Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4,351

Export CSV
CVE-2016-2373

pidgin: MXIT Contact Mood Denial of Service Vulnerability

A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the server could potentially result in an out-of-bounds read. A malicious server or user can send an invalid mood to trigger this vulnerability.

CVSS 3.0 · 5.9 Medium EPSS 2.3% KEV · Not listed
Vendors
Canonical Debian Pidgin
Products
Ubuntu Linux Debian Linux Pidgin
CVE-2016-2375

pidgin: MXIT Suggested Contacts Memory Disclosure Vulnerability

An exploitable out-of-bounds read exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT contact information sent from the server can result in memory disclosure.

CVSS 3.0 · 5.3 Medium EPSS 2.7% KEV · Not listed
Vendors
Canonical Debian Pidgin
Products
Ubuntu Linux Debian Linux Pidgin
CVE-2014-9854

ImageMagick: filling memory during identification of image

coders/tiff.c in ImageMagick allows remote attackers to cause a denial of service (application crash) via vectors related to the "identification of image."

CVSS 3.1 · 7.5 High EPSS 3.7% KEV · Not listed
Vendors
Canonical Imagemagick Opensuse and 1 more
Products
Ubuntu Linux Imagemagick Leap and 4 more
CVE-2016-2372

pidgin: MXIT File Transfer Length Memory Disclosure Vulnerability

An information leak exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the server could potentially result in an out-of-bounds read. A malicious user, server, or man-in-the-middle attacker can send an invalid size for a file transfer which will trigger an out-of-bounds read vulnerability. This could result in a denial of service or copy data from memory to the file, resulting in an information leak if the file is sent to another user.

CVSS 3.0 · 5.9 Medium EPSS 1.8% KEV · Not listed
Vendors
Canonical Debian Pidgin
Products
Ubuntu Linux Debian Linux Pidgin
CVE-2016-2376

pidgin: MXIT read stage 0x3 Code Execution Vulnerability

A buffer overflow vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent from the server could potentially result in arbitrary code execution. A malicious server or an attacker who intercepts the network traffic can send an invalid size for a packet which will trigger a buffer overflow.

CVSS 3.0 · 8.1 High EPSS 3.7% KEV · Not listed
Vendors
Canonical Debian Pidgin
Products
Ubuntu Linux Debian Linux Pidgin
CVE-2014-9853

ImageMagick: memory leak in rle file handling

Memory leak in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service (memory consumption) via a crafted rle file.

CVSS 3.1 · 5.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Canonical Imagemagick Novell and 3 more
Products
Ubuntu Linux Imagemagick Leap and 8 more
CVE-2016-2377

pidgin: MXIT HTTP Content-Length Buffer Overflow Vulnerability

A buffer overflow vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent by the server could potentially result in an out-of-bounds write of one byte. A malicious server can send a negative content-length in response to a HTTP request triggering the vulnerability.

CVSS 3.0 · 8.1 High EPSS 2.6% KEV · Not listed
Vendors
Canonical Debian Pidgin
Products
Ubuntu Linux Debian Linux Pidgin
CVE-2016-4323

pidgin: MXIT Splash Image Arbitrary File Overwrite Vulnerability

A directory traversal exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent from the server could potentially result in an overwrite of files. A malicious server or someone with access to the network traffic can provide an invalid filename for a splash image triggering the vulnerability.

CVSS 3.0 · 3.7 Low EPSS 2.3% KEV · Not listed
Vendors
Canonical Debian Pidgin
Products
Ubuntu Linux Debian Linux Pidgin
CVE-2014-9841

ImageMagick: throwing of exceptions in psd handling

The ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors, related to "throwing of exceptions."

CVSS 3.0 · 9.8 Critical EPSS 3.9% KEV · Not listed
Vendors
Canonical Imagemagick Opensuse and 1 more
Products
Ubuntu Linux Imagemagick Opensuse and 5 more
CVE-2014-9842

ImageMagick: memory leak in psd handling

Memory leak in the ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors.

CVSS 3.0 · 7.5 High EPSS 3.6% KEV · Not listed
Vendors
Canonical Imagemagick Opensuse and 1 more
Products
Ubuntu Linux Imagemagick Opensuse and 6 more
CVE-2016-2367

pidgin: MXIT Avatar Length Memory Disclosure Vulnerability

An information leak exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the server could potentially result in an out-of-bounds read. A malicious user, server, or man-in-the-middle can send an invalid size for an avatar which will trigger an out-of-bounds read vulnerability. This could result in a denial of service or copy data from memory to the file, resulting in an information leak if the avatar is sent to another user.

CVSS 3.0 · 5.9 Medium EPSS 1.9% KEV · Not listed
Vendors
Canonical Debian Pidgin
Products
Ubuntu Linux Debian Linux Pidgin
CVE-2016-2368

pidgin: MXIT g_snprintf Multiple Buffer Overflow Vulnerabilities

Multiple memory corruption vulnerabilities exist in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the server could result in multiple buffer overflows, potentially resulting in code execution or memory disclosure.

CVSS 3.0 · 8.1 High EPSS 4.6% KEV · Not listed
Vendors
Canonical Debian Pidgin
Products
Ubuntu Linux Debian Linux Pidgin