Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.9An issue was discovered in OpenSSH 7.9.Jan 31, 2019
- Medium6.8An issue was discovered in OpenSSH 7.9.Jan 31, 2019
- High7.8Linux Kernel Integer Overflow VulnerabilityKEVEPSS 14.7%Sep 25, 2018
- Medium6.5Integer overflow in international date handling in International Components for Unicode (ICU) for C/C++ before 60.1, as used in V8 in Google Chrome prior to 63.0.3239.84 and otherAug 28, 2018
- Medium6.5libxml2 2.9.8, if --with-lzma is used, allows remote attackers to cause a denial of service (infinite loop) via a crafted XML file that triggers LZMA_MEMLIMIT_ERROR, as demonstrateAug 16, 2018
- High7.5A NULL pointer dereference vulnerability exists in the xpath.c:xmlXPathCompOpEval() function of libxml2 through 2.9.8 when parsing an invalid XPath expression in the XPATH_OP_AND oJul 19, 2018
- Medium4.7Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding during t…Jun 13, 2018
- Critical9.8Exim Buffer Overflow VulnerabilityKEVEPSS 82.1%Feb 8, 2018
- High8.1Apache Tomcat Remote Code Execution VulnerabilityKEVEPSS 100.0%Oct 3, 2017
- Critical9.8Apache Tomcat Remote Code Execution VulnerabilityKEVEPSS 90.3%Apr 6, 2017
- Medium5.5libxml2 2.9.4 and earlier, as used in XMLSec 1.2.23 and earlier and other products, does not offer a flag directly indicating that the current document may be read but…Nov 16, 2016
- High7.0Linux Kernel Race Condition VulnerabilityKEVEPSS 83.5%Nov 10, 2016
- High8.8Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly h…Jul 23, 2016
- Medium5.5ImageMagick Server-Side Request Forgery (SSRF) VulnerabilityKEVEPSS 75.6%May 5, 2016
- Medium5.5ImageMagick Arbitrary File Deletion VulnerabilityKEVEPSS 75.3%May 5, 2016
- High8.4ImageMagick Improper Input Validation VulnerabilityKEVEPSS 97.5%May 5, 2016
- Critical9.8Oracle Java SE and JRockit Unspecified VulnerabilityKEVEPSS 92.3%Apr 21, 2016
- High8.8Google Chromium V8 Out-of-Bounds Read VulnerabilityKEVEPSS 48.1%Mar 29, 2016
- High8.8Mozilla Firefox Security Feature Bypass VulnerabilityKEVEPSS 68.6%Aug 7, 2015
- High7.5ISC BIND Data Processing Errors VulnerabilityKEVEPSS 99.4%Jul 29, 2015
- Critical9.8Oracle Java SE and Java SE Embedded Remote Code Execution VulnerabilityKEVEPSS 25.5%Jul 16, 2015
- Medium5.0The xdr_status_vector function in Firebird before 2.1.7 and 2.5.x before 2.5.3 SU1 allows remote attackers to cause a denial of service (NULL pointer dereference, segm…Dec 16, 2014
- Critical9.8GNU Bourne-Again Shell (Bash) Arbitrary Code Execution VulnerabilityKEVEPSS 99.9%Sep 24, 2014
- Critical9.8GNU Bourne-Again Shell (Bash) Arbitrary Code Execution VulnerabilityKEVEPSS 100.0%Sep 24, 2014
- High7.8Linux Kernel Privilege Escalation VulnerabilityKEVEPSS 37.2%Jun 7, 2014