Lucene search
+L
DebiancveMost viewed

61372 matches found

Debian CVE
Debian CVE
•added 2017/12/05 6:0 p.m.•66 views

CVE-2017-17051

An issue was discovered in the default FilterScheduler in OpenStack Nova 16.0.3. By repeatedly rebuilding an instance with new images, an authenticated user may consume untracked resources on a hypervisor host leading to a denial of service, aka doubled resource allocations. This regression was...

8.6CVSS6.8AI score0.01973EPSS
Exploits0
Debian CVE
Debian CVE
•added 2017/11/01 1:0 a.m.•66 views

CVE-2017-15535

Removed by vendor...

9.1CVSS9.2AI score0.01567EPSS
Exploits0
Debian CVE
Debian CVE
•added 2017/10/12 8:0 a.m.•66 views

CVE-2017-15286

SQLite 3.20.1 has a NULL pointer dereference in tableColumnList in shell.c because it fails to consider certain cases where sqlite3steppStmt==SQLITEROW is false and a data structure is never initialized...

7.5CVSS7.5AI score0.02902EPSS
Exploits1
Debian CVE
Debian CVE
•added 2017/10/04 1:0 a.m.•66 views

CVE-2017-1000098

Removed by vendor...

7.5CVSS6AI score0.02078EPSS
Exploits0
Debian CVE
Debian CVE
•added 2017/09/25 9:0 p.m.•66 views

CVE-2015-5704

scripts/licensecheck.pl in devscripts before 2.15.7 allows local users to execute arbitrary shell commands...

7.8CVSS7.7AI score0.00526EPSS
Exploits0
Debian CVE
Debian CVE
•added 2017/09/05 5:0 p.m.•66 views

CVE-2017-14156

The atyfbioctl function in drivers/video/fbdev/aty/atyfbbase.c in the Linux kernel through 4.12.10 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory by reading locations associated with padding bytes...

5.5CVSS6.2AI score0.0039EPSS
Exploits0
Debian CVE
Debian CVE
•added 2017/08/23 6:0 a.m.•66 views

CVE-2017-13146

In ImageMagick before 6.9.8-5 and 7.x before 7.0.5-6, there is a memory leak in the ReadMATImage function in coders/mat.c...

8.8CVSS6AI score0.01268EPSS
Exploits0
Debian CVE
Debian CVE
•added 2017/08/07 9:0 p.m.•66 views

CVE-2017-12669

ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteCALSImage in coders/cals.c...

8.8CVSS6AI score0.01457EPSS
Exploits0
Debian CVE
Debian CVE
•added 2017/08/07 9:0 p.m.•66 views

CVE-2017-12665

ImageMagick 7.0.6-2 has a memory leak vulnerability in WritePICTImage in coders/pict.c...

8.8CVSS6.8AI score0.01457EPSS
Exploits0
Debian CVE
Debian CVE
•added 2017/07/07 5:0 p.m.•66 views

CVE-2017-1000082

systemd v233 and earlier fails to safely parse usernames starting with a numeric digit e.g. "0day", running the service in question with root privileges rather than the user intended...

10CVSS6AI score0.03878EPSS
Exploits0
Debian CVE
Debian CVE
•added 2017/04/30 7:0 p.m.•66 views

CVE-2017-8361

The flacbuffercopy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted audio file...

8.8CVSS9.1AI score0.03902EPSS
Exploits0
Debian CVE
Debian CVE
•added 2017/04/30 7:0 p.m.•66 views

CVE-2017-8362

The flacbuffercopy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service invalid read and application crash via a crafted audio file...

6.5CVSS7.1AI score0.03423EPSS
Exploits0
Debian CVE
Debian CVE
•added 2017/04/25 5:0 p.m.•66 views

CVE-2017-8109

Removed by vendor...

7.8CVSS7.8AI score0.00434EPSS
Exploits0
Debian CVE
Debian CVE
•added 2017/03/15 3:0 p.m.•66 views

CVE-2017-5579

Memory leak in the serialexitcore function in hw/char/serial.c in QEMU aka Quick Emulator allows local guest OS privileged users to cause a denial of service host memory consumption and QEMU process crash via a large number of device unplug operations...

6.5CVSS6.6AI score0.00399EPSS
Exploits0
Debian CVE
Debian CVE
•added 2017/03/07 3:0 p.m.•66 views

CVE-2016-10040

Stack-based buffer overflow in QXmlSimpleReader in Qt 4.8.5 allows remote attackers to cause a denial of service application crash via a xml file with multiple nested open tags...

5.5CVSS5.9AI score0.01922EPSS
Exploits1
Debian CVE
Debian CVE
•added 2017/02/22 4:0 p.m.•66 views

CVE-2016-9910

The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting XSS attacks by leveraging mishandling of special characters in attribute values, a different vulnerability than CVE-2016-9909...

6.1CVSS6AI score0.02141EPSS
Exploits0
Debian CVE
Debian CVE
•added 2017/01/26 3:0 p.m.•66 views

CVE-2016-9317

The gdImageCreate function in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to cause a denial of service system hang via an oversized image...

7.1CVSS7.2AI score0.03581EPSS
Exploits0
Debian CVE
Debian CVE
•added 2017/01/18 5:0 p.m.•66 views

CVE-2016-7998

The SPIP template composer/compiler in SPIP 3.1.2 and earlier allows remote authenticated users to execute arbitrary PHP code by uploading an HTML file with a crafted 1 INCLUDE or 2 INCLURE tag and then accessing it with a validerxml action...

8.8CVSS8.7AI score0.13649EPSS
Exploits7
Debian CVE
Debian CVE
•added 2016/12/30 7:0 p.m.•66 views

CVE-2016-10033

The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a " backslash double quote in a crafted Sender property...

9.8CVSS8.7AI score0.99714EPSS
Exploits58
Debian CVE
Debian CVE
•added 2016/12/30 7:0 p.m.•66 views

CVE-2016-10045

The isMail transport in PHPMailer before 5.2.20 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code by leveraging improper interaction between the escapeshellarg function and internal escaping performed in the mail function in PHP. NOT...

9.8CVSS8.3AI score0.98038EPSS
Exploits19
Debian CVE
Debian CVE
•added 2016/12/23 10:0 p.m.•66 views

CVE-2016-9036

An exploitable incorrect return value vulnerability exists in the mpcheck function of Tarantool's Msgpuck library 1.0.3. A specially crafted packet can cause the mpcheck function to incorrectly return success when trying to check if decoding a map16 packet will read outside the bounds of a buffer...

7.5CVSS7.3AI score0.02825EPSS
Exploits2
Debian CVE
Debian CVE
•added 2016/09/26 2:0 p.m.•66 views

CVE-2016-4303

The parsestring function in cjson.c in the cJSON library mishandles UTF8/16 strings, which allows remote attackers to cause a denial of service crash or execute arbitrary code via a non-hex character in a JSON string, which triggers a heap-based buffer overflow...

9.8CVSS9.7AI score0.06963EPSS
Exploits2
Debian CVE
Debian CVE
•added 2016/09/21 2:0 p.m.•66 views

CVE-2016-6354

Heap-based buffer overflow in the yygetnextbuffer function in Flex before 2.6.1 might allow context-dependent attackers to cause a denial of service or possibly execute arbitrary code via vectors involving numtoread...

9.8CVSS10AI score0.08767EPSS
Exploits0
Debian CVE
Debian CVE
•added 2016/07/12 7:0 p.m.•66 views

CVE-2015-3192

Pivotal Spring Framework before 3.2.14 and 4.x before 4.1.7 do not properly process inline DTD declarations when DTD is not entirely disabled, which allows remote attackers to cause a denial of service memory consumption and out-of-memory errors via a crafted XML file...

5.5CVSS5.6AI score0.02555EPSS
Exploits0
Debian CVE
Debian CVE
•added 2015/10/29 8:0 p.m.•66 views

CVE-2015-3230

389 Directory Server formerly Fedora Directory Server before 1.3.3.12 does not enforce the nsSSL3Ciphers preference when creating an sslSocket, which allows remote attackers to have unspecified impact by requesting to use a disabled cipher...

7.5CVSS7.7AI score0.02573EPSS
Exploits0
Debian CVE
Debian CVE
•added 2015/09/29 12:0 a.m.•66 views

CVE-2015-5950

The NVIDIA display driver R352 before 353.82 and R340 before 341.81 on Windows; R304 before 304.128, R340 before 340.93, and R352 before 352.41 on Linux; and R352 before 352.46 on GRID vGPU and vSGA allows local users to write to an arbitrary kernel memory location and consequently gain privilege...

6.9CVSS6.2AI score0.00364EPSS
Exploits0
Debian CVE
Debian CVE
•added 2015/04/01 12:0 a.m.•66 views

CVE-2015-2808

The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic...

5CVSS5.4AI score0.73851EPSS
Exploits0
Debian CVE
Debian CVE
•added 2014/12/08 11:0 a.m.•66 views

CVE-2014-1693

Multiple CRLF injection vulnerabilities in the FTP module in Erlang/OTP R15B03 allow context-dependent attackers to inject arbitrary FTP commands via CRLF sequences in the 1 user, 2 account, 3 cd, 4 ls, 5 nlist, 6 rename, 7 delete, 8 mkdir, 9 rmdir, 10 recv, 11 recvbin, 12 recvchunkstart, 13 send...

7.5CVSS10AI score0.02193EPSS
Exploits1
Debian CVE
Debian CVE
•added 2014/08/06 7:0 p.m.•66 views

CVE-2014-0479

reportbug before 6.4.4+deb7u1 and 6.5.x before 6.5.0+nmu1 allows remote attackers to execute arbitrary commands via vectors related to compareversions and reportbug/checkversions.py...

6.8CVSS7.3AI score0.02735EPSS
Exploits0
Debian CVE
Debian CVE
•added 2014/07/20 10:0 a.m.•66 views

CVE-2014-0226

Race condition in the modstatus module in the Apache HTTP Server before 2.4.10 allows remote attackers to cause a denial of service heap-based buffer overflow, or possibly obtain sensitive credential information or execute arbitrary code, via a crafted request that triggers improper scoreboard...

6.8CVSS7.1AI score0.85744EPSS
Exploits4
Debian CVE
Debian CVE
•added 2014/07/20 10:0 a.m.•66 views

CVE-2014-4987

serverusergroups.php in phpMyAdmin 4.1.x before 4.1.14.2 and 4.2.x before 4.2.6 allows remote authenticated users to bypass intended access restrictions and read the MySQL user list via a viewUsers request...

4CVSS5.9AI score0.0126EPSS
Exploits0
Debian CVE
Debian CVE
•added 2014/07/11 2:0 p.m.•66 views

CVE-2014-4167

The L3-agent in OpenStack Neutron before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2 allows remote authenticated users to cause a denial of service IPv4 address attachment outage by attaching an IPv6 private subnet to a L3 router...

3.5CVSS5.9AI score0.01659EPSS
Exploits0
Debian CVE
Debian CVE
•added 2014/06/23 10:0 a.m.•66 views

CVE-2014-4171

mm/shmem.c in the Linux kernel through 3.15.1 does not properly implement the interaction between range notification and hole punching, which allows local users to cause a denial of service imutex hold by using the mmap system call to access a hole, as demonstrated by interfering with intended...

4.7CVSS6.5AI score0.0044EPSS
Exploits0
Debian CVE
Debian CVE
•added 2014/05/23 2:0 p.m.•66 views

CVE-2014-3801

OpenStack Orchestration API Heat 2013.2 through 2013.2.3 and 2014.1, when creating the stack for a template using a provider template, allows remote authenticated users to obtain the provider template URL via the resource-type-list...

3.5CVSS6.1AI score0.0162EPSS
Exploits0
Debian CVE
Debian CVE
•added 2014/05/09 1:0 a.m.•66 views

CVE-2014-3214

The prefetch implementation in named in ISC BIND 9.10.0, when a recursive nameserver is enabled, allows remote attackers to cause a denial of service REQUIRE assertion failure and daemon exit via a DNS query that triggers a response with unspecified attributes...

5CVSS7.7AI score0.17259EPSS
Exploits0
Debian CVE
Debian CVE
•added 2014/04/24 2:0 p.m.•66 views

CVE-2014-2915

Xen 4.4.x, when running on ARM systems, does not properly restrict access to hardware features, which allows local guest users to cause a denial of service host or guest crash via unspecified vectors, related to 1 cache control, 2 coprocessors, 3 debug registers, and 4 other unspecified registers...

5.5CVSS5.2AI score0.00616EPSS
Exploits0
Debian CVE
Debian CVE
•added 2014/04/15 2:0 p.m.•66 views

CVE-2014-0105

The authtoken middleware in the OpenStack Python client library for Keystone aka python-keystoneclient before 0.7.0 does not properly retrieve user tokens from memcache, which allows remote authenticated users to gain privileges in opportunistic circumstances via a large number of requests, relat...

6CVSS6.3AI score0.01101EPSS
Exploits0
Debian CVE
Debian CVE
•added 2014/01/26 1:0 a.m.•66 views

CVE-2014-0027

The playwavefromsocket function in audio/auserver.c in Flite 1.4 allows local users to modify arbitrary files via a symlink attack on /tmp/awb.wav. NOTE: some of these details are obtained from third party information...

3.3CVSS6.1AI score0.00331EPSS
Exploits1
Debian CVE
Debian CVE
•added 2013/06/07 10:0 a.m.•66 views

CVE-2013-2850

Heap-based buffer overflow in the iscsiaddnotunderstoodresponse function in drivers/target/iscsi/iscsitargetparameters.c in the iSCSI target subsystem in the Linux kernel through 3.9.4 allows remote attackers to cause a denial of service memory corruption and OOPS or possibly execute arbitrary co...

7.9CVSS9.3AI score0.07313EPSS
Exploits1
Debian CVE
Debian CVE
•added 2013/05/02 2:0 p.m.•66 views

CVE-2013-0306

The form library in Django 1.3.x before 1.3.6, 1.4.x before 1.4.4, and 1.5 before release candidate 2 allows remote attackers to bypass intended resource limits for formsets and cause a denial of service memory consumption or trigger server errors via a modified maxnum parameter...

5CVSS6.2AI score0.02574EPSS
Exploits1
Debian CVE
Debian CVE
•added 2013/02/13 1:0 a.m.•66 views

CVE-2013-0277

ActiveRecord in Ruby on Rails before 2.3.17 and 3.x before 3.1.0 allows remote attackers to cause a denial of service or execute arbitrary code via crafted serialized attributes that cause the +serialize+ helper to deserialize arbitrary YAML...

10CVSS7.3AI score0.07497EPSS
Exploits1
Debian CVE
Debian CVE
•added 2013/01/22 11:0 p.m.•66 views

CVE-2012-6096

Removed by vendor...

7.5CVSS6.6AI score0.6645EPSS
Exploits15
Debian CVE
Debian CVE
•added 2013/01/04 2:0 a.m.•66 views

CVE-2012-6497

The Authlogic gem for Ruby on Rails, when used with certain versions before 3.2.10, makes potentially unsafe findbyid method calls, which might allow remote attackers to conduct CVE-2012-6496 SQL injection attacks via a crafted parameter in environments that have a known secrettoken value, as...

5CVSS7.4AI score0.02737EPSS
Exploits1
Debian CVE
Debian CVE
•added 2012/11/11 11:0 a.m.•66 views

CVE-2012-4515

Removed by vendor...

6.8CVSS6.6AI score0.06438EPSS
Exploits6
Debian CVE
Debian CVE
•added 2012/03/19 9:0 p.m.•66 views

CVE-2012-1181

fcgidspawnctl.c in the modfcgid module 2.3.6 for the Apache HTTP Server does not recognize the FcgidMaxProcessesPerClass directive for a virtual host, which makes it easier for remote attackers to cause a denial of service memory consumption via a series of HTTP requests that triggers a process...

5CVSS6.3AI score0.04864EPSS
Exploits0
Debian CVE
Debian CVE
•added 2011/12/23 10:0 p.m.•66 views

CVE-2011-4596

Multiple directory traversal vulnerabilities in OpenStack Nova before 2011.3.1, when the EC2 API and the S3/RegisterImage image-registration method are enabled, allow remote authenticated users to overwrite arbitrary files via a crafted 1 tarball or 2 manifest...

6CVSS6.3AI score0.01941EPSS
Exploits0
Debian CVE
Debian CVE
•added 2011/11/02 5:0 p.m.•66 views

CVE-2011-4075

The masort function in lib/functions.php in phpLDAPadmin 1.2.x before 1.2.2 allows remote attackers to execute arbitrary PHP code via the orderby parameter aka sortby variable in a queryengine action to cmd.php, as exploited in the wild in October 2011...

7.5CVSS7.2AI score0.51891EPSS
Exploits3
Debian CVE
Debian CVE
•added 2011/02/10 5:0 p.m.•66 views

CVE-2011-0539

The keycertify function in usr.bin/ssh/key.c in OpenSSH 5.6 and 5.7, when generating legacy certificates using the -t command-line option in ssh-keygen, does not initialize the nonce field, which might allow remote attackers to obtain sensitive stack memory contents or make it easier to conduct...

7.5CVSS6.2AI score0.01797EPSS
Exploits0
Debian CVE
Debian CVE
•added 2011/01/22 9:0 p.m.•66 views

CVE-2010-3879

FUSE, possibly 2.8.5 and earlier, allows local users to create mtab entries with arbitrary pathnames, and consequently unmount any filesystem, via a symlink attack on the parent directory of the mountpoint of a FUSE filesystem, a different vulnerability than CVE-2010-0789...

5.8CVSS6.2AI score0.09848EPSS
Exploits1
Debian CVE
Debian CVE
•added 2010/11/09 8:0 p.m.•66 views

CVE-2008-7265

The prdataxfer function in ProFTPD before 1.3.2rc3 allows remote authenticated users to cause a denial of service CPU consumption via an ABOR command during a data transfer...

4CVSS6AI score0.032EPSS
Exploits0
Total number of security vulnerabilities5000