Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 24,818

CVE-2015-6763

chromium-browser: various fixes from internal audits

Multiple unspecified vulnerabilities in Google Chrome before 46.0.2490.71 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.

CVSS 2.0 · 7.5 High EPSS 7.0% KEV · Not listed
Vendors
Google Redhat
Products
Chrome Rhel Extras
CVE-2015-3184

subversion: Mixed anonymous/authenticated path-based authz with httpd 2.4

mod_authz_svn in Apache Subversion 1.7.x before 1.7.21 and 1.8.x before 1.8.14, when using Apache httpd 2.4.x, does not properly restrict anonymous access, which allows remote anonymous users to read hidden files via the path name.

CVSS 2.0 · 5.0 Medium EPSS 8.8% KEV · Not listed
Vendors
Apache Apple Redhat
Products
Http Server Subversion Xcode and 1 more
CVE-2015-3194

OpenSSL: Certificate verify crash with missing PSS parameter

crypto/rsa/rsa_ameth.c in OpenSSL 1.0.1 before 1.0.1q and 1.0.2 before 1.0.2e allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an RSA PSS ASN.1 signature that lacks a mask generation function parameter.

CVSS 3.1 · 7.5 High EPSS 44.0% KEV · Not listed
Vendors
Canonical Debian Nodejs and 2 more
Products
Ubuntu Linux Debian Linux Node.js and 3 more
CVE-2015-3195

OpenSSL: X509_ATTRIBUTE memory leak

The ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1q, and 1.0.2 before 1.0.2e mishandles errors caused by malformed X509_ATTRIBUTE data, which allows remote attackers to obtain sensitive information from process memory by triggering a decoding failure in a PKCS#7 or CMS application.

CVSS 3.1 · 5.3 Medium EPSS 38.7% KEV · Not listed
Vendors
Apple Canonical Debian and 6 more
Products
Mac Os X Ubuntu Linux Debian Linux and 25 more
CVE-2014-3672

xen: Unrestricted qemu logging

The qemu implementation in libvirt before 1.3.0 and Xen allows local guest OS users to cause a denial of service (host disk consumption) by writing to stdout or stderr.

CVSS 3.0 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat Xen
Products
Libvirt Xen
CVE-2015-3204

libreswan: crafted IKE packet causes daemon restart

libreswan 3.9 through 3.12 allows remote attackers to cause a denial of service (daemon restart) via an IKEv1 packet with (1) unassigned bits set in the IPSEC DOI value or (2) the next payload value set to ISAKMP_NEXT_SAK.

CVSS 2.0 · 5.0 Medium EPSS 2.6% KEV · Not listed
Vendors
Libreswan Redhat
Products
Libreswan Enterprise Linux
CVE-2016-1577

jasper: double free issue in jas_iccattrval_destroy()

Double free vulnerability in the jas_iccattrval_destroy function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted ICC color profile in a JPEG 2000 image file, a different vulnerability than CVE-2014-8137.

CVSS 3.0 · 7.6 High EPSS 3.3% KEV · Not listed
Vendors
Canonical Jasper Project Redhat
Products
Ubuntu Linux Jasper Enterprise Linux
CVE-2015-3212

kernel: SCTP race condition allows list corruption and panic from userlevel

Race condition in net/sctp/socket.c in the Linux kernel before 4.1.2 allows local users to cause a denial of service (list corruption and panic) via a rapid series of system calls related to sockets, as demonstrated by setsockopt calls.

CVSS 2.0 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux Enterprise Mrg and 1 more
CVE-2015-3219

python-django-horizon: XSS in Heat stack creation

Cross-site scripting (XSS) vulnerability in the Orchestration/Stack section in OpenStack Dashboard (Horizon) 2014.2 before 2014.2.4 and 2015.1.x before 2015.1.1 allows remote attackers to inject arbitrary web script or HTML via the description parameter in a heat template, which is not properly handled in the help_text attribute in the Field class.

CVSS 2.0 · 4.3 Medium EPSS 3.2% KEV · Not listed
Vendors
Debian Openstack Oracle and 1 more
Products
Debian Linux Horizon Solaris and 1 more
CVE-2015-3225

rubygem-rack: Potential Denial of Service Vulnerability in Rack normalize_params()

lib/rack/utils.rb in Rack before 1.5.4 and 1.6.x before 1.6.2, as used with Ruby on Rails 3.x and 4.x and other products, allows remote attackers to cause a denial of service (SystemStackError) via a request with a large parameter depth.

CVSS 2.0 · 5.0 Medium EPSS 7.9% KEV · Not listed
Vendors
Debian Opensuse Rack Project and 1 more
Products
Debian Linux Opensuse Rack and 3 more
CVE-2015-3235

foreman: edit_users permission allows changing of admin passwords

Foreman before 1.9.0 allows remote authenticated users with the edit_users permission to edit administrator users and change their passwords via unspecified vectors.

CVSS 2.0 · 6.0 Medium EPSS 1.6% KEV · Not listed
Vendors
Redhat Theforeman
Products
Satellite Satellite Capsule Foreman
CVE-2015-3239

libunwind: off-by-one in dwarf_to_unw_regnum()

Off-by-one error in the dwarf_to_unw_regnum function in include/dwarf_i.h in libunwind 1.1 allows local users to have unspecified impact via invalid dwarf opcodes.

CVSS 2.0 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Libunwind Project Redhat
Products
Libunwind Openstack
CVE-2015-3241

openstack-nova: Nova instance migration process does not stop when instance is deleted

OpenStack Compute (nova) 2015.1 through 2015.1.1, 2014.2.3, and earlier does not stop the migration process when the instance is deleted, which allows remote authenticated users to cause a denial of service (disk, network, and other resource consumption) by resizing and then deleting an instance.

CVSS 2.0 · 6.8 Medium EPSS 3.5% KEV · Not listed
Vendors
Openstack Redhat
Products
Nova Openstack
CVE-2015-3244

JSF: Information disclosure due to missing access restriction in portlet resource dispatching

The Portlet Bridge for JavaServer Faces in Red Hat JBoss Portal 6.2.0, when used in portlets with the default resource serving for GenericPortlet, does not properly restrict access to restricted resources, which allows remote attackers to obtain sensitive information via a URL with a modified resource ID.

CVSS 2.0 · 4.9 Medium EPSS 1.5% KEV · Not listed
Vendors
Redhat
Products
Jboss Enterprise Portal Platform
CVE-2015-3267

JON: Cross Site scripting possible on the JBoss ON 404 error page

Cross-site scripting (XSS) vulnerability in the 404 error page in Red Hat JBoss Operations Network before 3.3.3 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

CVSS 2.0 · 4.3 Medium EPSS 1.2% KEV · Not listed
Vendors
Redhat
Products
Jboss Operations Network
CVE-2016-1622

chromium-browser: same-origin bypass in Extensions

The Extensions subsystem in Google Chrome before 48.0.2564.109 does not prevent use of the Object.defineProperty method to override intended extension behavior, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code.

CVSS 3.0 · 8.8 High EPSS 1.3% KEV · Not listed
Vendors
Debian Google Opensuse and 1 more
Products
Debian Linux Chrome Opensuse and 1 more
CVE-2015-8629

krb5: xdr_nullstring() doesn't check for terminating null character

The xdr_nullstring function in lib/kadm5/kadm_rpc_xdr.c in kadmind in MIT Kerberos 5 (aka krb5) before 1.13.4 and 1.14.x before 1.14.1 does not verify whether '\0' characters exist as expected, which allows remote authenticated users to obtain sensitive information or cause a denial of service (out-of-bounds read) via a crafted string.

CVSS 3.1 · 5.3 Medium EPSS 3.7% KEV · Not listed
Vendors
Debian Mit Opensuse and 2 more
Products
Debian Linux Kerberos 5 Leap and 10 more
CVE-2016-1625

chromium-browser: navigation bypass in Chrome Instant

The Chrome Instant feature in Google Chrome before 48.0.2564.109 does not ensure that a New Tab Page (NTP) navigation target is on the most-visited or suggestions list, which allows remote attackers to bypass intended restrictions via unspecified vectors, related to instant_service.cc and search_tab_helper.cc.

CVSS 3.0 · 4.3 Medium EPSS 1.2% KEV · Not listed
Vendors
Debian Google Opensuse and 1 more
Products
Debian Linux Chrome Opensuse and 1 more
CVE-2015-3276

openldap: incorrect multi-keyword mode cipherstring parsing

The nss_parse_ciphers function in libraries/libldap/tls_m.c in OpenLDAP does not properly parse OpenSSL-style multi-keyword mode cipher strings, which might cause a weaker than intended cipher to be used and allow remote attackers to have unspecified impact via unknown vectors.

CVSS 3.1 · 7.5 High EPSS 5.3% KEV · Not listed
Vendors
Openldap Oracle Redhat
Products
Openldap Linux Enterprise Linux and 7 more