Vendor CVEs

Canonical

All CVEs

4,264 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2019-2481	MariaDB MariaDB	Med	0.32	4.9	0.03	Jan 16, 2019	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows high privileged attacker with network access…
CVE-2019-2420	NetApp Snapcenter	Med	0.32	4.9	0.03	Jan 16, 2019	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple…
CVE-2018-3282	MariaDB MariaDB	Med	0.32	4.9	0.04	Oct 17, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Storage Engines). Supported versions that are affected are 5.5.61 and prior, 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged…
CVE-2018-3278	NetApp Snapcenter	Med	0.32	4.9	0.03	Oct 17, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: RBR). Supported versions that are affected are 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via…
CVE-2018-3277	MariaDB MariaDB	Med	0.32	4.9	0.03	Oct 17, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to…
CVE-2018-3276	NetApp Snapcenter	Med	0.32	4.9	0.04	Oct 17, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached). Supported versions that are affected are 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access…
CVE-2018-3200	MariaDB MariaDB	Med	0.32	4.9	0.03	Oct 17, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to…
CVE-2018-3173	MariaDB MariaDB	Med	0.32	4.9	0.03	Oct 17, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to…
CVE-2018-3162	MariaDB MariaDB	Med	0.32	4.9	0.03	Oct 17, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to…
CVE-2018-1000808	Pyopenssl Project Pyopenssl	Med	0.32	5.9	0.02	Oct 8, 2018	Python Cryptographic Authority pyopenssl version Before 17.5.0 contains a CWE - 401 : Failure to Release Memory Before Removing Last Reference vulnerability in PKCS #12 Store that can result in Denial of service if memory runs low or is exhausted. This attack appear to be…
CVE-2018-11784	Apache Tomcat	Med	0.32	4.3	0.94	Oct 4, 2018	When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g. redirecting to '/foo/' when the user requested '/foo') a specially crafted URL could be used to cause the redirect to be generated…
CVE-2018-10845	GNU Gnutls	Med	0.32	5.9	0.04	Aug 22, 2018	It was found that the GnuTLS implementation of HMAC-SHA-384 was vulnerable to a Lucky thirteen style attack. Remote attackers could use this flaw to conduct distinguishing attacks and plain text recovery attacks via statistical analysis of timing data using crafted packets.
CVE-2018-10844	GNU Gnutls	Med	0.32	5.9	0.04	Aug 22, 2018	It was found that the GnuTLS implementation of HMAC-SHA-256 was vulnerable to a Lucky thirteen style attack. Remote attackers could use this flaw to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data using crafted packets.
CVE-2018-3077	NetApp Snapcenter	Med	0.32	4.9	0.03	Jul 18, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.7.22 and prior and 8.0.11 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to…
CVE-2018-3071	NetApp Snapcenter	Med	0.32	4.9	0.03	Jul 18, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Audit Log). Supported versions that are affected are 5.7.22 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL…
CVE-2018-3061	NetApp Snapcenter	Med	0.32	4.9	0.03	Jul 18, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.7.22 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL…
CVE-2018-3054	NetApp Snapcenter	Med	0.32	4.9	0.03	Jul 18, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.7.22 and prior and 8.0.11 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to…
CVE-2018-2846	NetApp Snapcenter	Med	0.32	4.9	0.03	Apr 19, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Performance Schema). Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to…
CVE-2018-2839	NetApp Snapcenter	Med	0.32	4.9	0.03	Apr 19, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL…
CVE-2018-2818	NetApp Snapcenter	Med	0.32	4.9	0.04	Apr 19, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Security : Privileges). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with…
CVE-2018-2816	NetApp Snapcenter	Med	0.32	4.9	0.03	Apr 19, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise…
CVE-2018-2779	Oracle Corporation MySQL	Med	0.32	4.9	0.03	Apr 19, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise…
CVE-2018-2778	Oracle Corporation MySQL	Med	0.32	4.9	0.03	Apr 19, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise…
CVE-2018-2776	Oracle Corporation MySQL	Med	0.32	4.9	0.03	Apr 19, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Group Replication GCS). Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via XCom to compromise MySQL Server.…
CVE-2018-2769	Oracle Corporation MySQL	Med	0.32	4.9	0.03	Apr 19, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Pluggable Auth). Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to…
CVE-2018-2766	MariaDB MariaDB	Med	0.32	4.9	0.03	Apr 19, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to…
CVE-2018-2761	MariaDB MariaDB	Med	0.32	5.9	0.04	Apr 19, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access…
CVE-2018-2759	MariaDB MariaDB	Med	0.32	4.9	0.03	Apr 19, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.…
CVE-2018-2599	Sun Corporation Java SE	Med	0.32	4.8	0.04	Jan 18, 2018	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Difficult to exploit vulnerability allows…
CVE-2016-0762	Apache Tomcat	Med	0.32	5.9	0.08	Aug 10, 2017	The Realm implementations in Apache Tomcat versions 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 did not process the supplied password if the supplied user name did not exist. This made a timing attack possible to determine valid…
CVE-2016-5440	MariaDB MariaDB	Med	0.32	4.9	0.04	Jul 21, 2016	Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows remote administrators to affect availability via vectors related to Server: RBR.
CVE-2016-5439	Oracle Corporation MySQL	Med	0.32	4.9	0.03	Jul 21, 2016	Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote administrators to affect availability via vectors related to Server: Privileges.
CVE-2016-4429	GNU Glibc	Med	0.32	5.9	0.04	Jun 10, 2016	Stack-based buffer overflow in the clntudp_call function in sunrpc/clnt_udp.c in the GNU C Library (aka glibc or libc6) allows remote servers to cause a denial of service (crash) or possibly unspecified other impact via a flood of crafted ICMP and UDP packets.
CVE-2016-1839	Xmlsoft Libxml2	Med	0.32	5.5	0.07	May 20, 2016	The xmlDictAddString function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.
CVE-2016-1838	Xmlsoft Libxml2	Med	0.32	5.5	0.07	May 20, 2016	The xmlPArserPrintFileContextInternal function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML…
CVE-2016-2047	MariaDB MariaDB	Med	0.32	5.9	0.04	Jan 27, 2016	The ssl_verify_server_cert function in sql-common/client.c in MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10; Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier; and Percona Server do not properly verify that the server hostname…
CVE-2025-5054	Canonical Apport	Med	0.31	4.7	0.01	May 30, 2025	Race condition in Canonical apport up to and including 2.32.0 allows a local attacker to leak sensitive information via PID-reuse by leveraging namespaces. When handling a crash, the function `_check_global_pid_and_forward`, which detects if the crashing process resided in a…
CVE-2024-29068	Canonical Snapd	Med	0.31	5.8	0.00	Jul 25, 2024	In snapd versions prior to 2.62, snapd failed to properly check the file type when extracting a snap. The snap format is a squashfs file-system image and so can contain files that are non-regular files (such as pipes or sockets etc). Various file entries within the snap…
CVE-2023-1032	Linux Kernel	Med	0.31	4.7	0.00	Jan 8, 2024	The Linux kernel io_uring IORING_OP_SOCKET operation contained a double free in function __sys_socket_file() in file net/socket.c. This issue was introduced in da214a475f8bd1d3e9e7a19ddfeb4d1617551bab and fixed in 649c15c7691e9b13cbe9bf6c65c365350e056067.
CVE-2016-2124	Samba (software) Samba	Med	0.31	5.9	0.02	Feb 18, 2022	A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this flaw to retrieve the plaintext password sent over the wire even if Kerberos authentication was required.
CVE-2020-29372	Linux Kernel	Med	0.31	4.7	0.00	Nov 28, 2020	An issue was discovered in do_madvise in mm/madvise.c in the Linux kernel before 5.6.8. There is a race condition between coredump operations and the IORING_OP_MADVISE implementation, aka CID-bc0c4d1e176e.
CVE-2020-14556	Fedoraproject Fedora	Med	0.31	4.8	0.03	Jul 15, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network…
CVE-2020-5967	Nvidia Display Driver	Med	0.31	4.7	0.00	Jun 25, 2020	NVIDIA Linux GPU Display Driver, all versions, contains a vulnerability in the UVM driver, in which a race condition may lead to a denial of service.
CVE-2020-14154	Mutt Mutt	Med	0.31	4.8	0.01	Jun 15, 2020	Mutt before 1.14.3 proceeds with a connection even if, in response to a GnuTLS certificate prompt, the user rejects an expired intermediate certificate.
CVE-2020-2800	Fedoraproject Fedora	Med	0.31	4.8	0.03	Apr 15, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Lightweight HTTP Server). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated…
CVE-2020-2767	NetApp Steelstore Cloud Integrated Storage	Med	0.31	4.8	0.02	Apr 15, 2020	Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.6 and 14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks…
CVE-2020-2593	McAfee Epolicy Orchestrator	Med	0.31	4.8	0.03	Jan 15, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with…
CVE-2019-2999	NetApp E Series Santricity Storage Manager	Med	0.31	4.7	0.03	Oct 16, 2019	Vulnerability in the Java SE product of Oracle Java SE (component: Javadoc). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise…
CVE-2019-2975	McAfee Epolicy Orchestrator	Med	0.31	4.8	0.03	Oct 16, 2019	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Supported versions that are affected are Java SE: 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network…
CVE-2019-16234	Linux Kernel	Med	0.31	4.7	0.00	Sep 11, 2019	drivers/net/wireless/intel/iwlwifi/pcie/trans.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference.

CVE-2019-2481MedJan 16, 2019
MariaDB
MariaDB
risk 0.32cvss 4.9epss 0.03
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows high privileged attacker with network access…
CVE-2019-2420MedJan 16, 2019
NetApp
Snapcenter
risk 0.32cvss 4.9epss 0.03
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple…
CVE-2018-3282MedOct 17, 2018
MariaDB
MariaDB
risk 0.32cvss 4.9epss 0.04
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Storage Engines). Supported versions that are affected are 5.5.61 and prior, 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged…
CVE-2018-3278MedOct 17, 2018
NetApp
Snapcenter
risk 0.32cvss 4.9epss 0.03
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: RBR). Supported versions that are affected are 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via…
CVE-2018-3277MedOct 17, 2018
MariaDB
MariaDB
risk 0.32cvss 4.9epss 0.03
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to…
CVE-2018-3276MedOct 17, 2018
NetApp
Snapcenter
risk 0.32cvss 4.9epss 0.04
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached). Supported versions that are affected are 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access…
CVE-2018-3200MedOct 17, 2018
MariaDB
MariaDB
risk 0.32cvss 4.9epss 0.03
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to…
CVE-2018-3173MedOct 17, 2018
MariaDB
MariaDB
risk 0.32cvss 4.9epss 0.03
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to…
CVE-2018-3162MedOct 17, 2018
MariaDB
MariaDB
risk 0.32cvss 4.9epss 0.03
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to…
CVE-2018-1000808MedOct 8, 2018
Pyopenssl Project
Pyopenssl
risk 0.32cvss 5.9epss 0.02
Python Cryptographic Authority pyopenssl version Before 17.5.0 contains a CWE - 401 : Failure to Release Memory Before Removing Last Reference vulnerability in PKCS #12 Store that can result in Denial of service if memory runs low or is exhausted. This attack appear to be…
CVE-2018-11784MedOct 4, 2018
Apache
Tomcat
risk 0.32cvss 4.3epss 0.94
When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g. redirecting to '/foo/' when the user requested '/foo') a specially crafted URL could be used to cause the redirect to be generated…
CVE-2018-10845MedAug 22, 2018
GNU
Gnutls
risk 0.32cvss 5.9epss 0.04
It was found that the GnuTLS implementation of HMAC-SHA-384 was vulnerable to a Lucky thirteen style attack. Remote attackers could use this flaw to conduct distinguishing attacks and plain text recovery attacks via statistical analysis of timing data using crafted packets.
CVE-2018-10844MedAug 22, 2018
GNU
Gnutls
risk 0.32cvss 5.9epss 0.04
It was found that the GnuTLS implementation of HMAC-SHA-256 was vulnerable to a Lucky thirteen style attack. Remote attackers could use this flaw to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data using crafted packets.
CVE-2018-3077MedJul 18, 2018
NetApp
Snapcenter
risk 0.32cvss 4.9epss 0.03
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.7.22 and prior and 8.0.11 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to…
CVE-2018-3071MedJul 18, 2018
NetApp
Snapcenter
risk 0.32cvss 4.9epss 0.03
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Audit Log). Supported versions that are affected are 5.7.22 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL…
CVE-2018-3061MedJul 18, 2018
NetApp
Snapcenter
risk 0.32cvss 4.9epss 0.03
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.7.22 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL…
CVE-2018-3054MedJul 18, 2018
NetApp
Snapcenter
risk 0.32cvss 4.9epss 0.03
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.7.22 and prior and 8.0.11 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to…
CVE-2018-2846MedApr 19, 2018
NetApp
Snapcenter
risk 0.32cvss 4.9epss 0.03
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Performance Schema). Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to…
CVE-2018-2839MedApr 19, 2018
NetApp
Snapcenter
risk 0.32cvss 4.9epss 0.03
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL…
CVE-2018-2818MedApr 19, 2018
NetApp
Snapcenter
risk 0.32cvss 4.9epss 0.04
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Security : Privileges). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with…
CVE-2018-2816MedApr 19, 2018
NetApp
Snapcenter
risk 0.32cvss 4.9epss 0.03
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise…
CVE-2018-2779MedApr 19, 2018
Oracle Corporation
MySQL
risk 0.32cvss 4.9epss 0.03
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise…
CVE-2018-2778MedApr 19, 2018
Oracle Corporation
MySQL
risk 0.32cvss 4.9epss 0.03
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise…
CVE-2018-2776MedApr 19, 2018
Oracle Corporation
MySQL
risk 0.32cvss 4.9epss 0.03
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Group Replication GCS). Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via XCom to compromise MySQL Server.…
CVE-2018-2769MedApr 19, 2018
Oracle Corporation
MySQL
risk 0.32cvss 4.9epss 0.03
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Pluggable Auth). Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to…
CVE-2018-2766MedApr 19, 2018
MariaDB
MariaDB
risk 0.32cvss 4.9epss 0.03
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to…
CVE-2018-2761MedApr 19, 2018
MariaDB
MariaDB
risk 0.32cvss 5.9epss 0.04
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access…
CVE-2018-2759MedApr 19, 2018
MariaDB
MariaDB
risk 0.32cvss 4.9epss 0.03
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.…
CVE-2018-2599MedJan 18, 2018
Sun Corporation
Java SE
risk 0.32cvss 4.8epss 0.04
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Difficult to exploit vulnerability allows…
CVE-2016-0762MedAug 10, 2017
Apache
Tomcat
risk 0.32cvss 5.9epss 0.08
The Realm implementations in Apache Tomcat versions 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 did not process the supplied password if the supplied user name did not exist. This made a timing attack possible to determine valid…
CVE-2016-5440MedJul 21, 2016
MariaDB
MariaDB
risk 0.32cvss 4.9epss 0.04
Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows remote administrators to affect availability via vectors related to Server: RBR.
CVE-2016-5439MedJul 21, 2016
Oracle Corporation
MySQL
risk 0.32cvss 4.9epss 0.03
Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote administrators to affect availability via vectors related to Server: Privileges.
CVE-2016-4429MedJun 10, 2016
GNU
Glibc
risk 0.32cvss 5.9epss 0.04
Stack-based buffer overflow in the clntudp_call function in sunrpc/clnt_udp.c in the GNU C Library (aka glibc or libc6) allows remote servers to cause a denial of service (crash) or possibly unspecified other impact via a flood of crafted ICMP and UDP packets.
CVE-2016-1839MedMay 20, 2016
Xmlsoft
Libxml2
risk 0.32cvss 5.5epss 0.07
The xmlDictAddString function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.
CVE-2016-1838MedMay 20, 2016
Xmlsoft
Libxml2
risk 0.32cvss 5.5epss 0.07
The xmlPArserPrintFileContextInternal function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML…
CVE-2016-2047MedJan 27, 2016
MariaDB
MariaDB
risk 0.32cvss 5.9epss 0.04
The ssl_verify_server_cert function in sql-common/client.c in MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10; Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier; and Percona Server do not properly verify that the server hostname…
CVE-2025-5054MedMay 30, 2025
Canonical
Apport
risk 0.31cvss 4.7epss 0.01
Race condition in Canonical apport up to and including 2.32.0 allows a local attacker to leak sensitive information via PID-reuse by leveraging namespaces. When handling a crash, the function `_check_global_pid_and_forward`, which detects if the crashing process resided in a…
CVE-2024-29068MedJul 25, 2024
Canonical
Snapd
risk 0.31cvss 5.8epss 0.00
In snapd versions prior to 2.62, snapd failed to properly check the file type when extracting a snap. The snap format is a squashfs file-system image and so can contain files that are non-regular files (such as pipes or sockets etc). Various file entries within the snap…
CVE-2023-1032MedJan 8, 2024
Linux
Kernel
risk 0.31cvss 4.7epss 0.00
The Linux kernel io_uring IORING_OP_SOCKET operation contained a double free in function __sys_socket_file() in file net/socket.c. This issue was introduced in da214a475f8bd1d3e9e7a19ddfeb4d1617551bab and fixed in 649c15c7691e9b13cbe9bf6c65c365350e056067.
CVE-2016-2124MedFeb 18, 2022
Samba (software)
Samba
risk 0.31cvss 5.9epss 0.02
A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this flaw to retrieve the plaintext password sent over the wire even if Kerberos authentication was required.
CVE-2020-29372MedNov 28, 2020
Linux
Kernel
risk 0.31cvss 4.7epss 0.00
An issue was discovered in do_madvise in mm/madvise.c in the Linux kernel before 5.6.8. There is a race condition between coredump operations and the IORING_OP_MADVISE implementation, aka CID-bc0c4d1e176e.
CVE-2020-14556MedJul 15, 2020
Fedoraproject
Fedora
risk 0.31cvss 4.8epss 0.03
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network…
CVE-2020-5967MedJun 25, 2020
Nvidia
Display Driver
risk 0.31cvss 4.7epss 0.00
NVIDIA Linux GPU Display Driver, all versions, contains a vulnerability in the UVM driver, in which a race condition may lead to a denial of service.
CVE-2020-14154MedJun 15, 2020
Mutt
Mutt
risk 0.31cvss 4.8epss 0.01
Mutt before 1.14.3 proceeds with a connection even if, in response to a GnuTLS certificate prompt, the user rejects an expired intermediate certificate.
CVE-2020-2800MedApr 15, 2020
Fedoraproject
Fedora
risk 0.31cvss 4.8epss 0.03
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Lightweight HTTP Server). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated…
CVE-2020-2767MedApr 15, 2020
NetApp
Steelstore Cloud Integrated Storage
risk 0.31cvss 4.8epss 0.02
Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.6 and 14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks…
CVE-2020-2593MedJan 15, 2020
McAfee
Epolicy Orchestrator
risk 0.31cvss 4.8epss 0.03
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with…
CVE-2019-2999MedOct 16, 2019
NetApp
E Series Santricity Storage Manager
risk 0.31cvss 4.7epss 0.03
Vulnerability in the Java SE product of Oracle Java SE (component: Javadoc). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise…
CVE-2019-2975MedOct 16, 2019
McAfee
Epolicy Orchestrator
risk 0.31cvss 4.8epss 0.03
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Supported versions that are affected are Java SE: 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network…
CVE-2019-16234MedSep 11, 2019
Linux
Kernel
risk 0.31cvss 4.7epss 0.00
drivers/net/wireless/intel/iwlwifi/pcie/trans.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference.

Page 47 of 86