Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4,218

Export CSV
CVE-2015-6855

Qemu: ide: divide by zero issue

hw/ide/core.c in QEMU does not properly restrict the commands accepted by an ATAPI device, which allows guest users to cause a denial of service or possibly have unspecified other impact via certain IDE commands, as demonstrated by a WIN_READ_NATIVE_MAX command to an empty drive, which triggers a divide-by-zero error and instance crash.

CVSS 3.1 · 7.5 High EPSS 3.5% KEV · Not listed
Vendors
Arista Canonical Debian and 3 more
Products
Eos Ubuntu Linux Debian Linux and 4 more
CVE-2015-6937

kernel: net: rds: NULL pointer dereference in net/rds/connection.c

The __rds_conn_create function in net/rds/connection.c in the Linux kernel through 4.2.3 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by using a socket that was not properly bound.

CVSS 2.0 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Linux
Products
Ubuntu Linux Debian Linux Linux Kernel
CVE-2016-2825

Mozilla: Partial same-origin-policy through setting location.host through data: URI (MFSA 2016-54)

Mozilla Firefox before 47.0 allows remote attackers to bypass the Same Origin Policy and modify the location.host property via an invalid data: URL.

CVSS 3.0 · 6.5 Medium EPSS 1.7% KEV · Not listed
Vendors
Canonical Mozilla Opensuse
Products
Ubuntu Linux Firefox Leap and 1 more
CVE-2016-2833

Mozilla: Java applets bypass CSP protections (MFSA 2016-60)

Mozilla Firefox before 47.0 ignores Content Security Policy (CSP) directives for cross-domain Java applets, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted applet.

CVSS 3.0 · 6.1 Medium EPSS 1.4% KEV · Not listed
Vendors
Canonical Mozilla Opensuse
Products
Ubuntu Linux Firefox Leap and 1 more
CVE-2015-5199

libvdpau directory traversal in dlopen

Directory traversal vulnerability in dlopen in libvdpau before 1.1.1 allows local users to gain privileges via the VDPAU_DRIVER environment variable.

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Canonical Libvdpau Project
Products
Ubuntu Linux Libvdpau
CVE-2015-7498

libxml2: Heap-based buffer overflow in xmlParseXmlDecl

Heap-based buffer overflow in the xmlParseXmlDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service via unspecified vectors related to extracting errors after an encoding conversion failure.

CVSS 2.0 · 5.0 Medium EPSS 7.2% KEV · Not listed
Vendors
Canonical Debian Hp and 2 more
Products
Ubuntu Linux Debian Linux Icewall Federation Agent and 8 more
CVE-2015-5198

libvdpau incorrect check for security transition

libvdpau before 1.1.1, when used in a setuid or setgid application, allows local users to gain privileges via unspecified vectors, related to the VDPAU_DRIVER_PATH environment variable.

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Canonical Libvdpau Project
Products
Ubuntu Linux Libvdpau
CVE-2015-7500

libxml2: Heap buffer overflow in xmlParseMisc

The xmlParseMisc function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service (out-of-bounds heap read) via unspecified vectors related to incorrect entities boundaries and start tags.

CVSS 2.0 · 5.0 Medium EPSS 5.9% KEV · Not listed
Vendors
Apple Canonical Debian and 3 more
Products
Iphone Os Mac Os X Tvos and 12 more
CVE-2015-7511

libgcrypt: side-channel attack on ECDH with Weierstrass curves

Libgcrypt before 1.6.5 does not properly perform elliptic-point curve multiplication during decryption, which makes it easier for physically proximate attackers to extract ECDH keys by measuring electromagnetic emanations.

CVSS 3.0 · 2.0 Low EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Gnupg
Products
Ubuntu Linux Debian Linux Libgcrypt
CVE-2015-7513

Kernel: kvm: divide by zero issue leads to DoS

arch/x86/kvm/x86.c in the Linux kernel before 4.4 does not reset the PIT counter values during state restoration, which allows guest OS users to cause a denial of service (divide-by-zero error and host OS crash) via a zero value, related to the kvm_vm_ioctl_set_pit and kvm_vm_ioctl_set_pit2 functions.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 1 more
Products
Ubuntu Linux Debian Linux Fedora and 1 more
CVE-2016-2818

Mozilla: Miscellaneous memory safety hazards (rv:45.2) (MFSA 2016-49)

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

CVSS 3.0 · 8.8 High EPSS 3.9% KEV · Not listed
Vendors
Canonical Debian Mozilla and 3 more
Products
Ubuntu Linux Debian Linux Firefox and 19 more
CVE-2016-2819

Mozilla: Buffer overflow parsing HTML5 fragments (MFSA 2016-50)

Heap-based buffer overflow in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allows remote attackers to execute arbitrary code via foreign-context HTML5 fragments, as demonstrated by fragments within an SVG element.

CVSS 3.0 · 8.8 High EPSS 24.0% KEV · Not listed
Vendors
Canonical Debian Mozilla and 2 more
Products
Ubuntu Linux Debian Linux Firefox and 3 more
CVE-2016-2774

dhcp: unclosed TCP connections to OMAPI or failover ports can cause DoS

ISC DHCP 4.1.x before 4.1-ESV-R13 and 4.2.x and 4.3.x before 4.3.4 does not restrict the number of concurrent TCP sessions, which allows remote attackers to cause a denial of service (INSIST assertion failure or request-processing outage) by establishing many sessions.

CVSS 3.1 · 5.9 Medium EPSS 73.6% KEV · Not listed
Vendors
Canonical Debian Isc and 1 more
Products
Ubuntu Linux Debian Linux Dhcp and 1 more
CVE-2015-7547

glibc: getaddrinfo stack-based buffer overflow

Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C Library (aka glibc or libc6) before 2.23 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted DNS response that triggers a call to the getaddrinfo function with the AF_UNSPEC or AF_INET6 address family, related to performing "dual A/AAAA DNS queries" and the libnss_dns.so.2 NSS module.

CVSS 3.0 · 8.1 High EPSS 92.4% KEV · Not listed
Vendors
Canonical Debian F5 and 7 more
Products
Ubuntu Linux Debian Linux Big-ip Access Policy Manager and 31 more
CVE-2015-5144

Django: possible header injection due to validators accepting newlines in input

Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, and 1.8.x before 1.8.3 uses an incorrect regular expression, which allows remote attackers to inject arbitrary headers and conduct HTTP response splitting attacks via a newline character in an (1) email message to the EmailValidator, a (2) URL to the URLValidator, or unspecified vectors to the (3) validate_ipv4_address or (4) validate_slug validator.

CVSS 2.0 · 4.3 Medium EPSS 3.2% KEV · Not listed
Vendors
Canonical Debian Djangoproject and 1 more
Products
Ubuntu Linux Debian Linux Django and 1 more
CVE-2015-5143

Django: possible DoS by filling session store

The session backends in Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, and 1.8.x before 1.8.3 allows remote attackers to cause a denial of service (session store consumption) via multiple requests with unique session keys.

CVSS 2.0 · 7.8 High EPSS 7.2% KEV · Not listed
Vendors
Canonical Debian Djangoproject and 2 more
Products
Ubuntu Linux Debian Linux Django and 2 more
CVE-2015-7674

gdk-pixbuf: Heap overflow when scaling a GIF file

Integer overflow in the pixops_scale_nearest function in pixops/pixops.c in gdk-pixbuf before 2.32.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted GIF image file, which triggers a heap-based buffer overflow.

CVSS 2.0 · 6.8 Medium EPSS 5.8% KEV · Not listed
Vendors
Canonical Gnome Opensuse
Products
Ubuntu Linux Gdk-pixbuf Opensuse
CVE-2016-2821

Mozilla: Use-after-free deleting tables from a contenteditable document (MFSA 2016-51)

Use-after-free vulnerability in the mozilla::dom::Element class in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2, when contenteditable mode is enabled, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by triggering deletion of DOM elements that were created in the editor.

CVSS 3.0 · 7.5 High EPSS 2.8% KEV · Not listed
Vendors
Canonical Debian Mozilla and 2 more
Products
Ubuntu Linux Debian Linux Firefox and 3 more
CVE-2016-2834

nss: Multiple security flaws (MFSA 2016-61)

Mozilla Network Security Services (NSS) before 3.23, as used in Mozilla Firefox before 47.0, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unknown vectors.

CVSS 3.0 · 8.8 High EPSS 3.4% KEV · Not listed
Vendors
Canonical Mozilla Novell and 2 more
Products
Ubuntu Linux Firefox Network Security Services and 6 more