Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 24,818

CVE-2015-2675

rest: memory corruption when using oauth because of implicit declaration of rest_proxy_call_get_url

The OAuth implementation in librest before 0.7.93 incorrectly truncates the pointer returned by the rest_proxy_call_get_url function, which allows remote attackers to cause a denial of service (application crash) via running the EnsureCredentials method from the org.gnome.OnlineAccounts.Account interface on an object representing a Flickr account.

CVSS 3.0 · 7.5 High EPSS 3.5% KEV · Not listed
Vendors
Gnome Redhat
Products
Librest Enterprise Linux
CVE-2017-7895

kernel: NFSv3 server does not properly handle payload bounds checking of WRITE requests

The NFSv2 and NFSv3 server implementations in the Linux kernel through 4.10.13 lack certain checks for the end of a buffer, which allows remote attackers to trigger pointer-arithmetic errors or possibly have unspecified other impact via crafted requests, related to fs/nfsd/nfs3xdr.c and fs/nfsd/nfsxdr.c.

CVSS 3.1 · 9.8 Critical EPSS 10.8% KEV · Not listed
Vendors
Debian Linux Redhat
Products
Debian Linux Linux Kernel Enterprise Linux and 7 more
CVE-2015-3315

abrt: Various race-conditions and symlink issues found in abrt

Automatic Bug Reporting Tool (ABRT) allows local users to read, change the ownership of, or have other unspecified impact on arbitrary files via a symlink attack on (1) /var/tmp/abrt/*/maps, (2) /tmp/jvm-*/hs_error.log, (3) /proc/*/exe, (4) /etc/os-release in a chroot, or (5) an unspecified root directory related to librpm.

CVSS 3.0 · 7.8 High EPSS 4.8% KEV · Not listed
Vendors
Redhat
Products
Automatic Bug Reporting Tool Enterprise Linux Enterprise Linux Desktop and 5 more
CVE-2017-2932

flash-plugin: multiple code execution issues fixed in APSB17-02

Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable use after free vulnerability in the ActionScript MovieClip class. Successful exploitation could lead to arbitrary code execution.

CVSS 3.1 · 8.8 High EPSS 24.6% KEV · Not listed
Vendors
Adobe Apple Google and 3 more
Products
Flash Player Mac Os X Chrome Os and 5 more
CVE-2017-7889

kernel: mm subsystem does not properly enforce the CONFIG_STRICT_DEVMEM protection mechanism

The mm subsystem in the Linux kernel through 3.2 does not properly enforce the CONFIG_STRICT_DEVMEM protection mechanism, which allows local users to read or write to kernel memory locations in the first megabyte (and bypass slab-allocation access restrictions) via an application that opens the /dev/mem file, related to arch/x86/mm/init.c and drivers/char/mem.c.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Linux and 1 more
Products
Ubuntu Linux Debian Linux Linux Kernel and 3 more
CVE-2017-5026

chromium-browser: ui spoofing

Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to prevent alerts from being displayed by swapped out frames, which allowed a remote attacker to show alerts on a page they don't control via a crafted HTML page.

CVSS 3.0 · 4.3 Medium EPSS 1.4% KEV · Not listed
Vendors
Google Redhat
Products
Chrome Rhel Extras
CVE-2017-5017

chromium-browser: uninitialised memory access in webm video

Interactions with the OS in Google Chrome prior to 56.0.2924.76 for Mac insufficiently cleared video memory, which allowed a remote attacker to possibly extract image fragments on systems with GeForce 8600M graphics chips via a crafted HTML page.

CVSS 3.0 · 4.3 Medium EPSS 1.2% KEV · Not listed
Vendors
Google Redhat
Products
Chrome Rhel Extras
CVE-2017-2933

flash-plugin: multiple code execution issues fixed in APSB17-02

Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow vulnerability related to texture compression. Successful exploitation could lead to arbitrary code execution.

CVSS 3.1 · 8.8 High EPSS 29.9% KEV · Not listed
Vendors
Adobe Apple Google and 3 more
Products
Flash Player Mac Os X Chrome Os and 5 more
CVE-2017-7718

Qemu: display: cirrus: OOB read access issue

hw/display/cirrus_vga_rop.h in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) via vectors related to copying VGA data via the cirrus_bitblt_rop_fwd_transp_ and cirrus_bitblt_rop_fwd_ functions.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Debian Qemu Redhat
Products
Debian Linux Qemu Enterprise Linux and 1 more
CVE-2017-6414

Qemu: libcacard: host memory leakage while creating new APDU

Memory leak in the vcard_apdu_new function in card_7816.c in libcacard before 2.5.3 allows local guest OS users to cause a denial of service (host memory consumption) via vectors related to allocating a new APDU object.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Libcacard Project Redhat
Products
Libcacard Openstack
CVE-2017-9375

Qemu: usb: xhci infinite recursive call via xhci_kick_ep

QEMU (aka Quick Emulator), when built with USB xHCI controller emulator support, allows local guest OS privileged users to cause a denial of service (infinite recursive call) via vectors involving control transfer descriptors sequencing.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Debian Qemu Redhat
Products
Debian Linux Qemu Enterprise Linux and 1 more
CVE-2016-7797

pacemaker: pacemaker remote nodes vulnerable to hijacking, resulting in a DoS attack

Pacemaker before 1.1.15, when using pacemaker remote, might allow remote attackers to cause a denial of service (node disconnection) via an unauthenticated connection.

CVSS 3.0 · 7.5 High EPSS 3.2% KEV · Not listed
Vendors
Clusterlabs Opensuse Opensuse Project and 2 more
Products
Pacemaker Leap Leap and 5 more
CVE-2017-3461

mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2017)

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

CVSS 3.0 · 4.9 Medium EPSS 2.8% KEV · Not listed
Vendors
Debian Oracle Redhat
Products
Debian Linux Mysql Rhel Software Collections
CVE-2017-3463

mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2017)

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

CVSS 3.0 · 4.9 Medium EPSS 2.8% KEV · Not listed
Vendors
Debian Oracle Redhat
Products
Debian Linux Mysql Rhel Software Collections
CVE-2015-5221

jasper: use-after-free and double-free flaws in mif_process_cmpt()

Use-after-free vulnerability in the mif_process_cmpt function in libjasper/mif/mif_cod.c in the JasPer JPEG-2000 library before 1.900.2 allows remote attackers to cause a denial of service (crash) via a crafted JPEG 2000 image file.

CVSS 3.0 · 5.5 Medium EPSS 2.2% KEV · Not listed
Vendors
Fedoraproject Jasper Project Opensuse and 2 more
Products
Fedora Jasper Leap and 3 more
CVE-2017-7668

httpd: ap_find_token() buffer overread

The HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token list parsing, which allows ap_find_token() to search past the end of its input string. By maliciously crafting a sequence of request headers, an attacker may be able to cause a segmentation fault, or to force ap_find_token() to return an incorrect value.

CVSS 3.1 · 7.5 High EPSS 57.5% KEV · Not listed
Vendors
Apache Apple Debian and 3 more
Products
Http Server Mac Os X Debian Linux and 13 more
CVE-2017-7551

389-ds-base: Password brute-force possible for locked account due to different return codes

389-ds-base version before 1.3.5.19 and 1.3.6.7 are vulnerable to password brute-force attacks during account lockout due to different return codes returned on password attempts.

CVSS 3.0 · 9.8 Critical EPSS 1.4% KEV · Not listed
Vendors
Fedoraproject Redhat
Products
389 Directory Server Enterprise Linux
CVE-2016-9807

gstreamer-plugins-good: Invalid memory read in flx_decode_chunks

The flx_decode_chunks function in gst/flx/gstflxdec.c in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted FLIC file.

CVSS 3.0 · 5.5 Medium EPSS 2.5% KEV · Not listed
Vendors
Gstreamer Redhat
Products
Gstreamer Enterprise Linux
CVE-2017-8779

libntirpc: Memory leak when failing to parse XDR strings or bytearrays

rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through 1.4.3 do not consider the maximum RPC data size during memory allocation for XDR strings, which allows remote attackers to cause a denial of service (memory consumption with no subsequent free) via a crafted UDP packet to port 111, aka rpcbomb.

CVSS 3.0 · 7.5 High EPSS 81.2% KEV · Not listed
Vendors
Libtirpc Project Ntirpc Project Redhat and 1 more
Products
Libtirpc Ntirpc Ceph Storage and 3 more