Homepage

firefox vulnerabilities

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the firefox package. This does not include vulnerabilities belonging to this package’s dependencies.

How to fix?

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Fix for free
VulnerabilityVulnerable Version
  • H
Access of Resource Using Incompatible Type ('Type Confusion')

*
  • M
Integer Overflow or Wraparound

*
  • M
Integer Overflow or Wraparound

*
  • M
Integer Overflow or Wraparound

*
  • H
Buffer Overflow

*
  • L
Improperly Implemented Security Check for Standard

*
  • H
Incorrect Type Conversion or Cast

*
  • H
Access of Resource Using Incompatible Type ('Type Confusion')

*
  • M
Out-of-bounds Write

*
  • M
Exposure of System Data to an Unauthorized Control Sphere

*
  • H
Out-of-bounds Write

*
  • H
Use of Uninitialized Resource

*
  • H
Access of Resource Using Incompatible Type ('Type Confusion')

*
  • H
Improper Privilege Management

*
  • H
Use After Free

*
  • L
Cleartext Transmission of Sensitive Information

*
  • H
Out-of-bounds Read

*
  • H
Use After Free

*
  • M
CVE-2024-7529

*
  • H
Use After Free

*
  • H
CVE-2024-7518

*
  • M
Out-of-Bounds

*
  • M
Improper Input Validation

*
  • H
Use After Free

<0:115.12.0-1.el7_9
  • H
Improper Access Control

<0:115.12.0-1.el7_9
  • H
Covert Timing Channel

<0:115.12.0-1.el7_9
  • H
Use After Free

<0:115.12.0-1.el7_9
  • H
Buffer Overflow

<0:115.12.0-1.el7_9
  • H
Improper Validation of Specified Type of Input

<0:115.12.0-1.el7_9
  • H
Inclusion of Functionality from Untrusted Control Sphere

<0:115.12.0-1.el7_9
  • M
Integer Overflow or Wraparound

*
  • H
Improper Validation of Syntactic Correctness of Input

*
  • M
Heap-based Buffer Overflow

*
  • M
Inefficient Regular Expression Complexity

*
  • H
User Interface (UI) Misrepresentation of Critical Information

<0:115.11.0-1.el7_9
  • H
Improper Cross-boundary Removal of Sensitive Data

<0:115.11.0-1.el7_9
  • H
Use After Free

<0:115.11.0-1.el7_9
  • H
Inclusion of Functionality from Untrusted Control Sphere

<0:115.11.0-1.el7_9
  • H
Improper Check for Unusual or Exceptional Conditions

<0:115.11.0-1.el7_9
  • H
Buffer Overflow

<0:115.11.0-1.el7_9
  • M
Excessive Platform Resource Consumption within a Loop

*
  • H
Resource Exhaustion

<0:115.10.0-1.el7_9
  • H
Use After Free

<0:115.10.0-1.el7_9
  • H
Buffer Overflow

<0:115.10.0-1.el7_9
  • H
Integer Overflow or Wraparound

<0:115.10.0-1.el7_9
  • H
Out-of-bounds Read

<0:115.10.0-1.el7_9
  • H
Access of Resource Using Incompatible Type ('Type Confusion')

<0:115.10.0-1.el7_9
  • H
Use After Free

<0:115.10.0-1.el7_9
  • H
Product UI does not Warn User of Unsafe Actions

<0:115.10.0-1.el7_9
  • C
Arbitrary Code Injection

<0:115.9.1-1.el7_9
  • C
CVE-2024-2616

<0:115.9.1-1.el7_9
  • C
The UI Performs the Wrong Action

<0:115.9.1-1.el7_9
  • C
Integer Overflow or Wraparound

<0:115.9.1-1.el7_9
  • C
Use After Free

<0:115.9.1-1.el7_9
  • C
Cross-site Scripting (XSS)

<0:115.9.1-1.el7_9
  • C
Information Exposure

<0:115.9.1-1.el7_9
  • C
Buffer Overflow

<0:115.9.1-1.el7_9
  • C
Register Interface Allows Software Access to Sensitive Data or Security Settings

<0:115.9.1-1.el7_9
  • H
The UI Performs the Wrong Action

<0:115.8.0-1.el7_9
  • H
The UI Performs the Wrong Action

<0:115.8.0-1.el7_9
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:115.8.0-1.el7_9
  • H
Incorrect Conversion between Numeric Types

<0:115.8.0-1.el7_9
  • H
Arbitrary Code Injection

<0:115.8.0-1.el7_9
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:115.8.0-1.el7_9
  • H
Out-of-bounds Read

<0:115.8.0-1.el7_9
  • H
Buffer Overflow

<0:115.8.0-1.el7_9
  • M
Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')

*
  • M
Resource Exhaustion

*
  • H
Improper Input Validation

<0:115.7.0-1.el7_9
  • H
Improper Input Validation

<0:115.7.0-1.el7_9
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:115.7.0-1.el7_9
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:115.7.0-1.el7_9
  • M
Resource Exhaustion

*
  • H
Buffer Overflow

<0:115.7.0-1.el7_9
  • C
Unchecked Return Value

<0:115.9.1-1.el7_9
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:115.7.0-1.el7_9
  • H
Out-of-bounds Write

<0:115.7.0-1.el7_9
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:115.7.0-1.el7_9
  • H
Inadequate Encryption Strength

<0:115.7.0-1.el7_9
  • M
Information Exposure

*
  • H
Race Condition

<0:115.6.0-1.el7_9
  • H
Heap-based Buffer Overflow

<0:115.6.0-1.el7_9
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:115.6.0-1.el7_9
  • H
Heap-based Buffer Overflow

<0:115.6.0-1.el7_9
  • H
Improper Input Validation

<0:115.6.0-1.el7_9
  • H
Use After Free

<0:115.6.0-1.el7_9
  • H
Improper Input Validation

<0:115.6.0-1.el7_9
  • H
Use After Free

<0:115.6.0-1.el7_9
  • H
Heap-based Buffer Overflow

<0:115.6.0-1.el7_9
  • H
Buffer Overflow

<0:115.6.0-1.el7_9
  • H
Use of Uninitialized Resource

<0:115.6.0-1.el7_9
  • H
Buffer Overflow

<0:115.5.0-1.el7_9
  • H
Directory Traversal

<0:115.5.0-1.el7_9
  • H
Out-of-bounds Read

<0:115.5.0-1.el7_9
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:115.5.0-1.el7_9
  • H
Use After Free

<0:115.5.0-1.el7_9
  • H
Use After Free

<0:115.5.0-1.el7_9
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:115.5.0-1.el7_9
  • H
Improper Verification of Cryptographic Signature

*
  • H
Buffer Overflow

<0:115.4.0-1.el7_9
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:115.4.0-1.el7_9
  • H
Product UI does not Warn User of Unsafe Actions

<0:115.4.0-1.el7_9
  • H
Multiple Interpretations of UI Input

<0:115.4.0-1.el7_9
  • H
Open Redirect

<0:115.4.0-1.el7_9
  • H
Memory Leak

<0:115.4.0-1.el7_9
  • H
Improper Handling of Exceptional Conditions

<0:115.4.0-1.el7_9
  • H
Out-of-Bounds

<0:115.3.1-1.el7_9
  • H
Heap-based Buffer Overflow

<0:102.15.1-1.el7_9
  • H
Buffer Overflow

<0:115.3.1-1.el7_9
  • H
Use After Free

<0:115.3.1-1.el7_9
  • H
Out-of-bounds Write

<0:115.3.1-1.el7_9
  • H
Heap-based Buffer Overflow

<0:102.15.1-1.el7_9
  • H
Resource Exhaustion

<0:102.15.0-1.el7_9
  • H
Information Exposure

<0:102.15.0-1.el7_9
  • H
Use After Free

<0:102.15.0-1.el7_9
  • H
Compilation with Insufficient Warnings or Errors

<0:102.15.0-1.el7_9
  • H
Use After Free

<0:102.15.0-1.el7_9
  • H
Use After Free

<0:102.15.0-1.el7_9
  • H
Buffer Overflow

<0:102.15.0-1.el7_9
  • H
Out-of-Bounds

<0:102.15.0-1.el7_9
  • H
Buffer Overflow

<0:102.15.0-1.el7_9
  • H
Incorrect Behavior Order: Early Validation

<0:102.15.0-1.el7_9
  • H
Authentication Bypass

<0:102.15.0-1.el7_9
  • H
Authentication Bypass

<0:102.15.0-1.el7_9
  • H
Reliance on Cookies without Validation and Integrity Checking in a Security Decision

<0:102.14.0-1.el7_9
  • H
Buffer Overflow

<0:102.14.0-1.el7_9
  • H
Improper Handling of Insufficient Permissions or Privileges

<0:102.14.0-1.el7_9
  • H
Race Condition

<0:102.14.0-1.el7_9
  • H
Out-of-bounds Read

<0:102.14.0-1.el7_9
  • H
Improper Input Validation

<0:102.14.0-1.el7_9
  • H
Inclusion of Functionality from Untrusted Control Sphere

<0:102.14.0-1.el7_9
  • H
Buffer Overflow

<0:102.14.0-1.el7_9
  • H
Buffer Overflow

<0:102.14.0-1.el7_9
  • H
Use After Free

<0:115.3.1-1.el7_9
  • M
Inefficient Regular Expression Complexity

*
  • H
Authentication Bypass

<0:102.13.0-2.el7_9
  • H
Use After Free

<0:102.13.0-2.el7_9
  • H
Compilation with Insufficient Warnings or Errors

<0:102.13.0-2.el7_9
  • H
Use After Free

<0:102.13.0-2.el7_9
  • H
Buffer Overflow

<0:102.13.0-2.el7_9
  • M
Arbitrary Code Injection

*
  • M
Resource Exhaustion

*
  • H
Buffer Overflow

<0:102.12.0-1.el7_9
  • H
The UI Performs the Wrong Action

<0:102.12.0-1.el7_9
  • M
Resource Exhaustion

*
  • H
Buffer Overflow

<0:102.11.0-2.el7_9
  • H
Improper Handling of Insufficient Permissions or Privileges

<0:102.11.0-2.el7_9
  • H
User Interface (UI) Misrepresentation of Critical Information

<0:102.11.0-2.el7_9
  • H
Use of Uninitialized Variable

<0:102.11.0-2.el7_9
  • H
Out-of-bounds Read

<0:102.11.0-2.el7_9
  • H
Insufficient Verification of Data Authenticity

<0:102.11.0-2.el7_9
  • H
Resource Exhaustion

<0:102.11.0-2.el7_9
  • M
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

*
  • H
Double Free

<0:102.10.0-1.el7_9
  • H
Incorrect Calculation

<0:102.10.0-1.el7_9
  • H
Direct Request ('Forced Browsing')

<0:102.10.0-1.el7_9
  • H
Failure to Sanitize Special Element

<0:102.10.0-1.el7_9
  • H
Unrestricted Upload of File with Dangerous Type

<0:102.10.0-1.el7_9
  • H
Buffer Overflow

<0:102.10.0-1.el7_9
  • H
Reachable Assertion

<0:102.10.0-1.el7_9
  • H
Out-of-Bounds

<0:102.10.0-1.el7_9
  • H
Out-of-Bounds

<0:102.10.0-1.el7_9
  • H
Inclusion of Functionality from Untrusted Control Sphere

<0:102.9.0-3.el7_9
  • H
Incorrect Type Conversion or Cast

<0:102.9.0-3.el7_9
  • H
Out-of-bounds Read

<0:102.9.0-3.el7_9
  • H
Buffer Overflow

<0:102.9.0-3.el7_9
  • H
Arbitrary Code Injection

<0:102.9.0-3.el7_9
  • H
Use After Free

<0:102.8.0-2.el7_9
  • H
Improper Handling of Alternate Encoding

<0:102.8.0-2.el7_9
  • H
Insufficient UI Warning of Dangerous Operations

<0:102.8.0-2.el7_9
  • H
Buffer Overflow

<0:102.8.0-2.el7_9
  • H
Cross-site Scripting (XSS)

<0:102.8.0-2.el7_9
  • H
Use After Free

<0:102.8.0-2.el7_9
  • H
Incorrect Type Conversion or Cast

<0:102.8.0-2.el7_9
  • H
Incorrect Synchronization

<0:102.8.0-2.el7_9
  • H
Out-of-bounds Write

<0:102.8.0-2.el7_9
  • H
Buffer Overflow

<0:102.8.0-2.el7_9
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:102.8.0-2.el7_9
  • H
Buffer Overflow

<0:102.7.0-1.el7_9
  • H
CVE-2023-23602

<0:102.7.0-1.el7_9
  • H
Inclusion of Functionality from Untrusted Control Sphere

<0:102.7.0-1.el7_9
  • H
Incorrect Regular Expression

<0:102.7.0-1.el7_9
  • H
Arbitrary Command Injection

<0:102.7.0-1.el7_9
  • H
Use of Unmaintained Third Party Components

<0:102.7.0-1.el7_9
  • H
Multiple Interpretations of UI Input

<0:102.7.0-1.el7_9
  • H
Insufficient UI Warning of Dangerous Operations

<0:102.7.0-1.el7_9
  • H
Buffer Overflow

<0:91.4.0-1.el7_9
  • H
Out-of-Bounds

<0:78.9.0-1.el7_9
  • H
Out-of-bounds Read

*
  • M
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

*
  • M
Resource Exhaustion

*
  • H
Truncation of Security-relevant Information

<0:102.6.0-1.el7_9
  • H
Out-of-Bounds

<0:102.6.0-1.el7_9
  • H
Use After Free

<0:102.6.0-1.el7_9
  • H
Buffer Overflow

<0:102.6.0-1.el7_9
  • H
Use After Free

<0:102.6.0-1.el7_9
  • H
Information Exposure

<0:102.6.0-1.el7_9
  • M
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

*
  • H
Use After Free

<0:102.5.0-1.el7_9
  • H
Buffer Overflow

<0:102.5.0-1.el7_9
  • H
Inclusion of Functionality from Untrusted Control Sphere

<0:102.5.0-1.el7_9
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:102.5.0-1.el7_9
  • H
Information Exposure

<0:102.5.0-1.el7_9
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:102.5.0-1.el7_9
  • H
Information Exposure

<0:102.5.0-1.el7_9
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:102.5.0-1.el7_9
  • H
Sensitive Cookie with Improper SameSite Attribute

<0:102.5.0-1.el7_9
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:102.5.0-1.el7_9
  • H
Use After Free

<0:102.5.0-1.el7_9
  • H
Use After Free

<0:102.5.0-1.el7_9
  • H
Cross-site Scripting (XSS)

<0:102.5.0-1.el7_9
  • M
Incorrect Regular Expression

*
  • M
Use After Free

*
  • H
Resource Exhaustion

<0:102.4.0-1.el7_9
  • H
Buffer Overflow

<0:102.4.0-1.el7_9
  • H
Inclusion of Functionality from Untrusted Control Sphere

<0:102.4.0-1.el7_9
  • H
Buffer Overflow

<0:102.4.0-1.el7_9
  • M
Inefficient Regular Expression Complexity

*
  • H
Use After Free

<0:102.3.0-7.el7_9
  • H
Buffer Overflow

<0:102.3.0-6.el7_9
  • H
Use After Free

<0:102.3.0-6.el7_9
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:102.3.0-6.el7_9
  • H
Improper Handling of Inconsistent Structural Elements

<0:102.3.0-6.el7_9
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:102.3.0-6.el7_9
  • H
Reliance on Cookies without Validation and Integrity Checking in a Security Decision

<0:102.3.0-6.el7_9
  • M
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

*
  • H
Buffer Overflow

<0:91.13.0-1.el7_9
  • H
Product UI does not Warn User of Unsafe Actions

<0:91.13.0-1.el7_9
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:91.13.0-1.el7_9
  • H
Buffer Overflow

<0:91.13.0-1.el7_9
  • H
Use After Free

<0:91.13.0-1.el7_9
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:91.12.0-2.el7_9
  • H
Cross-site Scripting (XSS)

<0:91.12.0-2.el7_9
  • H
Buffer Overflow

<0:91.12.0-2.el7_9
  • H
Return of Wrong Status Code

<0:91.11.0-2.el7_9
  • H
Integer Overflow or Wraparound

<0:91.11.0-2.el7_9
  • H
Buffer Overflow

<0:91.11.0-2.el7_9
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:91.11.0-2.el7_9
  • H
Cross-site Scripting (XSS)

<0:91.11.0-2.el7_9
  • H
Use After Free

<0:91.11.0-2.el7_9
  • M
Open Redirect

*
  • H
Cross-site Scripting (XSS)

<0:91.11.0-2.el7_9
  • H
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<0:91.11.0-2.el7_9
  • H
Inclusion of Functionality from Untrusted Control Sphere

<0:91.10.0-1.el7_9
  • H
Buffer Overflow

<0:91.10.0-1.el7_9
  • H
Allocation of Resources Without Limits or Throttling

<0:91.10.0-1.el7_9
  • H
Use of Uninitialized Variable

<0:91.10.0-1.el7_9
  • H
Buffer Overflow

<0:91.10.0-1.el7_9
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:91.10.0-1.el7_9
  • H
Inclusion of Functionality from Untrusted Control Sphere

<0:91.10.0-1.el7_9
  • C
Access of Resource Using Incompatible Type ('Type Confusion')

<0:91.9.1-1.el7_9
  • C
Access of Resource Using Incompatible Type ('Type Confusion')

<0:91.9.1-1.el7_9
  • M
Resource Exhaustion

*
  • H
Buffer Overflow

<0:91.9.0-1.el7_9
  • H
Exposure of System Data to an Unauthorized Control Sphere

<0:91.9.0-1.el7_9
  • H
Reliance on Cookies without Validation and Integrity Checking

<0:91.9.0-1.el7_9
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:91.9.0-1.el7_9
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:91.9.0-1.el7_9
  • H
Improper Preservation of Permissions

<0:91.9.0-1.el7_9
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:91.8.0-1.el7_9
  • H
Out-of-bounds Write

<0:91.8.0-1.el7_9
  • H
Out-of-bounds Read

<0:91.8.0-1.el7_9
  • H
Buffer Overflow

<0:91.8.0-1.el7_9
  • H
Use After Free

<0:91.8.0-1.el7_9
  • H
Resource Exhaustion

<0:91.8.0-1.el7_9
  • H
Use After Free

<0:91.8.0-1.el7_9
  • H
Use After Free

<0:91.8.0-1.el7_9
  • C
Time-of-check Time-of-use (TOCTOU)

<0:91.7.0-3.el7_9
  • C
Improper Preservation of Permissions

<0:91.7.0-3.el7_9
  • C
The UI Performs the Wrong Action

<0:91.7.0-3.el7_9
  • C
Use After Free

<0:91.7.0-3.el7_9
  • C
Incorrect Behavior Order: Early Validation

<0:91.7.0-3.el7_9
  • C
Use After Free

<0:91.7.0-3.el7_9
  • C
Use After Free

<0:91.7.0-3.el7_9
  • H
Use After Free

<0:91.3.0-1.el7_9
  • H
Buffer Overflow

<0:91.3.0-1.el7_9
  • M
Integer Overflow or Wraparound

*
  • C
Incorrect Behavior Order: Early Validation

<0:91.7.0-3.el7_9
  • M
Resource Exhaustion

*
  • C
Integer Overflow or Wraparound

<0:91.7.0-3.el7_9
  • C
Inappropriate Encoding for Output Context

<0:91.7.0-3.el7_9
  • H
Buffer Overflow

<0:91.6.0-1.el7_9
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:91.6.0-1.el7_9
  • H
Arbitrary Code Injection

<0:91.6.0-1.el7_9
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:91.6.0-1.el7_9
  • H
Inclusion of Functionality from Untrusted Control Sphere

<0:91.6.0-1.el7_9
  • H
Inclusion of Functionality from Untrusted Control Sphere

<0:91.6.0-1.el7_9
  • H
Inclusion of Functionality from Untrusted Control Sphere

<0:91.6.0-1.el7_9
  • M
Integer Overflow or Wraparound

*
  • M
Integer Overflow or Wraparound

*
  • M
Integer Overflow or Wraparound

*
  • M
Integer Overflow or Wraparound

*
  • M
Integer Overflow or Wraparound

*
  • M
Integer Overflow or Wraparound

*
  • M
Integer Overflow or Wraparound

*
  • M
Incorrect Calculation

*
  • M
Integer Overflow or Wraparound

*
  • H
Inclusion of Functionality from Untrusted Control Sphere

<0:91.5.0-1.el7_9
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:91.5.0-1.el7_9
  • H
Buffer Overflow

<0:91.5.0-1.el7_9
  • H
Buffer Overflow

<0:91.5.0-1.el7_9
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:91.5.0-1.el7_9
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:91.5.0-1.el7_9
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:91.5.0-1.el7_9
  • H
NULL Pointer Dereference

<0:91.5.0-1.el7_9
  • H
Use After Free

<0:91.5.0-1.el7_9
  • H
Buffer Overflow

<0:91.5.0-1.el7_9
  • H
Use After Free

<0:91.5.0-1.el7_9
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:91.5.0-1.el7_9
  • H
Cross-site Scripting (XSS)

<0:91.4.0-1.el7_9
  • H
Loop with Unreachable Exit Condition ('Infinite Loop')

<0:91.4.0-1.el7_9
  • H
Buffer Overflow

<0:91.4.0-1.el7_9
  • H
Unquoted Search Path or Element

<0:91.4.0-1.el7_9
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:91.4.0-1.el7_9
  • H
Information Exposure

<0:91.4.0-1.el7_9
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:91.4.0-1.el7_9
  • H
Use After Free

<0:91.4.0-1.el7_9
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:91.4.0-1.el7_9
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:91.3.0-1.el7_9
  • H
Inclusion of Functionality from Untrusted Control Sphere

<0:91.3.0-1.el7_9
  • H
Incorrect Permission Assignment for Critical Resource

<0:91.3.0-1.el7_9
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:91.3.0-1.el7_9
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:91.3.0-1.el7_9
  • H
Use After Free

<0:91.3.0-1.el7_9
  • H
Buffer Overflow

<0:91.2.0-4.el7_9
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:91.2.0-4.el7_9
  • H
Use After Free

<0:91.2.0-4.el7_9
  • H
Buffer Overflow

<0:91.2.0-4.el7_9
  • H
Use After Free

<0:91.2.0-4.el7_9
  • M
Information Exposure

*
  • H
Out-of-Bounds

<0:91.2.0-4.el7_9
  • H
Buffer Overflow

<0:78.14.0-1.el7_9
  • H
Cross-site Scripting (XSS)

*
  • H
Out-of-Bounds

<0:78.13.0-2.el7_9
  • H
Time-of-check Time-of-use (TOCTOU)

<0:78.13.0-2.el7_9
  • H
Use After Free

<0:78.13.0-2.el7_9
  • H
Use of Uninitialized Resource

<0:78.13.0-2.el7_9
  • H
Use After Free

<0:78.13.0-2.el7_9
  • H
Buffer Overflow

<0:78.13.0-2.el7_9
  • C
Use After Free

<0:60.5.0-2.el7
  • C
Use After Free

<0:60.4.0-1.el7
  • C
Buffer Overflow

<0:60.5.0-2.el7
  • C
Improper Authentication

<0:60.5.0-2.el7
  • C
Buffer Overflow

<0:60.4.0-1.el7
  • C
Out-of-bounds Read

<0:60.4.0-1.el7
  • C
Integer Overflow or Wraparound

<0:60.4.0-1.el7
  • C
Buffer Overflow

<0:60.4.0-1.el7
  • C
Inclusion of Functionality from Untrusted Control Sphere

<0:60.4.0-1.el7
  • C
Buffer Overflow

<0:60.3.0-1.el7_5
  • C
Buffer Overflow

<0:60.3.0-1.el7_5
  • C
Improper Access Control

<0:60.3.0-1.el7_5
  • C
Missing Authorization

<0:60.3.0-1.el7_5
  • M
Improper Input Validation

<0:60.2.1-1.el7_5
  • C
Information Exposure

<0:60.2.0-1.el7_5
  • C
Integer Overflow or Wraparound

<0:60.3.0-1.el7_5
  • C
Out-of-bounds Read

<0:60.2.2-1.el7_5
  • C
Improper Access Control

<0:60.3.0-1.el7_5
  • C
Access of Resource Using Incompatible Type ('Type Confusion')

<0:60.2.2-1.el7_5
  • C
Inclusion of Functionality from Untrusted Control Sphere

<0:60.2.0-1.el7_5
  • C
Out-of-bounds Write

<0:60.2.0-1.el7_5
  • C
Buffer Overflow

<0:60.2.0-1.el7_5
  • C
Use After Free

<0:60.2.0-1.el7_5
  • C
Inclusion of Functionality from Untrusted Control Sphere

<0:60.1.0-4.el7_5
  • C
Race Condition

<0:60.3.0-1.el7_5
  • C
Out-of-bounds Write

<0:60.1.0-4.el7_5
  • C
Buffer Overflow

<0:60.1.0-4.el7_5
  • C
Files or Directories Accessible to External Parties

<0:60.1.0-4.el7_5
  • C
Inclusion of Functionality from Untrusted Control Sphere

<0:52.8.0-1.el7_5
  • C
Use After Free

<0:52.8.0-1.el7_5
  • C
Authentication Bypass

<0:60.1.0-4.el7_5
  • C
Buffer Overflow

<0:60.1.0-4.el7_5
  • C
Buffer Overflow

<0:60.1.0-4.el7_5
  • C
Use After Free

<0:60.2.0-1.el7_5
  • C
Use After Free

<0:60.1.0-4.el7_5
  • C
Eval Injection

<0:52.8.0-1.el7_5
  • C
Buffer Overflow

<0:52.8.0-1.el7_5
  • C
Use After Free

<0:52.8.0-1.el7_5
  • C
Integer Overflow or Wraparound

<0:60.1.0-4.el7_5
  • C
Out-of-bounds Read

<0:60.1.0-4.el7_5
  • C
Use After Free

<0:60.1.0-4.el7_5
  • H
Use After Free

<0:52.7.3-1.el7_5
  • C
Buffer Overflow

<0:52.8.0-1.el7_5
  • C
Buffer Overflow

<0:52.8.0-1.el7_5
  • C
Integer Overflow or Wraparound

<0:52.8.0-1.el7_5
  • C
Missing Authorization

<0:52.8.0-1.el7_5
  • C
Buffer Overflow

<0:52.7.0-1.el7_4
  • C
Improper Cross-boundary Removal of Sensitive Data

<0:52.7.0-1.el7_4
  • C
Integer Overflow or Wraparound

<0:52.7.0-1.el7_4
  • C
Buffer Overflow

<0:52.7.0-1.el7_4
  • C
Heap-based Buffer Overflow

<0:52.7.2-1.el7_4
  • C
Out-of-bounds Write

<0:52.7.0-1.el7_4
  • C
Buffer Overflow

<0:52.7.0-1.el7_4
  • C
Buffer Overflow

<0:52.7.0-1.el7_4
  • C
Use After Free

<0:52.6.0-1.el7_4
  • C
Use After Free

<0:52.6.0-1.el7_4
  • C
Buffer Overflow

<0:52.6.0-1.el7_4
  • C
Use After Free

<0:52.6.0-1.el7_4
  • C
Integer Overflow or Wraparound

<0:52.6.0-1.el7_4
  • C
Use After Free

<0:52.6.0-1.el7_4
  • C
Use After Free

<0:52.6.0-1.el7_4
  • H
Improper Cross-boundary Removal of Sensitive Data

<0:52.5.1-1.el7_4
  • C
Buffer Overflow

<0:52.5.0-1.el7_4
  • C
Use After Free

<0:52.6.0-1.el7_4
  • C
Use After Free

<0:52.6.0-1.el7_4
  • C
User Interface (UI) Misrepresentation of Critical Information

<0:52.6.0-1.el7_4
  • C
Use After Free

<0:52.6.0-1.el7_4
  • C
Information Exposure

<0:52.5.0-1.el7_4
  • C
Use After Free

<0:52.5.0-1.el7_4
  • C
Buffer Overflow

<0:52.4.0-1.el7_4
  • C
Use After Free

<0:52.4.0-1.el7_4
  • C
Use After Free

<0:52.4.0-1.el7_4
  • C
Download of Code Without Integrity Check

<0:52.4.0-1.el7_4
  • C
Buffer Overflow

<0:52.4.0-1.el7_4
  • C
Incorrect Authorization

<0:52.3.0-2.el7_4
  • C
Use After Free

<0:52.3.0-2.el7_4
  • C
Out-of-Bounds

<0:52.3.0-2.el7_4
  • C
Use After Free

<0:52.3.0-2.el7_4
  • C
Use After Free

<0:52.4.0-1.el7_4
  • C
Cross-site Scripting (XSS)

<0:52.4.0-1.el7_4
  • C
Use After Free

<0:52.3.0-2.el7_4
  • C
Inclusion of Functionality from Untrusted Control Sphere

<0:52.3.0-2.el7_4
  • C
Use After Free

<0:52.3.0-2.el7_4
  • C
Arbitrary Command Injection

<0:52.3.0-2.el7_4
  • C
Inclusion of Functionality from Untrusted Control Sphere

<0:52.3.0-2.el7_4
  • C
Out-of-bounds Read

<0:52.3.0-2.el7_4
  • C
Incorrect Authorization

<0:52.3.0-2.el7_4
  • C
Out-of-bounds Read

<0:52.3.0-2.el7_4
  • C
Use After Free

<0:52.3.0-2.el7_4
  • C
Out-of-bounds Read

<0:52.3.0-2.el7_4
  • C
Out-of-bounds Read

<0:52.3.0-2.el7_4
  • C
Use After Free

<0:78.4.1-1.el7_9
  • C
Use After Free

<0:52.2.0-1.el7_3
  • C
Heap-based Buffer Overflow

<0:52.2.0-1.el7_3
  • C
Heap-based Buffer Overflow

<0:52.2.0-1.el7_3
  • C
Out-of-bounds Read

<0:52.2.0-1.el7_3
  • C
Out-of-Bounds

<0:52.2.0-1.el7_3
  • C
Use After Free

<0:52.2.0-1.el7_3
  • C
Out-of-bounds Read

<0:52.2.0-1.el7_3
  • C
Use After Free

<0:52.2.0-1.el7_3
  • C
Out-of-bounds Read

<0:52.2.0-1.el7_3
  • C
Missing Initialization of a Variable

<0:52.2.0-1.el7_3
  • C
Out-of-bounds Write

<0:52.1.0-2.el7_3
  • H
Improper Cross-boundary Removal of Sensitive Data

<0:78.5.0-1.el7_9
  • H
Improper Validation of Integrity Check Value

<0:78.5.0-1.el7_9
  • H
Inclusion of Functionality from Untrusted Control Sphere

<0:78.5.0-1.el7_9
  • H
Buffer Overflow

<0:78.5.0-1.el7_9
  • H
Improperly Implemented Security Check for Standard

<0:78.5.0-1.el7_9
  • H
Use After Free

<0:78.5.0-1.el7_9
  • H
User Interface (UI) Misrepresentation of Critical Information

<0:78.5.0-1.el7_9
  • C
Use After Free

<0:52.2.0-1.el7_3
  • C
Out-of-bounds Read

<0:52.2.0-1.el7_3
  • C
Reachable Assertion

<0:52.2.0-1.el7_3
  • C
Out-of-Bounds

<0:52.2.0-1.el7_3
  • C
Out-of-Bounds

<0:52.1.0-2.el7_3
  • C
Improper Input Validation

<0:52.2.0-1.el7_3
  • C
Out-of-bounds Read

<0:52.2.0-1.el7_3
  • C
Use After Free

<0:52.2.0-1.el7_3
  • C
Use After Free

<0:52.2.0-1.el7_3
  • C
Use After Free

<0:52.2.0-1.el7_3
  • C
Out-of-Bounds

<0:52.1.0-2.el7_3
  • C
Use After Free

<0:52.1.0-2.el7_3
  • C
Out-of-Bounds

<0:52.1.0-2.el7_3
  • C
Use After Free

<0:52.1.0-2.el7_3
  • C
Improper Input Validation

<0:52.1.0-2.el7_3
  • C
Out-of-bounds Write

<0:52.1.0-2.el7_3
  • C
Out-of-bounds Write

<0:52.1.0-2.el7_3
  • C
Use After Free

<0:52.1.0-2.el7_3
  • C
Use After Free

<0:52.1.0-2.el7_3
  • C
Incorrect Permission Assignment for Critical Resource

<0:52.1.0-2.el7_3
  • C
Use After Free

<0:52.1.0-2.el7_3
  • C
Use After Free

<0:52.1.0-2.el7_3
  • C
Use After Free

<0:52.1.0-2.el7_3
  • C
Use After Free

<0:52.1.0-2.el7_3
  • C
Out-of-Bounds

<0:52.1.0-2.el7_3
  • C
Out-of-Bounds

<0:52.1.0-2.el7_3
  • C
CVE-2017-5455

<0:52.1.0-2.el7_3
  • C
Use After Free

<0:52.1.0-2.el7_3
  • C
Out-of-bounds Read

<0:52.1.0-2.el7_3
  • C
Out-of-Bounds

<0:52.1.0-2.el7_3
  • H
Use After Free

<0:78.5.0-1.el7_9
  • H
Cross-site Scripting (XSS)

<0:78.5.0-1.el7_9
  • H
Cross-site Scripting (XSS)

<0:78.5.0-1.el7_9
  • C
Out-of-bounds Read

<0:52.1.0-2.el7_3
  • C
Out-of-Bounds

<0:52.1.0-2.el7_3
  • C
Information Exposure

<0:52.1.0-2.el7_3
  • C
Improper Validation of Array Index

<0:52.1.0-2.el7_3
  • C
Use After Free

<0:52.1.0-2.el7_3
  • C
Stack-based Buffer Overflow

<0:52.1.0-2.el7_3
  • C
Integer Overflow or Wraparound

<0:52.0-5.el7_3
  • C
Improper Input Validation

<0:52.1.0-2.el7_3
  • C
Use After Free

<0:52.1.0-2.el7_3
  • C
Out-of-Bounds

<0:52.0-4.el7_3
  • C
Out-of-Bounds

<0:52.0-4.el7_3
  • C
Error Handling

<0:52.0-4.el7_3
  • C
Use After Free

<0:52.0-4.el7_3
  • C
Cross-site Scripting (XSS)

<0:52.1.0-2.el7_3
  • C
Out-of-bounds Read

<0:52.1.0-2.el7_3
  • C
Out-of-bounds Read

<0:52.1.0-2.el7_3
  • C
Use After Free

<0:45.5.1-1.el7_3
  • C
Improper Certificate Validation

<0:45.5.0-1.el7_3
  • C
Out-of-Bounds

<0:45.5.0-1.el7_3
  • C
Improper Input Validation

<0:45.5.0-1.el7_3
  • C
Integer Overflow or Wraparound

<0:45.5.0-1.el7_3
  • C
Information Exposure

<0:52.0-4.el7_3
  • C
Improper Input Validation

<0:45.7.0-2.el7_3
  • C
CVE-2017-5390

<0:45.7.0-2.el7_3
  • C
Information Exposure

<0:52.0-4.el7_3
  • C
Out-of-Bounds

<0:52.0-4.el7_3
  • C
Out-of-Bounds

<0:45.7.0-2.el7_3
  • C
Use After Free

<0:45.7.0-2.el7_3
  • C
DEPRECATED: Use of Uninitialized Resource

<0:52.0-4.el7_3
  • C
Use After Free

<0:52.0-4.el7_3
  • C
CVE-2017-5386

<0:45.7.0-2.el7_3
  • C
Improper Input Validation

<0:45.6.0-1.el7_3
  • C
Information Exposure

<0:45.6.0-1.el7_3
  • C
Security Features

<0:45.6.0-1.el7_3
  • C
Out-of-Bounds

<0:45.5.0-1.el7_3
  • C
Out-of-Bounds

<0:45.5.0-1.el7_3
  • C
Use After Free

<0:45.7.0-2.el7_3
  • C
Use After Free

<0:45.7.0-2.el7_3
  • C
Information Exposure

<0:45.7.0-2.el7_3
  • C
Out-of-Bounds

<0:45.7.0-2.el7_3
  • C
Use After Free

<0:45.6.0-1.el7_3
  • C
Out-of-Bounds

<0:45.6.0-1.el7_3
  • C
Origin Validation Error

<0:45.6.0-1.el7_3
  • C
Security Features

<0:45.6.0-1.el7_3
  • C
Out-of-Bounds

<0:45.6.0-1.el7_3
  • C
Improper Access Control

<0:45.6.0-1.el7_3
  • C
Use After Free

<0:45.6.0-1.el7_3
  • C
Out-of-Bounds

<0:45.4.0-1.el7_2
  • C
Use After Free

<0:45.4.0-1.el7_2
  • C
Integer Overflow or Wraparound

<0:45.4.0-1.el7_2
  • C
Use After Free

<0:45.4.0-1.el7_2
  • C
Improper Input Validation

<0:45.4.0-1.el7_2
  • C
Cross-site Scripting (XSS)

<0:45.3.0-1.el7_2
  • C
Out-of-Bounds

<0:45.4.0-1.el7_2
  • C
Out-of-Bounds

<0:45.3.0-1.el7_2
  • C
Out-of-Bounds

<0:45.3.0-1.el7_2
  • C
Out-of-Bounds

<0:45.4.0-1.el7_2
  • C
Improper Input Validation

<0:45.4.0-1.el7_2
  • C
Use After Free

<0:45.4.0-1.el7_2
  • C
Use After Free

<0:45.4.0-1.el7_2
  • C
Information Exposure

<0:45.4.0-1.el7_2
  • C
Use After Free

<0:45.4.0-1.el7_2
  • C
Out-of-Bounds

<0:45.3.0-1.el7_2
  • C
Information Exposure

<0:45.3.0-1.el7_2
  • C
CVE-2016-2828

<0:45.2.0-1.el7_2
  • C
Security Features

<0:45.2.0-1.el7_2
  • C
Use After Free

<0:45.3.0-1.el7_2
  • C
Incorrect Type Conversion or Cast

<0:45.3.0-1.el7_2
  • C
Use After Free

<0:45.3.0-1.el7_2
  • C
Use After Free

<0:45.3.0-1.el7_2
  • C
Out-of-Bounds

<0:45.3.0-1.el7_2
  • C
Out-of-Bounds

<0:45.1.0-1.el7_2
  • C
Improper Access Control

<0:45.2.0-1.el7_2
  • C
Out-of-Bounds

<0:45.2.0-1.el7_2
  • C
Out-of-Bounds

<0:45.2.0-1.el7_2
  • C
CVE-2016-2821

<0:45.2.0-1.el7_2
  • C
Use After Free

<0:45.3.0-1.el7_2
  • C
Cross-site Scripting (XSS)

<0:45.3.0-1.el7_2
  • C
Out-of-Bounds

<0:45.1.0-1.el7_2
  • C
Out-of-Bounds

<0:45.1.0-1.el7_2
  • C
Security Features

<0:38.7.0-1.el7_2
  • C
Out-of-Bounds

<0:45.1.0-1.el7_2
  • C
Out-of-Bounds

<0:45.1.0-1.el7_2
  • C
Out-of-bounds Read

<0:45.1.0-1.el7_2
  • C
Out-of-Bounds

<0:38.7.0-1.el7_2
  • C
Out-of-Bounds

<0:38.7.0-1.el7_2
  • C
Out-of-Bounds

<0:38.7.0-1.el7_2
  • C
Out-of-Bounds

<0:38.7.0-1.el7_2
  • C
Improper Data Handling

<0:38.7.0-1.el7_2
  • C
Out-of-Bounds

<0:38.7.0-1.el7_2
  • C
CVE-2016-1973

<0:38.7.0-1.el7_2
  • C
CVE-2016-1966

<0:38.7.0-1.el7_2
  • C
Improper Data Handling

<0:38.7.0-1.el7_2
  • C
Out-of-Bounds

<0:38.7.0-1.el7_2
  • C
CVE-2016-1961

<0:38.7.0-1.el7_2
  • C
Out-of-Bounds

<0:38.7.0-1.el7_2
  • C
Security Features

<0:38.7.0-1.el7_2
  • C
Access Restriction Bypass

<0:38.7.0-1.el7_2
  • C
Out-of-Bounds

<0:38.7.0-1.el7_2
  • C
Out-of-bounds Write

<0:38.6.1-1.el7_2
  • C
CVE-2016-1964

<0:38.7.0-1.el7_2
  • C
Out-of-Bounds

<0:38.7.0-1.el7_2
  • C
Out-of-Bounds

<0:38.7.0-1.el7_2
  • C
Use After Free

<0:38.7.0-1.el7_2
  • C
CVE-2016-1960

<0:38.7.0-1.el7_2
  • C
Out-of-Bounds

<0:38.7.0-1.el7_2
  • C
Out-of-Bounds

<0:38.7.0-1.el7_2
  • C
Heap-based Buffer Overflow

<0:38.6.1-1.el7_2
  • C
Out-of-bounds Read

<0:38.6.1-1.el7_2
  • C
NULL Pointer Dereference

<0:38.6.1-1.el7_2
  • C
Out-of-Bounds

<0:38.6.0-1.el7_2
  • H
Open Redirect

<0:78.3.0-1.el7_9
  • C
Out-of-Bounds

<0:38.7.0-1.el7_2
  • C
Out-of-Bounds

<0:38.7.0-1.el7_2
  • C
Out-of-Bounds

<0:38.7.0-1.el7_2
  • H
Use After Free

<0:78.3.0-1.el7_9
  • C
Use After Free

<0:38.5.0-3.el7_2
  • C
Integer Overflow or Wraparound

<0:38.5.0-3.el7_2
  • H
Cross-site Scripting (XSS)

<0:78.3.0-1.el7_9
  • H
Buffer Overflow

<0:78.4.0-1.el7_9
  • H
Use After Free

<0:78.4.0-1.el7_9
  • C
Out-of-Bounds

<0:38.6.0-1.el7_2
  • C
Out-of-Bounds

<0:38.5.0-3.el7_2
  • H
Buffer Overflow

<0:78.3.0-1.el7_9
  • C
Information Exposure

<0:38.5.0-3.el7_2
  • C
Integer Overflow or Wraparound

<0:38.5.0-3.el7_2
  • C
Numeric Errors

<0:38.5.0-3.el7_2
  • C
Integer Overflow or Wraparound

<0:38.5.0-3.el7_2
  • C
Code

<0:38.4.0-1.el7_1
  • C
Code

<0:38.4.0-1.el7_1
  • C
Cross-site Scripting (XSS)

<0:38.4.0-1.el7_1
  • C
Out-of-Bounds

<0:38.4.0-1.el7_1
  • C
Security Features

<0:38.4.0-1.el7_1
  • C
Out-of-Bounds

<0:38.4.0-1.el7_1
  • H
Use After Free

<0:68.12.0-1.el7_8
  • C
Access Restriction Bypass

<0:38.4.0-1.el7_1
  • C
Out-of-Bounds

<0:38.4.0-1.el7_1
  • C
Out-of-Bounds

<0:38.4.0-1.el7_1
  • C
Execution with Unnecessary Privileges

<0:38.3.0-2.el7_1
  • H
Use After Free

<0:68.11.0-1.el7_8
  • C
Execution with Unnecessary Privileges

<0:38.3.0-2.el7_1
  • C
Buffer Overflow

<0:38.3.0-2.el7_1
  • C
Use After Free

<0:38.3.0-2.el7_1
  • C
Execution with Unnecessary Privileges

<0:38.3.0-2.el7_1
  • C
Integer Overflow or Wraparound

<0:38.2.0-4.el7_1
  • C
Execution with Unnecessary Privileges

<0:38.3.0-2.el7_1
  • C
Integer Overflow or Wraparound

<0:38.2.0-4.el7_1
  • C
Information Exposure

<0:38.3.0-2.el7_1
  • C
Execution with Unnecessary Privileges

<0:38.3.0-2.el7_1
  • C
Improper Access Control

<0:38.3.0-2.el7_1
  • C
Out-of-Bounds

<0:38.4.0-1.el7_1
  • C
Buffer Overflow

<0:38.3.0-2.el7_1
  • H
Incorrect Use of Privileged APIs

<0:68.12.0-1.el7_8
  • H
Improper Following of a Certificate's Chain of Trust

<0:68.10.0-1.el7_8
  • H
Buffer Overflow

<0:68.11.0-1.el7_8
  • H
Information Exposure

<0:68.11.0-1.el7_8
  • C
Use After Free

<0:38.2.1-1.el7_1
  • C
Out-of-Bounds

<0:38.2.0-4.el7_1
  • H
CVE-2020-6514

<0:68.11.0-1.el7_8
  • C
Out-of-bounds Read

<0:38.2.0-4.el7_1
  • C
Out-of-Bounds

<0:38.2.0-4.el7_1
  • C
Buffer Access with Incorrect Length Value

<0:38.3.0-2.el7_1
  • C
Execution with Unnecessary Privileges

<0:38.3.0-2.el7_1
  • C
Integer Overflow or Wraparound

<0:38.2.0-4.el7_1
  • C
Use After Free

<0:38.2.0-4.el7_1
  • C
Execution with Unnecessary Privileges

<0:38.3.0-2.el7_1
  • C
Use After Free

<0:38.1.0-1.el7_1
  • C
Execution with Unnecessary Privileges

<0:38.3.0-2.el7_1
  • H
Information Exposure

<0:38.1.1-1.el7_1
  • C
CVE-2015-4488

<0:38.2.0-4.el7_1
  • C
Information Exposure

<0:38.2.0-4.el7_1
  • H
Information Exposure

<0:68.10.0-1.el7_8
  • C
Use After Free

<0:38.1.0-1.el7_1
  • H
Out-of-Bounds

<0:68.10.0-1.el7_8
  • C
Security Features

<0:38.2.1-1.el7_1
  • C
Heap-based Buffer Overflow

<0:38.2.0-4.el7_1
  • C
Out-of-Bounds

<0:38.2.0-4.el7_1
  • C
Out-of-Bounds

<0:38.1.0-1.el7_1
  • C
Code

<0:38.1.0-1.el7_1
  • C
Use After Free

<0:38.1.0-1.el7_1
  • C
Use After Free

<0:68.8.0-1.el7_8
  • C
Code

<0:38.1.0-1.el7_1
  • C
Out-of-Bounds

<0:38.2.0-4.el7_1
  • C
Out-of-Bounds

<0:38.2.0-4.el7_1
  • C
Out-of-Bounds

<0:38.2.0-4.el7_1
  • C
Out-of-Bounds

<0:38.1.0-1.el7_1
  • C
Cryptographic Issues

<0:38.1.0-1.el7_1
  • H
Use After Free

<0:68.9.0-1.el7_8
  • C
Out-of-Bounds

<0:38.1.0-1.el7_1
  • C
Code

<0:38.1.0-1.el7_1
  • H
Buffer Overflow

<0:68.9.0-1.el7_8
  • H
Access of Resource Using Incompatible Type ('Type Confusion')

<0:68.9.0-1.el7_8
  • C
Files or Directories Accessible to External Parties

<0:68.8.0-1.el7_8
  • H
Use After Free

<0:68.10.0-1.el7_8
  • H
Use After Free

<0:68.10.0-1.el7_8
  • C
Out-of-Bounds

<0:38.1.0-1.el7_1
  • C
Buffer Overflow

<0:68.8.0-1.el7_8
  • C
Buffer Overflow

<0:68.8.0-1.el7_8
  • C
Code

<0:38.1.0-1.el7_1
  • C
Out-of-bounds Read

<0:38.1.0-1.el7_1
  • C
Access of Resource Using Incompatible Type ('Type Confusion')

<0:38.1.0-1.el7_1
  • C
Code

<0:38.1.0-1.el7_1
  • C
Execution with Unnecessary Privileges

<0:38.1.0-1.el7_1
  • C
Improper Input Validation

<0:38.1.0-1.el7_1
  • C
Out-of-Bounds

<0:38.0-3.el7_1
  • C
Access Restriction Bypass

<0:31.5.3-3.el7_1
  • C
Out-of-Bounds

<0:31.5.3-3.el7_1
  • C
CVE-2015-2708

<0:38.0-3.el7_1
  • C
Integer Overflow or Wraparound

<0:38.0-3.el7_1
  • C
Out-of-Bounds

<0:38.0-3.el7_1
  • C
Out-of-Bounds

<0:38.0-3.el7_1
  • C
Use After Free

<0:38.0-3.el7_1
  • C
Heap-based Buffer Overflow

<0:31.6.0-2.el7_1
  • C
Cross-site Request Forgery (CSRF)

<0:31.6.0-2.el7_1
  • C
Use After Free

<0:31.6.0-2.el7_1
  • C
Execution with Unnecessary Privileges

<0:31.6.0-2.el7_1
  • C
Improperly Implemented Security Check for Standard

<0:31.6.0-2.el7_1
  • C
Out-of-Bounds

<0:31.5.0-2.el7_0
  • C
CVE-2015-0836

<0:31.5.0-2.el7_0
  • C
Information Exposure

<0:31.5.0-2.el7_0
  • C
Use After Free

<0:31.5.0-2.el7_0
  • C
Buffer Overflow

<0:31.3.0-3.el7_0
  • C
Use After Free

<0:31.4.0-1.el7_0
  • C
Cross-site Request Forgery (CSRF)

<0:31.4.0-1.el7_0
  • C
Arbitrary Argument Injection

<0:31.4.0-1.el7_0
  • C
Exposed Dangerous Method or Function

<0:31.3.0-3.el7_0
  • C
Buffer Overflow

<0:31.3.0-3.el7_0
  • C
Heap-based Buffer Overflow

<0:31.4.0-1.el7_0
  • C
Improper Input Validation

<0:31.3.0-3.el7_0
  • C
Use After Free

<0:31.3.0-3.el7_0
  • C
Out-of-bounds Write

<0:31.2.0-3.el7_0
  • C
Use After Free

<0:31.2.0-3.el7_0
  • C
CVE-2014-1577

<0:31.2.0-3.el7_0
  • C
CVE-2014-1583

<0:31.2.0-3.el7_0
  • C
CVE-2014-1574

<0:31.2.0-3.el7_0
  • C
Out-of-Bounds

<0:31.2.0-3.el7_0
  • C
Out-of-Bounds

<0:24.8.0-1.el7_0
  • C
Use After Free

<0:24.8.0-1.el7_0
  • C
Arbitrary Code Injection

<0:24.7.0-1.el7_0
  • H
Use After Free

<0:78.12.0-1.el7_9
  • H
Out-of-bounds Write

<0:78.12.0-1.el7_9
  • H
NULL Pointer Dereference

<0:78.10.0-1.el7_9
  • H
Arbitrary Argument Injection

<0:78.10.0-1.el7_9
  • C
Operation on a Resource after Expiration or Release

<0:24.7.0-1.el7_0
  • H
Information Exposure

<0:78.9.0-1.el7_9
  • H
Integer Overflow or Wraparound

<0:78.10.0-1.el7_9
  • C
Information Exposure

<0:78.8.0-1.el7_9
  • H
Null Byte Interaction Error (Poison Null Byte)

<0:78.7.0-2.el7_9
  • H
Improper Preservation of Permissions

<0:78.10.0-1.el7_9
  • C
Use After Free

<0:24.6.0-1.el7_0
  • C
Use After Free

<0:68.6.1-1.el7_8
  • C
Buffer Overflow

<0:78.8.0-1.el7_9
  • C
Use After Free

<0:68.6.1-1.el7_8
  • H
Improper Preservation of Permissions

<0:78.10.0-1.el7_9
  • H
Buffer Overflow

<0:78.11.0-3.el7_9
  • H
Improper Input Validation

<0:68.6.0-1.el7_7
  • H
Out-of-Bounds

<0:68.7.0-2.el7_8
  • C
Use After Free

<0:24.7.0-1.el7_0
  • C
CVE-2014-1547

<0:24.7.0-1.el7_0
  • C
CVE-2014-1533

<0:24.6.0-1.el7_0
  • C
Use After Free

<0:24.6.0-1.el7_0
  • H
Inclusion of Functionality from Untrusted Control Sphere

<0:78.7.0-2.el7_9
  • H
Out-of-bounds Read

<0:78.9.0-1.el7_9
  • H
Buffer Overflow

<0:78.9.0-1.el7_9
  • H
Information Exposure

<0:68.6.0-1.el7_7
  • H
Information Exposure

<0:78.10.0-1.el7_9
  • H
Out-of-bounds Read

<0:68.6.0-1.el7_7
  • H
Access of Resource Using Incompatible Type ('Type Confusion')

<0:78.7.0-2.el7_9
  • H
Use After Free

<0:68.6.0-1.el7_7
  • H
Buffer Overflow

<0:68.6.0-1.el7_7
  • H
Buffer Overflow

<0:78.12.0-1.el7_9
  • H
Out-of-bounds Write

<0:68.5.0-2.el7_7
  • H
Out-of-Bounds

<0:68.7.0-2.el7_8
  • H
Buffer Overflow

<0:68.7.0-2.el7_8
  • H
Use After Free

<0:78.10.0-1.el7_9
  • H
Out-of-bounds Write

<0:78.10.0-1.el7_9
  • C
Information Exposure

<0:78.8.0-1.el7_9
  • H
Buffer Overflow

<0:78.7.0-2.el7_9
  • C
Information Exposure

<0:78.8.0-1.el7_9
  • H
Improper Restriction of Rendered UI Layers or Frames

<0:78.9.0-1.el7_9
  • H
Cross-site Scripting (XSS)

<0:68.5.0-2.el7_7
  • H
Buffer Overflow

<0:78.6.0-1.el7_9
  • C
Cross-site Scripting (XSS)

<0:68.4.1-1.el7_7
  • H
Use After Free

<0:68.6.0-1.el7_7
  • H
Out-of-bounds Read

<0:68.6.0-1.el7_7
  • C
Access of Resource Using Incompatible Type ('Type Confusion')

<0:68.4.1-1.el7_7
  • H
Buffer Overflow

<0:68.5.0-2.el7_7
  • C
Cross-site Scripting (XSS)

<0:68.4.1-1.el7_7
  • H
Information Exposure

<0:78.6.0-1.el7_9
  • C
Buffer Overflow

<0:68.4.1-1.el7_7
  • C
Buffer Overflow

<0:68.3.0-1.el7_7
  • C
Access of Resource Using Incompatible Type ('Type Confusion')

<0:68.4.1-1.el7_7
  • H
Information Exposure

<0:78.6.0-1.el7_9
  • C
Use After Free

<0:68.3.0-1.el7_7
  • H
Information Exposure

<0:78.7.0-2.el7_9
  • C
Buffer Overflow

<0:68.3.0-1.el7_7
  • C
Use After Free

<0:68.3.0-1.el7_7
  • C
Use After Free

<0:68.3.0-1.el7_7
  • H
Improper Input Validation

<0:78.6.0-1.el7_9
  • H
Buffer Overflow

<0:78.6.0-1.el7_9
  • H
Use After Free

<0:78.6.0-1.el7_9
  • H
Improper Neutralization of Special Elements

<0:78.3.0-1.el7_9
  • C
Use After Free

<0:78.6.1-1.el7_9
  • H
User Interface (UI) Misrepresentation of Critical Information

<0:78.3.0-1.el7_9
  • H
User Interface (UI) Misrepresentation of Critical Information

<0:78.3.0-1.el7_9
  • H
Information Exposure

<0:78.6.0-1.el7_9
  • H
Incorrect Default Permissions

<0:78.3.0-1.el7_9
  • H
Out-of-bounds Read

<0:78.3.0-1.el7_9
  • H
User Interface (UI) Misrepresentation of Critical Information

<0:78.3.0-1.el7_9
  • H
Access of Resource Using Incompatible Type ('Type Confusion')

<0:78.3.0-1.el7_9
  • H
Integer Overflow or Wraparound

<0:78.3.0-1.el7_9
  • M
Resource Exhaustion

*
  • C
Heap-based Buffer Overflow

<0:68.2.0-1.el7_7
  • C
Use After Free

<0:68.2.0-1.el7_7
  • C
Buffer Overflow

<0:68.2.0-1.el7_7
  • C
Buffer Overflow

<0:68.2.0-1.el7_7
  • C
Heap-based Buffer Overflow

<0:68.2.0-1.el7_7
  • C
Inclusion of Functionality from Untrusted Control Sphere

<0:68.2.0-1.el7_7
  • C
Exposed Dangerous Method or Function

<0:68.2.0-1.el7_7
  • C
Cross-site Scripting (XSS)

<0:68.2.0-1.el7_7
  • C
Buffer Overflow

<0:68.2.0-1.el7_7
  • H
Use After Free

<0:60.9.0-1.el7_7
  • H
Missing Authorization

<0:60.9.0-1.el7_7
  • H
Inclusion of Functionality from Untrusted Control Sphere

<0:60.9.0-1.el7_7
  • H
Cross-site Scripting (XSS)

<0:60.9.0-1.el7_7
  • H
Use After Free

<0:60.9.0-1.el7_7
  • H
Execution with Unnecessary Privileges

<0:60.9.0-1.el7_7
  • H
Buffer Overflow

<0:60.9.0-1.el7_7
  • H
Inclusion of Functionality from Untrusted Control Sphere

<0:60.9.0-1.el7_7
  • C
Reliance on Untrusted Inputs in a Security Decision

<0:60.8.0-1.el7_6
  • C
Access of Resource Using Incompatible Type ('Type Confusion')

<0:60.7.2-1.el7_6
  • C
Privilege Context Switching Error

<0:60.7.2-1.el7_6
  • C
Use After Free

<0:60.8.0-1.el7_6
  • C
Buffer Overflow

<0:60.8.0-1.el7_6
  • C
Cross-site Scripting (XSS)

<0:60.8.0-1.el7_6
  • C
Improper Cross-boundary Removal of Sensitive Data

<0:60.8.0-1.el7_6
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • C
Inclusion of Functionality from Untrusted Control Sphere

<0:60.8.0-1.el7_6
  • C
Inclusion of Functionality from Untrusted Control Sphere

<0:60.8.0-1.el7_6
  • C
Improper Neutralization of Special Elements

<0:60.8.0-1.el7_6
  • C
Resource Exhaustion

<0:60.7.0-1.el7_6
  • C
Inclusion of Functionality from Untrusted Control Sphere

<0:60.7.0-1.el7_6
  • C
Unsynchronized Access to Shared Data in a Multithreaded Context

<0:60.7.0-1.el7_6
  • C
Buffer Overflow

<0:60.7.0-1.el7_6
  • C
Use After Free

<0:60.7.0-1.el7_6
  • C
Use After Free

<0:60.7.0-1.el7_6
  • C
Inclusion of Functionality from Untrusted Control Sphere

<0:60.7.0-1.el7_6
  • C
Buffer Overflow

<0:60.7.0-1.el7_6
  • C
Inclusion of Functionality from Untrusted Control Sphere

<0:60.7.0-1.el7_6
  • C
Use After Free

<0:60.7.0-1.el7_6
  • C
Out-of-bounds Read

<0:60.7.0-1.el7_6
  • C
Access of Resource Using Incompatible Type ('Type Confusion')

<0:60.7.0-1.el7_6
  • C
Information Exposure

<0:60.7.0-1.el7_6
  • H
Use After Free

<0:60.5.1-1.el7_6
  • C
Out-of-Bounds

<0:60.6.0-3.el7_6
  • C
Information Exposure

<0:60.6.0-3.el7_6
  • H
Integer Overflow or Wraparound

<0:60.5.1-1.el7_6
  • C
Access of Resource Using Incompatible Type ('Type Confusion')

<0:60.6.0-3.el7_6
  • C
Out-of-Bounds

<0:60.6.1-1.el7_6
  • C
Information Exposure

<0:60.6.0-3.el7_6
  • C
Use After Free

<0:60.6.0-3.el7_6
  • C
Access of Resource Using Incompatible Type ('Type Confusion')

<0:60.6.1-1.el7_6
  • C
Use After Free

<0:60.6.0-3.el7_6
  • C
Buffer Overflow

<0:60.6.0-3.el7_6
  • C
Access of Resource Using Incompatible Type ('Type Confusion')

<0:60.6.0-3.el7_6
  • L
Integer Overflow or Wraparound

*
  • M
Improperly Implemented Security Check for Standard

*
  • M
Authentication Bypass

*
  • M
Out-of-bounds Read

*
  • M
Out-of-bounds Read

*
  • M
Integer Overflow or Wraparound

*
  • L
Improper Access Control

*
  • M
Files or Directories Accessible to External Parties

*
  • M
User Interface (UI) Misrepresentation of Critical Information

*
  • M
Session Fixation

*
  • M
Improper Input Validation

*
  • L
Untrusted Search Path

*
  • M
Improperly Implemented Security Check for Standard

*
  • L
User Interface (UI) Misrepresentation of Critical Information

*
  • M
Deserialization of Untrusted Data

*
  • M
Integer Overflow or Wraparound

*
  • M
Out-of-bounds Read

*
  • M
Inclusion of Functionality from Untrusted Control Sphere

*
  • M
Encoding Error

*
  • L
Improper Authorization

*
  • M
Encoding Error

*
  • L
Improper Authorization

*
  • L
Improper Cross-boundary Removal of Sensitive Data

*
  • L
Improperly Implemented Security Check for Standard

*
  • M
Improper Cross-boundary Removal of Sensitive Data

*
  • L
Information Exposure

*
  • M
Improper Neutralization of Special Elements

*
  • M
Unsynchronized Access to Shared Data in a Multithreaded Context

*
  • M
Out-of-bounds Read

*
  • M
Out-of-bounds Read

*
  • M
Out-of-bounds Read

*
  • M
Out-of-bounds Read

*
  • M
Improper Certificate Validation

*
  • M
Integer Overflow or Wraparound

*
  • M
Improper Input Validation

*
  • M
Improper Input Validation

*
  • M
CVE-2014-1586

*
  • M
CVE-2014-1585

*
  • L
Out-of-bounds Read

*
  • L
Out-of-Bounds

*
  • L
Authentication Bypass

*
  • L
Improper Input Validation

*
  • M
Improper Cross-boundary Removal of Sensitive Data

<0:60.2.1-1.el7_5
  • M
Improper Input Validation

*
  • L
Product UI does not Warn User of Unsafe Actions

*
  • M
Improper Access Control

*
  • M
Cross-site Request Forgery (CSRF)

*