CVE-2015-4680

freeradius: insufficent CRL application

FreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of intermediate CA certificates.

CVSS 3.0 · 7.5 High EPSS 1.8% KEV · Not listed

Vendors

Freeradius Suse

Products

Freeradius Linux Enterprise Server Linux Enterprise Software Development Kit

CVE-2014-9854

ImageMagick: filling memory during identification of image

coders/tiff.c in ImageMagick allows remote attackers to cause a denial of service (application crash) via vectors related to the "identification of image."

CVSS 3.1 · 7.5 High EPSS 3.7% KEV · Not listed

Vendors

Canonical Imagemagick Opensuse and 1 more

Products

Ubuntu Linux Imagemagick Leap and 4 more

CVE-2014-9853

ImageMagick: memory leak in rle file handling

Memory leak in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service (memory consumption) via a crafted rle file.

CVSS 3.1 · 5.5 Medium EPSS 1.8% KEV · Not listed

Vendors

Canonical Imagemagick Novell and 3 more

Products

Ubuntu Linux Imagemagick Leap and 8 more

CVE-2014-9852

ImageMagick: incorrect usage of object after it has been destroyed

distribute-cache.c in ImageMagick re-uses objects after they have been destroyed, which allows remote attackers to have unspecified impact via unspecified vectors.

CVSS 3.1 · 9.8 Critical EPSS 2.9% KEV · Not listed

Vendors

Imagemagick Opensuse Suse

Products

Imagemagick Leap Opensuse and 4 more

CVE-2010-5298

openssl: freelist misuse causing a possible use-after-free

Race condition in the ssl3_read_bytes function in s3_pkt.c in OpenSSL through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, allows remote attackers to inject data across sessions or cause a denial of service (use-after-free and parsing error) via an SSL connection in a multithreaded environment.

CVSS 2.0 · 4.0 Medium EPSS 34.1% KEV · Not listed

Vendors

Fedoraproject Mariadb Openssl and 2 more

Products

Fedora Mariadb Openssl and 6 more

CVE-2014-6530

mysql: unspecified vulnerability related to CLIENT:MYSQLDUMP (CPU October 2014)

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to CLIENT:MYSQLDUMP.

CVSS 2.0 · 6.5 Medium EPSS 2.7% KEV · Not listed

Vendors

Mariadb Oracle Redhat and 1 more

Products

Mariadb Mysql Solaris and 7 more

CVE-2014-6551

mysql: unspecified vulnerability related to CLIENT:MYSQLADMIN (CPU October 2014)

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows local users to affect confidentiality via vectors related to CLIENT:MYSQLADMIN.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed

Vendors

Mariadb Oracle Redhat and 1 more

Products

Mariadb Mysql Solaris and 7 more

CVE-2014-6505

mysql: unspecified vulnerability related to SERVER:MEMORY STORAGE ENGINE (CPU October 2014)

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect availability via vectors related to SERVER:MEMORY STORAGE ENGINE.

CVSS 2.0 · 4.0 Medium EPSS 2.7% KEV · Not listed

Vendors

Mariadb Oracle Redhat and 1 more

Products

Mariadb Mysql Enterprise Linux and 6 more

CVE-2014-6494

mysql: unspecified vulnerability related to CLIENT:SSL:yaSSL (CPU October 2014)

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect availability via vectors related to CLIENT:SSL:yaSSL, a different vulnerability than CVE-2014-6496.

CVSS 2.0 · 4.3 Medium EPSS 4.9% KEV · Not listed

Vendors

Juniper Mariadb Oracle and 1 more

Products

Junos Space Mariadb Mysql and 5 more

CVE-2014-6507

mysql: unspecified vulnerability related to SERVER:DML (CPU October 2014)

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SERVER:DML.

CVSS 2.0 · 4.3 Medium EPSS 7.3% KEV · Not listed

Vendors

Mariadb Oracle Redhat and 1 more

Products

Mariadb Mysql Solaris and 7 more

CVE-2014-6555

mysql: unspecified vulnerability related to SERVER:DML (CPU October 2014)

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SERVER:DML.

CVSS 2.0 · 6.5 Medium EPSS 3.9% KEV · Not listed

Vendors

Mariadb Oracle Redhat and 1 more

Products

Mariadb Mysql Enterprise Linux and 6 more

CVE-2014-6464

mysql: unspecified vulnerability related to SERVER:INNODB DML FOREIGN KEYS (CPU October 2014)

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:INNODB DML FOREIGN KEYS.

CVSS 2.0 · 4.0 Medium EPSS 4.1% KEV · Not listed

Vendors

Mariadb Oracle Redhat and 1 more

Products

Mariadb Mysql Enterprise Linux and 6 more

CVE-2014-6463

mysql: unspecified vulnerability related to SERVER:REPLICATION ROW FORMAT BINARY LOG DML (CPU October 2014)

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:REPLICATION ROW FORMAT BINARY LOG DML.

CVSS 2.0 · 3.3 Low EPSS 2.8% KEV · Not listed

Vendors

Mariadb Oracle Redhat and 1 more

Products

Mariadb Mysql Solaris and 7 more

CVE-2014-6469

mysql: unspecified vulnerability related to SERVER:OPTIMIZER (CPU October 2014)

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:OPTIMIZER.

CVSS 2.0 · 6.8 Medium EPSS 4.4% KEV · Not listed

Vendors

Mariadb Oracle Redhat and 1 more

Products

Mariadb Mysql Solaris and 7 more

CVE-2014-4287

mysql: unspecified vulnerability related to SERVER:CHARACTER SETS (CPU October 2014)

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:CHARACTER SETS.

CVSS 2.0 · 4.0 Medium EPSS 2.7% KEV · Not listed

Vendors

Mariadb Oracle Redhat and 1 more

Products

Mariadb Mysql Enterprise Linux and 6 more

CVE-2014-6484

mysql: unspecified vulnerability related to SERVER:DML (CPU October 2014)

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect availability via vectors related to SERVER:DML.

CVSS 2.0 · 4.0 Medium EPSS 2.7% KEV · Not listed

Vendors

Mariadb Oracle Redhat and 1 more

Products

Mariadb Mysql Enterprise Linux and 6 more

CVE-2014-6495

mysql: unspecified vulnerability related to SERVER:SSL:yaSSL (CPU October 2014)

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote attackers to affect availability via vectors related to SERVER:SSL:yaSSL.

CVSS 2.0 · 4.3 Medium EPSS 3.0% KEV · Not listed

Vendors

Juniper Mariadb Oracle and 1 more

Products

Junos Space Mariadb Mysql and 5 more

CVE-2014-6496

mysql: unspecified vulnerability related to CLIENT:SSL:yaSSL (CPU October 2014)

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect availability via vectors related to CLIENT:SSL:yaSSL, a different vulnerability than CVE-2014-6494.

CVSS 2.0 · 4.3 Medium EPSS 4.4% KEV · Not listed

Vendors

Juniper Mariadb Oracle and 1 more

Products

Junos Space Mariadb Mysql and 5 more

CVE-2014-6520

mysql: unspecified vulnerability related to SERVER:DDL (CPU October 2014)

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:DDL.

CVSS 2.0 · 4.0 Medium EPSS 2.7% KEV · Not listed

Vendors

Mariadb Oracle Redhat and 1 more

Products

Mariadb Mysql Enterprise Linux and 6 more

CVE-2014-6474

mysql: unspecified vulnerability related to SERVER:MEMCACHED (CPU October 2014)

Unspecified vulnerability in Oracle MySQL Server 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:MEMCACHED.

CVSS 2.0 · 3.5 Low EPSS 1.4% KEV · Not listed

Vendors

Mariadb Oracle Suse

Products

Mariadb Mysql Linux Enterprise Desktop and 3 more