Export limit exceeded: 425860 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1,793

Export CSV
CVE-2014-4049

php: heap-based buffer overflow in DNS TXT record parsing

Heap-based buffer overflow in the php_parserr function in ext/standard/dns.c in PHP 5.6.0beta4 and earlier allows remote servers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted DNS TXT record, related to the dns_get_record function.

CVSS 2.0 · 5.1 Medium EPSS 10.9% KEV · Not listed
Vendors
Debian Opensuse Php and 1 more
Products
Debian Linux Opensuse Php and 2 more
CVE-2013-4352

httpd: mod_cache NULL pointer dereference crash

The cache_invalidate function in modules/cache/cache_storage.c in the mod_cache module in the Apache HTTP Server 2.4.6, when a caching forward proxy is enabled, allows remote HTTP servers to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger a missing hostname value.

CVSS 2.0 · 4.3 Medium EPSS 11.5% KEV · Not listed
Vendors
Apache Redhat
Products
Http Server Enterprise Linux Rhel Software Collections
CVE-2016-3486

mysql: unspecified vulnerability in subcomponent: Server: FTS (CPU July 2016)

Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote authenticated users to affect availability via vectors related to Server: FTS.

CVSS 3.0 · 6.5 Medium EPSS 4.2% KEV · Not listed
Vendors
Canonical Oracle Redhat
Products
Ubuntu Linux Mysql Rhel Software Collections
CVE-2016-3477

mysql: unspecified vulnerability in subcomponent: Server: Parser (CPU July 2016)

Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows local users to affect confidentiality, integrity, and availability via vectors related to Server: Parser.

CVSS 3.0 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Ibm and 3 more
Products
Ubuntu Linux Debian Linux Powerkvm and 5 more
CVE-2014-3670

php: heap corruption issue in exif_thumbnail()

The exif_ifd_make_value function in exif.c in the EXIF extension in PHP before 5.4.34, 5.5.x before 5.5.18, and 5.6.x before 5.6.2 operates on floating-point arrays incorrectly, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via a crafted JPEG image with TIFF thumbnail data that is improperly handled by the exif_thumbnail function.

CVSS 2.0 · 6.8 Medium EPSS 22.6% KEV · Not listed
Vendors
Php Redhat
Products
Php Enterprise Linux Rhel Eus and 1 more
CVE-2016-3471

mysql: unspecified vulnerability in subcomponent: Server: Option (CPU July 2016)

Unspecified vulnerability in Oracle MySQL 5.5.45 and earlier and 5.6.26 and earlier allows local users to affect confidentiality, integrity, and availability via vectors related to Server: Option.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Mariadb Oracle Redhat
Products
Mariadb Mysql Enterprise Linux and 1 more
CVE-2016-3459

mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU July 2016)

Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier and MariaDB 10.0.x before 10.0.25 and 10.1.x before 10.1.14 allows remote administrators to affect availability via vectors related to Server: InnoDB.

CVSS 3.0 · 4.9 Medium EPSS 3.3% KEV · Not listed
Vendors
Mariadb Oracle Redhat
Products
Mariadb Mysql Rhel Software Collections
CVE-2014-3710

file: out-of-bounds read in elf note headers

The donote function in readelf.c in file through 5.20, as used in the Fileinfo component in PHP 5.4.34, does not ensure that sufficient note headers are present, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted ELF file.

CVSS 2.0 · 5.0 Medium EPSS 14.0% KEV · Not listed
Vendors
Canonical Debian Php and 1 more
Products
Ubuntu Linux Debian Linux Php and 2 more
CVE-2016-3452

mysql: unspecified vulnerability in subcomponent: Server: Security: Encryption (CPU July 2016)

Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.49, 10.0.x before 10.0.25, and 10.1.x before 10.1.14 allows remote attackers to affect confidentiality via vectors related to Server: Security: Encryption.

CVSS 3.0 · 3.7 Low EPSS 4.1% KEV · Not listed
Vendors
Ibm Mariadb Oracle and 1 more
Products
Powerkvm Mariadb Linux and 3 more
CVE-2016-3191

pcre: workspace overflow for (*ACCEPT) with deeply nested parentheses (8.39/13, 10.22/12)

The compile_branch function in pcre_compile.c in PCRE 8.x before 8.39 and pcre2_compile.c in PCRE2 before 10.22 mishandles patterns containing an (*ACCEPT) substring in conjunction with nested parentheses, which allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow) via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, aka ZDI-CAN-3542.

CVSS 3.0 · 9.8 Critical EPSS 8.4% KEV · Not listed
Vendors
Pcre Redhat
Products
Pcre Pcre2 Enterprise Linux and 1 more
CVE-2015-3165

postgresql: double-free after authentication timeout

Double free vulnerability in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 allows remote attackers to cause a denial of service (crash) by closing an SSL session at a time when the authentication timeout will expire during the session shutdown sequence.

CVSS 2.0 · 4.3 Medium EPSS 8.4% KEV · Not listed
Vendors
Apple Canonical Debian and 2 more
Products
Mac Os X Server Ubuntu Linux Debian Linux and 3 more
CVE-2016-3142

php: Out-of-bounds read in phar_parse_zipfile()

The phar_parse_zipfile function in zip.c in the PHAR extension in PHP before 5.5.33 and 5.6.x before 5.6.19 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read and application crash) by placing a PK\x05\x06 signature at an invalid location.

CVSS 3.0 · 8.2 High EPSS 5.0% KEV · Not listed
Vendors
Apple Php Redhat
Products
Mac Os X Php Rhel Software Collections
CVE-2016-3141

php: Use after free in WDDX Deserialize when processing XML data

Use-after-free vulnerability in wddx.c in the WDDX extension in PHP before 5.5.33 and 5.6.x before 5.6.19 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact by triggering a wddx_deserialize call on XML data containing a crafted var element.

CVSS 3.0 · 9.8 Critical EPSS 36.0% KEV · Not listed
Vendors
Apple Php Redhat
Products
Mac Os X Php Rhel Software Collections
CVE-2015-3152

mysql: use of SSL/TLS can not be enforced in mysql client library (oCERT-2015-003, BACKRONYM)

Oracle MySQL before 5.7.3, Oracle MySQL Connector/C (aka libmysqlclient) before 6.1.3, and MariaDB before 5.5.44 use the --ssl option to mean that SSL is optional, which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack, aka a "BACKRONYM" attack.

CVSS 3.1 · 5.9 Medium EPSS 7.1% KEV · Not listed
Vendors
Debian Fedoraproject Mariadb and 3 more
Products
Debian Linux Fedora Mariadb and 11 more
CVE-2016-3074

php: Signedness vulnerability causing heap overflow in libgd

Integer signedness error in GD Graphics Library 2.1.1 (aka libgd or libgd2) allows remote attackers to cause a denial of service (crash) or potentially execute arbitrary code via crafted compressed gd2 data, which triggers a heap-based buffer overflow.

CVSS 3.1 · 9.8 Critical EPSS 35.7% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 4 more
Products
Ubuntu Linux Debian Linux Fedora and 4 more
CVE-2016-2554

php: buffer overflow in handling of long link names in tar phar archives

Stack-based buffer overflow in ext/phar/tar.c in PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted TAR archive.

CVSS 3.0 · 9.8 Critical EPSS 11.0% KEV · Not listed
Vendors
Php Redhat
Products
Php Rhel Software Collections
CVE-2015-2787

php: use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re

Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages use of the unset function within an __wakeup function, a related issue to CVE-2015-0231.

CVSS 2.0 · 7.5 High EPSS 11.8% KEV · Not listed
Vendors
Apple Opensuse Php and 1 more
Products
Mac Os X Opensuse Php and 8 more
CVE-2016-2324

git: path_name() integer truncation and overflow leading to buffer overflow

Integer overflow in Git before 2.7.4 allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, which triggers a heap-based buffer overflow.

CVSS 3.1 · 9.8 Critical EPSS 18.1% KEV · Not listed
Vendors
Git-scm Opensuse Redhat and 1 more
Products
Git Leap Opensuse and 7 more
CVE-2016-2315

git: path_name() integer truncation and overflow leading to buffer overflow

revision.c in git before 2.7.4 uses an incorrect integer data type, which allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, leading to a heap-based buffer overflow.

CVSS 3.1 · 9.8 Critical EPSS 17.3% KEV · Not listed
Vendors
Git-scm Opensuse Redhat and 1 more
Products
Git Leap Opensuse and 7 more
CVE-2015-2783

php: buffer over-read in Phar metadata parsing

ext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read and application crash) via a crafted length value in conjunction with crafted serialized data in a phar archive, related to the phar_parse_metadata and phar_parse_pharfile functions.

CVSS 2.0 · 5.8 Medium EPSS 9.0% KEV · Not listed
Vendors
Apple Php Redhat
Products
Mac Os X Php Enterprise Linux and 7 more