Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1,793

Export CSV
CVE-2016-6128

gd: Invalid color index not properly handled

The gdImageCropThreshold function in gd_crop.c in the GD Graphics Library (aka libgd) before 2.2.3, as used in PHP before 7.0.9, allows remote attackers to cause a denial of service (application crash) via an invalid color index.

CVSS 3.1 · 7.5 High EPSS 6.8% KEV · Not listed
Vendors
Canonical Debian Libgd and 3 more
Products
Ubuntu Linux Debian Linux Libgd and 3 more
CVE-2016-5773

php: ZipArchive class Use After Free Vulnerability in PHP's GC algorithm and unserialize

php_zip.c in the zip extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 improperly interacts with the unserialize implementation and garbage collection, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and application crash) via crafted serialized data containing a ZipArchive object.

CVSS 3.0 · 9.8 Critical EPSS 9.3% KEV · Not listed
Vendors
Php Redhat
Products
Php Rhel Software Collections
CVE-2015-4737

mysql: unspecified vulnerability related to Server:Pluggable Auth (CPU July 2015)

Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect confidentiality via unknown vectors related to Server : Pluggable Auth.

CVSS 2.0 · 3.5 Low EPSS 3.6% KEV · Not listed
Vendors
Canonical Debian Oracle and 1 more
Products
Ubuntu Linux Debian Linux Mysql and 3 more
CVE-2016-5772

php: Double Free Corruption in wddx_deserialize

Double free vulnerability in the php_wddx_process_data function in wddx.c in the WDDX extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted XML data that is mishandled in a wddx_deserialize call.

CVSS 3.1 · 9.8 Critical EPSS 9.7% KEV · Not listed
Vendors
Debian Opensuse Php and 2 more
Products
Debian Linux Leap Opensuse and 5 more
CVE-2016-5771

php: Use After Free Vulnerability in PHP's GC algorithm and unserialize

spl_array.c in the SPL extension in PHP before 5.5.37 and 5.6.x before 5.6.23 improperly interacts with the unserialize implementation and garbage collection, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and application crash) via crafted serialized data.

CVSS 3.1 · 9.8 Critical EPSS 15.5% KEV · Not listed
Vendors
Debian Opensuse Php and 1 more
Products
Debian Linux Leap Opensuse and 2 more
CVE-2015-4644

php: NULL pointer dereference in php_pgsql_meta_data()

The php_pgsql_meta_data function in pgsql.c in the PostgreSQL (aka pgsql) extension in PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 does not validate token extraction for table names, which might allow remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted name. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1352.

CVSS 3.0 · 7.5 High EPSS 5.3% KEV · Not listed
Vendors
Php Redhat
Products
Php Enterprise Linux Rhel Software Collections
CVE-2014-5256

V8: Memory Corruption and Stack Overflow

Node.js 0.8 before 0.8.28 and 0.10 before 0.10.30 does not consider the possibility of recursive processing that triggers V8 garbage collection in conjunction with a V8 interrupt, which allows remote attackers to cause a denial of service (memory corruption and application crash) via deep JSON objects whose parsing lets this interrupt mask an overflow of the program stack.

CVSS 2.0 · 5.0 Medium EPSS 3.3% KEV · Not listed
Vendors
Nodejs Redhat
Products
Nodejs Rhel Software Collections
CVE-2016-5770

php: Int/size_t confusion in SplFileObject::fread

Integer overflow in the SplFileObject::fread function in spl_directory.c in the SPL extension in PHP before 5.5.37 and 5.6.x before 5.6.23 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large integer argument, a related issue to CVE-2016-5096.

CVSS 3.1 · 9.8 Critical EPSS 7.3% KEV · Not listed
Vendors
Debian Opensuse Php and 1 more
Products
Debian Linux Leap Opensuse and 2 more
CVE-2016-5768

php: Double free in _php_mb_regex_ereg_replace_exec

Double free vulnerability in the _php_mb_regex_ereg_replace_exec function in php_mbregex.c in the mbstring extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by leveraging a callback exception.

CVSS 3.0 · 9.8 Critical EPSS 9.6% KEV · Not listed
Vendors
Php Redhat
Products
Php Enterprise Linux Rhel Software Collections
CVE-2015-4643

php: integer overflow in ftp_genlist() resulting in heap overflow (improved fix for CVE-2015-4022)

Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 allows remote FTP servers to execute arbitrary code via a long reply to a LIST command, leading to a heap-based buffer overflow. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-4022.

CVSS 3.0 · 9.8 Critical EPSS 15.4% KEV · Not listed
Vendors
Debian Oracle Php and 1 more
Products
Debian Linux Linux Php and 8 more
CVE-2016-5767

gd: Integer Overflow in gdImagePaletteToTrueColor() resulting in heap overflow

Integer overflow in the gdImageCreate function in gd.c in the GD Graphics Library (aka libgd) before 2.0.34RC1, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8, allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted image dimensions.

CVSS 3.0 · 8.8 High EPSS 6.7% KEV · Not listed
Vendors
Libgd Php Redhat
Products
Libgd Php Enterprise Linux and 1 more
CVE-2016-5766

gd: Integer overflow in _gd2GetHeader() resulting in heap overflow

Integer overflow in the _gd2GetHeader function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.3, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8, allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via crafted chunk dimensions in an image.

CVSS 3.0 · 8.8 High EPSS 7.5% KEV · Not listed
Vendors
Debian Fedoraproject Freebsd and 3 more
Products
Debian Linux Fedora Freebsd and 5 more
CVE-2015-4605

php: denial of service when processing a crafted file with Fileinfo

The mcopy function in softmagic.c in file 5.x, as used in the Fileinfo component in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8, does not properly restrict a certain offset value, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted string that is mishandled by a "Python script text executable" rule.

CVSS 3.0 · 7.5 High EPSS 7.1% KEV · Not listed
Vendors
Php Redhat
Products
Php Enterprise Linux Enterprise Linux Desktop and 6 more
CVE-2014-5120

php: gd extension NUL byte injection in file names

gd_ctx.c in the GD component in PHP 5.4.x before 5.4.32 and 5.5.x before 5.5.16 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to overwrite arbitrary files via crafted input to an application that calls the (1) imagegd, (2) imagegd2, (3) imagegif, (4) imagejpeg, (5) imagepng, (6) imagewbmp, or (7) imagewebp function.

CVSS 2.0 · 6.4 Medium EPSS 16.9% KEV · Not listed
Vendors
Php Redhat
Products
Php Enterprise Linux Rhel Software Collections
CVE-2016-5699

python: http protocol steam injection attack

CRLF injection vulnerability in the HTTPConnection.putheader function in urllib2 and urllib in CPython (aka Python) before 2.7.10 and 3.x before 3.4.4 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in a URL.

CVSS 3.0 · 6.1 Medium EPSS 9.9% KEV · Not listed
Vendors
Python Redhat
Products
Python Enterprise Linux Rhel Software Collections
CVE-2016-5630

mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU October 2016)

Unspecified vulnerability in Oracle MySQL 5.6.31 and earlier and 5.7.13 and earlier allows remote administrators to affect availability via vectors related to Server: InnoDB.

CVSS 3.1 · 4.9 Medium EPSS 2.0% KEV · Not listed
Vendors
Mariadb Oracle Redhat
Products
Mariadb Mysql Rhel Software Collections
CVE-2015-4604

php: denial of service when processing a crafted file with Fileinfo

The mget function in softmagic.c in file 5.x, as used in the Fileinfo component in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8, does not properly maintain a certain pointer relationship, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted string that is mishandled by a "Python script text executable" rule.

CVSS 3.0 · 7.5 High EPSS 7.1% KEV · Not listed
Vendors
Php Redhat
Products
Php Enterprise Linux Enterprise Linux Desktop and 6 more
CVE-2016-5629

mysql: unspecified vulnerability in subcomponent: Server: Federated (CPU October 2016)

Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote administrators to affect availability via vectors related to Server: Federated.

CVSS 3.1 · 4.9 Medium EPSS 3.3% KEV · Not listed
Vendors
Mariadb Oracle Redhat
Products
Mariadb Mysql Enterprise Linux and 7 more
CVE-2016-5627

mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU October 2016)

Unspecified vulnerability in Oracle MySQL 5.6.31 and earlier and 5.7.13 and earlier allows remote authenticated users to affect availability via vectors related to Server: InnoDB.

CVSS 3.1 · 6.5 Medium EPSS 2.8% KEV · Not listed
Vendors
Oracle Redhat
Products
Mysql Rhel Software Collections
CVE-2015-4603

php: exception:: getTraceAsString type confusion issue after unserialize

The exception::getTraceAsString function in Zend/zend_exceptions.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to execute arbitrary code via an unexpected data type, related to a "type confusion" issue.

CVSS 3.0 · 9.8 Critical EPSS 10.6% KEV · Not listed
Vendors
Php Redhat
Products
Php Enterprise Linux Enterprise Linux Desktop and 6 more