Priority CRITICAL 93KEV
In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.98114 · Published 2026-04-22 · Fixed in 5.10.254, 5.15.204 +6 CWE-669
Priority CRITICAL 93KEV
A local privilege escalation vulnerability was found on polkit's pkexec utility.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.94921 · Published 2022-01-28 · Fixed CWE-787
Priority LOW 31
When using the gdImageCreateFromXbm() function in the GD Graphics Library (aka LibGD) 2.2.5, as used in the PHP GD extension in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6, it is possible to…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.04332 · Published 2019-06-18 · Partial fix CWE-457
Priority HIGH 74
The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-after-free and memory corruption) or poss…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.52841 · Published 2018-01-03 · Partial fix CWE-416
Priority LOW 39
game-music-emu before 0.6.1 allows remote attackers to generate out of bounds 8-bit values.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.0233 · Published 2017-04-12 · No fix listed CWE-125
Priority LOW 39
game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.0233 · Published 2017-04-12 · No fix listed CWE-119
Priority LOW 38
Stack-based buffer overflow in game-music-emu before 0.6.1.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.01928 · Published 2017-04-12 · No fix listed CWE-119
Priority LOW 28
Memory leak in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service (memory consumption) via a crafted rle file.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.01815 · Published 2017-03-17 · Will not fix CWE-399
Priority MEDIUM 47
distribute-cache.c in ImageMagick re-uses objects after they have been destroyed, which allows remote attackers to have unspecified impact via unspecified vectors.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02933 · Published 2017-03-17 · Will not fix CWE-913
Priority MEDIUM 41
The rds_inc_info_copy function in net/rds/recv.c in the Linux kernel through 4.6.3 does not initialize a certain structure member, which allows remote attackers to obtain sensitive information from kernel stack memory by…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.05521 · Published 2016-06-27 · Will not fix CWE-200
Priority CRITICAL 100KEV
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in June 2016.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.20055 · Published 2016-06-16 · Fixed
Priority MEDIUM 46
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.04767 · Published 2016-06-16 · Fixed
Priority MEDIUM 46
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.04767 · Published 2016-06-16 · Fixed CWE-787
Priority MEDIUM 46
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.04767 · Published 2016-06-16 · Fixed CWE-787
Priority MEDIUM 46
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.04767 · Published 2016-06-16 · Fixed CWE-787
Priority MEDIUM 46
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.04767 · Published 2016-06-16 · Fixed CWE-787
Priority MEDIUM 46
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.04767 · Published 2016-06-16 · Fixed CWE-787
Priority MEDIUM 46
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.04932 · Published 2016-06-16 · Fixed CWE-787
Priority MEDIUM 45
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.0381 · Published 2016-06-16 · Fixed CWE-843
Priority MEDIUM 45
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.0381 · Published 2016-06-16 · Fixed
Priority MEDIUM 45
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.0381 · Published 2016-06-16 · Fixed
Priority MEDIUM 45
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.0381 · Published 2016-06-16 · Fixed
Priority MEDIUM 45
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.0381 · Published 2016-06-16 · Fixed
Priority MEDIUM 45
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.0381 · Published 2016-06-16 · Fixed
Priority MEDIUM 45
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.0381 · Published 2016-06-16 · Fixed
Load more