Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 24,811

CVE-2012-1571

file: out of bounds read in CDF parser

file before 5.11 and libmagic allow remote attackers to cause a denial of service (crash) via a crafted Composite Document File (CDF) file that triggers (1) an out-of-bounds read or (2) an invalid pointer dereference.

CVSS 3.1 · 6.5 Medium EPSS 4.1% KEV · Not listed
Vendors
Christos Zoulas Redhat Tim Robbins
Products
File Enterprise Linux Libmagic
CVE-2024-28110

Go SDK for CloudEvents's use of WithRoundTripper to create a Client leaks credentials

Go SDK for CloudEvents is the official CloudEvents SDK to integrate applications with CloudEvents. Prior to version 2.15.2, using cloudevents.WithRoundTripper to create a cloudevents.Client with an authenticated http.RoundTripper causes the go-sdk to leak credentials to arbitrary endpoints. When the transport is populated with an authenticated transport, then http.DefaultClient is modified with the authenticated transport and will start to send Authorization tokens to any endpoint it is used to contact. Version 2.15.2 patches this issue.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Cloudevents Redhat
Products
Go Sdk Sdk Go Openshift and 1 more
CVE-2016-1834

libxml2: Heap-buffer-overflow in xmlStrncat

Heap-based buffer overflow in the xmlStrncat function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML document.

CVSS 3.1 · 7.8 High EPSS 4.6% KEV · Not listed
Vendors
Apple Canonical Debian and 3 more
Products
Iphone Os Mac Os X Tvos and 13 more
CVE-2015-5621

net-snmp: snmp_pdu_parse() incompletely parsed varBinds left in list of variables

The snmp_pdu_parse function in snmp_api.c in net-snmp 5.7.2 and earlier does not remove the varBind variable in a netsnmp_variable_list item when parsing of the SNMP PDU fails, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted packet.

CVSS 3.1 · 7.5 High EPSS 38.3% KEV · Not listed
Vendors
Net-snmp Redhat
Products
Net-snmp Enterprise Linux
CVE-2016-9842

zlib: Undefined left shift of negative number

The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.

CVSS 3.1 · 8.8 High EPSS 5.2% KEV · Not listed
Vendors
Apple Canonical Debian and 5 more
Products
Iphone Os Mac Os X Tvos and 19 more
CVE-2016-3627

libxml2: stack exhaustion while parsing xml files in recovery mode

The xmlStringGetNodeList function in tree.c in libxml2 2.9.3 and earlier, when used in recovery mode, allows context-dependent attackers to cause a denial of service (infinite recursion, stack consumption, and application crash) via a crafted XML document.

CVSS 3.1 · 7.5 High EPSS 7.0% KEV · Not listed
Vendors
Canonical Debian Hp and 4 more
Products
Ubuntu Linux Debian Linux Icewall Federation Agent and 12 more
CVE-2017-13035

tcpdump: Buffer over-read in print-isoclns.c:isis_print_id() in ISO IS-IS parser

The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_id().

CVSS 3.1 · 9.8 Critical EPSS 3.4% KEV · Not listed
Vendors
Redhat Tcpdump
Products
Enterprise Linux Tcpdump
CVE-2017-13034

tcpdump: Buffer over-read in print-pgm.c:pgm_print() in PGM parser

The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().

CVSS 3.1 · 9.8 Critical EPSS 3.2% KEV · Not listed
Vendors
Redhat Tcpdump
Products
Enterprise Linux Tcpdump
CVE-2017-13031

tcpdump: Buffer over-read in print-frag6.c:frag6_print() in IPv6 fragmentation header parser

The IPv6 fragmentation header parser in tcpdump before 4.9.2 has a buffer over-read in print-frag6.c:frag6_print().

CVSS 3.1 · 9.8 Critical EPSS 3.2% KEV · Not listed
Vendors
Redhat Tcpdump
Products
Enterprise Linux Tcpdump
CVE-2017-13025

tcpdump: Buffer over-read in print-mobility.c:mobility_opt_print() in IPv6 mobility parser

The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print().

CVSS 3.1 · 9.8 Critical EPSS 3.4% KEV · Not listed
Vendors
Redhat Tcpdump
Products
Enterprise Linux Tcpdump
CVE-2017-13022

tcpdump: Buffer over-read in print-ip.c:ip_printroute() in IP parser

The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_printroute().

CVSS 3.1 · 9.8 Critical EPSS 3.4% KEV · Not listed
Vendors
Redhat Tcpdump
Products
Enterprise Linux Tcpdump
CVE-2017-13021

tcpdump: Buffer over-read in print-icmp6.c:icmp6_print() in ICMPv6 parser

The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_print().

CVSS 3.1 · 9.8 Critical EPSS 3.4% KEV · Not listed
Vendors
Redhat Tcpdump
Products
Enterprise Linux Tcpdump
CVE-2017-13019

tcpdump: Buffer over-read in print-pgm.c:pgm_print() in PGM parser

The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().

CVSS 3.1 · 9.8 Critical EPSS 4.5% KEV · Not listed
Vendors
Redhat Tcpdump
Products
Enterprise Linux Tcpdump
CVE-2017-13017

tcpdump: Buffer over-read in print-dhcp6.c:dhcp6opt_print() in DHCPv6 parser

The DHCPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-dhcp6.c:dhcp6opt_print().

CVSS 3.1 · 9.8 Critical EPSS 2.4% KEV · Not listed
Vendors
Redhat Tcpdump
Products
Enterprise Linux Tcpdump
CVE-2017-13016

tcpdump: Buffer over-read in print-isoclns.c:esis_print() in ISO ES-IS parser

The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis_print().

CVSS 3.1 · 9.8 Critical EPSS 2.5% KEV · Not listed
Vendors
Redhat Tcpdump
Products
Enterprise Linux Tcpdump
CVE-2017-13015

tcpdump: Buffer over-read in print-eap.c:eap_print() in EAP parser

The EAP parser in tcpdump before 4.9.2 has a buffer over-read in print-eap.c:eap_print().

CVSS 3.1 · 9.8 Critical EPSS 2.4% KEV · Not listed
Vendors
Redhat Tcpdump
Products
Enterprise Linux Tcpdump
CVE-2017-13014

tcpdump: Buffer over-read in print-wb.c:wb_prep(), several functions in White Board protocol parser

The White Board protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-wb.c:wb_prep(), several functions.

CVSS 3.1 · 9.8 Critical EPSS 2.5% KEV · Not listed
Vendors
Redhat Tcpdump
Products
Enterprise Linux Tcpdump