Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1,935

Export CSV
CVE-2009-2848

kernel: execve: must clear current->clear_child_tid

The execve function in the Linux kernel, possibly 2.6.30-rc6 and earlier, does not properly clear the current->clear_child_tid pointer, which allows local users to cause a denial of service (memory corruption) or possibly gain privileges via a clone system call with CLONE_CHILD_SETTID or CLONE_CHILD_CLEARTID enabled, which is not properly handled during thread creation and exit.

CVSS 2.0 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Fedoraproject Linux and 5 more
Products
Ubuntu Linux Fedora Linux Kernel and 12 more
CVE-2007-3304

httpd scoreboard lack of PID protection

Apache httpd 1.3.37, 2.0.59, and 2.2.4 with the Prefork MPM module, allows local users to cause a denial of service by modifying the worker_score and process_score arrays to reference an arbitrary process ID, which is sent a SIGUSR1 signal from the master process, aka "SIGUSR1 killer."

CVSS 2.0 · 4.7 Medium EPSS 3.3% KEV · Not listed
Vendors
Apache Canonical Fedoraproject and 1 more
Products
Http Server Ubuntu Linux Fedora and 8 more
CVE-2009-2698

kernel: udp socket NULL ptr dereference

The udp_sendmsg function in the UDP implementation in (1) net/ipv4/udp.c and (2) net/ipv6/udp.c in the Linux kernel before 2.6.19 allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via vectors involving the MSG_MORE flag and a UDP socket.

CVSS 3.1 · 7.8 High EPSS 7.1% KEV · Not listed
Vendors
Canonical Fedoraproject Linux and 3 more
Products
Ubuntu Linux Fedora Linux Kernel and 11 more
CVE-2009-2692

kernel: uninit op in SOCKOPS_WRAP() leads to privesc

The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socket operations in proto_ops structures, which allows local users to trigger a NULL pointer dereference and gain privileges by using mmap to map page zero, placing arbitrary code on this page, and then invoking an unavailable operation, as demonstrated by the sendpage operation (sock_sendpage function) on a PF_PPPOX socket.

CVSS 3.1 · 7.8 High EPSS 14.6% KEV · Not listed
Vendors
Debian Linux Redhat and 1 more
Products
Debian Linux Linux Kernel Enterprise Linux and 8 more
CVE-2007-1864

php libxmlrpc library overflow

Buffer overflow in the bundled libxmlrpc library in PHP before 4.4.7, and 5.x before 5.2.2, has unknown impact and remote attack vectors.

CVSS 2.0 · 7.5 High EPSS 2.9% KEV · Not listed
Vendors
Canonical Debian Php and 1 more
Products
Ubuntu Linux Debian Linux Php and 4 more
CVE-2009-1891

httpd: possible temporary DoS (CPU consumption) in mod_deflate

The mod_deflate module in Apache httpd 2.2.11 and earlier compresses large files until completion even after the associated network connection is closed, which allows remote attackers to cause a denial of service (CPU consumption).

CVSS 2.0 · 7.1 High EPSS 17.1% KEV · Not listed
Vendors
Apache Canonical Debian and 2 more
Products
Http Server Ubuntu Linux Debian Linux and 9 more
CVE-2009-1890

httpd: mod_proxy reverse proxy DoS (infinite loop)

The stream_reqbody_cl function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP Server before 2.3.3, when a reverse proxy is configured, does not properly handle an amount of streamed data that exceeds the Content-Length value, which allows remote attackers to cause a denial of service (CPU consumption) via crafted requests.

CVSS 2.0 · 7.1 High EPSS 16.2% KEV · Not listed
Vendors
Apache Canonical Debian and 2 more
Products
Http Server Ubuntu Linux Debian Linux and 8 more
CVE-2007-1349

mod_perl PerlRun denial of service

PerlRun.pm in Apache mod_perl before 1.30, and RegistryCooker.pm in mod_perl 2.x, does not properly escape PATH_INFO before use in a regular expression, which allows remote attackers to cause a denial of service (resource consumption) via a crafted URI.

CVSS 2.0 · 5.0 Medium EPSS 10.4% KEV · Not listed
Vendors
Apache Canonical Redhat
Products
Mod Perl Ubuntu Linux Certificate System and 9 more
CVE-2009-1837

Firefox Race condition while accessing the private data of a NPObject JS wrapper class object

Race condition in the NPObjWrapper_NewResolve function in modules/plugin/base/src/nsJSNPRuntime.cpp in xul.dll in Mozilla Firefox 3 before 3.0.11 might allow remote attackers to execute arbitrary code via a page transition during Java applet loading, related to a use-after-free vulnerability for memory associated with a destroyed Java object.

CVSS 3.1 · 7.5 High EPSS 4.3% KEV · Not listed
Vendors
Debian Fedoraproject Mozilla and 1 more
Products
Debian Linux Fedora Firefox and 6 more
CVE-2009-0846

krb5: ASN.1 decoder can free uninitialized pointer when decoding an invalid encoding (MITKRB5-SA-2009-002)

The asn1_decode_generaltime function in lib/krb5/asn.1/asn1_decode.c in the ASN.1 GeneralizedTime decoder in MIT Kerberos 5 (aka krb5) before 1.6.4 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via vectors involving an invalid DER encoding that triggers a free of an uninitialized pointer.

CVSS 2.0 · 10.0 Critical EPSS 8.9% KEV · Not listed
Vendors
Apple Canonical Fedoraproject and 2 more
Products
Mac Os X Ubuntu Linux Fedora and 6 more
CVE-2007-1285

security flaw

The Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to cause a denial of service (stack exhaustion and PHP crash) via deeply nested arrays, which trigger deep recursion in the variable destruction routines.

CVSS 3.1 · 7.5 High EPSS 18.8% KEV · Not listed
Vendors
Canonical Novell Php and 2 more
Products
Ubuntu Linux Suse Linux Php and 7 more
CVE-2009-0834

kernel: x86-64: syscall-audit: 32/64 syscall hole

The audit_syscall_entry function in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform does not properly handle (1) a 32-bit process making a 64-bit syscall or (2) a 64-bit process making a 32-bit syscall, which allows local users to bypass certain syscall audit configurations via crafted syscalls, a related issue to CVE-2009-0342 and CVE-2009-0343.

CVSS 2.0 · 3.6 Low EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Linux and 3 more
Products
Ubuntu Linux Debian Linux Linux Kernel and 12 more
CVE-2008-3281

libxml2 denial of service

libxml2 2.6.32 and earlier does not properly detect recursion during entity expansion in an attribute value, which allows context-dependent attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document.

CVSS 3.1 · 6.5 Medium EPSS 2.5% KEV · Not listed
Vendors
Apple Canonical Debian and 4 more
Products
Iphone Os Safari Ubuntu Linux and 9 more
CVE-2007-0455

gd: buffer overrun

Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted string with a JIS encoded font.

CVSS 2.0 · 7.5 High EPSS 12.3% KEV · Not listed
Vendors
Canonical Fedoraproject Gd Graphics Library Project and 2 more
Products
Ubuntu Linux Fedora Gd Graphics Library and 6 more
CVE-2008-3272

kernel snd_seq_oss_synth_make_info leak

The snd_seq_oss_synth_make_info function in sound/core/seq/oss/seq_oss_synth.c in the sound subsystem in the Linux kernel before 2.6.27-rc2 does not verify that the device number is within the range defined by max_synthdev before returning certain data to the caller, which allows local users to obtain sensitive information.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Linux and 1 more
Products
Ubuntu Linux Debian Linux Linux Kernel and 6 more
CVE-2008-2364

httpd: mod_proxy_http DoS via excessive interim responses from the origin server

The ap_proxy_http_process_response function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP Server 2.0.63 and 2.2.8 does not limit the number of forwarded interim responses, which allows remote HTTP servers to cause a denial of service (memory consumption) via a large number of interim responses.

CVSS 2.0 · 5.0 Medium EPSS 12.7% KEV · Not listed
Vendors
Apache Canonical Fedoraproject and 1 more
Products
Http Server Ubuntu Linux Fedora and 6 more
CVE-2006-5752

httpd mod_status XSS

Cross-site scripting (XSS) vulnerability in mod_status.c in the mod_status module in Apache HTTP Server (httpd), when ExtendedStatus is enabled and a public server-status page is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving charsets with browsers that perform "charset detection" when the content-type is not specified.

CVSS 2.0 · 4.3 Medium EPSS 27.8% KEV · Not listed
Vendors
Apache Canonical Fedoraproject and 1 more
Products
Http Server Ubuntu Linux Fedora and 9 more
CVE-2008-1945

qemu/kvm/xen: add image format options for USB storage and removable media

QEMU 0.9.0 does not properly handle changes to removable media, which allows guest OS users to read arbitrary files on the host OS by using the diskformat: parameter in the -usbdevice option to modify the disk-image header to identify a different format, a related issue to CVE-2008-2004.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Opensuse and 3 more
Products
Ubuntu Linux Debian Linux Opensuse and 7 more
CVE-2008-0456

httpd: mod_negotiation CRLF injection via untrusted file names in directories with MultiViews enabled

CRLF injection vulnerability in the mod_negotiation module in the Apache HTTP Server 2.2.6 and earlier in the 2.2.x series, 2.0.61 and earlier in the 2.0.x series, and 1.3.39 and earlier in the 1.3.x series allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks by uploading a file with a multi-line name containing HTTP header sequences and a file extension, which leads to injection within a (1) "406 Not Acceptable" or (2) "300 Multiple Choices" HTTP response when the extension is omitted in a request for the file.

CVSS 2.0 · 2.6 Low EPSS 19.0% KEV · Not listed
Vendors
Apache Redhat
Products
Http Server Enterprise Linux Enterprise Linux Desktop and 2 more
CVE-2008-0455

httpd: mod_negotiation XSS via untrusted file names in directories with MultiViews enabled

Cross-site scripting (XSS) vulnerability in the mod_negotiation module in the Apache HTTP Server 2.2.6 and earlier in the 2.2.x series, 2.0.61 and earlier in the 2.0.x series, and 1.3.39 and earlier in the 1.3.x series allows remote authenticated users to inject arbitrary web script or HTML by uploading a file with a name containing XSS sequences and a file extension, which leads to injection within a (1) "406 Not Acceptable" or (2) "300 Multiple Choices" HTTP response when the extension is omitted in a request for the file.

CVSS 2.0 · 4.3 Medium EPSS 64.9% KEV · Not listed
Vendors
Apache Redhat
Products
Http Server Enterprise Linux Enterprise Linux Desktop and 3 more