Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 6,068

Export CSV
CVE-2011-1776

kernel: validate size of EFI GUID partition entries

The is_gpt_valid function in fs/partitions/efi.c in the Linux kernel before 2.6.39 does not check the size of an Extensible Firmware Interface (EFI) GUID Partition Table (GPT) entry, which allows physically proximate attackers to cause a denial of service (heap-based buffer overflow and OOPS) or obtain sensitive information from kernel heap memory by connecting a crafted GPT storage device, a different vulnerability than CVE-2011-1577.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux Enterprise Linux Desktop and 5 more
CVE-2011-1833

kernel: ecryptfs: mount source TOCTOU race

Race condition in the ecryptfs_mount function in fs/ecryptfs/main.c in the eCryptfs subsystem in the Linux kernel before 3.1 allows local users to bypass intended file permissions via a mount.ecryptfs_private mount with a mismatched uid.

CVSS 2.0 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux
CVE-2011-2022

kernel: agp: insufficient pg_start parameter checking in AGPIOC_BIND and AGPIOC_UNBIND ioctls

The agp_generic_remove_memory function in drivers/char/agp/generic.c in the Linux kernel before 2.6.38.5 does not validate a certain start parameter, which allows local users to gain privileges or cause a denial of service (system crash) via a crafted AGPIOC_UNBIND agp_ioctl ioctl call, a different vulnerability than CVE-2011-1745.

CVSS 2.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux Enterprise Linux Aus and 5 more
CVE-2011-2107

flash-plugin: Cross-site scripting vulnerability (APSB11-13)

Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.181.22 on Windows, Mac OS X, Linux, and Solaris, and 10.3.185.22 and earlier on Android, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to a "universal cross-site scripting vulnerability."

CVSS 2.0 · 4.3 Medium EPSS 3.6% KEV · Not listed
Vendors
Adobe Apple Google and 4 more
Products
Acrobat Acrobat Reader Flash Player and 6 more
CVE-2011-2130

flash-plugin: multiple arbitrary code execution flaws (APSB-11-21)

Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2134, CVE-2011-2137, CVE-2011-2414, and CVE-2011-2415.

CVSS 2.0 · 10.0 Critical EPSS 11.5% KEV · Not listed
Vendors
Adobe Apple Google and 4 more
Products
Adobe Air Flash Player Mac Os X and 5 more
CVE-2011-2134

flash-plugin: multiple arbitrary code execution flaws (APSB-11-21)

Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2130, CVE-2011-2137, CVE-2011-2414, and CVE-2011-2415.

CVSS 2.0 · 10.0 Critical EPSS 11.5% KEV · Not listed
Vendors
Adobe Apple Google and 4 more
Products
Adobe Air Flash Player Mac Os X and 5 more
CVE-2011-2135

flash-plugin: multiple arbitrary code execution flaws (APSB-11-21)

Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2140, CVE-2011-2417, and CVE-2011-2425.

CVSS 2.0 · 10.0 Critical EPSS 7.5% KEV · Not listed
Vendors
Adobe Apple Google and 4 more
Products
Adobe Air Flash Player Mac Os X and 5 more
CVE-2011-2136

flash-plugin: multiple arbitrary code execution flaws (APSB-11-21)

Integer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2138 and CVE-2011-2416.

CVSS 2.0 · 10.0 Critical EPSS 9.6% KEV · Not listed
Vendors
Adobe Apple Google and 4 more
Products
Adobe Air Flash Player Mac Os X and 5 more
CVE-2011-2137

flash-plugin: multiple arbitrary code execution flaws (APSB-11-21)

Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2130, CVE-2011-2134, CVE-2011-2414, and CVE-2011-2415.

CVSS 2.0 · 10.0 Critical EPSS 11.5% KEV · Not listed
Vendors
Adobe Apple Google and 4 more
Products
Adobe Air Flash Player Mac Os X and 5 more
CVE-2011-2138

flash-plugin: multiple arbitrary code execution flaws (APSB-11-21)

Integer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2136 and CVE-2011-2416.

CVSS 2.0 · 10.0 Critical EPSS 9.6% KEV · Not listed
Vendors
Adobe Apple Google and 4 more
Products
Adobe Air Flash Player Mac Os X and 5 more
CVE-2011-2139

flash-plugin: multiple arbitrary code execution flaws (APSB-11-21)

Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via unspecified vectors.

CVSS 2.0 · 6.4 Medium EPSS 5.4% KEV · Not listed
Vendors
Adobe Apple Google and 4 more
Products
Adobe Air Flash Player Mac Os X and 5 more
CVE-2011-2140

flash-plugin: multiple arbitrary code execution flaws (APSB-11-21)

Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2135, CVE-2011-2417, and CVE-2011-2425.

CVSS 2.0 · 10.0 Critical EPSS 82.3% KEV · Not listed
Vendors
Adobe Apple Google and 4 more
Products
Adobe Air Flash Player Mac Os X and 5 more
CVE-2011-2183

kernel: ksm: race between ksmd and exiting task

Race condition in the scan_get_next_rmap_item function in mm/ksm.c in the Linux kernel before 2.6.39.3, when Kernel SamePage Merging (KSM) is enabled, allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a crafted application.

CVSS 2.0 · 4.0 Medium EPSS < 1% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux Enterprise Mrg
CVE-2011-2189

kernel: net_ns: oom killer fires because of slow net_ns cleanup

net/core/net_namespace.c in the Linux kernel 2.6.32 and earlier does not properly handle a high rate of creation and cleanup of network namespaces, which makes it easier for remote attackers to cause a denial of service (memory consumption) via requests to a daemon that requires a separate namespace per connection, as demonstrated by vsftpd.

CVSS 3.1 · 7.5 High EPSS 17.9% KEV · Not listed
Vendors
Canonical Debian Linux and 1 more
Products
Ubuntu Linux Debian Linux Linux Kernel and 2 more
CVE-2011-2203

kernel: hfs_find_init() sb->ext_tree NULL pointer dereference

The hfs_find_init function in the Linux kernel 2.6 allows local users to cause a denial of service (NULL pointer dereference and Oops) by mounting an HFS file system with a malformed MDB extent record.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux
CVE-2011-2213

kernel: inet_diag: insufficient validation

The inet_diag_bc_audit function in net/ipv4/inet_diag.c in the Linux kernel before 2.6.39.3 does not properly audit INET_DIAG bytecode, which allows local users to cause a denial of service (kernel infinite loop) via crafted INET_DIAG_REQ_BYTECODE instructions in a netlink message, as demonstrated by an INET_DIAG_BC_JMP instruction with a zero yes value, a different vulnerability than CVE-2010-3880.

CVSS 2.0 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux Enterprise Linux Aus and 5 more
CVE-2011-2414

flash-plugin: multiple arbitrary code execution flaws (APSB-11-21)

Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2130, CVE-2011-2134, CVE-2011-2137, and CVE-2011-2415.

CVSS 2.0 · 10.0 Critical EPSS 11.8% KEV · Not listed
Vendors
Adobe Apple Google and 4 more
Products
Adobe Air Flash Player Mac Os X and 5 more
CVE-2011-2415

flash-plugin: multiple arbitrary code execution flaws (APSB-11-21)

Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2130, CVE-2011-2134, CVE-2011-2137, and CVE-2011-2414.

CVSS 2.0 · 10.0 Critical EPSS 11.8% KEV · Not listed
Vendors
Adobe Apple Google and 4 more
Products
Adobe Air Flash Player Mac Os X and 5 more
CVE-2011-2416

flash-plugin: multiple arbitrary code execution flaws (APSB-11-21)

Integer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2136 and CVE-2011-2138.

CVSS 2.0 · 10.0 Critical EPSS 9.6% KEV · Not listed
Vendors
Adobe Apple Google and 4 more
Products
Adobe Air Flash Player Mac Os X and 5 more
CVE-2011-2417

flash-plugin: multiple arbitrary code execution flaws (APSB-11-21)

Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2135, CVE-2011-2140, and CVE-2011-2425.

CVSS 2.0 · 10.0 Critical EPSS 7.7% KEV · Not listed
Vendors
Adobe Apple Google and 4 more
Products
Adobe Air Flash Player Mac Os X and 5 more