Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4,351

Export CSV
CVE-2014-0461

OpenJDK: Better ScriptEngineManager ScriptEngine management (Libraries, 8036794)

Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.

CVSS 2.0 · 9.3 Critical EPSS 6.0% KEV · Not listed
Vendors
Canonical Debian Ibm and 3 more
Products
Ubuntu Linux Debian Linux Forms Viewer and 7 more
CVE-2014-0460

OpenJDK: missing randomization of JNDI DNS client query IDs (JNDI, 8030731)

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via vectors related to JNDI.

CVSS 2.0 · 5.8 Medium EPSS 4.3% KEV · Not listed
Vendors
Canonical Debian Juniper and 2 more
Products
Ubuntu Linux Debian Linux Junos Space and 7 more
CVE-2014-0458

OpenJDK: Activation framework default command map caching (JAX-WS, 8025152)

Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerability than CVE-2014-0452 and CVE-2014-2423.

CVSS 2.0 · 7.5 High EPSS 5.1% KEV · Not listed
Vendors
Canonical Debian Oracle and 1 more
Products
Ubuntu Linux Debian Linux Jdk and 5 more
CVE-2014-0457

OpenJDK: ServiceLoader Exception handling security bypass (Libraries, 8031394)

Unspecified vulnerability in Oracle Java SE 5.0u61, SE 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.

CVSS 2.0 · 10.0 Critical EPSS 6.8% KEV · Not listed
Vendors
Canonical Debian Ibm and 4 more
Products
Ubuntu Linux Debian Linux Forms Viewer and 9 more
CVE-2014-0456

OpenJDK: System.arraycopy() element race condition (Hotspot, 8029858)

Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

CVSS 2.0 · 10.0 Critical EPSS 6.8% KEV · Not listed
Vendors
Canonical Debian Ibm and 4 more
Products
Ubuntu Linux Debian Linux Forms Viewer and 8 more
CVE-2016-4476

hostapd: denial of service via crafted WPA/WPA2 passphrase parameter

hostapd 0.6.7 through 2.5 and wpa_supplicant 0.6.7 through 2.5 do not reject \n and \r characters in passphrase parameters, which allows remote attackers to cause a denial of service (daemon outage) via a crafted WPS operation.

CVSS 3.1 · 7.5 High EPSS 2.9% KEV · Not listed
Vendors
Canonical W1.fi
Products
Ubuntu Linux Hostapd Wpa Supplicant
CVE-2016-4555

squid: SegFault from ESIInclude::Start

client_side_request.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a denial of service (crash) via crafted Edge Side Includes (ESI) responses.

CVSS 3.0 · 7.5 High EPSS 18.2% KEV · Not listed
Vendors
Canonical Oracle Redhat and 1 more
Products
Ubuntu Linux Linux Enterprise Linux and 1 more
CVE-2014-0455

OpenJDK: MethodHandle variable argument lists handling (Libraries, 8029844)

Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-0432 and CVE-2014-2402.

CVSS 2.0 · 9.3 Critical EPSS 5.5% KEV · Not listed
Vendors
Canonical Ibm Microsoft and 2 more
Products
Ubuntu Linux Forms Viewer Windows and 5 more
CVE-2014-0454

OpenJDK: Prevent SIGNATURE_PRIMITIVE_SET from being modified (Security, 8029745)

Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Security.

CVSS 2.0 · 7.5 High EPSS 4.7% KEV · Not listed
Vendors
Canonical Ibm Microsoft and 2 more
Products
Ubuntu Linux Forms Viewer Windows and 5 more
CVE-2011-4600

libvirt: unintended firewall port exposure after restarting libvirtd when defining a bridged forward-mode network

The networkReloadIptablesRules function in network/bridge_driver.c in libvirt before 0.9.9 does not properly handle firewall rules on bridge networks when libvirtd is restarted, which might allow remote attackers to bypass intended access restrictions via a (1) DNS or (2) DHCP query.

CVSS 3.0 · 5.9 Medium EPSS 1.8% KEV · Not listed
Vendors
Canonical Redhat
Products
Ubuntu Linux Libvirt Rhel Eus
CVE-2014-0453

OpenJDK: RSA unpadding timing issues (Security, 8027766)

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Security.

CVSS 2.0 · 4.0 Medium EPSS 5.0% KEV · Not listed
Vendors
Canonical Debian Ibm and 4 more
Products
Ubuntu Linux Debian Linux Forms Viewer and 9 more
CVE-2014-0452

OpenJDK: incorrect caching of data initialized via TCCL (JAXWS, 8026801)

Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerability than CVE-2014-0458 and CVE-2014-2423.

CVSS 2.0 · 7.5 High EPSS 5.1% KEV · Not listed
Vendors
Canonical Debian Oracle and 1 more
Products
Ubuntu Linux Debian Linux Jdk and 5 more
CVE-2016-4450

nginx: NULL pointer dereference while writing client request body

os/unix/ngx_files.c in nginx before 1.10.1 and 1.11.x before 1.11.1 allows remote attackers to cause a denial of service (NULL pointer dereference and worker process crash) via a crafted request, involving writing a client request body to a temporary file.

CVSS 3.1 · 7.5 High EPSS 16.4% KEV · Not listed
Vendors
Canonical Debian F5 and 1 more
Products
Ubuntu Linux Debian Linux Nginx and 1 more
CVE-2014-0451

OpenJDK: AWT incorrect FlavorMap seperation (AWT, 8026797)

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT, a different vulnerability than CVE-2014-2412.

CVSS 2.0 · 7.5 High EPSS 5.1% KEV · Not listed
Vendors
Canonical Debian Oracle and 1 more
Products
Ubuntu Linux Debian Linux Jdk and 5 more
CVE-2014-0446

OpenJDK: Protect logger handlers (Libraries, 8029740)

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.

CVSS 2.0 · 7.5 High EPSS 5.1% KEV · Not listed
Vendors
Canonical Debian Oracle and 1 more
Products
Ubuntu Linux Debian Linux Jdk and 5 more
CVE-2014-0429

OpenJDK: Incorrect mlib/raster image validation (2D, 8027841)

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.

CVSS 2.0 · 10.0 Critical EPSS 7.4% KEV · Not listed
Vendors
Canonical Debian Ibm and 4 more
Products
Ubuntu Linux Debian Linux Forms Viewer and 9 more
CVE-2016-4447

libxml2: Heap-based buffer underreads due to xmlParseName

The xmlParseElementDecl function in parser.c in libxml2 before 2.9.4 allows context-dependent attackers to cause a denial of service (heap-based buffer underread and application crash) via a crafted file, involving xmlParseName.

CVSS 3.0 · 7.5 High EPSS 14.0% KEV · Not listed
Vendors
Apple Canonical Debian and 6 more
Products
Iphone Os Itunes Mac Os X and 11 more
CVE-2016-4449

libxml2: Inappropriate fetch of entities content

XML external entity (XXE) vulnerability in the xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.4, when not in validating mode, allows context-dependent attackers to read arbitrary files or cause a denial of service (resource consumption) via unspecified vectors.

CVSS 3.0 · 7.1 High EPSS 1.7% KEV · Not listed
Vendors
Canonical Debian Redhat and 1 more
Products
Ubuntu Linux Debian Linux Enterprise Linux and 2 more
CVE-2016-4453

Qemu: display: vmsvga: infinite loop in vmsvga_fifo_run() routine

The vmsvga_fifo_run function in hw/display/vmware_vga.c in QEMU allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via a VGA command.

CVSS 3.1 · 4.4 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Qemu
Products
Ubuntu Linux Debian Linux Qemu
CVE-2016-4429

glibc: libtirpc: stack (frame) overflow in Sun RPC clntudp_call()

Stack-based buffer overflow in the clntudp_call function in sunrpc/clnt_udp.c in the GNU C Library (aka glibc or libc6) allows remote servers to cause a denial of service (crash) or possibly unspecified other impact via a flood of crafted ICMP and UDP packets.

CVSS 3.1 · 5.9 Medium EPSS 4.6% KEV · Not listed
Vendors
Canonical Gnu Opensuse
Products
Ubuntu Linux Glibc Leap and 1 more