Export limit exceeded: 17088 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 17,088

Export CSV
CVE-2008-0887

gnome-screensaver using NIS auth will unlock if NIS goes away

gnome-screensaver before 2.22.1, when a remote authentication server is enabled, crashes upon an unlock attempt during a network outage, which allows physically proximate attackers to gain access to the locked session, a related issue to CVE-2007-1859.

CVSS 2.0 · 4.7 Medium EPSS 1.3% KEV · Not listed
Vendors
Gnome Redhat
Products
Screensaver Enterprise Linux
CVE-2008-0889

server: insecure permissions on fedora/redhat-idm-console

Red Hat Directory Server 8.0, when running on Red Hat Enterprise Linux, uses insecure permissions for the redhat-idm-console script, which allows local users to execute arbitrary code by modifying the script.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Directory Server Enterprise Linux
CVE-2008-0928

Qemu insufficient block device address range checking

Qemu 0.9.1 and earlier does not perform range checks for block device read or write requests, which allows guest host users with root privileges to access arbitrary memory and escape the virtual machine.

CVSS 2.0 · 4.7 Medium EPSS < 1% KEV · Not listed
Vendors
Qemu Redhat
Products
Qemu Enterprise Linux
CVE-2008-0947

krb5: file descriptor array overflow in RPC library

Buffer overflow in the RPC library used by libgssrpc and kadmind in MIT Kerberos 5 (krb5) 1.4 through 1.6.3 allows remote attackers to execute arbitrary code by triggering a large number of open file descriptors.

CVSS 2.0 · 10.0 Critical EPSS 8.8% KEV · Not listed
Vendors
Mit Redhat
Products
Kerberos 5 Enterprise Linux
CVE-2008-0948

krb5: incorrect handling of high-numbered file descriptors in RPC library

Buffer overflow in the RPC library (lib/rpc/rpc_dtablesize.c) used by libgssrpc and kadmind in MIT Kerberos 5 (krb5) 1.2.2, and probably other versions before 1.3, when running on systems whose unistd.h does not define the FD_SETSIZE macro, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by triggering a large number of open file descriptors.

CVSS 2.0 · 9.3 Critical EPSS 7.3% KEV · Not listed
Vendors
Mit Redhat
Products
Kerberos 5 Enterprise Linux
CVE-2008-0960

net-snmp SNMPv3 authentication bypass (VU#877044)

SNMPv3 HMAC verification in (1) Net-SNMP 5.2.x before 5.2.4.1, 5.3.x before 5.3.2.1, and 5.4.x before 5.4.1.1; (2) UCD-SNMP; (3) eCos; (4) Juniper Session and Resource Control (SRC) C-series 1.0.0 through 2.0.0; (5) NetApp (aka Network Appliance) Data ONTAP 7.3RC1 and 7.3RC2; (6) SNMP Research before 16.2; (7) multiple Cisco IOS, CatOS, ACE, and Nexus products; (8) Ingate Firewall 3.1.0 and later and SIParator 3.1.0 and later; (9) HP OpenView SNMP Emanate Master Agent 15.x; and possibly other products relies on the client to specify the HMAC length, which makes it easier for remote attackers to bypass SNMP authentication via a length value of 1, which only checks the first byte.

CVSS 2.0 · 10.0 Critical EPSS 68.8% KEV · Not listed
Vendors
Cisco Ecos Sourceware Ingate and 4 more
Products
Ace 10 6504 Bundle With 4 Gbps Throughput Ace 10 6509 Bundle With 8 Gbps Throughput Ace 10 Service Module and 24 more
CVE-2008-1036

ICU: Invalid character sequences omission during conversion of some character encodings (XSS attack possible)

The International Components for Unicode (ICU) library in Apple Mac OS X before 10.5.3, Red Hat Enterprise Linux 5, and other operating systems omits some invalid character sequences during conversion of some character encodings, which might allow remote attackers to conduct cross-site scripting (XSS) attacks.

CVSS 2.0 · 4.3 Medium EPSS 3.2% KEV · Not listed
Vendors
Apple Redhat
Products
Mac Os X Mac Os X Server Enterprise Linux
CVE-2008-1070

wireshark: SCTP dissector crash

The SCTP dissector in Wireshark (formerly Ethereal) 0.99.5 through 0.99.7 allows remote attackers to cause a denial of service (crash) via a malformed packet.

CVSS 2.0 · 5.0 Medium EPSS 2.0% KEV · Not listed
Vendors
Redhat Wireshark
Products
Enterprise Linux Wireshark
CVE-2008-1071

wireshark: SNMP dissector crash

The SNMP dissector in Wireshark (formerly Ethereal) 0.99.6 through 0.99.7 allows remote attackers to cause a denial of service (crash) via a malformed packet.

CVSS 2.0 · 4.3 Medium EPSS 1.7% KEV · Not listed
Vendors
Redhat Wireshark
Products
Enterprise Linux Wireshark
CVE-2008-1072

wireshark: TFTP dissector crash

The TFTP dissector in Wireshark (formerly Ethereal) 0.6.0 through 0.99.7, when running on Ubuntu 7.10, allows remote attackers to cause a denial of service (crash or memory consumption) via a malformed packet, possibly related to a Cairo library bug.

CVSS 2.0 · 4.7 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat Wireshark
Products
Enterprise Linux Wireshark
CVE-2008-1096

Out of bound write in ImageMagick's XCF coder

The load_tile function in the XCF coder in coders/xcf.c in (1) ImageMagick 6.2.8-0 and (2) GraphicsMagick (aka gm) 1.1.7 allows user-assisted remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted .xcf file that triggers an out-of-bounds heap write, possibly related to the ScaleCharToQuantum function.

CVSS 2.0 · 6.8 Medium EPSS 4.5% KEV · Not listed
Vendors
Imagemagick Redhat
Products
Graphicsmagick Imagemagick Enterprise Linux
CVE-2008-1097

Memory corruption in ImageMagick's PCX coder

Heap-based buffer overflow in the ReadPCXImage function in the PCX coder in coders/pcx.c in (1) ImageMagick 6.2.4-5 and 6.2.8-0 and (2) GraphicsMagick (aka gm) 1.1.7 allows user-assisted remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted .pcx file that triggers incorrect memory allocation for the scanline array, leading to memory corruption.

CVSS 2.0 · 6.8 Medium EPSS 4.5% KEV · Not listed
Vendors
Imagemagick Redhat
Products
Graphicsmagick Imagemagick Enterprise Linux
CVE-2008-1108

evolution: iCalendar buffer overflow via large timezone specification

Buffer overflow in Evolution 2.22.1, when the ITip Formatter plugin is disabled, allows remote attackers to execute arbitrary code via a long timezone string in an iCalendar attachment.

CVSS 2.0 · 7.6 High EPSS 5.7% KEV · Not listed
Vendors
Gnome Redhat
Products
Evolution Enterprise Linux Rhel Eus
CVE-2008-1109

evolution: iCalendar buffer overflow via large description parameter

Heap-based buffer overflow in Evolution 2.22.1 allows user-assisted remote attackers to execute arbitrary code via a long DESCRIPTION property in an iCalendar attachment, which is not properly handled during a reply in the calendar view (aka the Calendars window).

CVSS 2.0 · 9.3 Critical EPSS 5.7% KEV · Not listed
Vendors
Gnome Redhat
Products
Evolution Enterprise Linux
CVE-2008-1145

ruby: webrick directory traversal

Directory traversal vulnerability in WEBrick in Ruby 1.8 before 1.8.5-p115 and 1.8.6-p114, and 1.9 through 1.9.0-1, when running on systems that support backslash (\) path separators or case-insensitive file names, allows remote attackers to access arbitrary files via (1) "..%5c" (encoded backslash) sequences or (2) filenames that match patterns in the :NondisclosureName option.

CVSS 2.0 · 5.0 Medium EPSS 27.1% KEV · Not listed
Vendors
Fedoraproject Redhat Ruby-lang
Products
Fedora Enterprise Linux Ruby and 1 more
CVE-2008-1198

initscripts: IPSec ifup script allows for aggressive IKE mode

The default IPSec ifup script in Red Hat Enterprise Linux 3 through 5 configures racoon to use aggressive IKE mode instead of main IKE mode, which makes it easier for remote attackers to conduct brute force attacks by sniffing an unencrypted preshared key (PSK) hash.

CVSS 2.0 · 7.1 High EPSS 2.4% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux
CVE-2008-1199

dovecot: insecure mail_extra_groups option

Dovecot before 1.0.11, when configured to use mail_extra_groups to allow Dovecot to create dotlocks in /var/mail, might allow local users to read sensitive mail files for other users, or modify files or directories that are writable by group, via a symlink attack.

CVSS 2.0 · 4.4 Medium EPSS < 1% KEV · Not listed
Vendors
Dovecot Redhat
Products
Dovecot Enterprise Linux
CVE-2008-1232

tomcat: Cross-Site-Scripting enabled by sendError call

Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16 allows remote attackers to inject arbitrary web script or HTML via a crafted string that is used in the message argument to the HttpServletResponse.sendError method.

CVSS 2.0 · 4.3 Medium EPSS 75.9% KEV · Not listed
Vendors
Apache Redhat
Products
Tomcat Certificate System Enterprise Linux and 4 more
CVE-2008-1233

Mozilla products XPCNativeWrapper pollution

Unspecified vulnerability in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allows remote attackers to execute arbitrary code via "XPCNativeWrapper pollution."

CVSS 2.0 · 6.8 Medium EPSS 4.3% KEV · Not listed
Vendors
Mozilla Redhat
Products
Firefox Seamonkey Thunderbird and 1 more