Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Linux Linux kernelLinux Kernel Incorrect Resource Transfer Between Spheres Vulnerability

Risk 91
Severity
7.8
Exploited
Trending
Year
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

crypto: algifaead - Revert to operating out-of-place

1 / 5
Source: Microsoft
First published (updated )
CVE-2026-31431

Linux Linux kernelUse After Free

Risk 90
Severity
9.8
Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Last updated 4 July 2026

1 / 3
Source: Ubuntu
First published (updated )
CVE-2017-18017

redhat/kernelBuffer Overflow

Risk 72
Severity
7.8
Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Last updated 4 July 2026

1 / 3
Source: Ubuntu
First published (updated )
CVE-2017-17806

redhat/kernelInput Validation

Risk 71
Severity
7.8
Input Validation
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Last updated 4 July 2026

1 / 3
Source: Ubuntu
First published (updated )
CVE-2017-17805

Linux Linux kernelUse After Free

Risk 72
Severity
7.8
Use After Free
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

It was found that in Linux kernel when peeling off an association to the socket in another network namespace, all transports in this association are not to be rehashed and keep use the old key in hashtable. A kernel would miss removing transports from hashtable when closing the socket and all transports are being freed. Later on a use-after-free issue could be caused when looking up an association and dereferencing the transports.

References:

https://patchwork.ozlabs.org/patch/827077/

http://seclists.org/oss-sec/2017/q4/282

An upstream patch:

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=df80cd9b28b9ebaa284a41df611dbf3a2d05ca74

1 / 3
Source: Red Hat
First published (updated )
CVE-2017-15115

ImageMagick ImageMagickImageMagick Server-Side Request Forgery (SSRF) Vulnerability

Risk 65
Severity
5.5
Exploited
SSRF, Input Validation
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N

The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image.

1 / 2
First published (updated )
CVE-2016-3718

ImageMagick ImageMagickImageMagick Arbitrary File Deletion Vulnerability

Risk 65
Severity
5.8
Exploited
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.

1 / 2
First published (updated )
CVE-2016-3715

redhat/javaOracle Java SE and JRockit Unspecified Vulnerability

Risk 100
Severity
9.8
Exploited
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

It was discovered that the RMI (Java Remote Method Invocation) server implementation in the JMX (Java Management Extensions) component of OpenJDK did not restrict which classes can be deserialized when deserializing authentication credentials. A remote unauthenticated attacker able to connect to a JMX port could possibly use this flaw trigger deserialization flaws.

1 / 5
Source: Red Hat
First published (updated )
CVE-2016-3427

redhat/javaOracle Java SE Integrity Check Vulnerability

Risk 65
Severity
5.3
Exploited
AV:N/AC:L/Au:N/C:N/I:P/A:N

Oracle Java SE 6u105, 7u91 and 8u65 fixes an unspecified vulnerability in the Deployment component (CVE-2015-4902). Upstream has CVSSv2 scored this issue as: 5.0/AV:N/AC:L/Au:N/C:N/I:P/A:N

External Reference:

http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html#AppendixJAVA

1 / 3
Source: Red Hat
First published (updated )
CVE-2015-4902

Mozilla FirefoxMozilla Firefox Security Feature Bypass Vulnerability

Risk 91
Severity
8.8
Exploited
Infoleak
AV:N/AC:M/Au:N/C:P/I:N/A:N

Moxilla Firefox allows remote attackers to bypass the Same Origin Policy to read arbitrary files or gain privileges.

1 / 2
Source: CISA
First published (updated )
CVE-2015-4495

redhat/expatBuffer Overflow

Risk 90
Severity
9.8
Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

An out-of-bounds read flaw was found in the way Expat processed certain input. A remote attacker could send specially crafted XML that, when parsed by an application using the Expat library, would cause that application to crash or, possibly, execute arbitrary code with the permission of the user running the application.

1 / 4
First published (updated )
CVE-2016-0718

NTP ntpThe ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77 does…

Risk 22
Severity
4.3
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

The ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77 does not properly filter special characters, which allows attackers to cause unspecified impact via a crafted filename.

First published (updated )
CVE-2015-7976

Lrzsz Project LrzszInteger Overflow

Risk 54
Severity
7.1
Integer Overflow
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

lrzsz before version 0.12.21~rc can leak information to the receiving side due to an incorrect length check in the function zsdata that causes a sizet to wrap around.

1 / 2
Source: MITRE
First published (updated )
CVE-2018-10195

Linux Linux KernelLast updated 29 November 2024

Risk 66
Severity
7.2
CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Last updated 29 November 2024

1 / 3
Source: Ubuntu
First published (updated )
CVE-2017-17558

debian/iceweaselUse After Free

Risk 89
Severity
10
Use After Free
AV:N/AC:L/Au:N/C:C/I:C/A:C

Last updated 24 July 2024

1 / 2
Source: Ubuntu
First published (updated )
CVE-2015-2722

debian/icedoveBuffer Overflow

Risk 89
Severity
10
Buffer Overflow
AV:N/AC:L/Au:N/C:C/I:C/A:C

Last updated 24 July 2024

1 / 2
Source: Ubuntu
First published (updated )
CVE-2015-2725

debian/icedoveLast updated 24 July 2024

Risk 82
Severity
9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C

Last updated 24 July 2024

1 / 3
Source: Ubuntu
First published (updated )
CVE-2015-2736

Novell Suse Linux Enterprise Software Development KitLast updated 24 July 2024

Risk 23
Severity
4.3
AV:N/AC:M/Au:N/C:N/I:P/A:N

Last updated 24 July 2024

1 / 3
Source: Ubuntu
First published (updated )
CVE-2015-2730

debian/icedoveBuffer Overflow

Risk 89
Severity
10
Buffer Overflow
AV:N/AC:L/Au:N/C:C/I:C/A:C

Last updated 24 July 2024

1 / 2
Source: Ubuntu
First published (updated )
CVE-2015-2726

debian/icedoveLast updated 24 July 2024

Risk 82
Severity
9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C

Last updated 24 July 2024

1 / 3
Source: Ubuntu
First published (updated )
CVE-2015-2735

Novell Suse Linux Enterprise Software Development KitLast updated 24 July 2024

Risk 23
Severity
4.3
AV:N/AC:M/Au:N/C:N/I:P/A:N

Last updated 24 July 2024

1 / 2
Source: Ubuntu
First published (updated )
CVE-2015-2721

debian/icedoveBuffer Overflow

Risk 89
Severity
10
Buffer Overflow
AV:N/AC:L/Au:N/C:C/I:C/A:C

Last updated 24 July 2024

1 / 3
Source: Ubuntu
First published (updated )
CVE-2015-2739

debian/icedoveBuffer Overflow

Risk 89
Severity
10
Buffer Overflow
AV:N/AC:L/Au:N/C:C/I:C/A:C

Last updated 24 July 2024

1 / 3
Source: Ubuntu
First published (updated )
CVE-2015-2724

debian/icedoveBuffer Overflow

Risk 89
Severity
10
Buffer Overflow
AV:N/AC:L/Au:N/C:C/I:C/A:C

Buffer overflow in the nsXMLHttpRequest::AppendToResponseText function ...

1 / 3
Source: Debian
First published (updated )
CVE-2015-2740

debian/iceweaselLast updated 24 July 2024

Risk 53
Severity
7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

Last updated 24 July 2024

1 / 2
Source: Ubuntu
First published (updated )
CVE-2015-2743

Google AndroidBuffer Overflow, Integer Overflow

Risk 49
Severity
6.8
Buffer Overflow, Integer Overflow
AV:N/AC:M/Au:N/C:P/I:P/A:P

Last updated 15 January 2025

1 / 3
Source: Ubuntu
First published (updated )
CVE-2015-1283

debian/icedoveLast updated 24 July 2024

Risk 89
Severity
10
AV:N/AC:L/Au:N/C:C/I:C/A:C

Last updated 24 July 2024

1 / 3
Source: Ubuntu
First published (updated )
CVE-2015-2738

debian/icedoveLast updated 24 July 2024

Risk 89
Severity
10
AV:N/AC:L/Au:N/C:C/I:C/A:C

Last updated 24 July 2024

1 / 3
Source: Ubuntu
First published (updated )
CVE-2015-2734

debian/iceweaselLast updated 24 July 2024

Risk 53
Severity
7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

Last updated 24 July 2024

1 / 2
Source: Ubuntu
First published (updated )
CVE-2015-2728

debian/icedoveLast updated 24 July 2024

Risk 89
Severity
10
AV:N/AC:L/Au:N/C:C/I:C/A:C

Last updated 24 July 2024

1 / 3
Source: Ubuntu
First published (updated )
CVE-2015-2737

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203