Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4,351

Export CSV
CVE-2016-1678

chromium-browser: heap overflow in v8

objects.cc in Google V8 before 5.0.71.32, as used in Google Chrome before 51.0.2704.63, does not properly restrict lazy deoptimization, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JavaScript code.

CVSS 3.0 · 8.8 High EPSS 1.6% KEV · Not listed
Vendors
Canonical Debian Google and 3 more
Products
Ubuntu Linux Debian Linux Chrome and 8 more
CVE-2016-1679

chromium-browser: heap use-after-free in v8 bindings

The ToV8Value function in content/child/v8_value_converter_impl.cc in the V8 bindings in Google Chrome before 51.0.2704.63 does not properly restrict use of getters and setters, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted JavaScript code.

CVSS 3.0 · 8.8 High EPSS 1.3% KEV · Not listed
Vendors
Canonical Debian Google and 3 more
Products
Ubuntu Linux Debian Linux Chrome and 7 more
CVE-2015-3331

Kernel: crypto: buffer overruns in RFC4106 implementation using AESNI

The __driver_rfc4106_decrypt function in arch/x86/crypto/aesni-intel_glue.c in the Linux kernel before 3.19.3 does not properly determine the memory locations used for encrypted data, which allows context-dependent attackers to cause a denial of service (buffer overflow and system crash) or possibly execute arbitrary code by triggering a crypto API call, as demonstrated by use of a libkcapi test program with an AF_ALG(aead) socket.

CVSS 2.0 · 9.3 Critical EPSS 10.7% KEV · Not listed
Vendors
Canonical Debian Linux and 1 more
Products
Ubuntu Linux Debian Linux Linux Kernel and 4 more
CVE-2016-1682

chromium-browser: csp bypass for serviceworker

The ServiceWorkerContainer::registerServiceWorkerImpl function in WebKit/Source/modules/serviceworkers/ServiceWorkerContainer.cpp in Blink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Content Security Policy (CSP) protection mechanism via a ServiceWorker registration.

CVSS 3.0 · 6.1 Medium EPSS 1.1% KEV · Not listed
Vendors
Canonical Debian Google and 3 more
Products
Ubuntu Linux Debian Linux Chrome and 7 more
CVE-2015-3310

ppp: buffer overflow in radius plug-in's rc_mksid()

Buffer overflow in the rc_mksid function in plugins/radius/util.c in Paul's PPP Package (ppp) 2.4.6 and earlier, when the PID for pppd is greater than 65535, allows remote attackers to cause a denial of service (crash) via a start accounting message to the RADIUS server.

CVSS 2.0 · 4.3 Medium EPSS 5.4% KEV · Not listed
Vendors
Canonical Debian Point-to-point Protocol Project
Products
Ubuntu Linux Debian Linux Point-to-point Protocol
CVE-2016-1688

chromium-browser: out-of-bounds read in v8

The regexp (aka regular expression) implementation in Google V8 before 5.0.71.40, as used in Google Chrome before 51.0.2704.63, mishandles external string sizes, which allows remote attackers to cause a denial of service (out-of-bounds read) via crafted JavaScript code.

CVSS 3.0 · 6.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Canonical Debian Google and 3 more
Products
Ubuntu Linux Debian Linux Chrome and 8 more
CVE-2016-6306

openssl: certificate message OOB reads

The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote attackers to cause a denial of service (out-of-bounds read) via crafted certificate operations, related to s3_clnt.c and s3_srvr.c.

CVSS 3.1 · 5.9 Medium EPSS 41.7% KEV · Not listed
Vendors
Canonical Debian Hp and 4 more
Products
Ubuntu Linux Debian Linux Icewall Federation Agent and 8 more
CVE-2016-1691

chromium-browser: heap buffer-overflow in skia

Skia, as used in Google Chrome before 51.0.2704.63, mishandles coincidence runs, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted curves, related to SkOpCoincidence.cpp and SkPathOpsCommon.cpp.

CVSS 3.0 · 7.5 High EPSS 1.4% KEV · Not listed
Vendors
Canonical Debian Google and 3 more
Products
Ubuntu Linux Debian Linux Chrome and 7 more
CVE-2015-3308

gnutls: use-after-free flaw in CRL distribution points parsing

Double free vulnerability in lib/x509/x509_ext.c in GnuTLS before 3.3.14 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted CRL distribution point.

CVSS 2.0 · 7.5 High EPSS 3.9% KEV · Not listed
Vendors
Canonical Gnu
Products
Ubuntu Linux Gnutls
CVE-2016-1695

chromium-browser: various fixes from internal audits

Multiple unspecified vulnerabilities in Google Chrome before 51.0.2704.63 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.

CVSS 3.0 · 8.8 High EPSS 1.2% KEV · Not listed
Vendors
Canonical Debian Google and 3 more
Products
Ubuntu Linux Debian Linux Chrome and 7 more
CVE-2016-1697

chromium-browser: cross-origin bypass in blink

The FrameLoader::startLoad function in WebKit/Source/core/loader/FrameLoader.cpp in Blink, as used in Google Chrome before 51.0.2704.79, does not prevent frame navigations during DocumentLoader detach operations, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code.

CVSS 3.0 · 8.8 High EPSS 1.8% KEV · Not listed
Vendors
Canonical Debian Google and 3 more
Products
Ubuntu Linux Debian Linux Chrome and 7 more
CVE-2016-1699

chromium-browser: parameter sanitization failure in devtools

WebKit/Source/devtools/front_end/devtools.js in the Developer Tools (aka DevTools) subsystem in Blink, as used in Google Chrome before 51.0.2704.79, does not ensure that the remoteFrontendUrl parameter is associated with a chrome-devtools-frontend.appspot.com URL, which allows remote attackers to bypass intended access restrictions via a crafted URL.

CVSS 3.0 · 6.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Canonical Debian Google and 3 more
Products
Ubuntu Linux Debian Linux Chrome and 7 more
CVE-2016-1702

chromium-browser: out-of-bounds read in skia

The SkRegion::readFromMemory function in core/SkRegion.cpp in Skia, as used in Google Chrome before 51.0.2704.79, does not validate the interval count, which allows remote attackers to cause a denial of service (out-of-bounds read) via crafted serialized data.

CVSS 3.0 · 6.5 Medium EPSS 1.2% KEV · Not listed
Vendors
Canonical Debian Google and 3 more
Products
Ubuntu Linux Debian Linux Chrome and 7 more
CVE-2016-1703

chromium-browser: various fixes from internal audits

Multiple unspecified vulnerabilities in Google Chrome before 51.0.2704.79 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.

CVSS 3.0 · 8.8 High EPSS 1.2% KEV · Not listed
Vendors
Canonical Debian Google and 3 more
Products
Ubuntu Linux Debian Linux Chrome and 7 more
CVE-2015-3281

haproxy: information leak in buffer_slow_realign()

The buffer_slow_realign function in HAProxy 1.5.x before 1.5.14 and 1.6-dev does not properly realign a buffer that is used for pending outgoing data, which allows remote attackers to obtain sensitive information (uninitialized memory contents of previous requests) via a crafted request.

CVSS 2.0 · 5.0 Medium EPSS 4.3% KEV · Not listed
Vendors
Canonical Debian Haproxy and 3 more
Products
Ubuntu Linux Debian Linux Haproxy and 11 more
CVE-2016-2186

kernel: Kernel panic on invalid USB device descriptor (powermate driver)

The powermate_probe function in drivers/input/misc/powermate.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device descriptor.

CVSS 3.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Linux Novell
Products
Ubuntu Linux Linux Kernel Suse Linux Enterprise Debuginfo and 7 more
CVE-2015-3279

cups-filters: texttopdf integer overflow

Integer overflow in filter/texttopdf.c in texttopdf in cups-filters before 1.0.71 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted line size in a print job, which triggers a heap-based buffer overflow.

CVSS 2.0 · 7.5 High EPSS 6.6% KEV · Not listed
Vendors
Canonical Debian Linuxfoundation and 1 more
Products
Ubuntu Linux Debian Linux Cups-filters and 1 more
CVE-2015-3258

cups-filters: texttopdf heap-based buffer overflow

Heap-based buffer overflow in the WriteProlog function in filter/texttopdf.c in texttopdf in cups-filters before 1.0.70 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a small line size in a print job.

CVSS 2.0 · 7.5 High EPSS 7.9% KEV · Not listed
Vendors
Canonical Debian Linuxfoundation and 1 more
Products
Ubuntu Linux Debian Linux Cups-filters and 1 more
CVE-2016-6261

libidn: Out of bounds stack read in idna_to_ascii_4i

The idna_to_ascii_4i function in lib/idna.c in libidn before 1.33 allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via 64 bytes of input.

CVSS 3.0 · 7.5 High EPSS 4.4% KEV · Not listed
Vendors
Canonical Gnu Opensuse
Products
Ubuntu Linux Libidn Leap
CVE-2016-6313

libgcrypt: PRNG output is predictable

The mixing functions in the random number generator in Libgcrypt before 1.5.6, 1.6.x before 1.6.6, and 1.7.x before 1.7.3 and GnuPG before 1.4.21 make it easier for attackers to obtain the values of 160 bits by leveraging knowledge of the previous 4640 bits.

CVSS 3.0 · 5.3 Medium EPSS 3.6% KEV · Not listed
Vendors
Canonical Debian Gnupg and 1 more
Products
Ubuntu Linux Debian Linux Gnupg and 2 more