Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 12

Export CSV
CVE-2026-13476

IBM Informix Wire Listener Vulnerable to Unauthenticated Remote Code Execution

IBM Informix Dynamic Server 14.10, 15.0, and 12.10 could allow an unauthenticated user to execute arbitrary commands with service account privileges on the system due to improper validation of user supplied input.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
Canonical Hp Ibm and 4 more
Products
Ubuntu Linux Hp-ux Aix and 6 more
CVE-2026-13367

IBM Informix Dynamic Server Privilege Escalation Vulnerability in oninit Utility

IBM Informix Dynamic Server 14.10, and 15.0 contain a local privilege escalation vulnerability in the oninit setuid-root utility.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Canonical Hp Ibm and 4 more
Products
Ubuntu Linux Hp-ux Aix and 6 more
CVE-2008-0596

cups: memory leak handling IPP browse requests

Memory leak in CUPS before 1.1.22, and possibly other versions, allows remote attackers to cause a denial of service (memory consumption and daemon crash) via a large number of requests to add and remove shared printers.

CVSS 2.0 · 5.0 Medium EPSS 2.3% KEV · Not listed
Vendors
Easy Software Products Redhat
Products
Cups Desktop Enterprise Linux
CVE-2008-0597

cups: dereference of free'd memory handling IPP browse requests

Use-after-free vulnerability in CUPS before 1.1.22, and possibly other versions, allows remote attackers to cause a denial of service (crash) via crafted IPP packets.

CVSS 2.0 · 5.0 Medium EPSS 2.3% KEV · Not listed
Vendors
Easy Software Products Redhat
Products
Cups Desktop Enterprise Linux
CVE-2008-1767

libxslt: fixed-sized steps array overflow via "template match" condition in XSL file

Buffer overflow in pattern.c in libxslt before 1.1.24 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via an XSL style sheet file with a long XSLT "transformation match" condition that triggers a large number of steps.

CVSS 2.0 · 7.5 High EPSS 12.8% KEV · Not listed
Vendors
Redhat
Products
Desktop Enterprise Linux Enterprise Linux Desktop and 2 more
CVE-2008-1943

PVFB backend fails to validate frontend's framebuffer description

Buffer overflow in the backend of XenSource Xen Para Virtualized Frame Buffer (PVFB) 3.0 through 3.1.2 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a crafted description of a shared framebuffer.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Redhat Xensource
Products
Desktop Enterprise Linux Virtualization Server and 1 more
CVE-2008-2808

Firefox file location escaping flaw

Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly escape HTML in file:// URLs in directory listings, which allows remote attackers to conduct cross-site scripting (XSS) attacks or have unspecified other impact via a crafted filename.

CVSS 2.0 · 4.3 Medium EPSS 1.3% KEV · Not listed
Vendors
Mozilla Redhat Ubuntu
Products
Firefox Seamonkey Thunderbird and 7 more
CVE-2008-1944

PVFB SDL backend chokes on bogus screen updates

Buffer overflow in the backend framebuffer of XenSource Xen Para-Virtualized Framebuffer (PVFB) Message 3.0 through 3.0.3 allows local users to cause a denial of service (SDL crash) and possibly execute arbitrary code via "bogus screen updates," related to missing validation of the "format of messages."

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Redhat Xensource
Products
Desktop Enterprise Linux Virtualization Server and 1 more
CVE-2008-0411

ghostscript: stack-based buffer overflow in .seticcspace operator

Stack-based buffer overflow in the zseticcspace function in zicc.c in Ghostscript 8.61 and earlier allows remote attackers to execute arbitrary code via a postscript (.ps) file containing a long Range array in a .seticcspace operator.

CVSS 2.0 · 6.8 Medium EPSS 14.5% KEV · Not listed
Vendors
Debian Ghostscript Mandrakesoft and 3 more
Products
Debian Linux Ghostscript Mandrake Linux and 11 more
CVE-2012-0867

postgresql: MITM due improper x509_v3 CN validation during certificate verification

PostgreSQL 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 truncates the common name to only 32 characters when verifying SSL certificates, which allows remote attackers to spoof connections when the host name is exactly 32 characters.

CVSS 2.0 · 4.3 Medium EPSS 2.3% KEV · Not listed
Vendors
Debian Opensuse Project Postgresql and 1 more
Products
Debian Linux Opensuse Postgresql and 8 more
CVE-2009-2696

tomcat: missing fix for CVE-2009-0781

Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat on Red Hat Enterprise Linux 5, Desktop Workstation 5, and Linux Desktop 5 allows remote attackers to inject arbitrary web script or HTML via the time parameter, related to "invalid HTML." NOTE: this is due to a missing fix for CVE-2009-0781.

CVSS 2.0 · 4.3 Medium EPSS 5.0% KEV · Not listed
Vendors
Apache Redhat
Products
Tomcat Desktop Workstation Enterprise Linux and 1 more