Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2,030

Export CSV
CVE-2014-8169

autofs: priv escalation via interpreter load path for program based automount maps

automount 5.0.8, when a program map uses certain interpreted languages, uses the calling user's USER and HOME environment variable values instead of the values for the user used to run the mapped program, which allows local users to gain privileges via a Trojan horse program in the user home directory.

CVSS 2.0 · 4.4 Medium EPSS < 1% KEV · Not listed
Vendors
Automount Project Opensuse Redhat
Products
Automount Opensuse Enterprise Linux and 4 more
CVE-2014-8160

kernel: iptables restriction bypass if a protocol handler kernel module not loaded

net/netfilter/nf_conntrack_proto_generic.c in the Linux kernel before 3.18 generates incorrect conntrack entries during handling of certain iptables rule sets for the SCTP, DCCP, GRE, and UDP-Lite protocols, which allows remote attackers to bypass intended access restrictions via packets with disallowed port numbers.

CVSS 2.0 · 5.0 Medium EPSS 5.5% KEV · Not listed
Vendors
Canonical Debian Linux and 3 more
Products
Ubuntu Linux Debian Linux Linux Kernel and 14 more
CVE-2016-1694

chromium-browser: hpkp pins removed on cache clearance

browser/browsing_data/browsing_data_remover.cc in Google Chrome before 51.0.2704.63 deletes HPKP pins during cache clearing, which makes it easier for remote attackers to spoof web sites via a valid certificate from an arbitrary recognized Certification Authority.

CVSS 3.0 · 5.3 Medium EPSS 1.0% KEV · Not listed
Vendors
Debian Google Opensuse and 2 more
Products
Debian Linux Chrome Leap and 6 more
CVE-2016-1693

chromium-browser: http download of software removal tool

browser/safe_browsing/srt_field_trial_win.cc in Google Chrome before 51.0.2704.63 does not use the HTTPS service on dl.google.com to obtain the Software Removal Tool, which allows remote attackers to spoof the chrome_cleanup_tool.exe (aka CCT) file via a man-in-the-middle attack on an HTTP session.

CVSS 3.0 · 5.3 Medium EPSS 1.2% KEV · Not listed
Vendors
Debian Google Opensuse and 2 more
Products
Debian Linux Chrome Leap and 6 more
CVE-2016-1695

chromium-browser: various fixes from internal audits

Multiple unspecified vulnerabilities in Google Chrome before 51.0.2704.63 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.

CVSS 3.0 · 8.8 High EPSS 1.2% KEV · Not listed
Vendors
Canonical Debian Google and 3 more
Products
Ubuntu Linux Debian Linux Chrome and 7 more
CVE-2014-8136

libvirt: local denial of service in qemu/qemu_driver.c

The (1) qemuDomainMigratePerform and (2) qemuDomainMigrateFinish2 functions in qemu/qemu_driver.c in libvirt do not unlock the domain when an ACL check fails, which allow local users to cause a denial of service via unspecified vectors.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Canonical Mageia Opensuse and 1 more
Products
Ubuntu Linux Mageia Opensuse and 7 more
CVE-2014-8108

subversion: NULL pointer dereference flaw in mod_dav_svn when handling URIs for virtual transaction names

The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.7.x before 1.7.19 and 1.8.x before 1.8.11 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a request for a URI that triggers a lookup for a virtual transaction name that does not exist.

CVSS 2.0 · 5.0 Medium EPSS 10.0% KEV · Not listed
Vendors
Apache Apple Redhat
Products
Subversion Xcode Enterprise Linux and 4 more
CVE-2014-7943

chromium-browser: out-of-bounds read in Skia

Skia, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

CVSS 2.0 · 5.0 Medium EPSS 1.6% KEV · Not listed
Vendors
Canonical Chromium Google and 2 more
Products
Ubuntu Linux Chromium Chrome and 6 more
CVE-2014-7942

chromium-browser: uninitialized-value in Fonts

The Fonts implementation in Google Chrome before 40.0.2214.91 does not initialize memory for a data structure, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

CVSS 2.0 · 7.5 High EPSS 1.6% KEV · Not listed
Vendors
Canonical Chromium Google and 2 more
Products
Ubuntu Linux Chromium Chrome and 6 more
CVE-2014-7941

chromium-browser: out-of-bounds read in UI

The SelectionOwner::ProcessTarget function in ui/base/x/selection_owner.cc in the UI implementation in Google Chrome before 40.0.2214.91 uses an incorrect data type for a certain length value, which allows remote attackers to cause a denial of service (out-of-bounds read) via crafted X11 data.

CVSS 2.0 · 5.0 Medium EPSS 1.6% KEV · Not listed
Vendors
Chromium Google Opensuse and 1 more
Products
Chromium Chrome Opensuse and 5 more
CVE-2014-7939

chromium-browser: same-origin-bypass in V8

Google Chrome before 40.0.2214.91, when the Harmony proxy in Google V8 is enabled, allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code with Proxy.create and console.log calls, related to HTTP responses that lack an "X-Content-Type-Options: nosniff" header.

CVSS 2.0 · 4.3 Medium EPSS 2.5% KEV · Not listed
Vendors
Chromium Google Opensuse and 1 more
Products
Chromium Chrome Opensuse and 5 more
CVE-2014-7926

ICU: regexp engine incorrect handling of a zero length quantifier

The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via vectors related to a zero-length quantifier.

CVSS 2.0 · 7.5 High EPSS 2.2% KEV · Not listed
Vendors
Canonical Google Icu-project and 3 more
Products
Ubuntu Linux Chrome International Components For Unicode and 7 more
CVE-2014-7923

ICU: regexp engine missing look-behind expression range check

The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via vectors related to a look-behind expression.

CVSS 2.0 · 7.5 High EPSS 2.2% KEV · Not listed
Vendors
Canonical Google Icu-project and 3 more
Products
Ubuntu Linux Chrome International Components For Unicode and 7 more
CVE-2014-7840

qemu: insufficient parameter validation during ram load

The host_from_stream_offset function in arch_init.c in QEMU, when loading RAM during migration, allows remote attackers to execute arbitrary code via a crafted (1) offset or (2) length value in savevm data.

CVSS 2.0 · 7.5 High EPSS 4.1% KEV · Not listed
Vendors
Qemu Redhat
Products
Qemu Enterprise Linux Enterprise Linux Desktop and 5 more
CVE-2014-7815

qemu: vnc: insufficient bits_per_pixel from the client sanitization

The set_pixel_format function in ui/vnc.c in QEMU allows remote attackers to cause a denial of service (crash) via a small bytes_per_pixel value.

CVSS 2.0 · 5.0 Medium EPSS 3.7% KEV · Not listed
Vendors
Canonical Debian Qemu and 2 more
Products
Ubuntu Linux Debian Linux Qemu and 9 more
CVE-2014-7300

gnome-shell: lockscreen bypass with printscreen key

GNOME Shell 3.14.x before 3.14.1, when the Screen Lock feature is used, does not limit the aggregate memory consumption of all active PrtSc requests, which allows physically proximate attackers to execute arbitrary commands on an unattended workstation by making many PrtSc requests and leveraging a temporary lock outage, and the resulting temporary shell availability, caused by the Linux kernel OOM killer.

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Gnome Redhat
Products
Gnome-shell Enterprise Linux Enterprise Linux Desktop and 3 more
CVE-2014-7145

Kernel: cifs: NULL pointer dereference in SMB2_tcon

The SMB2_tcon function in fs/cifs/smb2pdu.c in the Linux kernel before 3.16.3 allows remote CIFS servers to cause a denial of service (NULL pointer dereference and client system crash) or possibly have unspecified other impact by deleting the IPC$ share during resolution of DFS referrals.

CVSS 2.0 · 7.8 High EPSS 3.7% KEV · Not listed
Vendors
Canonical Linux Redhat
Products
Ubuntu Linux Linux Kernel Enterprise Linux and 4 more
CVE-2014-6568

mysql: unspecified vulnerability related to Server:InnoDB:DML (CPU Jan 2015)

Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier, and 5.6.21 and earlier, allows remote authenticated users to affect availability via vectors related to Server : InnoDB : DML.

CVSS 2.0 · 3.5 Low EPSS 7.1% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 4 more
Products
Ubuntu Linux Debian Linux Fedora and 16 more
CVE-2014-5353

krb5: NULL pointer dereference when using a ticket policy name as a password policy name

The krb5_ldap_get_password_policy_from_dn function in plugins/kdb/ldap/libkdb_ldap/ldap_pwd_policy.c in MIT Kerberos 5 (aka krb5) before 1.13.1, when the KDC uses LDAP, allows remote authenticated users to cause a denial of service (daemon crash) via a successful LDAP query with no results, as demonstrated by using an incorrect object type for a password policy.

CVSS 2.0 · 3.5 Low EPSS 5.0% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 4 more
Products
Ubuntu Linux Debian Linux Fedora and 10 more