Browse CVEs

HIGH 8.1 CVE-2017-8342 Radicale before 1.1.2 and 2.x before 2.0.0rc2 is prone to timing oracles and simple brute-force attacks when using the htpasswd authentication method. Radicale after 1.1.1 Fix from $1,9502017-04-30 HIGH 8.1 CVE-2017-5035 Google Chrome prior to 57.0.2987.98 for Windows and Mac had a race condition, which could cause Chrome to display incorrect certificate information f… Chrome after 57.0.2987.75 Fix from $1,9502017-04-24 MEDIUM 6.3 CVE-2017-6615 A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE 3.16 could allow an authenticated, remote attacker to caus… Ios Xe Mitigation only Fix from $1,6002017-04-20 MEDIUM 5.3 CVE-2016-3106 Pulp before 2.8.3 creates a temporary directory during CA key generation in an insecure manner. Pulp Patch available Fix from $1,6002017-04-13 HIGH 7.0 CVE-2017-0462 An elevation of privilege vulnerability in the Qualcomm Seemp driver could enable a local malicious application to execute arbitrary code within the … Linux Kernel Mitigation only Fix from $1,9502017-04-07 HIGH 8.1 CVE-2017-7572 The _checkPolkitPrivilege function in serviceHelper.py in Back In Time (aka backintime) 1.1.18 and earlier uses a deprecated polkit authorization met… Backintime after 1.1.18 Fix from $1,9502017-04-06 HIGH 7.0 CVE-2017-2478 An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watch… Iphone Os after 10.12.3 Fix from $1,9502017-04-02 HIGH 7.0 CVE-2017-2456 An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watch… Iphone Os after 10.12.3 Fix from $1,9502017-04-02 HIGH 7.8 CVE-2017-2421 An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "AppleGraphicsPowerManagement" component.… Mac Os X after 10.12.3 Fix from $1,9502017-04-02 HIGH 7.0 CVE-2017-5899 Directory traversal vulnerability in the setuid root helper binary in S-nail (later S-mailx) before 14.8.16 allows local users to write to arbitrary … S Nail after 14.8.5 Fix from $1,9502017-03-27 CRITICAL 10.0 CVE-2015-8556EPSS 13% Local privilege escalation vulnerability in the Gentoo QEMU package before 2.5.0-r1. Qemu after 2.4.1 Fix from $2,3002017-03-24 HIGH 7.0 CVE-2017-6874 Race condition in kernel/ucount.c in the Linux kernel through 4.10.2 allows local users to cause a denial of service (use-after-free and system crash… Linux Kernel 4.9.16 / 4.10.4+ Fix from $1,9502017-03-14 HIGH 7.0 CVE-2017-2636 Race condition in drivers/tty/n_hdlc.c in the Linux kernel through 4.10.1 allows local users to gain privileges or cause a denial of service (double … Linux Kernel 3.2.87 / 3.10.106+ Fix from $1,9502017-03-07 HIGH 7.0 CVE-2016-10200 Race condition in the L2TPv3 IP Encapsulation feature in the Linux kernel before 4.8.14 allows local users to gain privileges or cause a denial of se… Linux Kernel 3.2 / 3.2.88+ Fix from $1,9502017-03-07 HIGH 7.0 CVE-2017-6408 An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. A local-privilege-escalation race condition in … Netbackup after 8.0 Fix from $1,9502017-03-02 HIGH 7.0 CVE-2017-6346 Race condition in net/packet/af_packet.c in the Linux kernel before 4.9.13 allows local users to cause a denial of service (use-after-free) or possib… Linux Kernel 3.2.87 / 3.10.106+ Fix from $1,9502017-03-01 MEDIUM 5.5 CVE-2017-5986 Race condition in the sctp_wait_for_sndbuf function in net/sctp/socket.c in the Linux kernel before 4.9.11 allows local users to cause a denial of se… Linux Kernel after 4.9.11 Fix from $1,6002017-02-18 HIGH 7.0 CVE-2017-6001 Race condition in kernel/events/core.c in the Linux kernel before 4.9.7 allows local users to gain privileges via a crafted application that makes co… Linux Kernel 3.18.92 / 4.4.65+ Fix from $1,9502017-02-18 HIGH 7.8 CVE-2014-9914 Race condition in the ip4_datagram_release_cb function in net/ipv4/datagram.c in the Linux kernel before 3.15.2 allows local users to gain privileges… Linux Kernel 3.10.45 / 3.12.23+ Fix from $1,9502017-02-07 MEDIUM 6.4 CVE-2016-9962 RunC allowed additional container processes via 'runc exec' to be ptraced by the pid 1 of the container. This allows the main processes of the conta… Docker 1.12.6+ Fix from $1,6002017-01-31 HIGH 7.5 CVE-2016-9381 Race condition in QEMU in Xen allows local x86 HVM guest OS administrators to gain privileges by changing certain data on shared rings, aka a "double… Xenserver after 2.7.1 Fix from $1,9502017-01-23 MEDIUM 5.9 CVE-2016-10027 Race condition in the XMPP library in Smack before 4.1.9, when the SecurityMode.required TLS setting has been set, allows man-in-the-middle attackers… Fedora 4.1.9+ Fix from $1,6002017-01-12 HIGH 7.8 CVE-2016-9794 Race condition in the snd_pcm_period_elapsed function in sound/core/pcm_lib.c in the ALSA subsystem in the Linux kernel before 4.7 allows local users… Linux Kernel 3.2.85 / 3.10.105+ Fix from $1,9502016-12-28 HIGH 7.8 CVE-2016-9806 Race condition in the netlink_dump function in net/netlink/af_netlink.c in the Linux kernel before 4.6.3 allows local users to cause a denial of serv… Linux Kernel 3.12.62 / 3.14.73+ Fix from $1,9502016-12-28 HIGH 7.0 CVE-2016-6663 Race condition in Oracle MySQL before 5.5.52, 5.6.x before 5.6.33, 5.7.x before 5.7.15, and 8.x before 8.0.1; MariaDB before 5.5.52, 10.0.x before 10… MySQL 5.5.41-37.0 / 5.5.51-38.2+ Fix from $1,9502016-12-13 HIGH 7.8 CVE-2016-8655EPSS 11% Race condition in net/packet/af_packet.c in the Linux kernel through 4.8.12 allows local users to gain privileges or cause a denial of service (use-a… Linux Kernel 3.2.85 / 3.10.106+ Fix from $1,9502016-12-08 MEDIUM 5.5 CVE-2016-7916 Race condition in the environ_read function in fs/proc/base.c in the Linux kernel before 4.5.4 allows local users to obtain sensitive information fro… Linux Kernel after 4.5.3 Fix from $1,6002016-11-16 HIGH 7.8 CVE-2016-7911 Race condition in the get_task_ioprio function in block/ioprio.c in the Linux kernel before 4.6.6 allows local users to gain privileges or cause a de… Linux Kernel 3.2.85 / 3.10.107+ Fix from $1,9502016-11-16 HIGH 7.0 CVE-2015-8963 Race condition in kernel/events/core.c in the Linux kernel before 4.4 allows local users to gain privileges or cause a denial of service (use-after-f… Linux Kernel 3.2.85 / 3.16.40+ Fix from $1,9502016-11-16 HIGH 7.0 CVE-2016-5195 KEVEPSS 84% Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of… Ubuntu Linux 3.2.83 / 3.4.113+ Fix from $1,9502016-11-10