Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2,030

Export CSV
CVE-2012-0867

postgresql: MITM due improper x509_v3 CN validation during certificate verification

PostgreSQL 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 truncates the common name to only 32 characters when verifying SSL certificates, which allows remote attackers to spoof connections when the host name is exactly 32 characters.

CVSS 2.0 · 4.3 Medium EPSS 2.3% KEV · Not listed
Vendors
Debian Opensuse Project Postgresql and 1 more
Products
Debian Linux Opensuse Postgresql and 8 more
CVE-2012-0260

ImageMagick: excessive CPU use DoS by processing JPEG images with crafted restart markers

The JPEGWarningHandler function in coders/jpeg.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service (memory consumption) via a JPEG image with a crafted sequence of restart markers.

CVSS 3.1 · 6.5 Medium EPSS 2.3% KEV · Not listed
Vendors
Canonical Debian Imagemagick and 2 more
Products
Ubuntu Linux Debian Linux Imagemagick and 9 more
CVE-2014-0001

mysql: command-line tool buffer overflow via long server version string

Buffer overflow in client/mysql.cc in Oracle MySQL and MariaDB before 5.5.35 allows remote database servers to cause a denial of service (crash) and possibly execute arbitrary code via a long server version string.

CVSS 2.0 · 7.5 High EPSS 6.4% KEV · Not listed
Vendors
Mariadb Oracle Redhat
Products
Mariadb Mysql Enterprise Linux and 4 more
CVE-2013-6425

pixman: integer underflow when handling trapezoids

Integer underflow in the pixman_trapezoid_valid macro in pixman.h in Pixman before 0.32.0, as used in X.Org server and cairo, allows context-dependent attackers to cause a denial of service (crash) via a negative bottom value.

CVSS 2.0 · 5.0 Medium EPSS 2.9% KEV · Not listed
Vendors
Canonical Debian Opensuse and 2 more
Products
Ubuntu Linux Debian Linux Opensuse and 8 more
CVE-2013-5908

mysql: unspecified vulnerability related to Error Handling DoS (CPU Jan 2014)

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.72 and earlier, 5.5.34 and earlier, and 5.6.14 and earlier allows remote attackers to affect availability via unknown vectors related to Error Handling.

CVSS 2.0 · 2.6 Low EPSS 4.7% KEV · Not listed
Vendors
Canonical Debian Mariadb and 2 more
Products
Ubuntu Linux Debian Linux Mariadb and 9 more
CVE-2012-0876

expat: hash table collisions CPU usage DoS

The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via an XML file with many identifiers with the same value.

CVSS 2.0 · 4.3 Medium EPSS 5.7% KEV · Not listed
Vendors
Canonical Debian Libexpat Project and 3 more
Products
Ubuntu Linux Debian Linux Libexpat and 12 more
CVE-2013-5906

JDK: unspecified vulnerability fixed in 5.0u71, 6u71 and 7u51 (Install)

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Install, a different vulnerability than CVE-2013-5905.

CVSS 2.0 · 5.1 Medium EPSS 6.3% KEV · Not listed
Vendors
Hp Oracle Redhat
Products
Hp-ux Jdk Jre and 10 more
CVE-2013-5904

JDK: unspecified vulnerability fixed in 7u51 (Deployment)

Unspecified vulnerability in Oracle Java SE 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

CVSS 2.0 · 6.8 Medium EPSS 4.9% KEV · Not listed
Vendors
Hp Oracle Redhat
Products
Hp-ux Jdk Jre and 8 more
CVE-2012-0574

mysql: unspecified DoS vulnerability related to Server (CPU Jan 2013)

Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.5.28 and earlier, allows remote authenticated users to affect availability via unknown vectors.

CVSS 2.0 · 4.0 Medium EPSS 2.8% KEV · Not listed
Vendors
Canonical Mariadb Oracle and 1 more
Products
Ubuntu Linux Mariadb Mysql and 5 more
CVE-2013-5895

JDK: multiple unspecified vulnerabilities fixed in 7u51 (JavaFX)

Unspecified vulnerability in Oracle Java SE 7u45 and JavaFX 2.2.45 allows remote attackers to affect confidentiality via unknown vectors related to JavaFX.

CVSS 2.0 · 5.0 Medium EPSS 5.7% KEV · Not listed
Vendors
Hp Oracle Redhat
Products
Hp-ux Jdk Jre and 9 more
CVE-2013-5891

mysql: unspecified vulnerability related to Partition DoS (CPU Jan 2014)

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.33 and earlier and 5.6.13 and earlier allows remote authenticated users to affect availability via unknown vectors related to Partition.

CVSS 2.0 · 4.0 Medium EPSS 3.8% KEV · Not listed
Vendors
Canonical Debian Mariadb and 2 more
Products
Ubuntu Linux Debian Linux Mariadb and 6 more
CVE-2012-0572

mysql: unspecified DoS vulnerability related to InnoDB (CPU Jan 2013)

Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier and 5.5.28 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB.

CVSS 2.0 · 4.0 Medium EPSS 2.6% KEV · Not listed
Vendors
Canonical Mariadb Oracle and 1 more
Products
Ubuntu Linux Mariadb Mysql and 5 more
CVE-2013-5870

JDK: multiple unspecified vulnerabilities fixed in 7u51 (JavaFX)

Unspecified vulnerability in Oracle Java SE 7u45 and JavaFX 2.2.45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX.

CVSS 2.0 · 6.8 Medium EPSS 4.8% KEV · Not listed
Vendors
Hp Oracle Redhat
Products
Hp-ux Jdk Jre and 9 more
CVE-2013-5843

JDK: unspecified vulnerability fixed in 7u45 (2D)

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JavaFX 2.2.40 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.

CVSS 2.0 · 10.0 Critical EPSS 6.1% KEV · Not listed
Vendors
Oracle Redhat
Products
Javafx Jdk Jre and 8 more
CVE-2013-5842

OpenJDK: ObjectInputStream/ObjectOutputStream missing checks (Libraries, 8014987)

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2013-5850.

CVSS 2.0 · 10.0 Critical EPSS 17.6% KEV · Not listed
Vendors
Canonical Oracle Redhat
Products
Ubuntu Linux Jdk Jre and 9 more
CVE-2013-5830

OpenJDK: checkPackageAccess missing security check (Libraries, 8017291)

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.

CVSS 2.0 · 10.0 Critical EPSS 7.2% KEV · Not listed
Vendors
Canonical Oracle Redhat
Products
Ubuntu Linux Jdk Jre and 10 more
CVE-2012-0540

mysql: unspecified vulnerability related to GIS extension DoS (CPU Jul 2012)

Unspecified vulnerability in Oracle MySQL Server 5.1.62 and earlier and 5.5.23 and earlier allows remote authenticated users to affect availability, related to GIS Extension.

CVSS 2.0 · 4.0 Medium EPSS 3.7% KEV · Not listed
Vendors
Mariadb Oracle Redhat
Products
Mariadb Mysql Enterprise Linux and 4 more
CVE-2013-5829

OpenJDK: Java2d Disposer security bypass (2D, 8017287)

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-5809.

CVSS 2.0 · 10.0 Critical EPSS 7.2% KEV · Not listed
Vendors
Canonical Oracle Redhat
Products
Ubuntu Linux Jdk Jre and 9 more
CVE-2013-5807

mysql: unspecified flaw related to Replication (CPU October 2013)

Unspecified vulnerability in Oracle MySQL Server 5.5.x through 5.5.32 and 5.6.x through 5.6.12 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Replication.

CVSS 2.0 · 4.9 Medium EPSS 2.2% KEV · Not listed
Vendors
Canonical Debian Mariadb and 2 more
Products
Ubuntu Linux Debian Linux Mariadb and 6 more
CVE-2012-0248

ImageMagick: invalid validation of images denial of service

ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (infinite loop and hang) via a crafted image whose IFD contains IOP tags that all reference the beginning of the IDF.

CVSS 3.1 · 5.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Canonical Debian Imagemagick and 1 more
Products
Ubuntu Linux Debian Linux Imagemagick and 8 more