Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 89

Export CSV
CVE-2015-0406

JDK: unspecified vulnerability fixed in 6u91, 7u75 and 8u31 (Deployment)

Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality and availability via unknown vectors related to Deployment.

CVSS 2.0 · 5.8 Medium EPSS 3.9% KEV · Not listed
Vendors
Novell Oracle Redhat
Products
Suse Linux Enterprise Desktop Jdk Jre and 3 more
CVE-2015-0410

OpenJDK: DER decoder infinite loop (Security, 8059485)

Unspecified vulnerability in the Java SE, Java SE Embedded, JRockit component in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit R27.8.4 and R28.3.4 allows remote attackers to affect availability via unknown vectors related to Security.

CVSS 2.0 · 5.0 Medium EPSS 5.0% KEV · Not listed
Vendors
Canonical Debian Novell and 3 more
Products
Ubuntu Linux Debian Linux Suse Linux Enterprise Desktop and 9 more
CVE-2015-0421

JDK: unspecified vulnerability fixed in 8u31 (Install)

Unspecified vulnerability in Oracle Java SE 8u25 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to the installation process.

CVSS 2.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Novell Oracle Redhat
Products
Suse Linux Enterprise Desktop Jdk Jre and 1 more
CVE-2013-3567

puppet: remote code execution on master from unauthenticated clients

Puppet 2.7.x before 2.7.22 and 3.2.x before 3.2.2, and Puppet Enterprise before 2.8.2, deserializes untrusted YAML, which allows remote attackers to instantiate arbitrary Ruby classes and execute arbitrary code via a crafted REST API call.

CVSS 2.0 · 7.5 High EPSS 3.4% KEV · Not listed
Vendors
Canonical Novell Puppet and 2 more
Products
Ubuntu Linux Suse Linux Enterprise Desktop Suse Linux Enterprise Server and 4 more
CVE-2013-1379

flash-plugin: multiple code execution flaws (APSB13-11)

Adobe Flash Player before 10.3.183.75 and 11.x before 11.7.700.169 on Windows and Mac OS X, before 10.3.183.75 and 11.x before 11.2.202.280 on Linux, before 11.1.111.50 on Android 2.x and 3.x, and before 11.1.115.54 on Android 4.x; Adobe AIR before 3.7.0.1530; and Adobe AIR SDK & Compiler before 3.7.0.1530 do not properly initialize pointer arrays, which allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

CVSS 2.0 · 10.0 Critical EPSS 6.2% KEV · Not listed
Vendors
Adobe Apple Google and 5 more
Products
Adobe Air Adobe Air Sdk Flash Player and 7 more
CVE-2015-6815

qemu: net: e1000: infinite loop issue

The process_tx_desc function in hw/net/e1000.c in QEMU before 2.4.0.1 does not properly process transmit descriptor data when sending a network packet, which allows attackers to cause a denial of service (infinite loop and guest crash) via unspecified vectors.

CVSS 3.1 · 3.5 Low EPSS < 1% KEV · Not listed
Vendors
Arista Canonical Fedoraproject and 4 more
Products
Eos Ubuntu Linux Fedora and 8 more