Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 91

Export CSV
CVE-2015-8540

libpng: underflow read in png_check_keyword()

Integer underflow in the png_check_keyword function in pngwutil.c in libpng 0.90 through 0.99, 1.0.x before 1.0.66, 1.1.x and 1.2.x before 1.2.56, 1.3.x and 1.4.x before 1.4.19, and 1.5.x before 1.5.26 allows remote attackers to have unspecified impact via a space character as a keyword in a PNG image, which triggers an out-of-bounds read.

CVSS 3.0 · 8.8 High EPSS 6.5% KEV · Not listed
Vendors
Debian Fedoraproject Libpng and 1 more
Products
Debian Linux Fedora Libpng and 6 more
CVE-2016-1660

chromium-browser: out-of-bounds write in blink

Blink, as used in Google Chrome before 50.0.2661.94, mishandles assertions in the WTF::BitArray and WTF::double_conversion::Vector classes, which allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted web site.

CVSS 3.0 · 8.8 High EPSS 1.1% KEV · Not listed
Vendors
Google Opensuse Redhat
Products
Chrome Opensuse Enterprise Linux Desktop Supplementary and 4 more
CVE-2016-1661

chromium-browser: memory corruption in cross-process frames

Blink, as used in Google Chrome before 50.0.2661.94, does not ensure that frames satisfy a check for the same renderer process in addition to a Same Origin Policy check, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted web site, related to BindingSecurity.cpp and DOMWindow.cpp.

CVSS 3.0 · 8.0 High EPSS 1.2% KEV · Not listed
Vendors
Google Opensuse Redhat
Products
Chrome Opensuse Enterprise Linux Desktop Supplementary and 4 more
CVE-2011-4111

qemu: ccid: buffer overflow in handling of VSC_ATR message

Buffer overflow in the ccid_card_vscard_handle_message function in hw/ccid-card-passthru.c in QEMU before 0.15.2 and 1.x before 1.0-rc4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted VSC_ATR message.

CVSS 2.0 · 6.8 Medium EPSS 2.3% KEV · Not listed
Vendors
Qemu Redhat
Products
Qemu Enterprise Linux Enterprise Linux Server Supplementary
CVE-2014-0382

JDK: multiple unspecified vulnerabilities fixed in 7u51 (JavaFX)

Unspecified vulnerability in Oracle Java SE 7u45 and JavaFX 2.2.45 allows remote attackers to affect availability via unknown vectors related to JavaFX.

CVSS 2.0 · 4.3 Medium EPSS 4.9% KEV · Not listed
Vendors
Hp Oracle Redhat
Products
Hp-ux Jdk Jre and 9 more
CVE-2014-0418

JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment)

Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5889, CVE-2013-5902, CVE-2014-0410, CVE-2014-0415, and CVE-2014-0424.

CVSS 2.0 · 5.1 Medium EPSS 6.3% KEV · Not listed
Vendors
Hp Oracle Redhat
Products
Hp-ux Jdk Jre and 10 more
CVE-2013-2231

qemu: qemu-ga win32 service unquoted search path

Unquoted Windows search path vulnerability in the QEMU Guest Agent service for Red Hat Enterprise Linux Desktop 6, HPC Node 6, Server 6, Workstation 6, Desktop Supplementary 6, Server Supplementary 6, Supplementary AUS 6.4, Supplementary EUS 6.4.z, and Workstation Supplementary 6, when installing on Windows, allows local users to gain privileges via a crafted program in an unspecified folder.

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Microsoft Redhat
Products
Windows Enterprise Linux Enterprise Linux Desktop Supplementary and 3 more
CVE-2013-5895

JDK: multiple unspecified vulnerabilities fixed in 7u51 (JavaFX)

Unspecified vulnerability in Oracle Java SE 7u45 and JavaFX 2.2.45 allows remote attackers to affect confidentiality via unknown vectors related to JavaFX.

CVSS 2.0 · 5.0 Medium EPSS 5.7% KEV · Not listed
Vendors
Hp Oracle Redhat
Products
Hp-ux Jdk Jre and 9 more
CVE-2013-5906

JDK: unspecified vulnerability fixed in 5.0u71, 6u71 and 7u51 (Install)

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Install, a different vulnerability than CVE-2013-5905.

CVSS 2.0 · 5.1 Medium EPSS 6.3% KEV · Not listed
Vendors
Hp Oracle Redhat
Products
Hp-ux Jdk Jre and 10 more
CVE-2013-5904

JDK: unspecified vulnerability fixed in 7u51 (Deployment)

Unspecified vulnerability in Oracle Java SE 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

CVSS 2.0 · 6.8 Medium EPSS 4.9% KEV · Not listed
Vendors
Hp Oracle Redhat
Products
Hp-ux Jdk Jre and 8 more
CVE-2013-5870

JDK: multiple unspecified vulnerabilities fixed in 7u51 (JavaFX)

Unspecified vulnerability in Oracle Java SE 7u45 and JavaFX 2.2.45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX.

CVSS 2.0 · 6.8 Medium EPSS 4.8% KEV · Not listed
Vendors
Hp Oracle Redhat
Products
Hp-ux Jdk Jre and 9 more