Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 24,818

CVE-2016-5151

chromium-browser: use after free in pdfium

PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux mishandles timers, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted PDF document, related to fpdfsdk/javascript/JS_Object.cpp and fpdfsdk/javascript/app.cpp.

CVSS 3.0 · 8.8 High EPSS 1.4% KEV · Not listed
Vendors
Google Opensuse Redhat
Products
Chrome Leap Rhel Extras
CVE-2016-5162

chromium-browser: extensions web accessible resources bypass

The AllowCrossRendererResourceLoad function in extensions/browser/url_request_util.cc in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not properly use an extension's manifest.json web_accessible_resources field for restrictions on IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks, and trick users into changing extension settings, via a crafted web site, a different vulnerability than CVE-2016-5160.

CVSS 3.0 · 6.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Google Opensuse Redhat
Products
Chrome Leap Rhel Extras
CVE-2016-5182

chromium-browser: heap overflow in blink

Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android had insufficient validation in bitmap handling, which allowed a remote attacker to potentially exploit heap corruption via crafted HTML pages.

CVSS 3.0 · 8.8 High EPSS 1.3% KEV · Not listed
Vendors
Google Redhat
Products
Chrome Rhel Extras
CVE-2016-5191

chromium-browser: universal xss in bookmarks

Bookmark handling in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android had insufficient validation of supplied data, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via crafted HTML pages, as demonstrated by an interpretation conflict between userinfo and scheme in an http://javascript:payload@example.com URL.

CVSS 3.0 · 6.1 Medium EPSS 1.8% KEV · Not listed
Vendors
Google Redhat
Products
Chrome Rhel Extras
CVE-2016-0792

jenkins: Remote code execution through remote API (SECURITY-247)

Multiple unspecified API endpoints in Jenkins before 1.650 and LTS before 1.642.2 allow remote authenticated users to execute arbitrary code via serialized data in an XML file, related to XStream and groovy.util.Expando.

CVSS 3.0 · 8.8 High EPSS 83.3% KEV · Not listed
Vendors
Jenkins Redhat
Products
Jenkins Openshift
CVE-2016-5270

Mozilla: Heap-buffer-overflow in nsCaseTransformTextRunFactory::TransformString (MFSA 2016-85, MFSA 2016-86)

Heap-based buffer overflow in the nsCaseTransformTextRunFactory::TransformString function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 allows remote attackers to cause a denial of service (boolean out-of-bounds write) or possibly have unspecified other impact via Unicode characters that are mishandled during text conversion.

CVSS 3.0 · 9.8 Critical EPSS 3.9% KEV · Not listed
Vendors
Mozilla Redhat
Products
Firefox Enterprise Linux
CVE-2016-5361

IKEv1 protocol is vulnerable to DoS amplification attack

programs/pluto/ikev1.c in libreswan before 3.17 retransmits in initial-responder states, which allows remote attackers to cause a denial of service (traffic amplification) via a spoofed UDP packet. NOTE: the original behavior complies with the IKEv1 protocol, but has a required security update from the libreswan vendor; as of 2016-06-10, it is expected that several other IKEv1 implementations will have vendor-required security updates, with separate CVE IDs assigned to each.

CVSS 3.0 · 7.5 High EPSS 2.7% KEV · Not listed
Vendors
Libreswan Redhat
Products
Libreswan Enterprise Linux
CVE-2014-0118

httpd: mod_deflate denial of service

The deflate_in_filter function in mod_deflate.c in the mod_deflate module in the Apache HTTP Server before 2.4.10, when request body decompression is enabled, allows remote attackers to cause a denial of service (resource consumption) via crafted request data that decompresses to a much larger size.

CVSS 2.0 · 4.3 Medium EPSS 37.3% KEV · Not listed
Vendors
Apache Debian Redhat
Products
Http Server Debian Linux Enterprise Linux and 3 more
CVE-2015-0253

httpd: NULL pointer dereference crash with ErrorDocument 400 pointing to a local URL-path

The read_request_line function in server/protocol.c in the Apache HTTP Server 2.4.12 does not initialize the protocol structure member, which allows remote attackers to cause a denial of service (NULL pointer dereference and process crash) by sending a request that lacks a method to an installation that enables the INCLUDES filter and has an ErrorDocument 400 directive specifying a local URI.

CVSS 2.0 · 5.0 Medium EPSS 12.8% KEV · Not listed
Vendors
Apache Apple Oracle and 1 more
Products
Http Server Mac Os X Mac Os X Server and 3 more
CVE-2015-3185

httpd: ap_some_auth_required() does not properly indicate authenticated request in 2.4

The ap_some_auth_required function in server/request.c in the Apache HTTP Server 2.4.x before 2.4.14 does not consider that a Require directive may be associated with an authorization setting rather than an authentication setting, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging the presence of a module that relies on the 2.2 API behavior.

CVSS 3.0 · 3.7 Low EPSS 16.3% KEV · Not listed
Vendors
Apache Apple Canonical and 1 more
Products
Http Server Mac Os X Mac Os X Server and 5 more
CVE-2016-5424

postgresql: privilege escalation via crafted database and role names

PostgreSQL before 9.1.23, 9.2.x before 9.2.18, 9.3.x before 9.3.14, 9.4.x before 9.4.9, and 9.5.x before 9.5.4 might allow remote authenticated users with the CREATEDB or CREATEROLE role to gain superuser privileges via a (1) " (double quote), (2) \ (backslash), (3) carriage return, or (4) newline character in a (a) database or (b) role name that is mishandled during an administrative operation.

CVSS 3.0 · 7.1 High EPSS 4.6% KEV · Not listed
Vendors
Debian Postgresql Redhat
Products
Debian Linux Postgresql Enterprise Linux and 2 more
CVE-2015-5247

libvirt: denial of service when volume creation fails on NFS pool

The virStorageVolCreateXML API in libvirt 1.2.14 through 1.2.19 allows remote authenticated users with a read-write connection to cause a denial of service (libvirtd crash) by triggering a failed unlink after creating a volume on a root_squash NFS pool.

CVSS 3.0 · 6.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Canonical Redhat
Products
Ubuntu Linux Libvirt
CVE-2015-0460

OpenJDK: incorrect handling of phantom references (Hotspot, 8071931)

Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

CVSS 2.0 · 9.3 Critical EPSS 4.8% KEV · Not listed
Vendors
Oracle Redhat
Products
Jdk Jre Enterprise Linux and 1 more
CVE-2015-0478

OpenJDK: insufficient hardening of RSA-CRT implementation (JCE, 8071726)

Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JRockit R28.3.5, allows remote attackers to affect confidentiality via vectors related to JCE.

CVSS 2.0 · 4.3 Medium EPSS 2.8% KEV · Not listed
Vendors
Oracle Redhat
Products
Jdk Jre Jrockit and 4 more
CVE-2015-0492

JDK: unspecified vulnerability fixed in 7u79 and 8u45 (JavaFX)

Unspecified vulnerability in Oracle Java SE 7u76 and 8u40, and JavaFX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-0484.

CVSS 2.0 · 9.3 Critical EPSS 4.3% KEV · Not listed
Vendors
Opensuse Oracle Redhat and 1 more
Products
Opensuse Javafx Jdk and 3 more
CVE-2015-1822

chrony: uninitialized pointer in cmdmon reply slots

chrony before 1.31.1 does not initialize the last "next" pointer when saving unacknowledged replies to command requests, which allows remote authenticated users to cause a denial of service (uninitialized pointer dereference and daemon crash) or possibly execute arbitrary code via a large number of command requests.

CVSS 2.0 · 6.5 Medium EPSS 2.9% KEV · Not listed
Vendors
Debian Redhat Tuxfamily
Products
Debian Linux Enterprise Linux Chrony
CVE-2015-3416

sqlite: stack buffer overflow in src/printf.c

The sqlite3VXPrintf function in printf.c in SQLite before 3.8.9 does not properly handle precision and width values during floating-point conversions, which allows context-dependent attackers to cause a denial of service (integer overflow and stack-based buffer overflow) or possibly have unspecified other impact via large integers in a crafted printf function call in a SELECT statement.

CVSS 2.0 · 7.5 High EPSS 5.4% KEV · Not listed
Vendors
Apple Canonical Debian and 3 more
Products
Mac Os X Watchos Ubuntu Linux and 4 more
CVE-2016-5767

gd: Integer Overflow in gdImagePaletteToTrueColor() resulting in heap overflow

Integer overflow in the gdImageCreate function in gd.c in the GD Graphics Library (aka libgd) before 2.0.34RC1, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8, allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted image dimensions.

CVSS 3.0 · 8.8 High EPSS 6.7% KEV · Not listed
Vendors
Libgd Php Redhat
Products
Libgd Php Enterprise Linux and 1 more
CVE-2016-1627

chromium-browser: various fixes from internal audits

The Developer Tools (aka DevTools) subsystem in Google Chrome before 48.0.2564.109 does not validate URL schemes and ensure that the remoteBase parameter is associated with a chrome-devtools-frontend.appspot.com URL, which allows remote attackers to bypass intended access restrictions via a crafted URL, related to browser/devtools/devtools_ui_bindings.cc and WebKit/Source/devtools/front_end/Runtime.js.

CVSS 3.0 · 8.8 High EPSS 1.3% KEV · Not listed
Vendors
Debian Google Opensuse and 1 more
Products
Debian Linux Chrome Opensuse and 1 more
CVE-2016-1638

chromium-browser: WebAPI Bypass

extensions/renderer/resources/platform_app.js in the Extensions subsystem in Google Chrome before 49.0.2623.75 does not properly restrict use of Web APIs, which allows remote attackers to bypass intended access restrictions via a crafted platform app.

CVSS 3.0 · 6.3 Medium EPSS 1.1% KEV · Not listed
Vendors
Google Redhat
Products
Chrome Rhel Extras