Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 157

Export CSV
CVE-2015-2733

Mozilla: Use-after-free in workers while using XMLHttpRequest (MFSA 2015-65)

Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 allows remote attackers to execute arbitrary code via vectors involving attachment of an XMLHttpRequest object to a dedicated worker.

CVSS 2.0 · 10.0 Critical EPSS 6.1% KEV · Not listed
Vendors
Mozilla Novell Oracle and 1 more
Products
Firefox Firefox Esr Suse Linux Enterprise Desktop and 3 more
CVE-2015-2735

Mozilla: Vulnerabilities found through code inspection (MFSA 2015-66)

nsZipArchive.cpp in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory locations, which allows remote attackers to have an unspecified impact via a crafted ZIP archive.

CVSS 2.0 · 9.3 Critical EPSS 3.7% KEV · Not listed
Vendors
Canonical Debian Mozilla and 3 more
Products
Ubuntu Linux Debian Linux Firefox and 7 more
CVE-2015-2736

Mozilla: Vulnerabilities found through code inspection (MFSA 2015-66)

The nsZipArchive::BuildFileList function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory locations, which allows remote attackers to have an unspecified impact via a crafted ZIP archive.

CVSS 2.0 · 9.3 Critical EPSS 3.7% KEV · Not listed
Vendors
Canonical Debian Mozilla and 3 more
Products
Ubuntu Linux Debian Linux Firefox and 7 more
CVE-2015-2739

Mozilla: Vulnerabilities found through code inspection (MFSA 2015-66)

The ArrayBufferBuilder::append function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory locations, which has unspecified impact and attack vectors.

CVSS 2.0 · 10.0 Critical EPSS 2.7% KEV · Not listed
Vendors
Canonical Debian Mozilla and 3 more
Products
Ubuntu Linux Debian Linux Firefox and 7 more
CVE-2015-2740

Mozilla: Vulnerabilities found through code inspection (MFSA 2015-66)

Buffer overflow in the nsXMLHttpRequest::AppendToResponseText function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 might allow remote attackers to cause a denial of service or have unspecified other impact via unknown vectors.

CVSS 2.0 · 10.0 Critical EPSS 5.5% KEV · Not listed
Vendors
Canonical Debian Mozilla and 3 more
Products
Ubuntu Linux Debian Linux Firefox and 7 more
CVE-2015-2743

Mozilla: Privilege escalation through internal workers (MFSA 2015-69)

PDF.js in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 enables excessive privileges for internal Workers, which might allow remote attackers to execute arbitrary code by leveraging a Same Origin Policy bypass.

CVSS 2.0 · 7.5 High EPSS 4.7% KEV · Not listed
Vendors
Mozilla Novell Oracle and 1 more
Products
Firefox Firefox Esr Suse Linux Enterprise Desktop and 4 more
CVE-2015-3044

flash-plugin: security bypass leading to information disclosure (APSB15-06)

Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors.

CVSS 2.0 · 5.0 Medium EPSS 9.4% KEV · Not listed
Vendors
Adobe Apple Linux and 4 more
Products
Flash Player Mac Os X Linux Kernel and 10 more
CVE-2015-7566

kernel: Crash on invalid USB device descriptors in visor driver

The clie_5_attach function in drivers/usb/serial/visor.c in the Linux kernel through 4.4.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by inserting a USB device that lacks a bulk-out endpoint.

CVSS 3.0 · 4.6 Medium EPSS 1.8% KEV · Not listed
Vendors
Linux Novell
Products
Linux Kernel Suse Linux Enterprise Debuginfo Suse Linux Enterprise Real Time Extension and 2 more
CVE-2015-7833

kernel: usbvision: crash on invalid USB device descriptors

The usbvision driver in the Linux kernel package 3.10.0-123.20.1.el7 through 3.10.0-229.14.1.el7 in Red Hat Enterprise Linux (RHEL) 7.1 allows physically proximate attackers to cause a denial of service (panic) via a nonzero bInterfaceNumber value in a USB device descriptor.

CVSS 2.0 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Novell Redhat
Products
Suse Linux Enterprise Real Time Extension Enterprise Linux
CVE-2015-8550

xen: paravirtualized drivers incautious about shared memory contents (XSA-155)

Xen, when used on a system providing PV backends, allows local guest OS administrators to cause a denial of service (host OS crash) or gain privileges by writing to memory shared between the frontend and backend, aka a double fetch vulnerability.

CVSS 3.0 · 8.2 High EPSS 1.1% KEV · Not listed
Vendors
Novell Xen
Products
Suse Linux Enterprise Real Time Extension Xen
CVE-2015-8552

xen: Linux pciback missing sanity checks leading to crash (XSA-157)

The PCI backend driver in Xen, when running on an x86 system and using Linux 3.1.x through 4.3.x as the driver domain, allows local guest administrators to generate a continuous stream of WARN messages and cause a denial of service (disk consumption) by leveraging a system with access to a passed-through MSI or MSI-X capable physical PCI device and XEN_PCI_OP_enable_msi operations, aka "Linux pciback missing sanity checks."

CVSS 3.0 · 4.4 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Novell and 1 more
Products
Ubuntu Linux Debian Linux Suse Linux Enterprise Debuginfo and 2 more
CVE-2015-8812

kernel: CXGB3: Logic bug in return code handling prematurely frees key structures causing Use after free or kernel panic.

drivers/infiniband/hw/cxgb3/iwch_cm.c in the Linux kernel before 4.5 does not properly identify error conditions, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via crafted packets.

CVSS 3.1 · 9.8 Critical EPSS 14.5% KEV · Not listed
Vendors
Canonical Linux Novell and 1 more
Products
Ubuntu Linux Linux Kernel Suse Linux Enterprise Real Time Extension and 2 more
CVE-2015-8816

kernel: USB hub invalid memory access in hub_activate()

The hub_activate function in drivers/usb/core/hub.c in the Linux kernel before 4.3.5 does not properly maintain a hub-interface data structure, which allows physically proximate attackers to cause a denial of service (invalid memory access and system crash) or possibly have unspecified other impact by unplugging a USB hub device.

CVSS 3.1 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Linux Novell Suse
Products
Linux Kernel Suse Linux Enterprise Debuginfo Suse Linux Enterprise Desktop and 8 more
CVE-2015-8845

kernel: incorrect restoration of machine specific registers from userspace

The tm_reclaim_thread function in arch/powerpc/kernel/process.c in the Linux kernel before 4.4.1 on powerpc platforms does not ensure that TM suspend mode exists before proceeding with a tm_reclaim call, which allows local users to cause a denial of service (TM Bad Thing exception and panic) via a crafted application.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Linux Novell Redhat and 1 more
Products
Linux Kernel Suse Linux Enterprise Desktop Suse Linux Enterprise Server and 7 more
CVE-2015-8922

libarchive: NULL pointer access in 7z parser

The read_CodersInfo function in archive_read_support_format_7zip.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted 7z file, related to the _7z_folder struct.

CVSS 3.0 · 5.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Canonical Libarchive Novell and 2 more
Products
Ubuntu Linux Libarchive Suse Linux Enterprise Desktop and 4 more