Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2,030

Export CSV
CVE-2017-16997

glibc: Incorrect handling of RPATH in elf/dl-load.c can be used to execute code loaded from arbitrary libraries

elf/dl-load.c in the GNU C Library (aka glibc or libc6) 2.19 through 2.26 mishandles RPATH and RUNPATH containing $ORIGIN for a privileged (setuid or AT_SECURE) program, which allows local users to gain privileges via a Trojan horse library in the current working directory, related to the fillin_rpath and decompose_rpath functions. This is associated with misinterpretion of an empty RPATH/RUNPATH token as the "./" directory. NOTE: this configuration of RPATH/RUNPATH for a privileged program is apparently very uncommon; most likely, no such program is shipped with any common Linux distribution.

CVSS 3.0 · 7.8 High EPSS 2.9% KEV · Not listed
Vendors
Gnu Redhat
Products
Glibc Enterprise Linux Enterprise Linux Desktop and 2 more
CVE-2017-17405

ruby: Command injection vulnerability in Net::FTP

Ruby before 2.4.3 allows Net::FTP command injection. Net::FTP#get, getbinaryfile, gettextfile, put, putbinaryfile, and puttextfile use Kernel#open to open a local file. If the localfile argument starts with the "|" pipe character, the command following the pipe character is executed. The default value of localfile is File.basename(remotefile), so malicious FTP servers could cause arbitrary command execution.

CVSS 3.0 · 8.8 High EPSS 73.8% KEV · Not listed
Vendors
Debian Redhat Ruby-lang
Products
Debian Linux Enterprise Linux Enterprise Linux Desktop and 10 more
CVE-2017-3072

flash-plugin: multiple code execution issues fixed in APSB17-15

Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the BitmapData class. Successful exploitation could lead to arbitrary code execution.

CVSS 3.1 · 8.8 High EPSS 5.0% KEV · Not listed
Vendors
Adobe Apple Google and 3 more
Products
Flash Player Flash Player Desktop Runtime Mac Os X and 9 more
CVE-2017-3258

mysql: Server: DDL unspecified vulnerability (CPU Jan 2017)

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).

CVSS 3.1 · 6.5 Medium EPSS 3.1% KEV · Not listed
Vendors
Debian Mariadb Oracle and 1 more
Products
Debian Linux Mariadb Mysql and 8 more
CVE-2015-7837

kernel: securelevel disabled after kexec

The Linux kernel, as used in Red Hat Enterprise Linux 7, kernel-rt, and Enterprise MRG 2 and when booted with UEFI Secure Boot enabled, allows local users to bypass intended securelevel/secureboot restrictions by leveraging improper handling of secure_boot flag across kexec reboot.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Enterprise Linux Desktop Enterprise Linux Server Aus and 4 more
CVE-2015-7852

ntp: ntpq atoascii memory corruption vulnerability

ntpq in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted mode 6 response packets.

CVSS 3.1 · 5.9 Medium EPSS 12.3% KEV · Not listed
Vendors
Debian Netapp Ntp and 2 more
Products
Debian Linux Clustered Data Ontap Data Ontap and 12 more
CVE-2015-7702

ntp: incomplete checks in ntp_crypto.c

The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash). NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-9750.

CVSS 3.1 · 6.5 Medium EPSS 5.2% KEV · Not listed
Vendors
Debian Netapp Ntp and 2 more
Products
Debian Linux Clustered Data Ontap Data Ontap and 11 more
CVE-2015-7703

ntp: config command can be used to set the pidfile and drift file paths

The "pidfile" or "driftfile" directives in NTP ntpd 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77, when ntpd is configured to allow remote configuration, allows remote attackers with an IP address that is allowed to send configuration requests, and with knowledge of the remote configuration password to write to arbitrary files via the :config command.

CVSS 3.1 · 7.5 High EPSS 3.8% KEV · Not listed
Vendors
Debian Netapp Ntp and 2 more
Products
Debian Linux Clustered Data Ontap Data Ontap and 11 more
CVE-2015-7691

ntp: incomplete checks in ntp_crypto.c

The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted packets containing particular autokey operations. NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-9750.

CVSS 3.1 · 7.5 High EPSS 7.1% KEV · Not listed
Vendors
Debian Netapp Ntp and 2 more
Products
Debian Linux Clustered Data Ontap Data Ontap and 11 more
CVE-2015-7692

ntp: incomplete checks in ntp_crypto.c

The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash). NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-9750.

CVSS 3.1 · 7.5 High EPSS 6.5% KEV · Not listed
Vendors
Debian Netapp Ntp and 2 more
Products
Debian Linux Clustered Data Ontap Data Ontap and 11 more
CVE-2017-14496

dnsmasq: integer underflow leading to buffer over-read in the EDNS0 code

Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service via a crafted DNS request.

CVSS 3.0 · 7.5 High EPSS 68.4% KEV · Not listed
Vendors
Canonical Debian Google and 3 more
Products
Ubuntu Linux Debian Linux Android and 6 more
CVE-2015-7701

ntp: slow memory leak in CRYPTO_ASSOC

Memory leak in the CRYPTO_ASSOC function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (memory consumption).

CVSS 3.1 · 7.5 High EPSS 6.5% KEV · Not listed
Vendors
Debian Netapp Ntp and 2 more
Products
Debian Linux Clustered Data Ontap Data Ontap and 11 more
CVE-2017-14494

dnsmasq: information leak in the DHCPv6 relay code

dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vectors involving handling DHCPv6 forwarded requests.

CVSS 3.0 · 5.9 Medium EPSS 70.5% KEV · Not listed
Vendors
Canonical Debian Novell and 2 more
Products
Ubuntu Linux Debian Linux Leap and 6 more
CVE-2015-7529

sos: Usage of predictable temporary files allows privilege escalation

sosreport in SoS 3.x allows local users to obtain sensitive information from sosreport files or gain privileges via a symlink attack on an archive file in a temporary directory, as demonstrated by sosreport-$hostname-$date.tar in /tmp/sosreport-$hostname-$date.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Canonical Redhat Sos Project
Products
Ubuntu Linux Enterprise Linux Enterprise Linux Desktop and 6 more
CVE-2017-14495

dnsmasq: memory exhaustion vulnerability in the EDNS0 code

Memory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service (memory consumption) via vectors involving DNS response creation.

CVSS 3.0 · 7.5 High EPSS 85.4% KEV · Not listed
Vendors
Canonical Debian Novell and 2 more
Products
Ubuntu Linux Debian Linux Leap and 5 more
CVE-2017-16541

Mozilla: Proxy bypass using automount and autofs

Tor Browser before 7.0.9 on macOS and Linux allows remote attackers to bypass the intended anonymity feature and discover a client IP address via vectors involving a crafted web site that leverages file:// mishandling in Firefox, aka TorMoil. NOTE: Tails is unaffected.

CVSS 3.1 · 6.5 Medium EPSS 3.7% KEV · Not listed
Vendors
Apple Debian Linux and 2 more
Products
Macos Debian Linux Linux Kernel and 8 more