Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4,194

Export CSV
CVE-2015-1236

chromium-browser: Cross-origin-bypass in Blink

The MediaElementAudioSourceNode::process function in modules/webaudio/MediaElementAudioSourceNode.cpp in the Web Audio API implementation in Blink, as used in Google Chrome before 42.0.2311.90, allows remote attackers to bypass the Same Origin Policy and obtain sensitive audio sample values via a crafted web site containing a media element.

CVSS 2.0 · 4.3 Medium EPSS 1.5% KEV · Not listed
Vendors
Canonical Debian Google and 1 more
Products
Ubuntu Linux Debian Linux Chrome and 1 more
CVE-2016-7425

kernel: SCSI arcmsr driver: Buffer overflow in arcmsr_iop_message_xfer()

The arcmsr_iop_message_xfer function in drivers/scsi/arcmsr/arcmsr_hba.c in the Linux kernel through 4.8.2 does not restrict a certain length field, which allows local users to gain privileges or cause a denial of service (heap-based buffer overflow) via an ARCMSR_MESSAGE_WRITE_WQBUFFER control code.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Canonical Linux
Products
Ubuntu Linux Linux Kernel
CVE-2016-7913

kernel: media: use-after-free in [tuner-xc2028] media driver

The xc2028_set_config function in drivers/media/tuners/tuner-xc2028.c in the Linux kernel before 4.6 allows local users to gain privileges or cause a denial of service (use-after-free) via vectors involving omission of the firmware name from a certain data structure.

CVSS 3.1 · 7.8 High EPSS 2.2% KEV · Not listed
Vendors
Canonical Linux Redhat
Products
Ubuntu Linux Linux Kernel Enterprise Linux and 3 more
CVE-2015-1235

chromium-browser: Cross-origin-bypass in HTML parser

The ContainerNode::parserRemoveChild function in core/dom/ContainerNode.cpp in the HTML parser in Blink, as used in Google Chrome before 42.0.2311.90, allows remote attackers to bypass the Same Origin Policy via a crafted HTML document with an IFRAME element.

CVSS 2.0 · 5.0 Medium EPSS 1.6% KEV · Not listed
Vendors
Canonical Debian Google and 1 more
Products
Ubuntu Linux Debian Linux Chrome and 1 more
CVE-2016-3955

Kernel: usbip: buffer overflow by trusting length of incoming packets

The usbip_recv_xbuff function in drivers/usb/usbip/usbip_common.c in the Linux kernel before 4.5.3 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted length value in a USB/IP packet.

CVSS 3.1 · 9.8 Critical EPSS 25.3% KEV · Not listed
Vendors
Canonical Debian Linux
Products
Ubuntu Linux Debian Linux Linux Kernel
CVE-2016-7044

irssi: Unchecked input in unformat_24bit_color() can lead to crash

The unformat_24bit_color function in the format parsing code in Irssi before 0.8.20, when compiled with true-color enabled, allows remote attackers to cause a denial of service (heap corruption and crash) via an incomplete 24bit color code.

CVSS 3.0 · 7.5 High EPSS 4.7% KEV · Not listed
Vendors
Canonical Debian Irssi
Products
Ubuntu Linux Debian Linux Irssi
CVE-2015-1230

chromium-browser: Type confusion in v8

The getHiddenProperty function in bindings/core/v8/V8EventListenerList.h in Blink, as used in Google Chrome before 41.0.2272.76, has a name conflict with the AudioContext class, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via JavaScript code that adds an AudioContext event listener and triggers "type confusion."

CVSS 2.0 · 7.5 High EPSS 2.0% KEV · Not listed
Vendors
Canonical Google Redhat
Products
Ubuntu Linux Chrome Enterprise Linux Desktop Supplementary and 4 more
CVE-2015-1229

chromium-browser: Cookie injection in proxies

net/http/proxy_client_socket.cc in Google Chrome before 41.0.2272.76 does not properly handle a 407 (aka Proxy Authentication Required) HTTP status code accompanied by a Set-Cookie header, which allows remote proxy servers to conduct cookie-injection attacks via a crafted response.

CVSS 2.0 · 5.0 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Google Redhat
Products
Ubuntu Linux Chrome Enterprise Linux Desktop Supplementary and 4 more
CVE-2016-4001

Qemu: net: buffer overflow in stellaris_enet emulator

Buffer overflow in the stellaris_enet_receive function in hw/net/stellaris_enet.c in QEMU, when the Stellaris ethernet controller is configured to accept large packets, allows remote attackers to cause a denial of service (QEMU crash) via a large packet.

CVSS 3.1 · 8.6 High EPSS 4.9% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 1 more
Products
Ubuntu Linux Debian Linux Fedora and 1 more
CVE-2016-7045

irssi: String length not validated in format_send_to_gui() causing crash

The format_send_to_gui function in the format parsing code in Irssi before 0.8.20 allows remote attackers to cause a denial of service (heap corruption and crash) via vectors involving the length of a string.

CVSS 3.0 · 7.5 High EPSS 4.7% KEV · Not listed
Vendors
Canonical Debian Irssi
Products
Ubuntu Linux Debian Linux Irssi
CVE-2015-1228

chromium-browser: Uninitialized value in rendering

The RenderCounter::updateCounter function in core/rendering/RenderCounter.cpp in Blink, as used in Google Chrome before 41.0.2272.76, does not force a relayout operation and consequently does not initialize memory for a data structure, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted Cascading Style Sheets (CSS) token sequence.

CVSS 2.0 · 7.5 High EPSS 1.4% KEV · Not listed
Vendors
Canonical Google Redhat
Products
Ubuntu Linux Chrome Enterprise Linux Desktop Supplementary and 4 more
CVE-2015-1220

chromium-browser: Use-after-free in gif decoder

Use-after-free vulnerability in the GIFImageReader::parseData function in platform/image-decoders/gif/GIFImageReader.cpp in Blink, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted frame size in a GIF image.

CVSS 2.0 · 6.8 Medium EPSS 1.9% KEV · Not listed
Vendors
Canonical Google Redhat
Products
Ubuntu Linux Chrome Enterprise Linux Desktop Supplementary and 4 more
CVE-2015-1219

chromium-browser: Integer overflow in webgl

Integer overflow in the SkMallocPixelRef::NewAllocate function in core/SkMallocPixelRef.cpp in Skia, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an attempted allocation of a large amount of memory during WebGL rendering.

CVSS 2.0 · 7.5 High EPSS 1.4% KEV · Not listed
Vendors
Canonical Google Redhat
Products
Ubuntu Linux Chrome Enterprise Linux Desktop Supplementary and 4 more
CVE-2015-1218

chromium-browser: Use-after-free in dom

Multiple use-after-free vulnerabilities in the DOM implementation in Blink, as used in Google Chrome before 41.0.2272.76, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger movement of a SCRIPT element to different documents, related to (1) the HTMLScriptElement::didMoveToNewDocument function in core/html/HTMLScriptElement.cpp and (2) the SVGScriptElement::didMoveToNewDocument function in core/svg/SVGScriptElement.cpp.

CVSS 2.0 · 7.5 High EPSS 1.4% KEV · Not listed
Vendors
Canonical Google Redhat
Products
Ubuntu Linux Chrome Enterprise Linux Desktop Supplementary and 4 more
CVE-2016-6855

eog: Out-of-bounds write when passing invalid UTF-8 to GMarkup

Eye of GNOME (aka eog) 3.16.5, 3.17.x, 3.18.x before 3.18.3, 3.19.x, and 3.20.x before 3.20.4, when used with glib before 2.44.1, allow remote attackers to cause a denial of service (out-of-bounds write and crash) via vectors involving passing invalid UTF-8 to GMarkup.

CVSS 3.0 · 7.5 High EPSS 18.4% KEV · Not listed
Vendors
Canonical Fedoraproject Gnome and 1 more
Products
Ubuntu Linux Fedora Eye Of Gnome and 3 more
CVE-2016-7117

kernel: Use-after-free in the recvmmsg exit path

Use-after-free vulnerability in the __sys_recvmmsg function in net/socket.c in the Linux kernel before 4.5.2 allows remote attackers to execute arbitrary code via vectors involving a recvmmsg system call that is mishandled during error processing.

CVSS 3.1 · 9.8 Critical EPSS 23.6% KEV · Not listed
Vendors
Canonical Debian Linux and 1 more
Products
Ubuntu Linux Debian Linux Linux Kernel and 7 more
CVE-2016-4054

squid: multiple issues in ESI processing

Buffer overflow in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allows remote attackers to execute arbitrary code via crafted Edge Side Includes (ESI) responses.

CVSS 3.0 · 8.1 High EPSS 77.6% KEV · Not listed
Vendors
Canonical Oracle Redhat and 1 more
Products
Ubuntu Linux Linux Enterprise Linux and 1 more
CVE-2015-1217

chromium-browser: Type confusion in v8 bindings

The V8LazyEventListener::prepareListenerObject function in bindings/core/v8/V8LazyEventListener.cpp in the V8 bindings in Blink, as used in Google Chrome before 41.0.2272.76, does not properly compile listeners, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion."

CVSS 2.0 · 7.5 High EPSS 2.1% KEV · Not listed
Vendors
Canonical Google Redhat
Products
Ubuntu Linux Chrome Enterprise Linux Desktop Supplementary and 4 more
CVE-2015-1216

chromium-browser: Use-after-free in v8 bindings

Use-after-free vulnerability in the V8Window::namedPropertyGetterCustom function in bindings/core/v8/custom/V8WindowCustom.cpp in the V8 bindings in Blink, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a frame detachment.

CVSS 2.0 · 7.5 High EPSS 1.4% KEV · Not listed
Vendors
Canonical Google Redhat
Products
Ubuntu Linux Chrome Enterprise Linux Desktop Supplementary and 4 more