Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 24,818

CVE-2015-1852

keystonemiddleware/keystoneclient: S3Token TLS cert verification option not honored

The s3_token middleware in OpenStack keystonemiddleware before 1.6.0 and python-keystoneclient before 1.4.0 disables certification verification when the "insecure" option is set in a paste configuration (paste.ini) file regardless of the value, which allows remote attackers to conduct man-in-the-middle attacks via a crafted certificate, a different vulnerability than CVE-2014-7144.

CVSS 2.0 · 4.3 Medium EPSS 2.2% KEV · Not listed
Vendors
Canonical Openstack Redhat
Products
Ubuntu Linux Keystonemiddleware Python-keystoneclient and 1 more
CVE-2015-7833

kernel: usbvision: crash on invalid USB device descriptors

The usbvision driver in the Linux kernel package 3.10.0-123.20.1.el7 through 3.10.0-229.14.1.el7 in Red Hat Enterprise Linux (RHEL) 7.1 allows physically proximate attackers to cause a denial of service (panic) via a nonzero bInterfaceNumber value in a USB device descriptor.

CVSS 2.0 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Novell Redhat
Products
Suse Linux Enterprise Real Time Extension Enterprise Linux
CVE-2015-8784

libtiff: out-of-bound write in NeXTDecode()

The NeXTDecode function in tif_next.c in LibTIFF allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted TIFF image, as demonstrated by libtiff5.tif.

CVSS 3.1 · 6.5 Medium EPSS 4.6% KEV · Not listed
Vendors
Debian Libtiff Redhat
Products
Debian Linux Libtiff Enterprise Linux
CVE-2015-5303

python-rdomanager-oscplugin: NeutronMetadataProxySharedSecret parameter uses default value

The TripleO Heat templates (tripleo-heat-templates), when deployed via the commandline interface, allow remote attackers to spoof OpenStack Networking metadata requests by leveraging knowledge of the default value of the NeutronMetadataProxySharedSecret parameter.

CVSS 3.0 · 7.5 High EPSS 1.7% KEV · Not listed
Vendors
Openstack Redhat
Products
Tripleo Heat Templates Openstack-director
CVE-2016-0639

mysql: unspecified vulnerability in subcomponent: Server: Pluggable Authentication (CPU April 2016)

Unspecified vulnerability in Oracle MySQL 5.6.29 and earlier and 5.7.11 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Pluggable Authentication.

CVSS 3.0 · 9.8 Critical EPSS 10.2% KEV · Not listed
Vendors
Oracle Redhat
Products
Mysql Enterprise Linux Rhel Software Collections
CVE-2016-5191

chromium-browser: universal xss in bookmarks

Bookmark handling in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android had insufficient validation of supplied data, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via crafted HTML pages, as demonstrated by an interpretation conflict between userinfo and scheme in an http://javascript:payload@example.com URL.

CVSS 3.0 · 6.1 Medium EPSS 1.8% KEV · Not listed
Vendors
Google Redhat
Products
Chrome Rhel Extras
CVE-2016-1867

jasper: out-of-bounds read in jpc_pi_nextcprl()

The jpc_pi_nextcprl function in JasPer 1.900.1 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG 2000 image.

CVSS 3.0 · 6.5 Medium EPSS 2.3% KEV · Not listed
Vendors
Jasper Project Redhat
Products
Jasper Enterprise Linux
CVE-2016-5184

chromium-browser: use after free in pdfium

PDFium in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android incorrectly handled object lifecycles in CFFL_FormFillter::KillFocusForAnnot, which allowed a remote attacker to potentially exploit heap corruption via crafted PDF files.

CVSS 3.0 · 8.8 High EPSS 1.1% KEV · Not listed
Vendors
Google Redhat
Products
Chrome Rhel Extras
CVE-2016-4049

quagga: denial of service vulnerability in BGP routing daemon

The bgp_dump_routes_func function in bgpd/bgp_dump.c in Quagga does not perform size checks when dumping data, which might allow remote attackers to cause a denial of service (assertion failure and daemon crash) via a large BGP packet.

CVSS 3.0 · 7.5 High EPSS 4.6% KEV · Not listed
Vendors
Opensuse Quagga Redhat
Products
Leap Opensuse Quagga and 1 more
CVE-2015-5295

openstack-heat: Vulnerability in Heat template validation leading to DoS

The template-validate command in OpenStack Orchestration API (Heat) before 2015.1.3 (kilo) and 5.0.x before 5.0.1 (liberty) allows remote authenticated users to cause a denial of service (memory consumption) or determine the existence of local files via the resource type in a template, as demonstrated by file:///dev/zero.

CVSS 3.0 · 5.4 Medium EPSS 2.9% KEV · Not listed
Vendors
Fedoraproject Openstack Oracle and 1 more
Products
Fedora Orchestration Api Solaris and 1 more
CVE-2016-4054

squid: multiple issues in ESI processing

Buffer overflow in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allows remote attackers to execute arbitrary code via crafted Edge Side Includes (ESI) responses.

CVSS 3.0 · 8.1 High EPSS 77.6% KEV · Not listed
Vendors
Canonical Oracle Redhat and 1 more
Products
Ubuntu Linux Linux Enterprise Linux and 1 more
CVE-2015-5302

libreport: Possible private data leak in Bugzilla bugs opened by ABRT

libreport 2.0.7 before 2.6.3 only saves changes to the first file when editing a crash report, which allows remote attackers to obtain sensitive information via unspecified vectors related to the (1) backtrace, (2) cmdline, (3) environ, (4) open_fds, (5) maps, (6) smaps, (7) hostname, (8) remote, (9) ks.cfg, or (10) anaconda-tb file attachment included in a Red Hat Bugzilla bug report.

CVSS 2.0 · 5.0 Medium EPSS 2.8% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Libreport
CVE-2016-4072

php: Invalid memory write in phar on filename containing \0 inside name

The Phar extension in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allows remote attackers to execute arbitrary code via a crafted filename, as demonstrated by mishandling of \0 characters by the phar_analyze_path function in ext/phar/phar.c.

CVSS 3.0 · 9.8 Critical EPSS 5.9% KEV · Not listed
Vendors
Apple Php Redhat
Products
Mac Os X Php Rhel Software Collections
CVE-2016-4073

php: mb_strcut() Negative size parameter in memcpy

Multiple integer overflows in the mbfl_strcut function in ext/mbstring/libmbfl/mbfl/mbfilter.c in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted mb_strcut call.

CVSS 3.0 · 9.8 Critical EPSS 7.1% KEV · Not listed
Vendors
Apple Php Redhat
Products
Mac Os X Php Rhel Software Collections
CVE-2016-5183

chromium-browser: use after free in pdfium

A heap use after free in PDFium in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android allows a remote attacker to potentially exploit heap corruption via crafted PDF files.

CVSS 3.0 · 8.8 High EPSS 1.2% KEV · Not listed
Vendors
Google Redhat
Products
Chrome Rhel Extras
CVE-2016-5182

chromium-browser: heap overflow in blink

Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android had insufficient validation in bitmap handling, which allowed a remote attacker to potentially exploit heap corruption via crafted HTML pages.

CVSS 3.0 · 8.8 High EPSS 1.3% KEV · Not listed
Vendors
Google Redhat
Products
Chrome Rhel Extras
CVE-2016-5175

chromium-browser: various fixes from internal audits

Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.113 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.

CVSS 3.0 · 8.8 High EPSS 1.0% KEV · Not listed
Vendors
Google Redhat
Products
Chrome Rhel Extras
CVE-2016-5162

chromium-browser: extensions web accessible resources bypass

The AllowCrossRendererResourceLoad function in extensions/browser/url_request_util.cc in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not properly use an extension's manifest.json web_accessible_resources field for restrictions on IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks, and trick users into changing extension settings, via a crafted web site, a different vulnerability than CVE-2016-5160.

CVSS 3.0 · 6.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Google Opensuse Redhat
Products
Chrome Leap Rhel Extras
CVE-2015-6836

php: SOAP serialize_function_call() type confusion

The SoapClient __call method in ext/soap/soap.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 does not properly manage headers, which allows remote attackers to execute arbitrary code via crafted serialized data that triggers a "type confusion" in the serialize_function_call function.

CVSS 3.0 · 7.3 High EPSS 10.3% KEV · Not listed
Vendors
Php Redhat
Products
Php Rhel Software Collections
CVE-2016-4112

flash-plugin: multiple code execution issues fixed in APSB16-15

Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.

CVSS 3.0 · 7.5 High EPSS 8.4% KEV · Not listed
Vendors
Adobe Microsoft Redhat
Products
Flash Player Edge Internet Explorer and 1 more