Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4,218

Export CSV
CVE-2015-8867

php: openssl_random_pseudo_bytes() is not cryptographically secure

The openssl_random_pseudo_bytes function in ext/openssl/openssl.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 incorrectly relies on the deprecated RAND_pseudo_bytes function, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors.

CVSS 3.0 · 7.5 High EPSS 4.4% KEV · Not listed
Vendors
Canonical Php Redhat
Products
Ubuntu Linux Php Rhel Software Collections
CVE-2015-8868

poppler: heap buffer overflow in ExponentialFunction

Heap-based buffer overflow in the ExponentialFunction::ExponentialFunction function in Poppler before 0.40.0 allows remote attackers to cause a denial of service (memory corruption and crash) or possibly execute arbitrary code via an invalid blend mode in the ExtGState dictionary in a crafted PDF document.

CVSS 3.0 · 7.8 High EPSS 4.6% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 2 more
Products
Ubuntu Linux Debian Linux Fedora and 2 more
CVE-2015-8872

dosfstools: Off-by-2 error leading to corruption in FAT12

The set_fat function in fat.c in dosfstools before 4.0 might allow attackers to corrupt a FAT12 filesystem or cause a denial of service (invalid memory read and crash) by writing an odd number of clusters to the third to last entry on a FAT12 filesystem, which triggers an "off-by-two error."

CVSS 3.0 · 6.2 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Dosfstools Project Opensuse
Products
Ubuntu Linux Dosfstools Leap and 1 more
CVE-2015-8899

dnsmasq: Denial-of-service when empty address from DNS overlays A record from hosts

Dnsmasq before 2.76 allows remote servers to cause a denial of service (crash) via a reply with an empty DNS address that has an (1) A or (2) AAAA record defined locally.

CVSS 3.0 · 7.5 High EPSS 2.5% KEV · Not listed
Vendors
Canonical Thekelleys
Products
Ubuntu Linux Dnsmasq
CVE-2015-8916

libarchive: NULL pointer access in RAR parser through bsdtar

bsdtar in libarchive before 3.2.0 returns a success code without filling the entry when the header is a "split file in multivolume RAR," which allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted rar file.

CVSS 3.0 · 6.5 Medium EPSS 3.2% KEV · Not listed
Vendors
Canonical Debian Libarchive and 1 more
Products
Ubuntu Linux Debian Linux Libarchive and 1 more
CVE-2015-8917

libarchive: NULL pointer access in CAB parser

bsdtar in libarchive before 3.2.0 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an invalid character in the name of a cab file.

CVSS 3.0 · 7.5 High EPSS 4.3% KEV · Not listed
Vendors
Canonical Debian Libarchive and 1 more
Products
Ubuntu Linux Debian Linux Libarchive and 1 more
CVE-2016-3705

libxml2: stack overflow before detecting invalid XML file

The (1) xmlParserEntityCheck and (2) xmlParseAttValueComplex functions in parser.c in libxml2 2.9.3 do not properly keep track of the recursion depth, which allows context-dependent attackers to cause a denial of service (stack consumption and application crash) via a crafted XML document containing a large number of nested entity references.

CVSS 3.0 · 7.5 High EPSS 5.1% KEV · Not listed
Vendors
Canonical Debian Hp and 3 more
Products
Ubuntu Linux Debian Linux Icewall Federation Agent and 5 more
CVE-2016-3951

kernel: crash on invalid USB device descriptors (usbnet driver)

Double free vulnerability in drivers/net/usb/cdc_ncm.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service (system crash) or possibly have unspecified other impact by inserting a USB device with an invalid USB descriptor.

CVSS 3.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Linux Novell and 1 more
Products
Ubuntu Linux Linux Kernel Suse Linux Enterprise Desktop and 7 more
CVE-2015-4487

Mozilla: Vulnerabilities found through code inspection (MFSA 2015-90)

The nsTSubstring::ReplacePrep function in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 might allow remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, related to an "overflow."

CVSS 2.0 · 7.5 High EPSS 3.2% KEV · Not listed
Vendors
Canonical Mozilla Opensuse and 2 more
Products
Ubuntu Linux Firefox Firefox Os and 3 more
CVE-2015-4486

Mozilla: Buffer overflows on Libvpx when decoding WebM video (MFSA 2015-89)

The decrease_ref_count function in libvpx in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via malformed WebM video data.

CVSS 2.0 · 10.0 Critical EPSS 6.0% KEV · Not listed
Vendors
Canonical Mozilla Opensuse and 2 more
Products
Ubuntu Linux Firefox Opensuse and 2 more
CVE-2015-4485

Mozilla: Buffer overflows on Libvpx when decoding WebM video (MFSA 2015-89)

Heap-based buffer overflow in the resize_context_buffers function in libvpx in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code via malformed WebM video data.

CVSS 2.0 · 10.0 Critical EPSS 7.7% KEV · Not listed
Vendors
Canonical Mozilla Opensuse and 2 more
Products
Ubuntu Linux Firefox Opensuse and 2 more
CVE-2015-4484

Mozilla: Crash when using shared memory in JavaScript (MFSA 2015-87)

The js::jit::AssemblerX86Shared::lock_addl function in the JavaScript implementation in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to cause a denial of service (application crash) by leveraging the use of shared memory and accessing (1) an Atomics object or (2) a SharedArrayBuffer object.

CVSS 2.0 · 5.0 Medium EPSS 3.6% KEV · Not listed
Vendors
Canonical Mozilla Opensuse and 2 more
Products
Ubuntu Linux Firefox Opensuse and 2 more
CVE-2016-3672

kernel: unlimiting the stack disables ASLR

The arch_pick_mmap_layout function in arch/x86/mm/mmap.c in the Linux kernel through 4.5.2 does not properly randomize the legacy base address, which makes it easier for local users to defeat the intended restrictions on the ADDR_NO_RANDOMIZE flag, and bypass the ASLR protection mechanism for a setuid or setgid program, by disabling stack-consumption resource limits.

CVSS 3.0 · 7.8 High EPSS 1.1% KEV · Not listed
Vendors
Canonical Linux Novell and 1 more
Products
Ubuntu Linux Linux Kernel Suse Linux Enterprise Desktop and 8 more
CVE-2015-8926

libarchive: NULL pointer access in RAR parser

The archive_read_format_rar_read_data function in archive_read_support_format_rar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted rar archive.

CVSS 3.0 · 5.5 Medium EPSS 2.0% KEV · Not listed
Vendors
Canonical Libarchive Redhat and 1 more
Products
Ubuntu Linux Libarchive Enterprise Linux and 3 more
CVE-2015-4480

Mozilla: Overflow issues in libstagefright (MFSA 2015-83)

Integer overflow in the stagefright::SampleTable::isValid function in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code via crafted MPEG-4 video data with H.264 encoding.

CVSS 2.0 · 9.3 Critical EPSS 5.2% KEV · Not listed
Vendors
Canonical Mozilla Opensuse and 1 more
Products
Ubuntu Linux Firefox Opensuse and 1 more
CVE-2015-4479

Mozilla: Overflow issues in libstagefright (MFSA 2015-83)

Multiple integer overflows in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allow remote attackers to execute arbitrary code via a crafted saio chunk in MPEG-4 video data.

CVSS 2.0 · 10.0 Critical EPSS 8.2% KEV · Not listed
Vendors
Canonical Mozilla Opensuse and 1 more
Products
Ubuntu Linux Firefox Opensuse and 1 more
CVE-2015-8932

libarchive: Undefined behavior / invalid shiftleft in TAR parser

The compress_bidder_init function in archive_read_support_filter_compress.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted tar file, which triggers an invalid left shift.

CVSS 3.0 · 5.5 Medium EPSS 2.2% KEV · Not listed
Vendors
Canonical Debian Libarchive and 2 more
Products
Ubuntu Linux Debian Linux Libarchive and 4 more
CVE-2015-4478

Mozilla: Redefinition of non-configurable JavaScript object properties (MFSA 2015-82)

Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 do not impose certain ECMAScript 6 requirements on JavaScript object properties, which allows remote attackers to bypass the Same Origin Policy via the reviver parameter to the JSON.parse method.

CVSS 2.0 · 5.0 Medium EPSS 2.8% KEV · Not listed
Vendors
Canonical Mozilla Opensuse and 1 more
Products
Ubuntu Linux Firefox Opensuse and 1 more
CVE-2015-4477

Mozilla: Use-after-free in MediaStream playback (MFSA 2015-81)

Use-after-free vulnerability in the MediaStream playback feature in Mozilla Firefox before 40.0 allows remote attackers to execute arbitrary code via unspecified use of the Web Audio API.

CVSS 2.0 · 10.0 Critical EPSS 5.8% KEV · Not listed
Vendors
Canonical Mozilla Opensuse
Products
Ubuntu Linux Firefox Opensuse