Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4,351

Export CSV
CVE-2015-4551

libreoffice: Arbitrary file disclosure in Calc and Writer

LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2 uses the stored LinkUpdateMode configuration information in OpenDocument Format files and templates when handling links, which might allow remote attackers to obtain sensitive information via a crafted document, which embeds data from local files into (1) Calc or (2) Writer.

CVSS 2.0 · 4.3 Medium EPSS 13.8% KEV · Not listed
Vendors
Apache Canonical Debian and 2 more
Products
Openoffice Ubuntu Linux Debian Linux and 2 more
CVE-2016-0661

mysql: unspecified vulnerability in subcomponent: Server: Options (CPU April 2016)

Unspecified vulnerability in Oracle MySQL 5.6.28 and earlier and 5.7.10 and earlier allows local users to affect availability via vectors related to Options.

CVSS 3.0 · 4.7 Medium EPSS 1.2% KEV · Not listed
Vendors
Canonical Oracle Redhat
Products
Ubuntu Linux Mysql Enterprise Linux and 1 more
CVE-2016-1655

chromium-browser: use-after-free related to extensions

Google Chrome before 50.0.2661.75 does not properly consider that frame removal may occur during callback execution, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted extension.

CVSS 3.0 · 8.8 High EPSS 2.0% KEV · Not listed
Vendors
Canonical Debian Google and 3 more
Products
Ubuntu Linux Debian Linux Chrome and 3 more
CVE-2015-4493

Mozilla: Overflow issues in libstagefright (MFSA 2015-83)

Heap-based buffer overflow in the stagefright::ESDS::parseESDescriptor function in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code via an invalid size field in an esds chunk in MPEG-4 video data, a related issue to CVE-2015-1539.

CVSS 2.0 · 9.3 Critical EPSS 6.7% KEV · Not listed
Vendors
Canonical Mozilla Opensuse and 2 more
Products
Ubuntu Linux Firefox Opensuse and 2 more
CVE-2015-4492

Mozilla: Use-after-free in XMLHttpRequest with shared workers (MFSA 2015-92)

Use-after-free vulnerability in the XMLHttpRequest::Open implementation in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 might allow remote attackers to execute arbitrary code via a SharedWorker object that makes recursive calls to the open method of an XMLHttpRequest object.

CVSS 2.0 · 7.5 High EPSS 4.5% KEV · Not listed
Vendors
Canonical Mozilla Opensuse and 2 more
Products
Ubuntu Linux Firefox Opensuse and 2 more
CVE-2016-0705

OpenSSL: Double-free in DSA code

Double free vulnerability in the dsa_priv_decode function in crypto/dsa/dsa_ameth.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a malformed DSA private key.

CVSS 3.0 · 9.8 Critical EPSS 26.3% KEV · Not listed
Vendors
Canonical Debian Google and 3 more
Products
Ubuntu Linux Debian Linux Android and 6 more
CVE-2015-4491

Mozilla: Heap overflow in gdk-pixbuf when scaling bitmap images (MFSA 2015-88)

Integer overflow in the make_filter_table function in pixops/pixops.c in gdk-pixbuf before 2.31.5, as used in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 on Linux, Google Chrome on Linux, and other products, allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow and application crash) via crafted bitmap dimensions that are mishandled during scaling.

CVSS 2.0 · 6.8 Medium EPSS 8.4% KEV · Not listed
Vendors
Canonical Fedoraproject Gnome and 6 more
Products
Ubuntu Linux Fedora Gdk-pixbuf and 6 more
CVE-2016-1677

chromium-browser: type confusion in v8

uri.js in Google V8 before 5.1.281.26, as used in Google Chrome before 51.0.2704.63, uses an incorrect array type, which allows remote attackers to obtain sensitive information by calling the decodeURI function and leveraging "type confusion."

CVSS 3.0 · 6.5 Medium EPSS 3.1% KEV · Not listed
Vendors
Canonical Debian Google and 3 more
Products
Ubuntu Linux Debian Linux Chrome and 8 more
CVE-2016-5180

c-ares: Single byte out of buffer write

Heap-based buffer overflow in the ares_create_query function in c-ares 1.x before 1.12.0 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly execute arbitrary code via a hostname with an escaped trailing dot.

CVSS 3.1 · 9.8 Critical EPSS 8.7% KEV · Not listed
Vendors
C-ares C-ares Project Canonical and 3 more
Products
C-ares C-ares Ubuntu Linux and 3 more
CVE-2016-7425

kernel: SCSI arcmsr driver: Buffer overflow in arcmsr_iop_message_xfer()

The arcmsr_iop_message_xfer function in drivers/scsi/arcmsr/arcmsr_hba.c in the Linux kernel through 4.8.2 does not restrict a certain length field, which allows local users to gain privileges or cause a denial of service (heap-based buffer overflow) via an ARCMSR_MESSAGE_WRITE_WQBUFFER control code.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Canonical Linux
Products
Ubuntu Linux Linux Kernel
CVE-2015-4490

Mozilla: Mozilla Content Security Policy allows for asterisk wildcards in violation of CSP specification (MFSA 2015-91)

The nsCSPHostSrc::permits function in dom/security/nsCSPUtils.cpp in Mozilla Firefox before 40.0 does not implement the Content Security Policy Level 2 exceptions for the blob, data, and filesystem URL schemes during wildcard source-expression matching, which might make it easier for remote attackers to conduct cross-site scripting (XSS) attacks by leveraging unexpected policy-enforcement behavior.

CVSS 2.0 · 4.3 Medium EPSS 2.4% KEV · Not listed
Vendors
Canonical Mozilla Opensuse and 1 more
Products
Ubuntu Linux Firefox Opensuse and 1 more
CVE-2015-4489

Mozilla: Vulnerabilities found through code inspection (MFSA 2015-90)

The nsTArray_Impl class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 might allow remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging a self assignment.

CVSS 2.0 · 7.5 High EPSS 3.0% KEV · Not listed
Vendors
Canonical Mozilla Opensuse and 2 more
Products
Ubuntu Linux Firefox Firefox Os and 3 more
CVE-2016-4971

wget: Lack of filename checking allows arbitrary file upload via FTP redirect

GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted FTP resource.

CVSS 3.1 · 8.8 High EPSS 46.1% KEV · Not listed
Vendors
Canonical Gnu Oracle and 2 more
Products
Ubuntu Linux Wget Solaris and 2 more
CVE-2016-0746

nginx: use-after-free during CNAME response processing in resolver

Use-after-free vulnerability in the resolver in nginx 0.6.18 through 1.8.0 and 1.9.x before 1.9.10 allows remote attackers to cause a denial of service (worker process crash) or possibly have unspecified other impact via a crafted DNS response related to CNAME response processing.

CVSS 3.1 · 9.8 Critical EPSS 8.9% KEV · Not listed
Vendors
Apple Canonical Debian and 3 more
Products
Xcode Ubuntu Linux Debian Linux and 3 more
CVE-2015-4488

Mozilla: Vulnerabilities found through code inspection (MFSA 2015-90)

Use-after-free vulnerability in the StyleAnimationValue class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 allows remote attackers to have an unspecified impact by leveraging a StyleAnimationValue::operator self assignment.

CVSS 2.0 · 7.5 High EPSS 3.2% KEV · Not listed
Vendors
Canonical Mozilla Opensuse and 2 more
Products
Ubuntu Linux Firefox Firefox Os and 3 more
CVE-2016-0755

curl: NTLM credentials not-checked for proxy connection re-use

The ConnectionExists function in lib/url.c in libcurl before 7.47.0 does not properly re-use NTLM-authenticated proxy connections, which might allow remote attackers to authenticate as other users via a request, a similar issue to CVE-2014-0015.

CVSS 3.0 · 7.3 High EPSS 9.1% KEV · Not listed
Vendors
Canonical Debian Haxx
Products
Ubuntu Linux Debian Linux Curl
CVE-2015-4487

Mozilla: Vulnerabilities found through code inspection (MFSA 2015-90)

The nsTSubstring::ReplacePrep function in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 might allow remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, related to an "overflow."

CVSS 2.0 · 7.5 High EPSS 3.2% KEV · Not listed
Vendors
Canonical Mozilla Opensuse and 2 more
Products
Ubuntu Linux Firefox Firefox Os and 3 more
CVE-2016-4952

Qemu: scsi: pvscsi: out-of-bounds access issue in pvsci_ring_init_msg/data routines

QEMU (aka Quick Emulator), when built with VMWARE PVSCSI paravirtual SCSI bus emulation support, allows local guest OS administrators to cause a denial of service (out-of-bounds array access) via vectors related to the (1) PVSCSI_CMD_SETUP_RINGS or (2) PVSCSI_CMD_SETUP_MSG_RING SCSI command.

CVSS 3.1 · 6.0 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Qemu
Products
Ubuntu Linux Debian Linux Qemu
CVE-2016-4985

openstack-ironic: Ironic Node information including credentials exposed to unauthenticated users

The ironic-api service in OpenStack Ironic before 4.2.5 (Liberty) and 5.x before 5.1.2 (Mitaka) allows remote attackers to obtain sensitive information about a registered node by leveraging knowledge of the MAC address of a network card belonging to that node and sending a crafted POST request to the v1/drivers/$DRIVER_NAME/vendor_passthru resource.

CVSS 3.0 · 7.5 High EPSS 2.9% KEV · Not listed
Vendors
Canonical Redhat
Products
Openstack Ironic Openstack