Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 6,068

Export CSV
CVE-2002-0728

security flaw

Buffer overflow in the progressive reader for libpng 1.2.x before 1.2.4, and 1.0.x before 1.0.14, allows attackers to cause a denial of service (crash) via a PNG data stream that has more IDAT data than indicated by the IHDR chunk.

CVSS 2.0 · 5.0 Medium EPSS 2.1% KEV · Not listed
Vendors
Greg Roelofs Redhat
Products
Libpng Enterprise Linux Linux
CVE-2004-0535

security flaw

The e1000 driver for Linux kernel 2.4.26 and earlier does not properly initialize memory before using it, which allows local users to read portions of kernel memory. NOTE: this issue was originally incorrectly reported as a "buffer overflow" by some sources.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Conectiva Engardelinux Gentoo and 4 more
Products
Linux Secure Community Secure Linux and 15 more
CVE-2004-0500

security flaw

Buffer overflow in the MSN protocol plugins (1) object.c and (2) slp.c for Gaim before 0.82 allows remote attackers to cause a denial of service and possibly execute arbitrary code via MSNSLP protocol messages that are not properly handled in a strncpy call.

CVSS 2.0 · 7.5 High EPSS 5.0% KEV · Not listed
Vendors
Gentoo Mandrakesoft Redhat and 1 more
Products
Linux Mandrake Linux Enterprise Linux and 1 more
CVE-2002-0715

security flaw

Vulnerability in Squid before 2.4.STABLE6 related to proxy authentication credentials may allow remote web sites to obtain the user's proxy login and password.

CVSS 2.0 · 5.0 Medium EPSS 2.3% KEV · Not listed
Vendors
Redhat Squid
Products
Enterprise Linux Linux Squid
CVE-2004-0497

security flaw

Unknown vulnerability in Linux kernel 2.x may allow local users to modify the group ID of files, such as NFS exported files in kernel 2.4.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Conectiva Gentoo Linux and 4 more
Products
Linux Linux Linux Kernel and 6 more
CVE-2001-0496

security flaw

kdesu in kdelibs package creates world readable temporary files containing authentication info, which can allow local users to gain privileges.

CVSS 2.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Mandrakesoft Redhat
Products
Mandrake Linux Linux
CVE-2002-0714

security flaw

FTP proxy in Squid before 2.4.STABLE6 does not compare the IP addresses of control and data connections with the FTP server, which allows remote attackers to bypass firewall rules or spoof FTP server responses.

CVSS 2.0 · 7.5 High EPSS 2.7% KEV · Not listed
Vendors
Redhat Squid
Products
Enterprise Linux Linux Squid
CVE-2000-0357

security flaw

ORBit and esound in Red Hat Linux 6.1 do not use sufficiently random numbers, which allows local users to guess the authentication keys.

CVSS 2.0 · 7.5 High EPSS 1.6% KEV · Not listed
Vendors
Redhat
Products
Linux
CVE-2004-0493

security flaw

The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memory exhaustion), and possibly an integer signedness error leading to a heap-based buffer overflow on 64 bit systems, via long header lines with large numbers of space or tab characters.

CVSS 2.0 · 6.4 Medium EPSS 84.8% KEV · Not listed
Vendors
Apache Avaya Gentoo and 3 more
Products
Http Server Converged Communications Server S8300 and 6 more
CVE-2002-0713

security flaw

Buffer overflows in Squid before 2.4.STABLE6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code (1) via the MSNT auth helper (msnt_auth) when using denyusers or allowusers files, (2) via the gopher client, or (3) via the FTP server directory listing parser when HTML output is generated.

CVSS 2.0 · 7.5 High EPSS 5.5% KEV · Not listed
Vendors
Redhat Squid
Products
Enterprise Linux Linux Squid
CVE-2004-0447

security flaw

Unknown vulnerability in Linux before 2.4.26 for IA64 allows local users to cause a denial of service, with unknown impact. NOTE: due to a typo, this issue was accidentally assigned CVE-2004-0477. This is the proper candidate to use for the Linux local DoS.

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux
CVE-2001-0489

security flaw

Format string vulnerability in gftp prior to 2.0.8 allows remote malicious FTP servers to execute arbitrary commands.

CVSS 2.0 · 7.5 High EPSS 2.0% KEV · Not listed
Vendors
Gftp Redhat
Products
Gftp Linux
CVE-2004-0427

security flaw

The do_fork function in Linux 2.4.x before 2.4.26, and 2.6.x before 2.6.6, does not properly decrement the mm_count counter when an error occurs after the mm_struct for a child process has been activated, which triggers a memory leak that allows local users to cause a denial of service (memory exhaustion) via the clone (CLONE_VM) system call.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux
CVE-2004-0424

security flaw

Integer overflow in the ip_setsockopt function in Linux kernel 2.4.22 through 2.4.25 and 2.6.1 through 2.6.3 allows local users to cause a denial of service (crash) or execute arbitrary code via the MCAST_MSFILTER socket option.

CVSS 2.0 · 7.2 High EPSS 1.2% KEV · Not listed
Vendors
Linux Redhat Sgi and 1 more
Products
Linux Kernel Enterprise Linux Propack and 1 more
CVE-2002-0704

security flaw

The Network Address Translation (NAT) capability for Netfilter ("iptables") 1.2.6a and earlier leaks translated IP addresses in ICMP error messages.

CVSS 3.1 · 7.5 High EPSS 3.2% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Linux
CVE-2004-0419

security flaw

XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attackers to connect to the port, in violation of the intended restrictions.

CVSS 2.0 · 7.5 High EPSS 2.5% KEV · Not listed
Vendors
Gentoo Redhat X.org and 1 more
Products
Linux Enterprise Linux X11r6 and 1 more
CVE-2002-0703

security flaw

An interaction between the Perl MD5 module (perl-Digest-MD5) and Perl could produce incorrect MD5 checksums for UTF-8 data, which could prevent a system from properly verifying the integrity of the data.

CVSS 2.0 · 7.5 High EPSS 1.4% KEV · Not listed
Vendors
Gisle Aas Redhat
Products
Digest-md5 Linux
CVE-2004-0418

security flaw

serve_notify in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle empty data lines, which may allow remote attackers to perform an "out-of-bounds" write for a single byte to execute arbitrary code or modify critical program data.

CVSS 2.0 · 10.0 Critical EPSS 5.7% KEV · Not listed
Vendors
Cvs Gentoo Openbsd and 3 more
Products
Cvs Linux Openbsd and 3 more