CVE-2016-4978

Artemis: Deserialization of untrusted input vulnerability

The getObject method of the javax.jms.ObjectMessage class in the (1) JMS Core client, (2) Artemis broker, and (3) Artemis REST component in Apache ActiveMQ Artemis before 1.4.0 might allow remote authenticated users with permission to send messages to the Artemis broker to deserialize arbitrary objects and execute arbitrary code by leveraging gadget classes being present on the Artemis classpath.

CVSS 3.1 · 7.2 High EPSS 6.9% KEV · Not listed

Vendors

Apache Redhat

Products

Artemis Enterprise Linux Server Jboss Enterprise Application Platform

CVE-2022-0492

kernel: cgroups v1 release_agent feature may allow privilege escalation

A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpectedly.

CVSS 3.1 · 7.8 High EPSS 5.5% KEV · Listed

Vendors

Canonical Debian Fedoraproject and 3 more

Products

Ubuntu Linux Debian Linux Fedora and 36 more

CVE-2018-3639

hw: cpu: speculative store bypass

Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.

CVSS 3.1 · 5.5 Medium EPSS 60.4% KEV · Not listed

Vendors

Arm Canonical Debian and 9 more

Products

Cortex-a Ubuntu Linux Debian Linux and 327 more

CVE-2018-13785

libpng: Integer overflow and resultant divide-by-zero in pngrutil.c:png_check_chunk_length() allows for denial of service

In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an integer overflow and resultant divide-by-zero while processing a crafted PNG file, leading to a denial of service.

CVSS 3.1 · 6.5 Medium EPSS 4.4% KEV · Not listed

Vendors

Canonical Libpng Oracle and 1 more

Products

Ubuntu Linux Libpng Jdk and 7 more

CVE-2016-1908

openssh: possible fallback from untrusted to trusted X11 forwarding

The client in OpenSSH before 7.2 mishandles failed cookie generation for untrusted X11 forwarding and relies on the local X11 server for access-control decisions, which allows remote X11 clients to trigger a fallback and obtain trusted X11 forwarding privileges by leveraging configuration issues on this X11 server, as demonstrated by lack of the SECURITY extension on this X11 server.

CVSS 3.1 · 9.8 Critical EPSS 13.7% KEV · Not listed

Vendors

Debian Openbsd Oracle and 1 more

Products

Debian Linux Openssh Linux and 7 more

CVE-2019-11135

hw: TSX Transaction Asynchronous Abort (TAA)

TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access.

CVSS 3.1 · 6.5 Medium EPSS 3.1% KEV · Not listed

Vendors

Canonical Debian Fedoraproject and 6 more

Products

Ubuntu Linux Debian Linux Fedora and 309 more

CVE-2017-15906

openssh: Improper write operations in readonly mode allow for zero-length file creation

The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files.

CVSS 3.1 · 5.3 Medium EPSS 3.4% KEV · Not listed

Vendors

Debian Netapp Openbsd and 2 more

Products

Debian Linux Active Iq Unified Manager Cloud Backup and 20 more

CVE-2014-3566

SSL/TLS: Padding Oracle On Downgraded Legacy Encryption attack

The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue.

CVSS 3.1 · 3.4 Low EPSS 100.0% KEV · Not listed

Vendors

Apple Debian Fedoraproject and 8 more

Products

Mac Os X Debian Linux Fedora and 25 more

CVE-2015-2808

SSL/TLS: "Invariance Weakness" vulnerability in RC4 stream cipher

The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic that occasionally relies on keys affected by the Invariance Weakness, and then using a brute-force approach involving LSB values, aka the "Bar Mitzvah" issue.

CVSS 3.1 · 3.7 Low EPSS 73.9% KEV · Not listed

Vendors

Canonical Debian Fujitsu and 6 more

Products

Ubuntu Linux Debian Linux Sparc Enterprise M3000 and 99 more

CVE-2015-0192

JDK: unspecified Java sandbox restrictions bypass

Unspecified vulnerability in IBM Java 8 before SR1, 7 R1 before SR2 FP11, 7 before SR9, 6 R1 before SR8 FP4, 6 before SR16 FP4, and 5.0 before SR16 FP10 allows remote attackers to gain privileges via unknown vectors related to the Java Virtual Machine.

CVSS 3.1 · 9.8 Critical EPSS 4.1% KEV · Not listed

Vendors

Ibm Redhat Suse

Products

Java Enterprise Linux Desktop Enterprise Linux Server and 7 more

CVE-2009-2848

kernel: execve: must clear current->clear_child_tid

The execve function in the Linux kernel, possibly 2.6.30-rc6 and earlier, does not properly clear the current->clear_child_tid pointer, which allows local users to cause a denial of service (memory corruption) or possibly gain privileges via a clone system call with CLONE_CHILD_SETTID or CLONE_CHILD_CLEARTID enabled, which is not properly handled during thread creation and exit.

CVSS 2.0 · 5.9 Medium EPSS < 1% KEV · Not listed

Vendors

Canonical Fedoraproject Linux and 5 more

Products

Ubuntu Linux Fedora Linux Kernel and 12 more

CVE-2007-3304

httpd scoreboard lack of PID protection

Apache httpd 1.3.37, 2.0.59, and 2.2.4 with the Prefork MPM module, allows local users to cause a denial of service by modifying the worker_score and process_score arrays to reference an arbitrary process ID, which is sent a SIGUSR1 signal from the master process, aka "SIGUSR1 killer."

CVSS 2.0 · 4.7 Medium EPSS 3.3% KEV · Not listed

Vendors

Apache Canonical Fedoraproject and 1 more

Products

Http Server Ubuntu Linux Fedora and 8 more

CVE-2009-2698

kernel: udp socket NULL ptr dereference

The udp_sendmsg function in the UDP implementation in (1) net/ipv4/udp.c and (2) net/ipv6/udp.c in the Linux kernel before 2.6.19 allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via vectors involving the MSG_MORE flag and a UDP socket.

CVSS 3.1 · 7.8 High EPSS 7.1% KEV · Not listed

Vendors

Canonical Fedoraproject Linux and 3 more

Products

Ubuntu Linux Fedora Linux Kernel and 11 more

CVE-2009-2692

kernel: uninit op in SOCKOPS_WRAP() leads to privesc

The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socket operations in proto_ops structures, which allows local users to trigger a NULL pointer dereference and gain privileges by using mmap to map page zero, placing arbitrary code on this page, and then invoking an unavailable operation, as demonstrated by the sendpage operation (sock_sendpage function) on a PF_PPPOX socket.

CVSS 3.1 · 7.8 High EPSS 14.6% KEV · Not listed

Vendors

Debian Linux Redhat and 1 more

Products

Debian Linux Linux Kernel Enterprise Linux and 8 more

CVE-2007-1864

php libxmlrpc library overflow

Buffer overflow in the bundled libxmlrpc library in PHP before 4.4.7, and 5.x before 5.2.2, has unknown impact and remote attack vectors.

CVSS 2.0 · 7.5 High EPSS 2.9% KEV · Not listed

Vendors

Canonical Debian Php and 1 more

Products

Ubuntu Linux Debian Linux Php and 4 more

CVE-2009-1891

httpd: possible temporary DoS (CPU consumption) in mod_deflate

The mod_deflate module in Apache httpd 2.2.11 and earlier compresses large files until completion even after the associated network connection is closed, which allows remote attackers to cause a denial of service (CPU consumption).

CVSS 2.0 · 7.1 High EPSS 17.1% KEV · Not listed

Vendors

Apache Canonical Debian and 2 more

Products

Http Server Ubuntu Linux Debian Linux and 9 more

CVE-2009-1890

httpd: mod_proxy reverse proxy DoS (infinite loop)

The stream_reqbody_cl function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP Server before 2.3.3, when a reverse proxy is configured, does not properly handle an amount of streamed data that exceeds the Content-Length value, which allows remote attackers to cause a denial of service (CPU consumption) via crafted requests.

CVSS 2.0 · 7.1 High EPSS 16.2% KEV · Not listed

Vendors

Apache Canonical Debian and 2 more

Products

Http Server Ubuntu Linux Debian Linux and 8 more

CVE-2007-1349

mod_perl PerlRun denial of service

PerlRun.pm in Apache mod_perl before 1.30, and RegistryCooker.pm in mod_perl 2.x, does not properly escape PATH_INFO before use in a regular expression, which allows remote attackers to cause a denial of service (resource consumption) via a crafted URI.

CVSS 2.0 · 5.0 Medium EPSS 10.4% KEV · Not listed

Vendors

Apache Canonical Redhat

Products

Mod Perl Ubuntu Linux Certificate System and 9 more

CVE-2009-1837

Firefox Race condition while accessing the private data of a NPObject JS wrapper class object

Race condition in the NPObjWrapper_NewResolve function in modules/plugin/base/src/nsJSNPRuntime.cpp in xul.dll in Mozilla Firefox 3 before 3.0.11 might allow remote attackers to execute arbitrary code via a page transition during Java applet loading, related to a use-after-free vulnerability for memory associated with a destroyed Java object.

CVSS 3.1 · 7.5 High EPSS 4.3% KEV · Not listed

Vendors

Debian Fedoraproject Mozilla and 1 more

Products

Debian Linux Fedora Firefox and 6 more

CVE-2009-0846

krb5: ASN.1 decoder can free uninitialized pointer when decoding an invalid encoding (MITKRB5-SA-2009-002)

The asn1_decode_generaltime function in lib/krb5/asn.1/asn1_decode.c in the ASN.1 GeneralizedTime decoder in MIT Kerberos 5 (aka krb5) before 1.6.4 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via vectors involving an invalid DER encoding that triggers a free of an uninitialized pointer.

CVSS 2.0 · 10.0 Critical EPSS 8.9% KEV · Not listed

Vendors

Apple Canonical Fedoraproject and 2 more

Products

Mac Os X Ubuntu Linux Fedora and 6 more