linux

CVEs (10,025)

• CVE-2015-2573Apr 16, 2015
  MariaDB

  MariaDB
  risk 0.00cvss —epss 0.05

  Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote authenticated users to affect availability via vectors related to DDL.

• CVE-2015-2571Apr 16, 2015
  MariaDB

  MariaDB
  risk 0.00cvss —epss 0.05

  Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : Optimizer.

• CVE-2015-0505Apr 16, 2015
  MariaDB

  MariaDB
  risk 0.00cvss —epss 0.05

  Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect availability via vectors related to DDL.

• CVE-2015-0499Apr 16, 2015
  MariaDB

  MariaDB
  risk 0.00cvss —epss 0.05

  Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : Federated.

• CVE-2015-0441Apr 16, 2015
  MariaDB

  MariaDB
  risk 0.00cvss —epss 0.04

  Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : Security : Encryption.

• CVE-2015-0433Apr 16, 2015
  MariaDB

  MariaDB
  risk 0.00cvss —epss 0.05

  Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote authenticated users to affect availability via vectors related to InnoDB : DML.

• CVE-2015-1822Apr 16, 2015
  Chrony

  Chrony
  risk 0.00cvss —epss 0.03

  chrony before 1.31.1 does not initialize the last "next" pointer when saving unacknowledged replies to command requests, which allows remote authenticated users to cause a denial of service (uninitialized pointer dereference and daemon crash) or possibly execute arbitrary code…

• CVE-2015-1821Apr 16, 2015
  Chrony

  Chrony
  risk 0.00cvss —epss 0.03

  Heap-based buffer overflow in chrony before 1.31.1 allows remote authenticated users to cause a denial of service (chronyd crash) or possibly execute arbitrary code by configuring the (1) NTP or (2) cmdmon access with a subnet size that is indivisible by four and an address with…

• CVE-2013-7439Apr 16, 2015
  Xorg

  X11
  risk 0.00cvss —epss 0.04

  Multiple off-by-one errors in the (1) MakeBigReq and (2) SetReqLen macros in include/X11/Xlibint.h in X11R6.x and libX11 before 1.6.0 allow remote attackers to have unspecified impact via a crafted request, which triggers a buffer overflow.

• CVE-2015-2788Apr 14, 2015
  DBD Firebird

  DBD-Firebird
  risk 0.00cvss —epss 0.04

  Multiple stack-based buffer overflows in the ib_fill_isqlda function in dbdimp.c in DBD-Firebird before 1.19 allow remote attackers to have unspecified impact via unknown vectors that trigger an error condition, related to binding octets to columns.

• CVE-2015-2782Apr 8, 2015
  Open-source ARJ archiver

  Open-source ARJ archiver
  risk 0.00cvss —epss 0.06

  Buffer overflow in Open-source ARJ archiver 3.10.22 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted ARJ archive.

• CVE-2015-2756Apr 1, 2015
  Xen

  Xen
  risk 0.00cvss —epss 0.00

  QEMU, as used in Xen 3.3.x through 4.5.x, does not properly restrict access to PCI command registers, which might allow local HVM guest users to cause a denial of service (non-maskable interrupt and host crash) by disabling the (1) memory or (2) I/O decoding for a PCI Express…

• CVE-2014-9713Apr 1, 2015
  OpenLDAP

  Openldap
  risk 0.00cvss —epss 0.02

  The default slapd configuration in the Debian openldap package 2.4.23-3 through 2.4.39-1.1 allows remote authenticated users to modify the user's permissions and other user attributes via unspecified vectors.

• CVE-2015-2776Mar 31, 2015
  Gaia Gis

  Freexl
  risk 0.00cvss —epss 0.02

  The parse_SST function in FreeXL before 1.0.0i allows remote attackers to cause a denial of service (memory consumption) via a crafted shared strings table in a workbook.

• CVE-2015-2754Mar 31, 2015
  Gaia Gis

  Freexl
  risk 0.00cvss —epss 0.03

  FreeXL before 1.0.0i allows remote attackers to cause a denial of service (stack corruption) and possibly execute arbitrary code via a crafted workbook, related to a "premature EOF."

• CVE-2015-2753Mar 31, 2015
  Gaia Gis

  Freexl
  risk 0.00cvss —epss 0.03

  FreeXL before 1.0.0i allows remote attackers to cause a denial of service (stack corruption) or possibly execute arbitrary code via a crafted sector in a workbook.

• CVE-2015-2684Mar 31, 2015
  Internet2

  Service Provider
  risk 0.00cvss —epss 0.02

  Shibboleth Service Provider (SP) before 2.5.4 allows remote authenticated users to cause a denial of service (crash) via a crafted SAML message.

• CVE-2015-0838Mar 31, 2015
  Dulwich Project

  Dulwich
  risk 0.00cvss —epss 0.03

  Buffer overflow in the C implementation of the apply_delta function in _pack.c in Dulwich before 0.9.9 allows remote attackers to execute arbitrary code via a crafted pack file.

• CVE-2014-9706Mar 31, 2015
  Dulwich Project

  Dulwich
  risk 0.00cvss —epss 0.05

  The build_index_from_tree function in index.py in Dulwich before 0.9.9 allows remote attackers to execute arbitrary code via a commit with a directory path starting with .git/, which is not properly handled when checking out a working tree.

• CVE-2014-9653Mar 30, 2015
  PHP

  PHP
  risk 0.00cvss —epss 0.05

  readelf.c in file before 5.22, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5, does not consider that pread calls sometimes read only a subset of the available data, which allows remote attackers to cause a denial of service…