Main entries ~3682 :
Date Id Summary Products Score Patch Annotated
2012-06-13 CVE-2011-2208 Integer signedness error in the osf_getdomainname function in arch/alpha/kernel/osf_sys.c in the Linux kernel before 2.6.39.4 on the Alpha platform allows local users to obtain sensitive information from kernel memory via a crafted call. Linux_kernel N/A
2011-06-22 CVE-2011-2206 XMLParser.pm in DJabberd before 0.85 allows remote authenticated users to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service (CPU and memory consumption), via an XML external entity declaration in conjunction with an entity reference, a different vulnerability than CVE-2011-1757. Djabberd N/A
2012-06-13 CVE-2011-2183 Race condition in the scan_get_next_rmap_item function in mm/ksm.c in the Linux kernel before 2.6.39.3, when Kernel SamePage Merging (KSM) is enabled, allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a crafted application. Linux_kernel N/A
2012-06-13 CVE-2011-2182 The ldm_frag_add function in fs/partitions/ldm.c in the Linux kernel before 2.6.39.1 does not properly handle memory allocation for non-initial fragments, which might allow local users to conduct buffer overflow attacks, and gain privileges or obtain sensitive information, via a crafted LDM partition table. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-1017. Linux_kernel N/A
2011-05-20 CVE-2011-2161 The ape_read_header function in ape.c in libavformat in FFmpeg before 0.5.4, as used in MPlayer, VideoLAN VLC media player, and other products, allows remote attackers to cause a denial of service (application crash) via an APE (aka Monkey's Audio) file that contains a header but no frames. Ffmpeg N/A
2011-05-31 CVE-2011-1937 Cross-site scripting (XSS) vulnerability in Webmin 1.540 and earlier allows local users to inject arbitrary web script or HTML via a chfn command that changes the real (aka Full Name) field, related to useradmin/index.cgi and useradmin/user-lib.pl. Webmin N/A
2012-06-13 CVE-2011-1927 The ip_expire function in net/ipv4/ip_fragment.c in the Linux kernel before 2.6.39 does not properly construct ICMP_TIME_EXCEEDED packets after a timeout, which allows remote attackers to cause a denial of service (invalid pointer dereference) via crafted fragmented packets. Linux_kernel N/A
Remaining NVD entries (unprocessed / no code available): ~286405 :
Date Id Summary Products Score Patch
2025-05-13 CVE-2025-47858 Rejected reason: Not used N/A N/A
2025-05-13 CVE-2025-47859 Rejected reason: Not used N/A N/A
2025-05-13 CVE-2025-47860 Rejected reason: Not used N/A N/A
2025-05-13 CVE-2025-47861 Rejected reason: Not used N/A N/A
2025-05-13 CVE-2025-47862 Rejected reason: Not used N/A N/A
2025-05-13 CVE-2025-47863 Rejected reason: Not used N/A N/A
2025-05-13 CVE-2025-4396 The Relevanssi – A Better Search plugin for WordPress is vulnerable to time-based SQL Injection via the cats and tags query parameters in all versions up to, and including, 4.24.4 (Free) and <= 2.27.4 (Premium) due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries to already existing queries that can be used to extract sensitive... N/A 7.5