREATE TABLE, (8) DROP TABLE, (9) ALTER TABLE, (10) DELETE FROM, (11) UPDATE, and (12) SET PASSWORD commands.

CVSS 2.0 · 6.5 Medium EPSS 21.0% KEV · Not listed
Vendors
Canonical Mariadb Oracle and 1 more
Products
Ubuntu Linux Mariadb Mysql and 3 more