Skip to contentCWE-17 vulnerabilities
- embedthis goaheadEmbedThis GoAhead 3.0.0 through 3.4.1 does not properly handle path segments starting with a . ...CVE-2014-9707EPSS 28.2%7.5 High
- gnu glibc, canonical ubuntu linux, suse linux enterprise desktop +1 more +3 moreDB_LOOKUP in nss_files/files-XXX.c in the Name Service Switch (NSS) in GNU C Library (aka glibc...CVE-2014-8121Fix available5.0 Medium
- citrix command centerCitrix Command Center before 5.1 Build 35.4 and 5.2 before Build 42.7 allows remote attackers to...CVE-2015-2682Public exploitEPSS 10.7%5.0 Medium
- mozilla firefox, firefox esr, seamonkey +2 moreThe asm.js implementation in Mozilla Firefox before 36.0.3, Firefox ESR 31.x before 31.5.2, and...CVE-2015-0817Fix available6.8 Medium
- opensslThe multi-block feature in the ssl3_write_bytes function in s3_pkt.c in OpenSSL 1.0.2 before 1.0...CVE-2015-02905.0 Medium
- moodleMoodle allows attackers to obtain sensitive course informationCVE-2015-2270Fix available4.3 Medium
- apple safari, iphone os +1 moreThe user interface in WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x...CVE-2015-10845.0 Medium
- linux kernelThe filesystem implementation in the Linux kernel before 3.13 performs certain operations on...CVE-2014-8172Fix available4.9 Medium
- sixapart movable typeMovable Type before 5.2.6 does not properly use the Storable::thaw function, which allows remote...CVE-2013-21847.5 High
- google chromeThe VpxVideoDecoder::VpxDecode function in media/filters/vpx_video_decoder.cc in the vpxdecoder...CVE-2015-1224Fix available5.0 Medium
- google chrome, canonical ubuntu linux, redhat enterprise linux desktop supplementary +3 more +5 moreThe V8LazyEventListener::prepareListenerObject function in bindings/core/v8/V8LazyEventListener...CVE-2015-1217Fix available7.5 High
- linux kernel, oracle linux +1 moreThe ext4_zero_range function in fs/ext4/extents.c in the Linux kernel before 4.1 allows local...CVE-2015-0275Fix available4.9 Medium
- gnu glibcThe getaddrinfo function in glibc before 2.15, when compiled with libidn and the AI_IDN flag is...CVE-2013-7424Fix available5.1 Medium
- linux kernel, canonical ubuntu linux +1 moreThe IPv4 implementation in the Linux kernel before 3.18.8 does not properly consider the length...CVE-2015-1465Fix available7.8 High
- fortinet fortiosThe Control and Provisioning of Wireless Access Points (CAPWAP) daemon in Fortinet FortiOS 5.0...CVE-2015-14527.8 High
- apple mac os xThe CPU Software in Apple OS X before 10.10.2 allows physically proximate attackers to modify...CVE-2014-44984.7 Medium
- apple iphone osWebKit, as used in Apple iOS before 8.1.3, does not properly determine scrollbar boundaries...CVE-2014-44674.3 Medium
- google chromeplatform/image-decoders/ImageFrame.h in Blink, as used in Google Chrome before 40.0.2214.91, does...CVE-2015-1361Fix available6.8 Medium
- google chromefactory.cc in Google V8, as used in Google Chrome before 40.0.2214.91, allows remote attackers to...CVE-2014-7931Fix available7.5 High
- google chromeUse-after-free vulnerability in the HTMLScriptElement::didMoveToNewDocument function in core/html...CVE-2014-7929Fix available7.5 High
- google chrome, icu-project international components for unicode, canonical ubuntu linux +6 more +8 moreThe Regular Expressions package in International Components for Unicode (ICU) 52 before SVN...CVE-2014-7926Fix available7.5 High
- google chrome, icu-project international components for unicode, canonical ubuntu linux +6 more +8 moreThe Regular Expressions package in International Components for Unicode (ICU) 52 before SVN...CVE-2014-7923Fix available7.5 High
- juniper junosJuniper Junos 11.4 before 11.4R8, 12.1X44 before 12.1X44-D35, 12.1X45 before 12.1X45-D25, 12.1X46...CVE-2014-63867.8 High
- juniper junosThe stateless firewall in Juniper Junos 13.3R3, 14.1R1, and 14.1R2, when using Trio-based PFE...CVE-2014-63835.0 Medium
- php** DISPUTED ** The apprentice_load function in libmagic/apprentice.c in the Fileinfo component in...CVE-2014-9426Disputed7.5 High
- linux kernelThe UDF filesystem implementation in the Linux kernel before 3.18.2 does not ensure that space is...CVE-2014-9731Fix available2.1 Low
- allegrosoft rompagerAllegroSoft RomPager 4.34 and earlier, as used in Huawei Home Gateway products and other vendors...CVE-2014-9222Public exploitEPSS 74.0%10.0 High
- ntpThe receive function in ntp_proto.c in ntpd in NTP before 4.2.8 continues to execute after...CVE-2014-9296Fix availableEPSS 16.2%5.0 Medium
- xen, opensuse +1 moreXen 4.4.x and earlier, when using a large number of VCPUs, does not properly handle read and...CVE-2014-9066Fix available4.7 Medium
- xen, opensuse +1 morecommon/spinlock.c in Xen 4.4.x and earlier does not properly handle read and write locks, which...CVE-2014-9065Fix available4.4 Medium
- technicolor td5130 router firmwareOpen redirect vulnerability in Technicolor Router TD5130 with firmware 2.05.C29GV allows remote...CVE-2014-9143Public exploit4.3 Medium
- fedup project fedupfedup 0.9.0 in Fedora 19, 20, and 21 uses a temporary directory with a static name for its...CVE-2013-64942.1 Low
- linux kernelThe __clear_user function in arch/arm64/lib/clear_user.S in the Linux kernel before 3.17.4 on the...CVE-2014-7843Fix available4.9 Medium
- matrikonopc dnp3 opc serverMatrikonOPC OPC Server for DNP3 1.2.3 and earlier allows remote attackers to cause a denial of...CVE-2014-54265.0 Medium
- google chromeUse-after-free vulnerability in PDFium, as used in Google Chrome before 39.0.2171.65, allows...CVE-2014-7902Fix available7.5 High
- freebsdFreeBSD 9.1, 9.2, and 10.0, when compiling OpenSSH with Kerberos support, uses incorrect library...CVE-2014-84754.3 Medium
- docker, docker docker-py +1 moreMan-in-the-Middle (MitM)CVE-2014-5277Fix available5.0 Medium
- apache cordovaApache Cordova Android before 3.5.1 allows remote attackers to change the start page via a...CVE-2014-35006.4 Medium
- wireshark, oracle linux, solaris +2 moreepan/dissectors/packet-wcp.c in the WCP dissector in Wireshark 1.10.x before 1.10.14 and 1.12.x...CVE-2015-3811Fix available5.0 Medium
- debian linux, linux kernel, fedoraproject fedora +2 more +4 moreThe ndisc_router_discovery function in net/ipv6/ndisc.c in the Neighbor Discovery (ND) protocol...CVE-2015-2922Fix available3.3 Low
- linux kernelnet/rds/sysctl.c in the Linux kernel before 3.19 uses an incorrect data type in a sysctl table,...CVE-2015-2042Fix available4.6 Medium
- debian linux, linux kernel, suse linux enterprise server +2 morenet/llc/sysctl_net_llc.c in the Linux kernel before 3.19 uses an incorrect data type in a sysctl...CVE-2015-2041Fix available4.6 Medium
- freedesktop dbus, opensuse +1 moreD-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8 does not properly close...CVE-2014-3637Fix available2.1 Low
- djangoproject django, canonical ubuntu linux +1 moreDjango database denial-of-service with ModelMultipleChoiceFieldCVE-2015-0222Fix available5.0 Medium
- djangoproject djangoDjango WSGI Header Spoofing VulnerabilityCVE-2015-0219Fix available5.0 Medium
- ntpThe symmetric-key feature in the receive function in ntp_proto.c in ntpd in NTP 3.x and 4.x...CVE-2015-1799Fix available4.3 Medium
- puppet facter, hiera, puppet +2 more +4 morefacter, hiera, mcollective-client, and puppet affected by untrusted search path vulnerabilityCVE-2014-3248Fix available6.2 Medium
- gnu gnutlsGnuTLS before 2.9.10 does not verify the activation and expiration dates of CA certificates,...CVE-2014-81554.3 Medium
- clamav, fedoraproject fedora +1 moreClamAV before 0.98.6 allows remote attackers to cause a denial of service (crash) via a crafted...CVE-2015-1463Fix available5.0 Medium
- zend framework, zendopenid, zendrest +7 more +9 moreZendframework Local file disclosure via XXE injection in Zend_XmlRpcCVE-2014-2683Fix available5.0 Medium
- Show moreLoading…