Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2,842

Export CSV
CVE-2014-6051

libvncserver: integer overflow flaw, leading to a heap-based buffer overflow in screen size handling

Integer overflow in the MallocFrameBuffer function in vncviewer.c in LibVNCServer 0.9.9 and earlier allows remote VNC servers to cause a denial of service (crash) and possibly execute arbitrary code via an advertisement for a large screen size, which triggers a heap-based buffer overflow.

CVSS 2.0 · 7.5 High EPSS 8.3% KEV · Not listed
Vendors
Debian Fedoraproject Libvncserver and 2 more
Products
Debian Linux Fedora Libvncserver and 5 more
CVE-2015-5225

Qemu: ui: vnc: heap memory corruption in vnc_refresh_server_surface

Buffer overflow in the vnc_refresh_server_surface function in the VNC display driver in QEMU before 2.4.0.1 allows guest users to cause a denial of service (heap memory corruption and process crash) or possibly execute arbitrary code on the host via unspecified vectors, related to refreshing the server display surface.

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Fedoraproject Qemu Redhat
Products
Fedora Qemu Enterprise Linux and 1 more
CVE-2015-5234

icedtea-web: unexpected permanent authorization of unsigned applets

IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly sanitize applet URLs, which allows remote attackers to inject applets into the .appletTrustSettings configuration file and bypass user approval to execute the applet via a crafted web page, possibly related to line breaks.

CVSS 2.0 · 6.8 Medium EPSS 2.1% KEV · Not listed
Vendors
Fedoraproject Opensuse Redhat
Products
Fedora Opensuse Enterprise Linux and 5 more
CVE-2015-5235

icedtea-web: applet origin spoofing

IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly determine the origin of unsigned applets, which allows remote attackers to bypass the approval process or trick users into approving applet execution via a crafted web page.

CVSS 2.0 · 4.3 Medium EPSS 3.0% KEV · Not listed
Vendors
Fedoraproject Opensuse Redhat
Products
Fedora Opensuse Enterprise Linux and 5 more
CVE-2014-5353

krb5: NULL pointer dereference when using a ticket policy name as a password policy name

The krb5_ldap_get_password_policy_from_dn function in plugins/kdb/ldap/libkdb_ldap/ldap_pwd_policy.c in MIT Kerberos 5 (aka krb5) before 1.13.1, when the KDC uses LDAP, allows remote authenticated users to cause a denial of service (daemon crash) via a successful LDAP query with no results, as demonstrated by using an incorrect object type for a password policy.

CVSS 2.0 · 3.5 Low EPSS 5.0% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 4 more
Products
Ubuntu Linux Debian Linux Fedora and 10 more
CVE-2014-4341

krb5: denial of service flaws when handling padding length longer than the plaintext

MIT Kerberos 5 (aka krb5) before 1.12.2 allows remote attackers to cause a denial of service (buffer over-read and application crash) by injecting invalid tokens into a GSSAPI application session.

CVSS 2.0 · 5.0 Medium EPSS 7.1% KEV · Not listed
Vendors
Debian Fedoraproject Mit and 1 more
Products
Debian Linux Fedora Kerberos 5 and 8 more
CVE-2014-3537

cups: insufficient checking leads to privilege escalation

The web interface in CUPS before 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack on a file in /var/cache/cups/rss/.

CVSS 2.0 · 1.2 Low EPSS < 1% KEV · Not listed
Vendors
Apple Canonical Fedoraproject and 1 more
Products
Cups Ubuntu Linux Fedora and 1 more
CVE-2014-3499

docker: systemd socket activation results in privilege escalation

Docker 1.0.0 uses world-readable and world-writable permissions on the management socket, which allows local users to gain privileges via unspecified vectors.

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Docker Fedoraproject Redhat
Products
Docker Fedora Rhel Extras Other
CVE-2014-3470

openssl: client-side denial of service when using anonymous ECDH

The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h, when an anonymous ECDH cipher suite is used, allows remote attackers to cause a denial of service (NULL pointer dereference and client crash) by triggering a NULL certificate value.

CVSS 2.0 · 4.3 Medium EPSS 85.8% KEV · Not listed
Vendors
Fedoraproject Mariadb Openssl and 3 more
Products
Fedora Mariadb Openssl and 8 more
CVE-2014-2678

kernel: net: rds: dereference of a NULL device in rds_iw_laddr_check()

The rds_iw_laddr_check function in net/rds/iw.c in the Linux kernel through 3.14 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a bind system call for an RDS socket on a system that lacks RDS transports.

CVSS 2.0 · 4.7 Medium EPSS < 1% KEV · Not listed
Vendors
Fedoraproject Linux Oracle and 1 more
Products
Fedora Linux Kernel Linux and 3 more
CVE-2015-5254

ObjectMessage: unsafe deserialization

Apache ActiveMQ 5.x before 5.13.0 does not restrict the classes that can be serialized in the broker, which allows remote attackers to execute arbitrary code via a crafted serialized Java Message Service (JMS) ObjectMessage object.

CVSS 3.0 · 9.8 Critical EPSS 38.2% KEV · Not listed
Vendors
Apache Fedoraproject Redhat
Products
Activemq Fedora Jboss Amq and 2 more
CVE-2015-5295

openstack-heat: Vulnerability in Heat template validation leading to DoS

The template-validate command in OpenStack Orchestration API (Heat) before 2015.1.3 (kilo) and 5.0.x before 5.0.1 (liberty) allows remote authenticated users to cause a denial of service (memory consumption) or determine the existence of local files via the resource type in a template, as demonstrated by file:///dev/zero.

CVSS 3.0 · 5.4 Medium EPSS 2.9% KEV · Not listed
Vendors
Fedoraproject Openstack Oracle and 1 more
Products
Fedora Orchestration Api Solaris and 1 more
CVE-2015-7201

Mozilla: Miscellaneous memory safety hazards (rv:38.5) (MFSA 2015-134)

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

CVSS 2.0 · 10.0 Critical EPSS 6.0% KEV · Not listed
Vendors
Fedoraproject Mozilla Opensuse and 1 more
Products
Fedora Firefox Leap and 2 more
CVE-2015-7205

Mozilla: Underflow through code inspection (MFSA 2015-145)

Integer underflow in the RTPReceiverVideo::ParseRtpPacket function in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 might allow remote attackers to obtain sensitive information, cause a denial of service, or possibly have unspecified other impact by triggering a crafted WebRTC RTP packet.

CVSS 2.0 · 10.0 Critical EPSS 3.2% KEV · Not listed
Vendors
Fedoraproject Mozilla Opensuse and 1 more
Products
Fedora Firefox Leap and 2 more
CVE-2015-7210

Mozilla: Use-after-free in WebRTC when datachannel is used after being destroyed (MFSA 2015-138)

Use-after-free vulnerability in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allows remote attackers to execute arbitrary code by triggering attempted use of a data channel that has been closed by a WebRTC function.

CVSS 2.0 · 7.5 High EPSS 4.3% KEV · Not listed
Vendors
Fedoraproject Mozilla Opensuse and 1 more
Products
Fedora Firefox Leap and 2 more
CVE-2014-0224

openssl: SSL/TLS MITM vulnerability

OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows man-in-the-middle attackers to trigger use of a zero-length master key in certain OpenSSL-to-OpenSSL communications, and consequently hijack sessions or obtain sensitive information, via a crafted TLS handshake, aka the "CCS Injection" vulnerability.

CVSS 3.1 · 7.4 High EPSS 95.3% KEV · Not listed
Vendors
Fedoraproject Filezilla-project Mariadb and 6 more
Products
Fedora Filezilla Server Mariadb and 20 more
CVE-2014-0221

openssl: DoS when sending invalid DTLS handshake

The dtls1_get_message_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service (recursion and client crash) via a DTLS hello message in an invalid DTLS handshake.

CVSS 2.0 · 4.3 Medium EPSS 87.9% KEV · Not listed
Vendors
Fedoraproject Mariadb Openssl and 3 more
Products
Fedora Mariadb Openssl and 10 more
CVE-2014-0198

openssl: SSL_MODE_RELEASE_BUFFERS NULL pointer dereference in do_ssl3_write()

The do_ssl3_write function in s3_pkt.c in OpenSSL 1.x through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, does not properly manage a buffer pointer during certain recursive calls, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors that trigger an alert condition.

CVSS 2.0 · 4.3 Medium EPSS 40.3% KEV · Not listed
Vendors
Debian Fedoraproject Mariadb and 4 more
Products
Debian Linux Fedora Mariadb and 8 more
CVE-2014-0195

openssl: Buffer overflow via DTLS invalid fragment

The dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly validate fragment lengths in DTLS ClientHello messages, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via a long non-initial fragment.

CVSS 2.0 · 6.8 Medium EPSS 100.0% KEV · Not listed
Vendors
Fedoraproject Mariadb Openssl and 2 more
Products
Fedora Mariadb Openssl and 4 more