Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2,219

Export CSV
CVE-2014-8108

subversion: NULL pointer dereference flaw in mod_dav_svn when handling URIs for virtual transaction names

The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.7.x before 1.7.19 and 1.8.x before 1.8.11 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a request for a URI that triggers a lookup for a virtual transaction name that does not exist.

CVSS 2.0 · 5.0 Medium EPSS 10.0% KEV · Not listed
Vendors
Apache Apple Redhat
Products
Subversion Xcode Enterprise Linux and 4 more
CVE-2016-5387

HTTPD: sets environmental variable based on user supplied Proxy request header

The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an "httpoxy" issue. NOTE: the vendor states "This mitigation has been assigned the identifier CVE-2016-5387"; in other words, this is not a CVE ID for a vulnerability.

CVSS 3.1 · 8.1 High EPSS 55.7% KEV · Not listed
Vendors
Apache Canonical Debian and 5 more
Products
Http Server Ubuntu Linux Debian Linux and 19 more
CVE-2014-7943

chromium-browser: out-of-bounds read in Skia

Skia, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

CVSS 2.0 · 5.0 Medium EPSS 1.6% KEV · Not listed
Vendors
Canonical Chromium Google and 2 more
Products
Ubuntu Linux Chromium Chrome and 6 more
CVE-2016-7857

flash-plugin: multiple code execution issues fixed in APSB16-37

Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution.

CVSS 3.0 · 8.8 High EPSS 7.0% KEV · Not listed
Vendors
Adobe Apple Google and 3 more
Products
Flash Player Flash Player For Linux Mac Os X and 12 more
CVE-2016-7858

flash-plugin: multiple code execution issues fixed in APSB16-37

Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution.

CVSS 3.0 · 8.8 High EPSS 7.0% KEV · Not listed
Vendors
Adobe Apple Google and 3 more
Products
Flash Player Flash Player For Linux Mac Os X and 12 more
CVE-2016-7859

flash-plugin: multiple code execution issues fixed in APSB16-37

Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution.

CVSS 3.0 · 8.8 High EPSS 7.0% KEV · Not listed
Vendors
Adobe Apple Google and 3 more
Products
Flash Player Flash Player For Linux Mac Os X and 12 more
CVE-2016-5386

Go: sets environmental variable based on user supplied Proxy request header

The net/http package in Go through 1.6 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect a CGI application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an "httpoxy" issue.

CVSS 3.1 · 8.1 High EPSS 5.2% KEV · Not listed
Vendors
Fedoraproject Golang Oracle and 1 more
Products
Fedora Go Linux and 4 more
CVE-2016-5385

PHP: sets environmental variable based on user supplied Proxy request header

PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, as demonstrated by (1) an application that makes a getenv('HTTP_PROXY') call or (2) a CGI configuration of PHP, aka an "httpoxy" issue.

CVSS 3.1 · 8.1 High EPSS 50.4% KEV · Not listed
Vendors
Debian Drupal Fedoraproject and 5 more
Products
Debian Linux Drupal Fedora and 13 more
CVE-2016-7862

flash-plugin: multiple code execution issues fixed in APSB16-37

Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution.

CVSS 3.0 · 8.8 High EPSS 7.1% KEV · Not listed
Vendors
Adobe Apple Google and 3 more
Products
Flash Player Flash Player For Linux Mac Os X and 12 more
CVE-2016-7863

flash-plugin: multiple code execution issues fixed in APSB16-37

Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution.

CVSS 3.0 · 8.8 High EPSS 7.1% KEV · Not listed
Vendors
Adobe Apple Google and 3 more
Products
Flash Player Flash Player For Linux Mac Os X and 11 more
CVE-2014-7942

chromium-browser: uninitialized-value in Fonts

The Fonts implementation in Google Chrome before 40.0.2214.91 does not initialize memory for a data structure, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

CVSS 2.0 · 7.5 High EPSS 1.6% KEV · Not listed
Vendors
Canonical Chromium Google and 2 more
Products
Ubuntu Linux Chromium Chrome and 6 more
CVE-2016-7865

flash-plugin: multiple code execution issues fixed in APSB16-37

Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.

CVSS 3.0 · 8.8 High EPSS 7.2% KEV · Not listed
Vendors
Adobe Apple Google and 3 more
Products
Flash Player Flash Player For Linux Mac Os X and 12 more
CVE-2014-7941

chromium-browser: out-of-bounds read in UI

The SelectionOwner::ProcessTarget function in ui/base/x/selection_owner.cc in the UI implementation in Google Chrome before 40.0.2214.91 uses an incorrect data type for a certain length value, which allows remote attackers to cause a denial of service (out-of-bounds read) via crafted X11 data.

CVSS 2.0 · 5.0 Medium EPSS 1.6% KEV · Not listed
Vendors
Chromium Google Opensuse and 1 more
Products
Chromium Chrome Opensuse and 5 more
CVE-2014-7939

chromium-browser: same-origin-bypass in V8

Google Chrome before 40.0.2214.91, when the Harmony proxy in Google V8 is enabled, allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code with Proxy.create and console.log calls, related to HTTP responses that lack an "X-Content-Type-Options: nosniff" header.

CVSS 2.0 · 4.3 Medium EPSS 2.5% KEV · Not listed
Vendors
Chromium Google Opensuse and 1 more
Products
Chromium Chrome Opensuse and 5 more
CVE-2016-5126

Qemu: block: iscsi: buffer overflow in iscsi_aio_ioctl

Heap-based buffer overflow in the iscsi_aio_ioctl function in block/iscsi.c in QEMU allows local guest OS users to cause a denial of service (QEMU process crash) or possibly execute arbitrary code via a crafted iSCSI asynchronous I/O ioctl call.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Oracle and 2 more
Products
Ubuntu Linux Debian Linux Linux and 10 more
CVE-2014-7926

ICU: regexp engine incorrect handling of a zero length quantifier

The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via vectors related to a zero-length quantifier.

CVSS 2.0 · 7.5 High EPSS 2.2% KEV · Not listed
Vendors
Canonical Google Icu-project and 3 more
Products
Ubuntu Linux Chrome International Components For Unicode and 7 more
CVE-2016-5009

crash: mon_command crashes ceph monitors on receiving empty prefix

The handle_command function in mon/Monitor.cc in Ceph allows remote authenticated users to cause a denial of service (segmentation fault and ceph monitor crash) via an (1) empty or (2) crafted prefix.

CVSS 3.0 · 6.5 Medium EPSS 2.5% KEV · Not listed
Vendors
Redhat
Products
Ceph Ceph Storage Ceph Storage Mon and 5 more
CVE-2014-7923

ICU: regexp engine missing look-behind expression range check

The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via vectors related to a look-behind expression.

CVSS 2.0 · 7.5 High EPSS 2.2% KEV · Not listed
Vendors
Canonical Google Icu-project and 3 more
Products
Ubuntu Linux Chrome International Components For Unicode and 7 more
CVE-2014-7840

qemu: insufficient parameter validation during ram load

The host_from_stream_offset function in arch_init.c in QEMU, when loading RAM during migration, allows remote attackers to execute arbitrary code via a crafted (1) offset or (2) length value in savevm data.

CVSS 2.0 · 7.5 High EPSS 4.1% KEV · Not listed
Vendors
Qemu Redhat
Products
Qemu Enterprise Linux Enterprise Linux Desktop and 5 more
CVE-2016-4809

libarchive: Memory allocate error with symbolic links in cpio archives

The archive_read_format_cpio_read_header function in archive_read_support_format_cpio.c in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) via a CPIO archive with a large symlink.

CVSS 3.0 · 7.5 High EPSS 4.8% KEV · Not listed
Vendors
Libarchive Oracle Redhat
Products
Libarchive Linux Enterprise Linux and 7 more