Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5,386

Export CSV
CVE-2014-8124

python-django-horizon: denial of service via login page requests

OpenStack Dashboard (Horizon) before 2014.1.3 and 2014.2.x before 2014.2.1 does not properly handle session records when using a db or memcached session engine, which allows remote attackers to cause a denial of service via a large number of requests to the login page.

CVSS 2.0 · 5.0 Medium EPSS 2.9% KEV · Not listed
Vendors
Fedoraproject Openstack Opensuse and 2 more
Products
Fedora Horizon Opensuse and 2 more
CVE-2016-5407

libXv: Insufficient validation of server responses results in out-of bounds accesses

The (1) XvQueryAdaptors and (2) XvQueryEncodings functions in X.org libXv before 1.0.11 allow remote X servers to trigger out-of-bounds memory access operations via vectors involving length specifications in received data.

CVSS 3.0 · 9.8 Critical EPSS 4.5% KEV · Not listed
Vendors
Fedoraproject X.org
Products
Fedora Libxv
CVE-2016-5404

ipa: Insufficient privileges check in certificate revocation

The cert_revoke command in FreeIPA does not check for the "revoke certificate" permission, which allows remote authenticated users to revoke arbitrary certificates by leveraging the "retrieve certificate" permission.

CVSS 3.0 · 6.5 Medium EPSS 2.6% KEV · Not listed
Vendors
Fedoraproject Freeipa Oracle and 1 more
Products
Fedora Freeipa Linux and 1 more
CVE-2014-8109

httpd: LuaAuthzProvider argument handling issue

mod_lua.c in the mod_lua module in the Apache HTTP Server 2.3.x and 2.4.x through 2.4.10 does not support an httpd configuration in which the same Lua authorization provider is used with different arguments within different contexts, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging multiple Require directives, as demonstrated by a configuration that specifies authorization for one group to access a certain directory, and authorization for a second group to access a second directory.

CVSS 2.0 · 4.3 Medium EPSS 22.0% KEV · Not listed
Vendors
Apache Canonical Fedoraproject and 1 more
Products
Http Server Ubuntu Linux Fedora and 1 more
CVE-2016-5387

HTTPD: sets environmental variable based on user supplied Proxy request header

The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an "httpoxy" issue. NOTE: the vendor states "This mitigation has been assigned the identifier CVE-2016-5387"; in other words, this is not a CVE ID for a vulnerability.

CVSS 3.1 · 8.1 High EPSS 55.7% KEV · Not listed
Vendors
Apache Canonical Debian and 5 more
Products
Http Server Ubuntu Linux Debian Linux and 19 more
CVE-2014-8112

389-ds-base: password hashing bypassed when "nsslapd-unhashed-pw-switch" is set to off

389 Directory Server 1.3.1.x, 1.3.2.x before 1.3.2.27, and 1.3.3.x before 1.3.3.9 stores "unhashed" passwords even when the nsslapd-unhashed-pw-switch option is set to off, which allows remote authenticated users to obtain sensitive information by reading the Changelog.

CVSS 2.0 · 4.0 Medium EPSS 1.7% KEV · Not listed
Vendors
Fedoraproject Redhat
Products
389 Directory Server Fedora Enterprise Linux
CVE-2016-5386

Go: sets environmental variable based on user supplied Proxy request header

The net/http package in Go through 1.6 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect a CGI application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an "httpoxy" issue.

CVSS 3.1 · 8.1 High EPSS 5.2% KEV · Not listed
Vendors
Fedoraproject Golang Oracle and 1 more
Products
Fedora Go Linux and 4 more
CVE-2014-8105

389-ds-base: information disclosure through 'cn=changelog' subtree

389 Directory Server before 1.3.2.27 and 1.3.3.x before 1.3.3.9 does not properly restrict access to the "cn=changelog" LDAP sub-tree, which allows remote attackers to obtain sensitive information from the changelog via unspecified vectors.

CVSS 2.0 · 5.0 Medium EPSS 2.1% KEV · Not listed
Vendors
Fedoraproject Redhat
Products
389 Directory Server Fedora Enterprise Linux
CVE-2016-5385

PHP: sets environmental variable based on user supplied Proxy request header

PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, as demonstrated by (1) an application that makes a getenv('HTTP_PROXY') call or (2) a CGI configuration of PHP, aka an "httpoxy" issue.

CVSS 3.1 · 8.1 High EPSS 50.4% KEV · Not listed
Vendors
Debian Drupal Fedoraproject and 5 more
Products
Debian Linux Drupal Fedora and 13 more
CVE-2016-5384

fontconfig: Possible double free due to insufficiently validated cache files

fontconfig before 2.12.1 does not validate offsets, which allows local users to trigger arbitrary free calls and consequently conduct double free attacks and execute arbitrary code via a crafted cache file.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 2 more
Products
Ubuntu Linux Debian Linux Fedora and 2 more
CVE-2016-5244

kernel: Information leak in rds_inc_info_copy

The rds_inc_info_copy function in net/rds/recv.c in the Linux kernel through 4.6.3 does not initialize a certain structure member, which allows remote attackers to obtain sensitive information from kernel stack memory by reading an RDS message.

CVSS 3.0 · 7.5 High EPSS 5.5% KEV · Not listed
Vendors
Fedoraproject Linux Redhat and 1 more
Products
Fedora Linux Kernel Enterprise Linux and 8 more
CVE-2014-7821

openstack-neutron: DoS via maliciously crafted dns_nameservers

OpenStack Neutron before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (crash) via a crafted dns_nameservers value in the DNS configuration.

CVSS 2.0 · 4.0 Medium EPSS 3.9% KEV · Not listed
Vendors
Fedoraproject Openstack Redhat
Products
Fedora Neutron Openstack
CVE-2016-5157

chromium-browser: heap overflow in pdfium

Heap-based buffer overflow in the opj_dwt_interleave_v function in dwt.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to execute arbitrary code via crafted coordinate values in JPEG 2000 data.

CVSS 3.0 · 8.8 High EPSS 4.7% KEV · Not listed
Vendors
Fedoraproject Google Opensuse and 1 more
Products
Fedora Chrome Leap and 1 more
CVE-2014-7155

kernel: xen: Missing privilege level checks in x86 HLT, LGDT, LIDT, and LMSW emulation (XSA-105)

The x86_emulate function in arch/x86/x86_emulate/x86_emulate.c in Xen 4.4.x and earlier does not properly check supervisor mode permissions, which allows local HVM users to cause a denial of service (guest crash) or gain guest kernel mode privileges via vectors involving an (1) HLT, (2) LGDT, (3) LIDT, or (4) LMSW instruction.

CVSS 2.0 · 5.8 Medium EPSS < 1% KEV · Not listed
Vendors
Debian Fedoraproject Opensuse and 1 more
Products
Debian Linux Fedora Opensuse and 1 more
CVE-2016-4610

libxslt: Invalid memory access leading to DoS at exsltDynMapFunction()

libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2016-4607, CVE-2016-4608, CVE-2016-4609, and CVE-2016-4612.

CVSS 3.1 · 9.8 Critical EPSS 5.0% KEV · Not listed
Vendors
Apple Debian Fedoraproject and 2 more
Products
Icloud Iphone Os Itunes and 7 more
CVE-2014-7154

kernel: xen: Race condition in HVMOP_track_dirty_vram (XSA-104)

Race condition in HVMOP_track_dirty_vram in Xen 4.0.0 through 4.4.x does not ensure possession of the guarding lock for dirty video RAM tracking, which allows certain local guest domains to cause a denial of service via unspecified vectors.

CVSS 2.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Debian Fedoraproject Opensuse and 1 more
Products
Debian Linux Fedora Opensuse and 1 more
CVE-2016-4609

libxslt: Out-of-bounds read at xmlGetLineNoInternal()

libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2016-4607, CVE-2016-4608, CVE-2016-4610, and CVE-2016-4612.

CVSS 3.1 · 9.8 Critical EPSS 5.0% KEV · Not listed
Vendors
Apple Debian Fedoraproject and 2 more
Products
Icloud Iphone Os Itunes and 7 more
CVE-2016-4608

libxslt: stack-based buffer overflow at exsltDateFormat()

libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2016-4607, CVE-2016-4609, CVE-2016-4610, and CVE-2016-4612.

CVSS 3.1 · 9.8 Critical EPSS 4.9% KEV · Not listed
Vendors
Apple Fedoraproject Microsoft and 1 more
Products
Icloud Iphone Os Itunes and 6 more
CVE-2016-4607

libxslt: allows remote attacker to cause denial of service

libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2016-4608, CVE-2016-4609, CVE-2016-4610, and CVE-2016-4612.

CVSS 3.1 · 9.8 Critical EPSS 5.0% KEV · Not listed
Vendors
Apple Fedoraproject Microsoft and 1 more
Products
Icloud Iphone Os Itunes and 6 more
CVE-2014-6568

mysql: unspecified vulnerability related to Server:InnoDB:DML (CPU Jan 2015)

Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier, and 5.6.21 and earlier, allows remote authenticated users to affect availability via vectors related to Server : InnoDB : DML.

CVSS 2.0 · 3.5 Low EPSS 7.1% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 4 more
Products
Ubuntu Linux Debian Linux Fedora and 16 more