Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 92

Export CSV
CVE-2013-4348

kernel: net: deadloop path in skb_flow_dissect()

The skb_flow_dissect function in net/core/flow_dissector.c in the Linux kernel through 3.12 allows remote attackers to cause a denial of service (infinite loop) via a small value in the IHL field of a packet with IPIP encapsulation.

CVSS 2.0 · 7.1 High EPSS 9.7% KEV · Not listed
Vendors
Canonical Linux Redhat
Products
Ubuntu Linux Linux Kernel Enterprise Mrg
CVE-2012-2744

kernel: netfilter: null pointer dereference in nf_ct_frag6_reasm()

net/ipv6/netfilter/nf_conntrack_reasm.c in the Linux kernel before 2.6.34, when the nf_conntrack_ipv6 module is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) via certain types of fragmented IPv6 packets.

CVSS 2.0 · 7.8 High EPSS 4.5% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux Rhel Eus
CVE-2012-2336

php: incomplete CVE-2012-1823 fix - missing filtering of -T and -h

sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to cause a denial of service (resource consumption) by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'T' case. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1823.

CVSS 2.0 · 5.0 Medium EPSS 52.1% KEV · Not listed
Vendors
Php Redhat
Products
Php Enterprise Linux
CVE-2012-2136

kernel: net: insufficient data_len validation in sock_alloc_send_pskb()

The sock_alloc_send_pskb function in net/core/sock.c in the Linux kernel before 3.4.5 does not properly validate a certain length value, which allows local users to cause a denial of service (heap-based buffer overflow and system crash) or possibly gain privileges by leveraging access to a TUN/TAP device.

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux Rhel Eus
CVE-2012-1182

samba: Multiple heap-based buffer overflows in memory management based on NDR marshalling code output

The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before 3.6.4 does not implement validation of an array length in a manner consistent with validation of array memory allocation, which allows remote attackers to execute arbitrary code via a crafted RPC call.

CVSS 2.0 · 10.0 Critical EPSS 74.4% KEV · Not listed
Vendors
Redhat Samba
Products
Enterprise Linux Rhel Els Rhel Eus and 2 more
CVE-2021-36199

VideoEdge

Running a vulnerability scanner against VideoEdge NVRs can cause some functionality to stop.

CVSS 3.1 · 5.3 Medium EPSS 1.1% KEV · Not listed
Vendors
Johnsoncontrols
Products
Videoedge
CVE-2020-27847

dexidp/dex: authentication bypass in saml authentication

A vulnerability exists in the SAML connector of the github.com/dexidp/dex library used to process SAML Signature Validation. This flaw allows an attacker to bypass SAML authentication. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. This flaw affects dex versions before 2.27.0.

CVSS 3.1 · 9.8 Critical EPSS 1.7% KEV · Not listed
Vendors
Linuxfoundation
Products
Dex
CVE-2019-10691

dovecot: Mishandling invalid UTF-8 characters by JSON encoder leading to possible DoS attack.

The JSON encoder in Dovecot before 2.3.5.2 allows attackers to repeatedly crash the authentication service by attempting to authenticate with an invalid UTF-8 sequence as the username.

CVSS 3.0 · 7.5 High EPSS 2.8% KEV · Not listed
Vendors
Dovecot Opensuse
Products
Dovecot Leap
CVE-2018-5381

quagga: Infinite loop issue triggered by invalid OPEN message allows denial-of-service

The Quagga BGP daemon (bgpd) prior to version 1.2.3 has a bug in its parsing of "Capabilities" in BGP OPEN messages, in the bgp_packet.c:bgp_capability_msg_parse function. The parser can enter an infinite loop on invalid capabilities if a Multi-Protocol capability does not have a recognized AFI/SAFI, causing a denial of service.

CVSS 3.0 · 6.5 Medium EPSS 30.2% KEV · Not listed
Vendors
Canonical Debian Quagga and 1 more
Products
Ubuntu Linux Debian Linux Quagga and 2 more
CVE-2018-19965

xen: x86: DoS from attempting to use INVPCID with a non-canonical addresses

An issue was discovered in Xen through 4.11.x allowing 64-bit PV guest OS users to cause a denial of service (host OS crash) because #GP[0] can occur after a non-canonical address is passed to the TLB flushing code. NOTE: this issue exists because of an incorrect CVE-2017-5754 (aka Meltdown) mitigation.

CVSS 3.0 · 5.6 Medium EPSS < 1% KEV · Not listed
Vendors
Citrix Debian Xen
Products
Xenserver Debian Linux Xen
CVE-2018-1000136

electron: Improper handling of values in Webviews

Electron version 1.7 up to 1.7.12; 1.8 up to 1.8.3 and 2.0.0 up to 2.0.0-beta.3 contains an improper handling of values vulnerability in Webviews that can result in remote code execution. This attack appear to be exploitable via an app which allows execution of 3rd party code AND disallows node integration AND has not specified if webview is enabled/disabled. This vulnerability appears to have been fixed in 1.7.13, 1.8.4, 2.0.0-beta.4.

CVSS 3.0 · 8.1 High EPSS 5.1% KEV · Not listed
Vendors
Electronjs
Products
Electron
CVE-2014-3607

vtldap/ldaptive: Hostname verification susceptible to MITM attack

DefaultHostnameVerifier in Ldaptive (formerly vt-ldap) does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.

CVSS 3.0 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Ldaptive
Products
Ldaptive Vt-ldap