Lucene search
+L
UbuntucveMost viewed

75842 matches found

UbuntuCve
UbuntuCve
•added 2017/12/04 8:29 a.m.•48 views

CVE-2017-17121

The Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29.1, allows remote attackers to cause a denial of service memory access violation or possibly have unspecified other impact via a COFF binary in which a relocation refers to a location after the end of the...

7.8CVSS7AI score0.01702EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
•added 2017/11/30 12:00 a.m.•48 views

CVE-2017-1000405

The Linux Kernel versions 2.6.38 through 4.14 have a problematic use of pmdmkdirty in the touchpmd function inside the THP implementation. touchpmd can be reached by getuserpages. In such case, the pmd will become dirty. This scenario breaks the new canfollowwritepmd's logic - pmd can become dirt...

7CVSS6.5AI score0.02841EPSS
SaveExploits10References13
UbuntuCve
UbuntuCve
•added 2017/11/21 12:00 a.m.•48 views

CVE-2017-14746

Use-after-free vulnerability in Samba 4.x before 4.7.3 allows remote attackers to execute arbitrary code via a crafted SMB1 request...

9.8CVSS7.2AI score0.09876EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2017/11/10 2:29 a.m.•48 views

CVE-2017-12783

The ReadDataFloat function in ebmlnumber.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service assert fault via a crafted mkv file...

6.5CVSS6.7AI score0.02415EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
•added 2017/11/07 12:00 a.m.•48 views

CVE-2017-16645

The imspcugetcdcuniondesc function in drivers/input/misc/ims-pcu.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service imspcuparsecdcdata out-of-bounds read and system crash or possibly have unspecified other impact via a crafted USB device...

7.2CVSS6.8AI score0.00404EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2017/11/03 12:00 a.m.•48 views

CVE-2017-16538

drivers/media/usb/dvb-usb-v2/lmedm04.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service general protection fault and system crash or possibly have unspecified other impact via a crafted USB device, related to a missing warm-start check and incorrect attach timin...

7.2CVSS6.7AI score0.00397EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2017/10/22 12:00 a.m.•48 views

CVE-2017-15804

The glob function in glob.c in the GNU C Library aka glibc or libc6 before 2.27 contains a buffer overflow during unescaping of user names with the operator...

9.8CVSS7.1AI score0.02801EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2017/10/19 12:00 a.m.•48 views

CVE-2017-10347

Vulnerability in the Java SE, JRockit component of Oracle Java SE subcomponent: Serialization. Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple...

5.3CVSS6.8AI score0.03114EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2017/10/19 12:00 a.m.•48 views

CVE-2017-10356

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Security. Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Easily exploitable vulnerability allows unauthenticated attacker wit...

6.2CVSS6.7AI score0.00754EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2017/10/19 12:00 a.m.•48 views

CVE-2017-10355

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Networking. Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Easily exploitable vulnerability allows unauthenticated attacker...

5.3CVSS6.7AI score0.16181EPSS
SaveExploits2References6
UbuntuCve
UbuntuCve
•added 2017/10/18 12:00 a.m.•48 views

CVE-2017-10379

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Client programs. Supported versions that are affected are 5.5.57 and earlier, 5.6.37 and earlier and 5.7.19 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple...

6.5CVSS6.9AI score0.0228EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2017/10/18 12:00 a.m.•48 views

CVE-2017-10155

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Pluggable Auth. Supported versions that are affected are 5.6.37 and earlier and 5.7.19 and earlier. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to...

7.5CVSS7AI score0.04291EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2017/10/14 11:29 p.m.•48 views

CVE-2017-12629

Remote code execution occurs in Apache Solr before 7.1 with Apache Lucene before 7.1 by exploiting XXE in conjunction with use of a Config API add-listener command to reach the RunExecutableListener class. Elasticsearch, although it uses Lucene, is NOT vulnerable to this. Note that the XML extern...

9.8CVSS7.6AI score0.91896EPSS
SaveExploits12References4
UbuntuCve
UbuntuCve
•added 2017/10/11 12:00 a.m.•48 views

CVE-2017-12192

The keyctlreadkey function in security/keys/keyctl.c in the Key Management subcomponent in the Linux kernel before 4.13.5 does not properly consider that a key may be possessed but negatively instantiated, which allows local users to cause a denial of service OOPS and system crash via a crafted...

5.5CVSS6.7AI score0.00449EPSS
SaveExploits0References8
UbuntuCve
UbuntuCve
•added 2017/09/26 6:29 p.m.•48 views

CVE-2017-14749

JerryScript 1.0 allows remote attackers to cause a denial of service jmemheapallocblockinternal heap memory corruption or possibly execute arbitrary code via a crafted .js file, because unrecognized \ characters cause incorrect 0x00 characters in bytecode.literal data...

7.8CVSS7.2AI score0.02068EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
•added 2017/09/23 8:29 p.m.•48 views

CVE-2017-14719

Before version 4.8.2, WordPress was vulnerable to a directory traversal attack during unzip operations in the ZipArchive and PclZip components...

7.5CVSS7.1AI score0.13885EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
•added 2017/09/19 1:29 p.m.•48 views

CVE-2017-12615

When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled e.g. via setting the readonly initialisation parameter of the Default to false it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it containe...

8.1CVSS7.3AI score0.99607EPSS
SaveExploits20References3
UbuntuCve
UbuntuCve
•added 2017/08/31 3:29 p.m.•48 views

CVE-2017-14055

In libavformat/mvdec.c in FFmpeg 3.3.3, a DoS in mvreadheader due to lack of an EOF End of File check might cause huge CPU and memory consumption. When a crafted MV file, which claims a large "nbframes" field in the header but does not contain sufficient backing data, is provided, the loop over t...

7.1CVSS6.9AI score0.01822EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2017/08/28 12:00 a.m.•48 views

CVE-2017-3735

While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. This bug has been present since 2006 and is present in all versions of OpenSSL before 1.0.2m and 1.1.0g...

5.3CVSS6.5AI score0.17699EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2017/08/23 5:29 p.m.•48 views

CVE-2017-13147

In GraphicsMagick 1.3.26, an allocation failure vulnerability was found in the function ReadMNGImage in coders/png.c when a small MNG file has a MEND chunk with a large length value...

8.8CVSS6.8AI score0.01537EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2017/06/29 11:29 p.m.•48 views

CVE-2017-10685

In ncurses 6.0, there is a format string vulnerability in the fmtentry function. A crafted input will lead to a remote arbitrary code execution attack...

9.8CVSS7.1AI score0.04257EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2017/06/19 3:00 p.m.•48 views

CVE-2017-1000371

The offset2lib patch as used by the Linux Kernel contains a vulnerability, if RLIMITSTACK is set to RLIMINFINITY and 1 Gigabyte of memory is allocated the maximum under the 1/4 restriction then the stack will be grown down to 0x80000000, and as the PIE binary is mapped above 0x80000000 the minimu...

7.8CVSS6.7AI score0.02732EPSS
SaveExploits6References2
UbuntuCve
UbuntuCve
•added 2017/06/14 12:00 a.m.•48 views

CVE-2017-7777

Use of uninitialized memory in Graphite2 library in Firefox before 54 in graphite2::GlyphCache::Loader::readglyph function...

8.8CVSS6.9AI score0.01199EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
•added 2017/05/25 5:29 p.m.•48 views

CVE-2015-5211

Under some situations, the Spring Framework 4.2.0 to 4.2.1, 4.0.0 to 4.1.7, 3.2.0 to 3.2.14 and older unsupported versions is vulnerable to a Reflected File Download RFD attack. The attack involves a malicious user crafting a URL with a batch script extension that results in the response being...

9.6CVSS6.8AI score0.0257EPSS
SaveExploits1References7
UbuntuCve
UbuntuCve
•added 2017/05/23 6:29 p.m.•48 views

CVE-2017-0374

lib/Config/Model.pm in Config-Model aka libconfig-model-perl before 2.102 allows local users to gain privileges via a crafted model in the current working directory, related to use of . with the INC array...

7.8CVSS7.1AI score0.00404EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2017/05/22 12:00 a.m.•48 views

CVE-2017-9147

LibTIFF 4.0.7 has an invalid read in the TIFFVGetField function in tifdir.c, which might allow remote attackers to cause a denial of service crash via a crafted TIFF file...

6.5CVSS6.8AI score0.07EPSS
SaveExploits2References2
UbuntuCve
UbuntuCve
•added 2017/05/08 12:00 a.m.•48 views

CVE-2017-8831

The saa7164busget function in drivers/media/pci/saa7164/saa7164-bus.c in the Linux kernel through 4.11.5 allows local users to cause a denial of service out-of-bounds array access or possibly have unspecified other impact by changing a certain sequence-number value, aka a "double fetch"...

6.9CVSS6.8AI score0.00373EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2017/04/24 12:00 a.m.•48 views

CVE-2017-3453

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Optimizer. Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple...

6.5CVSS6.7AI score0.03078EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2017/04/07 10:59 p.m.•48 views

CVE-2017-0556

An information disclosure vulnerability in libmpeg2 in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access data without permission. Product: Android. Versions: 6.0, 6.0.1, 7.0,...

5.5CVSS6.4AI score0.00524EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2017/04/03 12:00 a.m.•48 views

CVE-2016-10217

The pdf14open function in base/gdevp14.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service use-after-free and application crash via a crafted file that is mishandled in the color management module...

5.5CVSS6.8AI score0.01459EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
•added 2017/02/13 12:00 a.m.•48 views

CVE-2017-6056

It was discovered that a programming error in the processing of HTTPS requests in the Apache Tomcat servlet and JSP engine may result in denial of service via an infinite loop. The denial of service is easily achievable as a consequence of backporting a CVE-2016-6816 fix but not backporting the f...

7.5CVSS7.1AI score0.07486EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2017/01/31 12:00 a.m.•48 views

CVE-2016-6329

OpenVPN, when using a 64-bit block cipher, makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTP-over-OpenVPN session using Blowfish in CBC mode, aka a "Sweet32" attack...

5.9CVSS6.6AI score0.0594EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2017/01/06 12:00 a.m.•48 views

CVE-2016-5684

An exploitable out-of-bounds write vulnerability exists in the XMP image handling functionality of the FreeImage library. A specially crafted XMP file can cause an arbitrary memory overwrite resulting in code execution. An attacker can provide a malicious image to trigger this vulnerability...

7.8CVSS7.2AI score0.0183EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
•added 2017/01/04 12:00 a.m.•48 views

CVE-2016-9934

ext/wddx/wddx.c in PHP before 5.6.28 and 7.x before 7.0.13 allows remote attackers to cause a denial of service NULL pointer dereference via crafted serialized data in a wddxPacket XML document, as demonstrated by a PDORow string...

7.5CVSS7.1AI score0.06845EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2016/12/31 12:00 a.m.•48 views

CVE-2016-5552

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Networking. Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Easily exploitable vulnerability allows unauthenticated attacker with...

5.3CVSS6.8AI score0.02729EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
•added 2016/12/29 9:59 a.m.•48 views

CVE-2016-9878

An issue was discovered in Pivotal Spring Framework before 3.2.18, 4.2.x before 4.2.9, and 4.3.x before 4.3.5. Paths provided to the ResourceServlet were not properly sanitized and as a result exposed to directory traversal attacks...

7.5CVSS7.1AI score0.0564EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2016/12/28 7:59 a.m.•48 views

CVE-2016-9576

The blkrqmapuseriov function in block/blk-map.c in the Linux kernel before 4.8.14 does not properly restrict the type of iterator, which allows local users to read or write to arbitrary kernel memory locations or cause a denial of service use-after-free by leveraging access to a /dev/sg device...

7.8CVSS6.8AI score0.00437EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2016/12/13 10:59 p.m.•49 views

CVE-2016-2334

Heap-based buffer overflow in the NArchive::NHfs::CHandler::ExtractZlibFile method in 7zip before 16.00 and p7zip allows remote attackers to execute arbitrary code via a crafted HFS+ image...

9.3CVSS7.4AI score0.14742EPSS
SaveExploits3References3
UbuntuCve
UbuntuCve
•added 2016/12/13 4:59 p.m.•48 views

CVE-2015-3418

The ProcPutImage function in dix/dispatch.c in X.Org Server aka xserver and xorg-server before 1.16.4 allows attackers to cause a denial of service divide-by-zero and crash via a zero-height PutImage request...

7.5CVSS7.1AI score0.02314EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2016/12/11 2:59 a.m.•48 views

CVE-2016-6609

An issue was discovered in phpMyAdmin. A specially crafted database name could be used to run arbitrary PHP commands through the array export feature. All 4.6.x versions prior to 4.6.4, 4.4.x versions prior to 4.4.15.8, and 4.0.x versions prior to 4.0.10.17 are affected...

8.8CVSS7.3AI score0.02299EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2016/11/16 12:00 a.m.•48 views

CVE-2016-9066

A buffer overflow resulting in a potentially exploitable crash due to memory allocation issues when handling large amounts of incoming data. This vulnerability affects Thunderbird 45.5, Firefox ESR 45.5, and Firefox 50...

7.5CVSS7.3AI score0.12263EPSS
SaveExploits3References4
UbuntuCve
UbuntuCve
•added 2016/10/10 12:00 a.m.•48 views

CVE-2016-8666

The IP stack in the Linux kernel before 4.6 allows remote attackers to cause a denial of service stack consumption and panic or possibly have unspecified other impact by triggering use of the GRO path for packets with tunnel stacking, as demonstrated by interleaved IPv4 headers and GRE headers, a...

7.8CVSS6.8AI score0.047EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve
•added 2016/09/21 2:25 p.m.•48 views

CVE-2016-7163

Integer overflow in the opjpicreatedecode function in pi.c in OpenJPEG allows remote attackers to execute arbitrary code via a crafted JP2 file, which triggers an out-of-bounds read or write...

7.8CVSS7.2AI score0.07114EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
•added 2016/09/11 9:59 p.m.•48 views

CVE-2016-3886

systemui/statusbar/phone/QuickStatusBarHeader.java in the System UI Tuner in Android 7.0 before 2016-09-01 does not prevent tuner changes on the lockscreen, which allows physically proximate attackers to gain privileges by modifying a setting, aka internal bug 30107438...

7.2CVSS6.8AI score0.00198EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2016/08/06 10:59 a.m.•48 views

CVE-2014-9875

drivers/char/diag/diagdci.c in the Qualcomm components in Android before 2016-08-05 on Nexus 7 2013 devices allows attackers to gain privileges via a crafted application that sends short DCI request packets, aka Android internal bug 28767589 and Qualcomm internal bug CR483310...

7.8CVSS7.1AI score0.00454EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2016/07/25 12:00 a.m.•48 views

CVE-2016-6296

Integer signedness error in the simplestringaddn function in simplestring.c in xmlrpc-epi through 0.54.2, as used in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9, allows remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other...

9.8CVSS7.3AI score0.06271EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
•added 2016/06/23 12:00 a.m.•48 views

CVE-2016-3092

The MultipartStream class in Apache Commons Fileupload before 1.3.2, as used in Apache Tomcat 7.x before 7.0.70, 8.x before 8.0.36, 8.5.x before 8.5.3, and 9.x before 9.0.0.M7 and other products, allows remote attackers to cause a denial of service CPU consumption via a long boundary string...

7.8CVSS7.1AI score0.35927EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2016/05/23 12:00 a.m.•48 views

CVE-2016-4569

The sndtimeruserparams function in sound/core/timer.c in the Linux kernel through 4.6 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via crafted use of the ALSA timer interface...

5.5CVSS6.8AI score0.00835EPSS
SaveExploits0References17
UbuntuCve
UbuntuCve
•added 2016/05/21 12:00 a.m.•48 views

CVE-2015-8876

Zend/zendexceptions.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 does not validate certain Exception objects, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash or trigger unintended method execution via crafted...

9.8CVSS7.3AI score0.07705EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
•added 2016/05/16 10:59 a.m.•48 views

CVE-2015-3152

Oracle MySQL before 5.7.3, Oracle MySQL Connector/C aka libmysqlclient before 6.1.3, and MariaDB before 5.5.44 use the --ssl option to mean that SSL is optional, which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack, aka a "BACKRONYM" attack...

5.9CVSS6.8AI score0.07083EPSS
SaveExploits1References4
Total number of security vulnerabilities5000