Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 157

Export CSV
CVE-2015-0437

OpenJDK: code generation issue (Hotspot, 8064524)

Unspecified vulnerability in Oracle Java SE 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

CVSS 2.0 · 9.3 Critical EPSS 4.0% KEV · Not listed
Vendors
Novell Oracle Redhat
Products
Suse Linux Enterprise Desktop Jdk Jre and 2 more
CVE-2015-0439

mysql: unspecified vulnerability related to Server:InnoDB (CPU April 2015)

Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : InnoDB, a different vulnerability than CVE-2015-4756.

CVSS 2.0 · 4.0 Medium EPSS 2.3% KEV · Not listed
Vendors
Novell Oracle Suse
Products
Suse Linux Enterprise Desktop Suse Linux Enterprise Server Mysql and 2 more
CVE-2015-0458

JDK: unspecified vulnerability fixed in 6u95, 7u79 and 8u45 (Deployment)

Unspecified vulnerability in in Oracle Java SE 6u91, 7u76, and 8u40 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

CVSS 2.0 · 7.6 High EPSS 5.0% KEV · Not listed
Vendors
Novell Opensuse Oracle and 1 more
Products
Suse Linux Enterprise Desktop Opensuse Jdk and 4 more
CVE-2015-0459

JDK: unspecified vulnerability fixed in 5.0u85, 6u95, 7u79 and 8u45 (2D)

Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JavaFX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2015-0491.

CVSS 2.0 · 10.0 Critical EPSS 5.7% KEV · Not listed
Vendors
Novell Opensuse Oracle and 1 more
Products
Suse Linux Enterprise Desktop Opensuse Javafx and 5 more
CVE-2015-2566

mysql: unspecified vulnerability related to Server:DML (CPU April 2015)

Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availability via vectors related to DML.

CVSS 2.0 · 2.8 Low EPSS 2.6% KEV · Not listed
Vendors
Novell Oracle
Products
Suse Linux Suse Linux For Vmware Suse Linux Sdk and 1 more
CVE-2015-2567

mysql: unspecified vulnerability related to Server:Security:Privileges (CPU April 2015)

Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Security : Privileges.

CVSS 2.0 · 3.5 Low EPSS 2.5% KEV · Not listed
Vendors
Novell Oracle
Products
Suse Linux Suse Linux For Vmware Suse Linux Sdk and 1 more
CVE-2015-2708

Mozilla: Miscellaneous memory safety hazards (rv:31.7) (MFSA 2015-46)

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

CVSS 2.0 · 7.5 High EPSS 4.5% KEV · Not listed
Vendors
Mozilla Novell Opensuse and 1 more
Products
Firefox Firefox Esr Thunderbird and 5 more
CVE-2015-2709

Mozilla: Miscellaneous memory safety hazards (rv:38.0) (MFSA 2015-46)

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 38.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

CVSS 2.0 · 7.5 High EPSS 4.2% KEV · Not listed
Vendors
Mozilla Novell Opensuse
Products
Firefox Suse Linux Enterprise Desktop Suse Linux Enterprise Server and 2 more
CVE-2015-2710

Mozilla: Buffer overflow with SVG content and CSS (MFSA 2015-48)

Heap-based buffer overflow in the SVGTextFrame class in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote attackers to execute arbitrary code via crafted SVG graphics data in conjunction with a crafted Cascading Style Sheets (CSS) token sequence.

CVSS 2.0 · 6.8 Medium EPSS 4.4% KEV · Not listed
Vendors
Mozilla Novell Opensuse and 1 more
Products
Firefox Firefox Esr Thunderbird and 5 more
CVE-2015-2713

Mozilla: Use-after-free during text processing with vertical text enabled (MFSA 2015-51)

Use-after-free vulnerability in the SetBreaks function in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a document containing crafted text in conjunction with a Cascading Style Sheets (CSS) token sequence containing properties related to vertical text.

CVSS 2.0 · 6.8 Medium EPSS 3.7% KEV · Not listed
Vendors
Mozilla Novell Opensuse and 1 more
Products
Firefox Firefox Esr Thunderbird and 5 more
CVE-2015-2716

expat: Integer overflow leading to buffer overflow in XML_GetBuffer()

Buffer overflow in the XML parser in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote attackers to execute arbitrary code by providing a large amount of compressed XML data, a related issue to CVE-2015-1283.

CVSS 2.0 · 7.5 High EPSS 7.2% KEV · Not listed
Vendors
Mozilla Novell Opensuse and 2 more
Products
Firefox Firefox Esr Thunderbird and 8 more
CVE-2015-2721

NSS: incorrectly permited skipping of ServerKeyExchange (MFSA 2015-71)

Mozilla Network Security Services (NSS) before 3.19, as used in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, Thunderbird before 38.1, and other products, does not properly determine state transitions for the TLS state machine, which allows man-in-the-middle attackers to defeat cryptographic protection mechanisms by blocking messages, as demonstrated by removing a forward-secrecy property by blocking a ServerKeyExchange message, aka a "SMACK SKIP-TLS" issue.

CVSS 2.0 · 4.3 Medium EPSS 2.8% KEV · Not listed
Vendors
Canonical Debian Mozilla and 3 more
Products
Ubuntu Linux Debian Linux Firefox and 9 more
CVE-2015-2722

Mozilla: Use-after-free in workers while using XMLHttpRequest (MFSA 2015-65)

Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 allows remote attackers to execute arbitrary code via vectors involving attachment of an XMLHttpRequest object to a shared worker.

CVSS 2.0 · 10.0 Critical EPSS 6.1% KEV · Not listed
Vendors
Mozilla Novell Oracle and 1 more
Products
Firefox Firefox Esr Suse Linux Enterprise Desktop and 4 more
CVE-2015-2724

Mozilla: Miscellaneous memory safety hazards (rv:31.8 / rv:38.1) (MFSA 2015-59)

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

CVSS 2.0 · 10.0 Critical EPSS 5.8% KEV · Not listed
Vendors
Canonical Debian Mozilla and 3 more
Products
Ubuntu Linux Debian Linux Firefox and 7 more
CVE-2015-2725

Mozilla: Miscellaneous memory safety hazards (rv:31.8 / rv:38.1) (MFSA 2015-59)

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

CVSS 2.0 · 10.0 Critical EPSS 6.0% KEV · Not listed
Vendors
Mozilla Novell Oracle and 1 more
Products
Firefox Firefox Esr Thunderbird and 5 more
CVE-2015-2726

Mozilla: Miscellaneous memory safety hazards (rv:38.1) (MFSA 2015-59)

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

CVSS 2.0 · 10.0 Critical EPSS 6.0% KEV · Not listed
Vendors
Mozilla Novell Oracle
Products
Firefox Suse Linux Enterprise Desktop Suse Linux Enterprise Server and 2 more
CVE-2015-2728

Mozilla: Type confusion in Indexed Database Manager (MFSA 2015-61)

The IndexedDatabaseManager class in the IndexedDB implementation in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 misinterprets an unspecified IDBDatabase field as a pointer, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unspecified vectors, related to a "type confusion" issue.

CVSS 2.0 · 7.5 High EPSS 4.3% KEV · Not listed
Vendors
Mozilla Novell Oracle and 1 more
Products
Firefox Firefox Esr Suse Linux Enterprise Desktop and 3 more
CVE-2015-2730

NSS: ECDSA signature validation fails to handle some signatures correctly (MFSA 2015-64)

Mozilla Network Security Services (NSS) before 3.19.1, as used in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and other products, does not properly perform Elliptical Curve Cryptography (ECC) multiplications, which makes it easier for remote attackers to spoof ECDSA signatures via unspecified vectors.

CVSS 2.0 · 4.3 Medium EPSS 3.6% KEV · Not listed
Vendors
Debian Mozilla Novell and 2 more
Products
Debian Linux Firefox Firefox Esr and 7 more