Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4,194

Export CSV
CVE-2014-4608

kernel: lzo1x_decompress_safe() integer overflow

Multiple integer overflows in the lzo1x_decompress_safe function in lib/lzo/lzo1x_decompress_safe.c in the LZO decompressor in the Linux kernel before 3.15.2 allow context-dependent attackers to cause a denial of service (memory corruption) via a crafted Literal Run. NOTE: the author of the LZO algorithms says "the Linux kernel is *not* affected; media hype.

CVSS 3.1 · 7.3 High EPSS 5.4% KEV · Not listed
Vendors
Canonical Linux Opensuse and 2 more
Products
Ubuntu Linux Linux Kernel Opensuse and 4 more
CVE-2016-1838

libxml2: Heap-based buffer overread in xmlPArserPrintFileContextInternal

The xmlPArserPrintFileContextInternal function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.

CVSS 3.0 · 5.5 Medium EPSS 7.0% KEV · Not listed
Vendors
Apple Canonical Debian and 3 more
Products
Iphone Os Mac Os X Tvos and 13 more
CVE-2016-1947

Mozilla: Application Reputation service disabled in Firefox 43 (MFSA 2016-11)

Mozilla Firefox 43.x mishandles attempts to connect to the Application Reputation service, which makes it easier for remote attackers to trigger an unintended download by leveraging the absence of reputation data.

CVSS 3.0 · 4.7 Medium EPSS 1.9% KEV · Not listed
Vendors
Canonical Mozilla Opensuse
Products
Ubuntu Linux Firefox Leap and 1 more
CVE-2016-2112

samba: Missing downgrade detection

The bundled LDAP client library in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recognize the "client ldap sasl wrapping" setting, which allows man-in-the-middle attackers to perform LDAP protocol-downgrade attacks by modifying the client-server data stream.

CVSS 3.0 · 5.9 Medium EPSS 9.4% KEV · Not listed
Vendors
Canonical Redhat Samba
Products
Ubuntu Linux Enterprise Linux Rhel Aus and 4 more
CVE-2016-3501

mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU July 2016)

Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote authenticated users to affect availability via vectors related to Server: Optimizer.

CVSS 3.0 · 6.5 Medium EPSS 3.8% KEV · Not listed
Vendors
Canonical Oracle Redhat
Products
Ubuntu Linux Mysql Rhel Software Collections
CVE-2014-4508

Kernel: x86_32: BUG in syscall auditing

arch/x86/kernel/entry_32.S in the Linux kernel through 3.15.1 on 32-bit x86 platforms, when syscall auditing is enabled and the sep CPU feature flag is set, allows local users to cause a denial of service (OOPS and system crash) via an invalid syscall number, as demonstrated by number 1000.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Linux Redhat
Products
Ubuntu Linux Linux Kernel Rhel Els
CVE-2014-4171

Kernel: mm/shmem: denial of service

mm/shmem.c in the Linux kernel through 3.15.1 does not properly implement the interaction between range notification and hole punching, which allows local users to cause a denial of service (i_mutex hold) by using the mmap system call to access a hole, as demonstrated by interfering with intended shmem activity by blocking completion of (1) an MADV_REMOVE madvise call or (2) an FALLOC_FL_PUNCH_HOLE fallocate call.

CVSS 2.0 · 4.7 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Linux Redhat
Products
Ubuntu Linux Linux Kernel Enterprise Linux and 1 more
CVE-2014-4167

openstack-neutron: L3-agent denial of service through IPv6 subnet

The L3-agent in OpenStack Neutron before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2 allows remote authenticated users to cause a denial of service (IPv4 address attachment outage) by attaching an IPv6 private subnet to a L3 router.

CVSS 2.0 · 3.5 Low EPSS 1.7% KEV · Not listed
Vendors
Canonical Openstack Redhat
Products
Ubuntu Linux Neutron Openstack
CVE-2014-4027

Kernel: target/rd: imformation leakage

The rd_build_device_space function in drivers/target/target_core_rd.c in the Linux kernel before 3.14 does not properly initialize a certain data structure, which allows local users to obtain sensitive information from ramdisk_mcp memory by leveraging access to a SCSI initiator.

CVSS 2.0 · 2.3 Low EPSS < 1% KEV · Not listed
Vendors
Canonical F5 Linux and 2 more
Products
Ubuntu Linux Big-ip Access Policy Manager Big-ip Advanced Firewall Manager and 24 more
CVE-2014-3925

sos: does not indicate data sent is potentially sensitive on Red Hat Enterprise Linux 5

sosreport in Red Hat sos 1.7 and earlier on Red Hat Enterprise Linux (RHEL) 5 produces an archive with an fstab file potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwords, which might allow remote attackers to obtain sensitive information by leveraging access to a technical-support data stream.

CVSS 2.0 · 5.0 Medium EPSS 2.2% KEV · Not listed
Vendors
Canonical Redhat
Products
Ubuntu Linux Enterprise Linux Sos
CVE-2014-3730

Django: insufficient URL validation could lead to redirects

The django.util.http.is_safe_url function in Django 1.4 before 1.4.13, 1.5 before 1.5.8, 1.6 before 1.6.5, and 1.7 before 1.7b4 does not properly validate URLs, which allows remote attackers to conduct open redirect attacks via a malformed URL, as demonstrated by "http:\\\djangoproject.com."

CVSS 2.0 · 4.3 Medium EPSS 3.1% KEV · Not listed
Vendors
Canonical Debian Djangoproject and 1 more
Products
Ubuntu Linux Debian Linux Django and 1 more
CVE-2014-3710

file: out-of-bounds read in elf note headers

The donote function in readelf.c in file through 5.20, as used in the Fileinfo component in PHP 5.4.34, does not ensure that sufficient note headers are present, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted ELF file.

CVSS 2.0 · 5.0 Medium EPSS 14.0% KEV · Not listed
Vendors
Canonical Debian Php and 1 more
Products
Ubuntu Linux Debian Linux Php and 2 more
CVE-2014-3707

curl: incorrect handle duplication after COPYPOSTFIELDS

The curl_easy_duphandle function in libcurl 7.17.1 through 7.38.0, when running with the CURLOPT_COPYPOSTFIELDS option, does not properly copy HTTP POST data for an easy handle, which triggers an out-of-bounds read that allows remote web servers to read sensitive memory information.

CVSS 2.0 · 4.3 Medium EPSS 5.1% KEV · Not listed
Vendors
Apple Canonical Debian and 4 more
Products
Mac Os X Ubuntu Linux Debian Linux and 4 more
CVE-2016-1703

chromium-browser: various fixes from internal audits

Multiple unspecified vulnerabilities in Google Chrome before 51.0.2704.79 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.

CVSS 3.0 · 8.8 High EPSS 1.2% KEV · Not listed
Vendors
Canonical Debian Google and 3 more
Products
Ubuntu Linux Debian Linux Chrome and 7 more
CVE-2016-1833

libxml2: Heap-based buffer overread in htmlCurrentChar

The htmlCurrentChar function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.

CVSS 3.0 · 5.5 Medium EPSS 2.6% KEV · Not listed
Vendors
Apple Canonical Debian and 3 more
Products
Iphone Os Mac Os X Tvos and 13 more
CVE-2014-3694

pidgin: SSL/TLS plug-ins failed to check Basic Constraints

The (1) bundled GnuTLS SSL/TLS plugin and the (2) bundled OpenSSL SSL/TLS plugin in libpurple in Pidgin before 2.10.10 do not properly consider the Basic Constraints extension during verification of X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

CVSS 3.0 · 3.1 Low EPSS 2.3% KEV · Not listed
Vendors
Canonical Debian Opensuse and 2 more
Products
Ubuntu Linux Debian Linux Opensuse and 2 more
CVE-2014-3693

libreoffice: Use-After-Free in socket manager of Impress Remote

Use-after-free vulnerability in the socket manager of Impress Remote in LibreOffice 4.x before 4.2.7 and 4.3.x before 4.3.3 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted request to TCP port 1599.

CVSS 2.0 · 7.5 High EPSS 5.1% KEV · Not listed
Vendors
Canonical Libreoffice Opensuse and 1 more
Products
Ubuntu Linux Libreoffice Opensuse and 4 more
CVE-2016-1697

chromium-browser: cross-origin bypass in blink

The FrameLoader::startLoad function in WebKit/Source/core/loader/FrameLoader.cpp in Blink, as used in Google Chrome before 51.0.2704.79, does not prevent frame navigations during DocumentLoader detach operations, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code.

CVSS 3.0 · 8.8 High EPSS 1.8% KEV · Not listed
Vendors
Canonical Debian Google and 3 more
Products
Ubuntu Linux Debian Linux Chrome and 7 more
CVE-2014-3690

kernel: kvm: vmx: invalid host cr4 handling across vm entries

arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 3.17.2 on Intel processors does not ensure that the value in the CR4 control register remains the same after a VM entry, which allows host OS users to kill arbitrary processes or cause a denial of service (system disruption) by leveraging /dev/kvm access, as demonstrated by PR_SET_TSC prctl calls within a modified copy of QEMU.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Linux and 4 more
Products
Ubuntu Linux Debian Linux Linux Kernel and 8 more