Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 24,818

CVE-2017-12160

keycloak: resource privilege extension via access token in oauth

It was found that Keycloak oauth would permit an authenticated resource to obtain an access/refresh token pair from the authentication server, permitting indefinite usage in the case of permission revocation. An attacker on an already compromised resource could use this flaw to grant himself continued permissions and possibly conduct further attacks.

CVSS 3.1 · 7.2 High EPSS 1.9% KEV · Not listed
Vendors
Redhat
Products
Jboss Single Sign On Keycloak Red Hat Single Sign On
CVE-2016-9131

bind: assertion failure while processing response to an ANY query

named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed response to an RTYPE ANY query.

CVSS 3.1 · 7.5 High EPSS 40.6% KEV · Not listed
Vendors
Debian Isc Netapp and 1 more
Products
Debian Linux Bind Data Ontap Edge and 11 more
CVE-2016-3077

ovirt-engine: Crash of API when parsing unxepected version number

The VersionMapper.fromKernelVersionString method in oVirt Engine allows remote authenticated users to cause a denial of service (process crash) for all VMs.

CVSS 3.0 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Ovirt-engine Rhev Manager
CVE-2016-10164

libXpm: Out-of-bounds write in XPM extension parsing

Multiple integer overflows in libXpm before 3.5.12, when a program requests parsing XPM extensions on a 64-bit platform, allow remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via (1) the number of extensions or (2) their concatenated length in a crafted XPM file, which triggers a heap-based buffer overflow.

CVSS 3.0 · 9.8 Critical EPSS 7.6% KEV · Not listed
Vendors
Redhat X.org
Products
Enterprise Linux Libxpm
CVE-2016-5205

chromium-browser: universal xss in blink

Blink in Google Chrome prior to 55.0.2883.75 for Linux, Windows and Mac, incorrectly handles deferred page loads, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.

CVSS 3.0 · 6.1 Medium EPSS 1.0% KEV · Not listed
Vendors
Google Redhat
Products
Chrome Rhel Extras
CVE-2016-5217

chromium-browser: use of unvalidated data in pdfium

The extensions API in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly permitted access to privileged plugins, which allowed a remote attacker to bypass site isolation via a crafted HTML page.

CVSS 3.0 · 6.5 Medium EPSS 1.2% KEV · Not listed
Vendors
Google Redhat
Products
Chrome Rhel Extras
CVE-2014-0145

Qemu: prevent possible buffer overflows

Multiple buffer overflows in QEMU before 1.7.2 and 2.x before 2.0.0, allow local users to cause a denial of service (crash) or possibly execute arbitrary code via a large (1) L1 table in the qcow2_snapshot_load_tmp in the QCOW 2 block driver (block/qcow2-snapshot.c) or (2) uncompressed chunk, (3) chunk length, or (4) number of sectors in the DMG block driver (block/dmg.c).

CVSS 3.0 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Qemu Redhat
Products
Qemu Enterprise Linux Openstack
CVE-2016-5401

BPMS: CSRF in business-central

Cross-site request forgery (CSRF) vulnerability in Red Hat JBoss BRMS and BPMS 6 allows remote attackers to hijack the authentication of users for requests that modify instances via a crafted web page.

CVSS 3.0 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Jboss Bpm Suite Jboss Enterprise Brms Platform
CVE-2016-5546

OpenJDK: incorrect ECDSA signature extraction from the DER input (Libraries, 8168714)

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS v3.0 Base Score 7.5 (Integrity impacts).

CVSS 3.0 · 7.5 High EPSS 3.2% KEV · Not listed
Vendors
Oracle Redhat
Products
Jdk Jre Jrockit and 4 more
CVE-2016-5552

OpenJDK: incorrect URL parsing in URLStreamHandler (Networking, 8167223)

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS v3.0 Base Score 5.3 (Integrity impacts).

CVSS 3.0 · 5.3 Medium EPSS 2.7% KEV · Not listed
Vendors
Oracle Redhat
Products
Jdk Jre Jrockit and 4 more
CVE-2016-6812

apache-cxf: XSS in Apache CXF FormattedServiceListWriter

The HTTP transport module in Apache CXF prior to 3.0.12 and 3.1.x prior to 3.1.9 uses FormattedServiceListWriter to provide an HTML page which lists the names and absolute URL addresses of the available service endpoints. The module calculates the base URL using the current HttpServletRequest. The calculated base URL is used by FormattedServiceListWriter to build the service endpoint absolute URLs. If the unexpected matrix parameters have been injected into the request URL then these matrix parameters will find their way back to the client in the services list page which represents an XSS risk to the client.

CVSS 3.0 · 6.1 Medium EPSS 7.5% KEV · Not listed
Vendors
Apache Redhat
Products
Cxf Jboss Amq Jboss Fuse
CVE-2014-0120

hawtio-karaf-terminal: cross-site request forgery (CSRF)

Cross-site request forgery (CSRF) vulnerability in the admin terminal in Hawt.io allows remote attackers to hijack the authentication of arbitrary users for requests that run commands on the Karaf server, as demonstrated by running "shutdown -f."

CVSS 3.0 · 8.8 High EPSS 1.2% KEV · Not listed
Vendors
Hawt Redhat
Products
Hawtio Jboss Fuse
CVE-2016-9811

gstreamer: Out of bounds heap read in windows_icon_typefind

The windows_icon_typefind function in gst-plugins-base in GStreamer before 1.10.2, when G_SLICE is set to always-malloc, allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted ico file.

CVSS 3.1 · 4.7 Medium EPSS 2.3% KEV · Not listed
Vendors
Debian Fedoraproject Gstreamer and 1 more
Products
Debian Linux Fedora Gstreamer and 7 more
CVE-2017-18005

exiv2: null pointer dereference in the Exiv2::DataValue::toLong function in value.cpp

Exiv2 0.26 has a Null Pointer Dereference in the Exiv2::DataValue::toLong function in value.cpp, related to crafted metadata in a TIFF file.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Debian Exiv2 Redhat
Products
Debian Linux Exiv2 Enterprise Linux
CVE-2017-5034

chromium-browser: use after free in pdfium

A use after free in PDFium in Google Chrome prior to 57.0.2987.98 for Linux and Windows allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file.

CVSS 3.0 · 8.8 High EPSS 1.6% KEV · Not listed
Vendors
Google Linux Microsoft and 1 more
Products
Chrome Linux Kernel Windows and 1 more
CVE-2017-5037

chromium-browser: multiple out of bounds writes in chunkdemuxer

An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer.

CVSS 3.1 · 7.8 High EPSS 1.2% KEV · Not listed
Vendors
Apple Debian Google and 3 more
Products
Macos Debian Linux Android and 7 more
CVE-2017-5039

chromium-browser: use after free in pdfium

A use after free in PDFium in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.

CVSS 3.1 · 7.8 High EPSS 1.2% KEV · Not listed
Vendors
Apple Debian Google and 3 more
Products
Macos Debian Linux Android and 7 more
CVE-2017-5040

chromium-browser: information disclosure in v8

V8 in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android was missing a neutering check, which allowed a remote attacker to read values in memory via a crafted HTML page.

CVSS 3.1 · 4.3 Medium EPSS 27.4% KEV · Not listed
Vendors
Apple Debian Google and 3 more
Products
Macos Debian Linux Android and 7 more
CVE-2017-5042

chromium-browser: incorrect handling of cookies in cast

Cast in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android sent cookies to sites discovered via SSDP, which allowed an attacker on the local network segment to initiate connections to arbitrary URLs and observe any plaintext cookies sent.

CVSS 3.1 · 5.7 Medium EPSS < 1% KEV · Not listed
Vendors
Apple Debian Google and 3 more
Products
Macos Debian Linux Android and 7 more
CVE-2015-7978

ntp: stack exhaustion in recursive traversal of restriction list

NTP before 4.2.8p6 and 4.3.0 before 4.3.90 allows a remote attackers to cause a denial of service (stack exhaustion) via an ntpdc relist command, which triggers recursive traversal of the restriction list.

CVSS 3.0 · 7.5 High EPSS 9.9% KEV · Not listed
Vendors
Ntp Redhat
Products
Ntp Enterprise Linux