Export limit exceeded: 425871 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 425871 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 425871 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4,351

Export CSV
CVE-2016-4555

squid: SegFault from ESIInclude::Start

client_side_request.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a denial of service (crash) via crafted Edge Side Includes (ESI) responses.

CVSS 3.0 · 7.5 High EPSS 18.2% KEV · Not listed
Vendors
Canonical Oracle Redhat and 1 more
Products
Ubuntu Linux Linux Enterprise Linux and 1 more
CVE-2016-4579

libksba: Out-of-bounds read in _ksba_ber_parse_tl

Libksba before 1.3.4 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via unspecified vectors, related to the "returned length of the object from _ksba_ber_parse_tl."

CVSS 3.0 · 7.5 High EPSS 3.3% KEV · Not listed
Vendors
Canonical Gnupg Opensuse
Products
Ubuntu Linux Libksba Leap
CVE-2016-4454

Qemu: display: vmsvga: out-of-bounds read in vmsvga_fifo_read_raw() routine

The vmsvga_fifo_read_raw function in hw/display/vmware_vga.c in QEMU allows local guest OS administrators to obtain sensitive host memory information or cause a denial of service (QEMU process crash) by changing FIFO registers and issuing a VGA command, which triggers an out-of-bounds read.

CVSS 3.1 · 6.0 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Qemu
Products
Ubuntu Linux Debian Linux Qemu
CVE-2016-4453

Qemu: display: vmsvga: infinite loop in vmsvga_fifo_run() routine

The vmsvga_fifo_run function in hw/display/vmware_vga.c in QEMU allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via a VGA command.

CVSS 3.1 · 4.4 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Qemu
Products
Ubuntu Linux Debian Linux Qemu
CVE-2016-4449

libxml2: Inappropriate fetch of entities content

XML external entity (XXE) vulnerability in the xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.4, when not in validating mode, allows context-dependent attackers to read arbitrary files or cause a denial of service (resource consumption) via unspecified vectors.

CVSS 3.0 · 7.1 High EPSS 1.7% KEV · Not listed
Vendors
Canonical Debian Redhat and 1 more
Products
Ubuntu Linux Debian Linux Enterprise Linux and 2 more
CVE-2016-4450

nginx: NULL pointer dereference while writing client request body

os/unix/ngx_files.c in nginx before 1.10.1 and 1.11.x before 1.11.1 allows remote attackers to cause a denial of service (NULL pointer dereference and worker process crash) via a crafted request, involving writing a client request body to a temporary file.

CVSS 3.1 · 7.5 High EPSS 16.4% KEV · Not listed
Vendors
Canonical Debian F5 and 1 more
Products
Ubuntu Linux Debian Linux Nginx and 1 more
CVE-2016-4476

hostapd: denial of service via crafted WPA/WPA2 passphrase parameter

hostapd 0.6.7 through 2.5 and wpa_supplicant 0.6.7 through 2.5 do not reject \n and \r characters in passphrase parameters, which allows remote attackers to cause a denial of service (daemon outage) via a crafted WPS operation.

CVSS 3.1 · 7.5 High EPSS 2.9% KEV · Not listed
Vendors
Canonical W1.fi
Products
Ubuntu Linux Hostapd Wpa Supplicant
CVE-2013-5704

httpd: bypass of mod_headers rules via chunked requests

The mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass "RequestHeader unset" directives by placing a header in the trailer portion of data sent with chunked transfer coding. NOTE: the vendor states "this is not a security issue in httpd as such."

CVSS 2.0 · 5.0 Medium EPSS 58.0% KEV · Not listed
Vendors
Apache Apple Canonical and 2 more
Products
Http Server Mac Os X Mac Os X Server and 14 more
CVE-2016-4441

Qemu: scsi: esp: OOB write while writing to 's->cmdbuf' in get_cmd

The get_cmd function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller (FSC) support in QEMU does not properly check DMA length, which allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) via unspecified vectors, involving an SCSI command.

CVSS 3.1 · 6.0 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Qemu
Products
Ubuntu Linux Debian Linux Qemu
CVE-2016-4447

libxml2: Heap-based buffer underreads due to xmlParseName

The xmlParseElementDecl function in parser.c in libxml2 before 2.9.4 allows context-dependent attackers to cause a denial of service (heap-based buffer underread and application crash) via a crafted file, involving xmlParseName.

CVSS 3.0 · 7.5 High EPSS 14.0% KEV · Not listed
Vendors
Apple Canonical Debian and 6 more
Products
Iphone Os Itunes Mac Os X and 11 more
CVE-2016-4482

kernel: information leak in devio.c

The proc_connectinfo function in drivers/usb/core/devio.c in the Linux kernel through 4.6 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted USBDEVFS_CONNECTINFO ioctl call.

CVSS 3.0 · 6.2 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Fedoraproject Linux and 1 more
Products
Ubuntu Linux Fedora Linux Kernel and 8 more
CVE-2016-4580

kernel: Information leak in x25 module

The x25_negotiate_facilities function in net/x25/x25_facilities.c in the Linux kernel before 4.5.5 does not properly initialize a certain data structure, which allows attackers to obtain sensitive information from kernel stack memory via an X.25 Call Request.

CVSS 3.0 · 7.5 High EPSS 4.1% KEV · Not listed
Vendors
Canonical Linux
Products
Ubuntu Linux Linux Kernel
CVE-2016-4355

libksba: integer overflow in the BER decoder src/ber-decoder.c (ber_decoder_s)

Multiple integer overflows in ber-decoder.c in Libksba before 1.3.3 allow remote attackers to cause a denial of service (crash) via crafted BER data, which leads to a buffer overflow.

CVSS 3.0 · 7.5 High EPSS 2.1% KEV · Not listed
Vendors
Canonical Gnupg
Products
Ubuntu Linux Libksba
CVE-2016-4354

libksba: integer overflow in the BER decoder src/ber-decoder.c (ber_decoder_s)

ber-decoder.c in Libksba before 1.3.3 uses an incorrect integer data type, which allows remote attackers to cause a denial of service (crash) via crafted BER data, which leads to a buffer overflow.

CVSS 3.0 · 7.5 High EPSS 1.9% KEV · Not listed
Vendors
Canonical Gnupg
Products
Ubuntu Linux Libksba
CVE-2016-4356

libksba: encoding of invalid utf-8 strings in DN decoder src/dn.c (append_quoted, append_atv)

The append_utf8_value function in the DN decoder (dn.c) in Libksba before 1.3.3 allows remote attackers to cause a denial of service (out-of-bounds read) by clearing the high bit of the byte after invalid utf-8 encoded data.

CVSS 3.0 · 7.5 High EPSS 3.3% KEV · Not listed
Vendors
Canonical Gnupg
Products
Ubuntu Linux Libksba
CVE-2016-4324

libreoffice: Dereference of invalid STL iterator on processing RTF file

Use-after-free vulnerability in LibreOffice before 5.1.4 allows remote attackers to execute arbitrary code via a crafted RTF file, related to stylesheet and superscript tokens.

CVSS 3.0 · 7.8 High EPSS 2.8% KEV · Not listed
Vendors
Canonical Debian Libreoffice
Products
Ubuntu Linux Debian Linux Libreoffice
CVE-2016-4054

squid: multiple issues in ESI processing

Buffer overflow in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allows remote attackers to execute arbitrary code via crafted Edge Side Includes (ESI) responses.

CVSS 3.0 · 8.1 High EPSS 77.6% KEV · Not listed
Vendors
Canonical Oracle Redhat and 1 more
Products
Ubuntu Linux Linux Enterprise Linux and 1 more
CVE-2016-4353

libksba: denial of service due to stack overflow in src/ber-decoder.c (push_decoder_state, pop_decoder_state)

ber-decoder.c in Libksba before 1.3.3 does not properly handle decoder stack overflows, which allows remote attackers to cause a denial of service (abort) via crafted BER data.

CVSS 3.0 · 7.5 High EPSS 2.1% KEV · Not listed
Vendors
Canonical Gnupg
Products
Ubuntu Linux Libksba