Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 24,818

CVE-2017-14063

async-http-client: Invalid URL parsing with '?'

Async Http Client (aka async-http-client) before 2.0.35 can be tricked into connecting to a host different from the one extracted by java.net.URI if a '?' character occurs in a fragment identifier. Similar bugs were previously identified in cURL (CVE-2016-8624) and Oracle Java 8 java.net.URL.

CVSS 3.0 · 7.5 High EPSS 3.0% KEV · Not listed
Vendors
Asynchttpclient Project Redhat
Products
Async-http-client Jboss Fuse
CVE-2017-14064

ruby: Arbitrary heap exposure during a JSON.generate call

Ruby through 2.2.7, 2.3.x through 2.3.4, and 2.4.x through 2.4.1 can expose arbitrary memory during a JSON.generate call. The issues lies in using strdup in ext/json/ext/generator/generator.c, which will stop after encountering a '\0' byte, returning a pointer to a string of length zero, which is not the length stored in space_len.

CVSS 3.0 · 9.8 Critical EPSS 9.4% KEV · Not listed
Vendors
Canonical Debian Redhat and 1 more
Products
Ubuntu Linux Debian Linux Enterprise Linux and 8 more
CVE-2015-7553

kernel: nfnetlink race in NETLINK_NFLOG socket creation

Race condition in the kernel in Red Hat Enterprise Linux 7, kernel-rt and Red Hat Enterprise MRG 2, when the nfnetlink_log module is loaded, allows local users to cause a denial of service (panic) by creating netlink sockets.

CVSS 3.0 · 4.7 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Enterprise Mrg Kernel-rt
CVE-2017-2934

flash-plugin: multiple code execution issues fixed in APSB17-02

Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow vulnerability when parsing Adobe Texture Format files. Successful exploitation could lead to arbitrary code execution.

CVSS 3.1 · 8.8 High EPSS 29.9% KEV · Not listed
Vendors
Adobe Apple Google and 3 more
Products
Flash Player Mac Os X Chrome Os and 5 more
CVE-2016-1000220

kibana: XSS vulnerability ESA-2016-03

Kibana before 4.5.4 and 4.1.11 are vulnerable to an XSS attack that would allow an attacker to execute arbitrary JavaScript in users' browsers.

CVSS 3.0 · 6.1 Medium EPSS 1.1% KEV · Not listed
Vendors
Elastic Redhat
Products
Kibana Openshift
CVE-2017-15102

kernel: NULL pointer dereference due to race condition in probe function of legousbtower driver

The tower_probe function in drivers/usb/misc/legousbtower.c in the Linux kernel before 4.8.1 allows local users (who are physically proximate for inserting a crafted USB device) to gain privileges by leveraging a write-what-where condition that occurs after a race condition and a NULL pointer dereference.

CVSS 3.0 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Linux Redhat
Products
Ubuntu Linux Linux Kernel Enterprise Linux
CVE-2017-13046

tcpdump: Buffer over-read in print-bgp.c:bgp_attr_print() in BGP parser

The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().

CVSS 3.0 · 9.8 Critical EPSS 3.2% KEV · Not listed
Vendors
Redhat Tcpdump
Products
Enterprise Linux Tcpdump
CVE-2015-5182

Console: CSRF via form-based API call

Cross-site request forgery (CSRF) vulnerability in the jolokia API in A-MQ.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Amq
CVE-2016-6312

httpd: Billion laughs attack regression

The mod_dontdothat component of the mod_dav_svn Apache module in Subversion as packaged in Red Hat Enterprise Linux 5.11 does not properly detect recursion during entity expansion, which allows remote authenticated users with access to the webdav repository to cause a denial of service (memory consumption and httpd crash). NOTE: Exists as a regression to CVE-2009-1955.

CVSS 3.0 · 6.5 Medium EPSS 2.2% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux
CVE-2017-8824

kernel: Use-after-free vulnerability in DCCP socket

The dccp_disconnect function in net/dccp/proto.c in the Linux kernel through 4.14.3 allows local users to gain privileges or cause a denial of service (use-after-free) via an AF_UNSPEC connect system call during the DCCP_LISTEN state.

CVSS 3.1 · 7.8 High EPSS 1.3% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux Enterprise Mrg and 6 more
CVE-2016-6347

RESTEasy: Use of the default exception handler in RESTEasy can lead to reflected XSS attack

Cross-site scripting (XSS) vulnerability in the default exception handler in RESTEasy allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.0 · 6.1 Medium EPSS 1.9% KEV · Not listed
Vendors
Redhat
Products
Resteasy
CVE-2017-6464

ntp: Denial of Service via Malformed Config

NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote attackers to cause a denial of service (ntpd crash) via a malformed mode configuration directive.

CVSS 3.0 · 6.5 Medium EPSS 5.1% KEV · Not listed
Vendors
Ntp Redhat
Products
Ntp Enterprise Linux
CVE-2017-15010

nodejs-tough-cookie: Regular expression denial of service

A ReDoS (regular expression denial of service) flaw was found in the tough-cookie module before 2.3.3 for Node.js. An attacker that is able to make an HTTP request using a specially crafted cookie may cause the application to consume an excessive amount of CPU.

CVSS 3.0 · 7.5 High EPSS 3.3% KEV · Not listed
Vendors
Redhat Salesforce
Products
Mobile Application Platform Rhel Software Collections Tough-cookie
CVE-2017-5643

camel-core: Validation component vulnerable to SSRF via remote DTDs and XXE

Apache Camel's Validation Component is vulnerable against SSRF via remote DTDs and XXE.

CVSS 3.0 · 7.4 High EPSS 5.9% KEV · Not listed
Vendors
Apache Redhat
Products
Camel Jboss Amq Jboss Fuse
CVE-2016-9394

jasper: insufficient SIZ marker segment data sanity checks

The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a crafted file.

CVSS 3.0 · 5.5 Medium EPSS 2.0% KEV · Not listed
Vendors
Jasper Project Redhat
Products
Jasper Enterprise Linux
CVE-2014-3706

ovirt-engine: connection does not validate certificate attributes.

ovirt-engine, as used in Red Hat MRG 3, allows man-in-the-middle attackers to spoof servers by leveraging failure to verify key attributes in vdsm X.509 certificates.

CVSS 3.0 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Enterprise Mrg
CVE-2017-5495

quagga: Telnet interface input buffer allocates unbounded amounts of memory

All versions of Quagga, 0.93 through 1.1.0, are vulnerable to an unbounded memory allocation in the telnet 'vty' CLI, leading to a Denial-of-Service of Quagga daemons, or even the entire host. When Quagga daemons are configured with their telnet CLI enabled, anyone who can connect to the TCP ports can trigger this vulnerability, prior to authentication. Most distributions restrict the Quagga telnet interface to local access only by default. The Quagga telnet interface 'vty' input buffer grows automatically, without bound, so long as a newline is not entered. This allows an attacker to cause the Quagga daemon to allocate unbounded memory by sending very long strings without a newline. Eventually the daemon is terminated by the system, or the system itself runs out of memory. This is fixed in Quagga 1.1.1 and Free Range Routing (FRR) Protocol Suite 2017-01-10.

CVSS 3.0 · 7.5 High EPSS 18.8% KEV · Not listed
Vendors
Quagga Redhat
Products
Quagga Enterprise Linux
CVE-2017-5486

tcpdump: multiple overflow issues in protocol decoding

The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnp_print().

CVSS 3.0 · 9.8 Critical EPSS 3.4% KEV · Not listed
Vendors
Redhat Tcpdump
Products
Enterprise Linux Tcpdump
CVE-2016-8749

camel-jacksonxml: Unmarshalling operation are vulnerable to RCE

Apache Camel's Jackson and JacksonXML unmarshalling operation are vulnerable to Remote Code Execution attacks.

CVSS 3.0 · 9.8 Critical EPSS 10.6% KEV · Not listed
Vendors
Apache Redhat
Products
Camel Jboss Amq Jboss Fuse