Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 276

Export CSV
CVE-2014-0118

httpd: mod_deflate denial of service

The deflate_in_filter function in mod_deflate.c in the mod_deflate module in the Apache HTTP Server before 2.4.10, when request body decompression is enabled, allows remote attackers to cause a denial of service (resource consumption) via crafted request data that decompresses to a much larger size.

CVSS 2.0 · 4.3 Medium EPSS 37.3% KEV · Not listed
Vendors
Apache Debian Redhat
Products
Http Server Debian Linux Enterprise Linux and 3 more
CVE-2016-6304

openssl: OCSP Status Request extension unbounded memory growth

Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow remote attackers to cause a denial of service (memory consumption) via large OCSP Status Request extensions.

CVSS 3.1 · 7.5 High EPSS 63.0% KEV · Not listed
Vendors
Nodejs Novell Openssl and 1 more
Products
Node.js Suse Linux Enterprise Module For Web Scripting Openssl and 8 more
CVE-2016-6325

tomcat: tomcat writable config files allow privilege escalation

The Tomcat package on Red Hat Enterprise Linux (RHEL) 5 through 7, JBoss Web Server 3.0, and JBoss EWS 2 uses weak permissions for (1) /etc/sysconfig/tomcat and (2) /etc/tomcat/tomcat.conf, which allows local users to gain privileges by leveraging membership in the tomcat group.

CVSS 3.0 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Apache Redhat
Products
Tomcat Enterprise Linux Enterprise Linux Desktop and 8 more
CVE-2014-0098

httpd: mod_log_config does not properly handle logging certain cookies resulting in DoS

The log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP Server before 2.4.8 allows remote attackers to cause a denial of service (segmentation fault and daemon crash) via a crafted cookie that is not properly handled during truncation.

CVSS 2.0 · 5.0 Medium EPSS 26.7% KEV · Not listed
Vendors
Apache Canonical Oracle and 1 more
Products
Http Server Ubuntu Linux Http Server and 4 more
CVE-2014-0033

tomcat: session fixation still possible with disableURLRewriting enabled

org/apache/catalina/connector/CoyoteAdapter.java in Apache Tomcat 6.0.33 through 6.0.37 does not consider the disableURLRewriting setting when handling a session ID in a URL, which allows remote attackers to conduct session fixation attacks via a crafted URL.

CVSS 2.0 · 4.3 Medium EPSS 9.9% KEV · Not listed
Vendors
Apache Redhat
Products
Tomcat Jboss Enterprise Web Server
CVE-2013-6438

httpd: mod_dav denial of service via crafted DAV WRITE request

The dav_xml_get_cdata function in main/util.c in the mod_dav module in the Apache HTTP Server before 2.4.8 does not properly remove whitespace characters from CDATA sections, which allows remote attackers to cause a denial of service (daemon crash) via a crafted DAV WRITE request.

CVSS 2.0 · 5.0 Medium EPSS 27.5% KEV · Not listed
Vendors
Apache Canonical Oracle and 1 more
Products
Http Server Ubuntu Linux Http Server and 3 more
CVE-2014-3510

openssl: DTLS anonymous (EC)DH denial of service

The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote DTLS servers to cause a denial of service (NULL pointer dereference and client application crash) via a crafted handshake message in conjunction with a (1) anonymous DH or (2) anonymous ECDH ciphersuite.

CVSS 2.0 · 4.3 Medium EPSS 18.4% KEV · Not listed
Vendors
Openssl Redhat
Products
Openssl Enterprise Linux Jboss Enterprise Application Platform and 2 more
CVE-2015-7941

libxml2: Out-of-bounds memory access

libxml2 2.9.2 does not properly stop parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and libxml2 crash) via crafted XML data to the (1) xmlParseEntityDecl or (2) xmlParseConditionalSections function in parser.c, as demonstrated by non-terminated entities.

CVSS 2.0 · 4.3 Medium EPSS 3.1% KEV · Not listed
Vendors
Canonical Redhat Xmlsoft
Products
Ubuntu Linux Enterprise Linux Jboss Enterprise Web Server and 1 more
CVE-2015-3197

OpenSSL: SSLv2 doesn't block disabled ciphers

ssl/s2_srvr.c in OpenSSL 1.0.1 before 1.0.1r and 1.0.2 before 1.0.2f does not prevent use of disabled ciphers, which makes it easier for man-in-the-middle attackers to defeat cryptographic protection mechanisms by performing computations on SSLv2 traffic, related to the get_client_master_key and get_client_hello functions.

CVSS 3.0 · 5.9 Medium EPSS 10.7% KEV · Not listed
Vendors
Openssl Oracle Redhat
Products
Openssl Exalogic Infrastructure Oss Support Tools and 10 more
CVE-2013-5704

httpd: bypass of mod_headers rules via chunked requests

The mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass "RequestHeader unset" directives by placing a header in the trailer portion of data sent with chunked transfer coding. NOTE: the vendor states "this is not a security issue in httpd as such."

CVSS 2.0 · 5.0 Medium EPSS 58.0% KEV · Not listed
Vendors
Apache Apple Canonical and 2 more
Products
Http Server Mac Os X Mac Os X Server and 14 more
CVE-2014-3570

openssl: Bignum squaring may produce incorrect results

The BN_sqr implementation in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not properly calculate the square of a BIGNUM value, which might make it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors, related to crypto/bn/asm/mips.pl, crypto/bn/asm/x86_64-gcc.c, and crypto/bn/bn_asm.c.

CVSS 3.0 · 3.7 Low EPSS 21.9% KEV · Not listed
Vendors
Openssl Redhat
Products
Openssl Enterprise Linux Jboss Enterprise Application Platform and 1 more
CVE-2014-3581

httpd: NULL pointer dereference in mod_cache if Content-Type has empty value

The cache_merge_headers_out function in modules/cache/cache_util.c in the mod_cache module in the Apache HTTP Server before 2.4.11 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty HTTP Content-Type header.

CVSS 2.0 · 5.0 Medium EPSS 13.5% KEV · Not listed
Vendors
Apache Canonical Oracle and 1 more
Products
Http Server Ubuntu Linux Enterprise Manager Ops Center and 9 more
CVE-2014-8111

mod_jk: information leak due to incorrect JkMount/JkUnmount directives processing

Apache Tomcat Connectors (mod_jk) before 1.2.41 ignores JkUnmount rules for subtrees of previous JkMount rules, which allows remote attackers to access otherwise restricted artifacts via unspecified vectors.

CVSS 2.0 · 5.0 Medium EPSS 7.1% KEV · Not listed
Vendors
Apache Redhat
Products
Tomcat Connectors Jboss Enterprise Application Platform Jboss Enterprise Web Server
CVE-2015-7500

libxml2: Heap buffer overflow in xmlParseMisc

The xmlParseMisc function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service (out-of-bounds heap read) via unspecified vectors related to incorrect entities boundaries and start tags.

CVSS 2.0 · 5.0 Medium EPSS 5.9% KEV · Not listed
Vendors
Apple Canonical Debian and 3 more
Products
Iphone Os Mac Os X Tvos and 12 more
CVE-2015-0209

openssl: use-after-free on invalid EC private key import

Use-after-free vulnerability in the d2i_ECPrivateKey function in crypto/ec/ec_asn1.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a might allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a malformed Elliptic Curve (EC) private-key file that is improperly handled during import.

CVSS 2.0 · 6.8 Medium EPSS 16.4% KEV · Not listed
Vendors
Openssl Redhat
Products
Openssl Enterprise Linux Jboss Core Services and 2 more
CVE-2015-7499

libxml2: Heap-based buffer overflow in xmlGROW

Heap-based buffer overflow in the xmlGROW function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive process memory information via unspecified vectors.

CVSS 2.0 · 5.0 Medium EPSS 6.4% KEV · Not listed
Vendors
Apple Canonical Debian and 4 more
Products
Iphone Os Mac Os X Tvos and 14 more
CVE-2015-0288

openssl: X509_to_X509_REQ NULL pointer dereference

The X509_to_X509_REQ function in crypto/x509/x509_req.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a might allow attackers to cause a denial of service (NULL pointer dereference and application crash) via an invalid certificate key.

CVSS 2.0 · 5.0 Medium EPSS 8.3% KEV · Not listed
Vendors
Openssl Redhat
Products
Openssl Enterprise Linux Jboss Enterprise Web Server and 1 more
CVE-2015-0293

openssl: assertion failure in SSLv2 servers

The SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a allows remote attackers to cause a denial of service (s2_lib.c assertion failure and daemon exit) via a crafted CLIENT-MASTER-KEY message.

CVSS 2.0 · 5.0 Medium EPSS 21.2% KEV · Not listed
Vendors
Openssl Redhat
Products
Openssl Enterprise Linux Jboss Enterprise Application Platform and 5 more
CVE-2015-3183

httpd: HTTP request smuggling attack against chunked request parser

The chunked transfer coding implementation in the Apache HTTP Server before 2.4.14 does not properly parse chunk headers, which allows remote attackers to conduct HTTP request smuggling attacks via a crafted request, related to mishandling of large chunk-size values and invalid chunk-extension characters in modules/http/http_filters.c.

CVSS 3.0 · 3.7 Low EPSS 74.4% KEV · Not listed
Vendors
Apache Redhat
Products
Http Server Enterprise Linux Jboss Enterprise Application Platform and 2 more