Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4,046

Export CSV
CVE-2005-2629

security flaw

Integer overflow in RealNetworks RealPlayer 8, 10, and 10.5, RealOne Player 1 and 2, and Helix Player 10.0.0 allows remote attackers to execute arbitrary code via an .rm movie file with a large value in the length field of the first data packet, which leads to a stack-based buffer overflow, a different vulnerability than CVE-2004-1481.

CVSS 2.0 · 5.1 Medium EPSS 12.8% KEV · Not listed
Vendors
Realnetworks Redhat
Products
Helix Player Realone Player Realplayer and 2 more
CVE-2005-0191

security flaw

Off-by-one buffer overflow in the processing of tags in Real Metadata Package (RMP) files in RealPlayer 10.5 (6.0.12.1040) and earlier could allow remote attackers to execute arbitrary code via a long tag.

CVSS 2.0 · 5.1 Medium EPSS 3.4% KEV · Not listed
Vendors
Realnetworks Redhat
Products
Realone Player Realplayer Rhel Extras
CVE-2004-0836

security flaw

Buffer overflow in the mysql_real_connect function in MySQL 4.x before 4.0.21, and 3.x before 3.23.49, allows remote DNS servers to cause a denial of service and possibly execute arbitrary code via a DNS response with a large address length (h_length).

CVSS 2.0 · 10.0 Critical EPSS 9.8% KEV · Not listed
Vendors
Debian Oracle Redhat
Products
Debian Linux Mysql Enterprise Linux and 1 more
CVE-2005-0709

security flaw

MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to execute arbitrary code by using CREATE FUNCTION to access libc calls, as demonstrated by using strcat, on_exit, and exit.

CVSS 2.0 · 4.6 Medium EPSS 17.8% KEV · Not listed
Vendors
Mysql Oracle Redhat
Products
Mysql Mysql Enterprise Linux and 1 more
CVE-2005-2628

security flaw

Macromedia Flash 6 and 7 (Flash.ocx) allows remote attackers to execute arbitrary code via a SWF file with a modified frame type identifier that is used as an out-of-bounds array index to a function pointer.

CVSS 2.0 · 5.1 Medium EPSS 6.8% KEV · Not listed
Vendors
Macromedia Redhat
Products
Flash Player Rhel Extras
CVE-2005-2470

security flaw

Buffer overflow in a "core application plug-in" for Adobe Reader 5.1 through 7.0.2 and Acrobat 5.0 through 7.0.2 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors.

CVSS 2.0 · 7.5 High EPSS 13.2% KEV · Not listed
Vendors
Adobe Redhat
Products
Acrobat Acrobat Reader Rhel Extras
CVE-2005-1841

security flaw

The control for Adobe Reader 5.0.9 and 5.0.10 on Linux, Solaris, HP-UX, and AIX creates temporary files with the permissions as specified in a user's umask, which could allow local users to read PDF documents of that user if the umask allows it.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Adobe Redhat
Products
Acrobat Reader Rhel Extras
CVE-2005-1766

security flaw

Heap-based buffer overflow in rtffplin.cpp in RealPlayer 10.5 6.0.12.1056 on Windows, and 10, 10.0.1.436, and other versions before 10.0.5 on Linux, allows remote attackers to execute arbitrary code via a RealMedia file with a long RealText string, such as an SMIL file.

CVSS 2.0 · 5.1 Medium EPSS 4.1% KEV · Not listed
Vendors
Realnetworks Redhat
Products
Realplayer Enterprise Linux Rhel Extras
CVE-2004-1152

security flaw

Buffer overflow in the mailListIsPdf function in Adobe Acrobat Reader 5.09 for Unix allows remote attackers to execute arbitrary code via an e-mail message with a crafted PDF attachment.

CVSS 2.0 · 10.0 Critical EPSS 8.3% KEV · Not listed
Vendors
Adobe Redhat
Products
Acrobat Reader Rhel Extras
CVE-2004-0835

security flaw

MySQL 3.x before 3.23.59, 4.x before 4.0.19, 4.1.x before 4.1.2, and 5.x before 5.0.1, checks the CREATE/INSERT rights of the original table instead of the target table in an ALTER TABLE RENAME operation, which could allow attackers to conduct unauthorized activities.

CVSS 2.0 · 7.5 High EPSS 22.4% KEV · Not listed
Vendors
Debian Mysql Oracle and 1 more
Products
Debian Linux Mysql Mysql and 2 more
CVE-2005-1625

security flaw

Stack-based buffer overflow in the UnixAppOpenFilePerform function in Adobe Reader 5.0.9 and 5.0.10 for Unix allows remote attackers to execute arbitrary code via a PDF document with a long /Filespec tag.

CVSS 2.0 · 5.0 Medium EPSS 4.6% KEV · Not listed
Vendors
Adobe Redhat
Products
Acrobat Reader Rhel Extras
CVE-2005-1080

jar: directory traversal vulnerability

Directory traversal vulnerability in the Java Archive Tool (Jar) utility in J2SE SDK 1.4.2 and 1.5, and OpenJDK, allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in filenames in a .jar file.

CVSS 2.0 · 5.0 Medium EPSS 5.8% KEV · Not listed
Vendors
Redhat Sun
Products
Enterprise Linux Network Satellite Rhel Extras and 2 more
CVE-2004-1072

security flaw

The binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, may create an interpreter name string that is not NULL terminated, which could cause strings longer than PATH_MAX to be used, leading to buffer overflows that allow local users to cause a denial of service (hang) and possibly execute arbitrary code.

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Linux Redhat Suse and 2 more
Products
Linux Kernel Enterprise Linux Enterprise Linux Desktop and 6 more
CVE-2005-0755

security flaw

Heap-based buffer overflow in RealPlayer 10 and earlier, Helix Player before 10.0.4, and RealOne Player v1 and v2 allows remote attackers to execute arbitrary code via a long hostname in a RAM file.

CVSS 2.0 · 5.1 Medium EPSS 3.4% KEV · Not listed
Vendors
Realnetworks Redhat
Products
Helix Player Realone Player Realplayer and 2 more
CVE-2004-0957

security flaw

Unknown vulnerability in MySQL 3.23.58 and earlier, when a local user has privileges for a database whose name includes a "_" (underscore), grants privileges to other databases that have similar names, which can allow the user to conduct unauthorized activities.

CVSS 2.0 · 6.8 Medium EPSS 2.4% KEV · Not listed
Vendors
Openpkg Oracle Redhat and 3 more
Products
Openpkg Mysql Enterprise Linux and 5 more
CVE-2004-0631

security flaw

Buffer overflow in the uudecoding feature for Adobe Acrobat Reader 5.0.5 and 5.0.6 for Unix and Linux, and possibly other versions including those before 5.0.9, allows remote attackers to execute arbitrary code via a long filename for the PDF file that is provided to the uudecode command.

CVSS 2.0 · 10.0 Critical EPSS 9.8% KEV · Not listed
Vendors
Adobe Redhat
Products
Acrobat Reader Rhel Extras
CVE-2004-0550

security flaw

Buffer overflow in Real Networks RealPlayer 10 allows remote attackers to execute arbitrary code via a URL with a large number of "." (period) characters.

CVSS 2.0 · 7.5 High EPSS 3.5% KEV · Not listed
Vendors
Realnetworks Redhat
Products
Realplayer Rhel Extras
CVE-2006-4640

security flaw

Unspecified vulnerability in Adobe Flash Player before 9.0.16.0 allows user-assisted remote attackers to bypass the allowScriptAccess protection via unspecified vectors.

CVSS 2.0 · 6.8 Medium EPSS 10.7% KEV · Not listed
Vendors
Adobe Redhat
Products
Flash Player Rhel Extras
CVE-2006-3588

security flaw

Unspecified vulnerability in Adobe (Macromedia) Flash Player 8.0.24.0 allows remote attackers to cause a denial of service (browser crash) via a malformed, compressed .swf file, a different issue than CVE-2006-3587.

CVSS 2.0 · 2.6 Low EPSS 7.6% KEV · Not listed
Vendors
Adobe Redhat
Products
Flash Player Rhel Extras