Export limit exceeded: 425880 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 425880 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 6,068

Export CSV
CVE-2005-1264

security flaw

Raw character devices (raw.c) in the Linux kernel 2.6.x call the wrong function before passing an ioctl to the block device, which crosses security boundaries by making kernel address space accessible from user space, a similar vulnerability to CVE-2005-1589.

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux
CVE-2001-0886

security flaw

Buffer overflow in glob function of glibc allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a glob pattern that ends in a brace "{" character.

CVSS 2.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Debian Redhat
Products
Debian Linux Linux
CVE-2005-1263

security flaw

The elf_core_dump function in binfmt_elf.c for Linux kernel 2.x.x to 2.2.27-rc2, 2.4.x to 2.4.31-pre1, and 2.6.x to 2.6.12-rc4 allows local users to execute arbitrary code via an ELF binary that, in certain conditions involving the create_elf_tables function, causes a negative length argument to pass a signed integer comparison, leading to a buffer overflow.

CVSS 2.0 · 7.2 High EPSS 1.8% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux
CVE-2005-1061

security flaw

The secure script in LogWatch before 2.6-2 allows attackers to prevent LogWatch from detecting malicious activity via certain strings in the secure file that are later used as part of a regular expression, which causes the parser to crash, aka "logwatch log processing regular expression DoS."

CVSS 2.0 · 5.0 Medium EPSS 3.1% KEV · Not listed
Vendors
Logwatch Redhat
Products
Logwatch Enterprise Linux Linux Advanced Workstation
CVE-2002-1356

security flaw

Ethereal 0.9.7 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via malformed packets to the (1) LMP, (2) PPP, or (3) TDS dissectors, possibly related to a missing field for EndVerifyAck messages.

CVSS 2.0 · 7.5 High EPSS 2.9% KEV · Not listed
Vendors
Ethereal Group Redhat
Products
Ethereal Enterprise Linux Linux
CVE-2005-1043

security flaw

exif.c in PHP before 4.3.11 allows remote attackers to cause a denial of service (memory consumption and crash) via an EXIF header with a large IFD nesting level, which causes significant stack recursion.

CVSS 2.0 · 5.0 Medium EPSS 1.9% KEV · Not listed
Vendors
Apple Conectiva Peachtree and 4 more
Products
Mac Os X Mac Os X Server Linux and 5 more
CVE-2001-0884

security flaw

Cross-site scripting vulnerability in Mailman email archiver before 2.08 allows attackers to obtain sensitive information or authentication credentials via a malicious link that is accessed by other web users.

CVSS 2.0 · 5.1 Medium EPSS 1.9% KEV · Not listed
Vendors
Gnu Redhat
Products
Mailman Linux Powertools and 1 more
CVE-2005-0988

security flaw

Race condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by gzip after the decompression is complete.

CVSS 2.0 · 3.7 Low EPSS < 1% KEV · Not listed
Vendors
Freebsd Gentoo Gnu and 4 more
Products
Freebsd Linux Gzip and 10 more
CVE-2005-0977

security flaw

The shmem_nopage function in shmem.c for the tmpfs driver in Linux kernel 2.6 does not properly verify the address argument, which allows local users to cause a denial of service (kernel crash) via an invalid address.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux
CVE-2002-1350

security flaw

The BGP decoding routines in tcpdump 3.6.x before 3.7 do not properly copy data, which allows remote attackers to cause a denial of service (application crash).

CVSS 2.0 · 7.5 High EPSS 2.4% KEV · Not listed
Vendors
Lbl Redhat
Products
Tcpdump Enterprise Linux Linux
CVE-2005-0937

security flaw

Some futex functions in futex.c for Linux kernel 2.6.x perform get_user calls while holding the mmap_sem semaphore, which could allow local users to cause a deadlock condition in do_page_fault by triggering get_user faults while another thread is executing mmap or other functions.

CVSS 2.0 · 1.2 Low EPSS < 1% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux
CVE-2000-0750

security flaw

Buffer overflow in mopd (Maintenance Operations Protocol loader daemon) allows remote attackers to execute arbitrary commands via a long file name.

CVSS 2.0 · 7.5 High EPSS 2.3% KEV · Not listed
Vendors
Netbsd Openbsd Redhat
Products
Netbsd Openbsd Linux
CVE-2001-0873

security flaw

uuxqt in Taylor UUCP package does not properly remove dangerous long options, which allows local users to gain privileges by calling uux and specifying an alternate configuration file with the --config option.

CVSS 2.0 · 7.2 High EPSS 1.1% KEV · Not listed
Vendors
Ian Lance Taylor Redhat
Products
Taylor Uucp Linux