CVE-2014-5009

snoopy: incomplete fixes for command execution flaws

Snoopy allows remote attackers to execute arbitrary commands. NOTE: this vulnerability exists due to an incomplete fix for CVE-2014-5008.

CVSS 3.0 · 9.8 Critical EPSS 4.7% KEV · Not listed

Vendors

Nagios Redhat Snoopy

Products

Nagios Openstack Snoopy

CVE-2017-5035

chromium-browser: incorrect security ui in omnibox

Google Chrome prior to 57.0.2987.98 for Windows and Mac had a race condition, which could cause Chrome to display incorrect certificate information for a site.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed

Vendors

Apple Debian Google and 2 more

Products

Macos Debian Linux Chrome and 5 more

CVE-2016-5207

chromium-browser: universal xss in blink

In Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android, corruption of the DOM tree could occur during the removal of a full screen element, which allowed a remote attacker to achieve arbitrary code execution via a crafted HTML page.

CVSS 3.0 · 6.1 Medium EPSS 2.2% KEV · Not listed

Vendors

Google Redhat

Products

Chrome Rhel Extras

CVE-2014-8168

Satellite: Local user can access MongoDB and delete database

Red Hat Satellite 6 allows local users to access mongod and delete pulp_database.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Redhat

Products

Satellite

CVE-2017-5092

chromium-browser: use after free in ppapi

Insufficient validation of untrusted input in PPAPI Plugins in Google Chrome prior to 60.0.3112.78 for Windows allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.0 · 8.8 High EPSS 1.4% KEV · Not listed

Vendors

Debian Google Microsoft and 1 more

Products

Debian Linux Chrome Windows and 1 more

CVE-2014-8170

ovirt-node: unsafe quoting in command lines

ovirt_safe_delete_config in ovirtfunctions.py and other unspecified locations in ovirt-node 3.0.0-474-gb852fd7 as packaged in Red Hat Enterprise Virtualization 3 do not properly quote input strings, which allows remote authenticated users and physically proximate attackers to execute arbitrary commands via a ; (semicolon) in an input string.

CVSS 3.0 · 8.8 High EPSS 3.5% KEV · Not listed

Vendors

Ovirt Redhat

Products

Ovirt-node Enterprise Virtualization

CVE-2016-5212

chromium-browser: local file disclosure in devtools

Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android insufficiently sanitized DevTools URLs, which allowed a remote attacker to read local files via a crafted HTML page.

CVSS 3.0 · 6.5 Medium EPSS 1.3% KEV · Not listed

Vendors

Google Redhat

Products

Chrome Rhel Extras

CVE-2015-3248

openhpi: world writable /var/lib/openhpi directory

openhpi/Makefile.am in OpenHPI before 3.6.0 uses world-writable permissions for /var/lib/openhpi directory, which allows local users, when quotas are not properly setup, to fill the filesystem hosting /var/lib and cause a denial of service (disk consumption).

CVSS 3.0 · 4.7 Medium EPSS < 1% KEV · Not listed

Vendors

Openhpi Redhat

Products

Openhpi Enterprise Linux

CVE-2017-0901

rubygems: Arbitrary file overwrite due to incorrect validation of specification name

RubyGems version 2.6.12 and earlier fails to validate specification names, allowing a maliciously crafted gem to potentially overwrite any file on the filesystem.

CVSS 3.0 · 7.5 High EPSS 29.4% KEV · Not listed

Vendors

Canonical Debian Redhat and 1 more

Products

Ubuntu Linux Debian Linux Enterprise Linux and 8 more

CVE-2016-5211

chromium-browser: use after free in pdfium

A use after free in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.

CVSS 3.0 · 8.8 High EPSS 1.1% KEV · Not listed

Vendors

Google Redhat

Products

Chrome Rhel Extras

CVE-2016-10195

libevent: Stack-buffer overflow in the name_parse() function

The name_parse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have unspecified impact via vectors involving the label_len variable, which triggers an out-of-bounds stack read.

CVSS 3.1 · 9.8 Critical EPSS 6.7% KEV · Not listed

Vendors

Debian Libevent Project Redhat

Products

Debian Linux Libevent Enterprise Linux

CVE-2016-5210

chromium-browser: out of bounds write in pdfium

Heap buffer overflow during TIFF image parsing in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.

CVSS 3.0 · 8.8 High EPSS 1.6% KEV · Not listed

Vendors

Google Redhat

Products

Chrome Rhel Extras

CVE-2017-5482

tcpdump: multiple overflow issues in protocol decoding

The Q.933 parser in tcpdump before 4.9.0 has a buffer overflow in print-fr.c:q933_print(), a different vulnerability than CVE-2016-8575.

CVSS 3.0 · 9.8 Critical EPSS 5.5% KEV · Not listed

Vendors

Redhat Tcpdump

Products

Enterprise Linux Tcpdump

CVE-2016-10208

kernel: EXT4 memory corruption / SLAB out-of-bounds read

The ext4_fill_super function in fs/ext4/super.c in the Linux kernel through 4.9.8 does not properly validate meta block groups, which allows physically proximate attackers to cause a denial of service (out-of-bounds read and system crash) via a crafted ext4 image.

CVSS 3.0 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Linux Redhat

Products

Linux Kernel Enterprise Linux Enterprise Mrg and 1 more

CVE-2017-15041

golang: arbitrary code execution during "go get" or "go get -d"

Go before 1.8.4 and 1.9.x before 1.9.1 allows "go get" remote command execution. Using custom domains, it is possible to arrange things so that example.com/pkg1 points to a Subversion repository but example.com/pkg1/pkg2 points to a Git repository. If the Subversion repository includes a Git checkout in its pkg2 directory and some other work is done to ensure the proper ordering of operations, "go get" can be tricked into reusing this Git checkout for the fetch of code from pkg2. If the Subversion repository's Git checkout has malicious commands in .git/hooks/, they will execute on the system running "go get."

CVSS 3.1 · 9.8 Critical EPSS 8.9% KEV · Not listed

Vendors

Debian Golang Redhat

Products

Debian Linux Go Developer Tools and 6 more

CVE-2014-8180

6: mongodb accessible by local users without authentication resulting in Denial of Service

MongoDB on Red Hat Satellite 6 allows local users to bypass authentication by logging in with an empty password and delete information which can cause a Denial of Service.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Mongodb Redhat

Products

Mongodb Satellite

CVE-2017-13011

tcpdump: Buffer overflow in util-print.c:bittok2str_internal()

Several protocol parsers in tcpdump before 4.9.2 could cause a buffer overflow in util-print.c:bittok2str_internal().

CVSS 3.0 · 9.8 Critical EPSS 2.5% KEV · Not listed

Vendors

Redhat Tcpdump

Products

Enterprise Linux Tcpdump

CVE-2015-3198

JBOSS: JSP source code leak when a slash added at the end of the URL

The Undertow module of WildFly 9.x before 9.0.0.CR2 and 10.x before 10.0.0.Alpha1 allows remote attackers to obtain the source code of a JSP page via a "/" at the end of a URL.

CVSS 3.0 · 7.5 High EPSS 1.8% KEV · Not listed

Vendors

Redhat

Products

Jboss Wildfly Application Server

CVE-2014-3531

foreman: XSS with operating system name/description

Multiple cross-site scripting (XSS) vulnerabilities in Foreman before 1.5.2 allow remote authenticated users to inject arbitrary web script or HTML via the operating system (1) name or (2) description.

CVSS 3.0 · 5.4 Medium EPSS 1.2% KEV · Not listed

Vendors

Redhat Theforeman

Products

Satellite Foreman

CVE-2017-15804

glibc: Buffer overflow during unescaping of user names with the ~ operator

The glob function in glob.c in the GNU C Library (aka glibc or libc6) before 2.27 contains a buffer overflow during unescaping of user names with the ~ operator.

CVSS 3.0 · 9.8 Critical EPSS 2.8% KEV · Not listed

Vendors

Gnu Redhat

Products

Glibc Enterprise Linux