Skip to main content

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Explore Sources Research Browse

Production

Loading current evidence

Loading the latest cvebuzz view.

© 2026 cvebuzz. CVE data courtesy of the National Vulnerability Database.

Subscribe via Atom About Browse CVEs Research Contact Privacy Policy Terms of Service

Search the full CVE archive | cvebuzz

Trending
Browse CVEs

Historical archive search

Search the full CVE archive

Search decades of CVEs by regex, severity, date, CWE, vendor/product tags, KEV, PoC, and other evidence.

Years with data: 28
Top vendors indexed: 100

FiltersRefine the archive+

Search by CVE ID or description (supports basic regex, e.g. log4j|struts)

Quick date range

Last 7 days Last 30 days Last 90 days

Severity (select multiple)

Critical (43,400)High (124,858)Medium (163,347)Low (17,956)Unrated (2,043)

Attack vector (select multiple)

Results

CVE results

299 results · Sorted by Highest Buzz score first

CVE-2015-4680

Published Apr 5, 2017

FreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of intermediate CA certificates.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

freeradius / freeradiussuse / linux_enterprise_serversuse / linux_enterprise_software_development_kit

Network

Adjacent network

Local

Physical

CVSS minCVSS max

Year

CWEEnter a numeric ID such as 79 or the prefixed form CWE-79.

VendorBetaChoose an indexed vendor suggestion or enter another vendor.ProductBeta

Only show CVEs with KEV evidence

Only show CVEs with public PoC evidence

Only show CVEs with mention evidence

Only show CVEs with AlienVault OTX activity

Sort

CVE-2016-7797

Published Mar 24, 2017

Pacemaker before 1.1.15, when using pacemaker remote, might allow remote attackers to cause a denial of service (node disconnection) via an unauthenticated connection.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

clusterlabs / pacemakeropensuse / leapopensuse_project / leapredhat / enterprise_linux_high_availabilityredhat / enterprise_linux_resilient_storagesuse / linux_enterprise_high_availabilitysuse / linux_enterprise_software_development_kit

CVE-2016-9398

Published Mar 23, 2017

The jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

fedoraproject / fedorajasper_project / jasperopensuse / leapsuse / linux_enterprise_desktopsuse / linux_enterprise_serversuse / linux_enterprise_software_development_kit

CVE-2014-9854

Published Mar 17, 2017

coders/tiff.c in ImageMagick allows remote attackers to cause a denial of service (application crash) via vectors related to the "identification of image."

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

canonical / ubuntu_linuximagemagick / imagemagickopensuse / leapopensuse / opensusesuse / linux_enterprise_serversuse / linux_enterprise_software_development_kitsuse / suse_linux_enterprise_server

CVE-2014-9853

Published Mar 17, 2017

Memory leak in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service (memory consumption) via a crafted rle file.

CVSS 5.5 · Medium

Vendor/product tagsBeta · best-effort

canonical / ubuntu_linuximagemagick / imagemagicknovell / leapopensuse / leapopensuse / opensuseopensuse_project / suse_linux_enterprise_software_development_kitsuse / linux_enterprise_debuginfosuse / linux_enterprise_desktopsuse / linux_enterprise_serversuse / linux_enterprise_software_development_kitsuse / linux_enterprise_workstation_extension

CVE-2014-9852

Published Mar 17, 2017

distribute-cache.c in ImageMagick re-uses objects after they have been destroyed, which allows remote attackers to have unspecified impact via unspecified vectors.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

imagemagick / imagemagickopensuse / leapopensuse / opensusesuse / linux_enterprise_desktopsuse / linux_enterprise_serversuse / linux_enterprise_software_development_kitsuse / linux_enterprise_workstation_extension

CVE-2017-5898

Published Mar 15, 2017

Integer overflow in the emulated_apdu_from_guest function in usb/dev-smartcard-reader.c in Quick Emulator (Qemu), when built with the CCID Card device emulator support, allows loc…

CVSS 5.5 · Medium

Vendor/product tagsBeta · best-effort

qemu / qemususe / linux_enterprise_desktopsuse / linux_enterprise_serversuse / linux_enterprise_server_for_sapsuse / linux_enterprise_software_development_kit

CVE-2016-2318

Published Feb 3, 2017

GraphicsMagick 1.3.23 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted SVG file, related to the (1) DrawImage function in magick/rende…

CVSS 5.5 · Medium

Vendor/product tagsBeta · best-effort

debian / debian_linuxgraphicsmagick / graphicsmagickopensuse / leapopensuse / opensusesuse / linux_enterprise_debuginfosuse / linux_enterprise_software_development_kitsuse / studio_onsite

CVE-2016-2317

Published Feb 3, 2017

Multiple buffer overflows in GraphicsMagick 1.3.23 allow remote attackers to cause a denial of service (crash) via a crafted SVG file, related to the (1) TracePoint function in ma…

CVSS 5.5 · Medium

Vendor/product tagsBeta · best-effort

debian / debian_linuxgraphicsmagick / graphicsmagickopensuse / leapopensuse / opensusesuse / linux_enterprise_debuginfosuse / linux_enterprise_software_development_kitsuse / studio_onsite

CVE-2015-8934

Published Sep 20, 2016

The copy_from_lzss_window function in archive_read_support_format_rar.c in libarchive 3.2.0 and earlier allows remote attackers to cause a denial of service (out-of-bounds heap re…

CVSS 5.5 · Medium

Vendor/product tagsBeta · best-effort

canonical / ubuntu_linuxlibarchive / libarchivesuse / linux_enterprise_desktopsuse / linux_enterprise_serversuse / linux_enterprise_software_development_kit

CVE-2015-8933

Published Sep 20, 2016

Integer overflow in the archive_read_format_tar_skip function in archive_read_support_format_tar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service…

CVSS 5.5 · Medium

Vendor/product tagsBeta · best-effort

canonical / ubuntu_linuxlibarchive / libarchivesuse / linux_enterprise_desktopsuse / linux_enterprise_serversuse / linux_enterprise_software_development_kit

CVE-2015-8932

Published Sep 20, 2016

The compress_bidder_init function in archive_read_support_filter_compress.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted t…

CVSS 5.5 · Medium

Vendor/product tagsBeta · best-effort

canonical / ubuntu_linuxdebian / debian_linuxlibarchive / libarchivesuse / linux_enterprise_desktopsuse / linux_enterprise_serversuse / linux_enterprise_software_development_kit

CVE-2015-8931

Published Sep 20, 2016

Multiple integer overflows in the (1) get_time_t_max and (2) get_time_t_min functions in archive_read_support_format_mtree.c in libarchive before 3.2.0 allow remote attackers to h…

CVSS 7.8 · High

Vendor/product tagsBeta · best-effort

canonical / ubuntu_linuxdebian / debian_linuxlibarchive / libarchivesuse / linux_enterprise_desktopsuse / linux_enterprise_serversuse / linux_enterprise_software_development_kit

CVE-2015-8930

Published Sep 20, 2016

bsdtar in libarchive before 3.2.0 allows remote attackers to cause a denial of service (infinite loop) via an ISO with a directory that is a member of itself.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

canonical / ubuntu_linuxlibarchive / libarchivesuse / linux_enterprise_desktopsuse / linux_enterprise_serversuse / linux_enterprise_software_development_kit

CVE-2015-8929

Published Sep 20, 2016

Memory leak in the __archive_read_get_extract function in archive_read_extract2.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service via a tar file.

CVSS 5.5 · Medium

Vendor/product tagsBeta · best-effort

libarchive / libarchivesuse / linux_enterprise_desktopsuse / linux_enterprise_serversuse / linux_enterprise_software_development_kit

CVE-2015-8928

Published Sep 20, 2016

The process_add_entry function in archive_read_support_format_mtree.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a cr…

CVSS 5.5 · Medium

Vendor/product tagsBeta · best-effort

canonical / ubuntu_linuxlibarchive / libarchivesuse / linux_enterprise_desktopsuse / linux_enterprise_serversuse / linux_enterprise_software_development_kit

CVE-2015-8926

Published Sep 20, 2016

The archive_read_format_rar_read_data function in archive_read_support_format_rar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a c…

CVSS 5.5 · Medium

Vendor/product tagsBeta · best-effort

canonical / ubuntu_linuxlibarchive / libarchivesuse / linux_enterprise_desktopsuse / linux_enterprise_serversuse / linux_enterprise_software_development_kit

CVE-2015-8925

Published Sep 20, 2016

The readline function in archive_read_support_format_mtree.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (invalid read) via a crafted mtree fil…

CVSS 5.5 · Medium

Vendor/product tagsBeta · best-effort

canonical / ubuntu_linuxlibarchive / libarchivesuse / linux_enterprise_desktopsuse / linux_enterprise_serversuse / linux_enterprise_software_development_kit

CVE-2016-5772

Published Aug 7, 2016

Double free vulnerability in the php_wddx_process_data function in wddx.c in the WDDX extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 allows remote attac…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

debian / debian_linuxopensuse / leapopensuse / opensusephp / phpsuse / linux_enterprise_debuginfosuse / linux_enterprise_serversuse / linux_enterprise_software_development_kit

CVE-2015-8808

Published Jul 13, 2016

The DecodeImage function in coders/gif.c in GraphicsMagick 1.3.18 allows remote attackers to cause a denial of service (uninitialized memory access) via a crafted GIF file.

CVSS 5.5 · Medium

Vendor/product tagsBeta · best-effort

fedoraproject / fedoragraphicsmagick / graphicsmagicksuse / linux_enterprise_debuginfosuse / linux_enterprise_software_development_kitsuse / studio_onsite

CVE-2016-5118

Published Jun 10, 2016

The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a | (pipe) character at the start of a filena…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

canonical / ubuntu_linuxdebian / debian_linuxgraphicsmagick / graphicsmagickimagemagick / imagemagickopensuse / leapopensuse / opensuseoracle / linuxoracle / solarissuse / linux_enterprise_debuginfosuse / linux_enterprise_desktopsuse / linux_enterprise_serversuse / linux_enterprise_software_development_kitsuse / linux_enterprise_workstation_extensionsuse / studio_onsite

CVE-2015-5041

Published Jun 6, 2016

The J9 JVM in IBM SDK, Java Technology Edition 6 before SR16 FP20, 6 R1 before SR8 FP20, 7 before SR9 FP30, and 7 R1 before SR3 FP30 allows remote attackers to obtain sensitive in…

CVSS 9.1 · Critical

Vendor/product tagsBeta · best-effort

ibm / java_sdkibm / websphere_application_serverredhat / satellitesuse / linux_enterprise_serversuse / linux_enterprise_software_development_kitsuse / suse_linux_enterprise_server

CVE-2016-0264

Published May 24, 2016

Buffer overflow in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40 (7.0.9.40)…

CVSS 5.6 · Medium

Vendor/product tagsBeta · best-effort

ibm / java_sdkredhat / enterprise_linux_desktopredhat / enterprise_linux_hpc_node_supplementaryredhat / enterprise_linux_serverredhat / enterprise_linux_server_eusredhat / enterprise_linux_workstationredhat / satellitesuse / linux_enterprise_serversuse / linux_enterprise_software_development_kitsuse / managersuse / manager_proxysuse / openstack_cloudsuse / suse_linux_enterprise_server

CVE-2015-8866

Published May 22, 2016

ext/libxml/libxml.c in PHP before 5.5.22 and 5.6.x before 5.6.6, when PHP-FPM is used, does not isolate each thread from libxml_disable_entity_loader changes in other threads, whi…

CVSS 9.6 · Critical

Vendor/product tagsBeta · best-effort

canonical / ubuntu_linuxopensuse / leapopensuse / opensusephp / phpsuse / linux_enterprise_module_for_web_scriptingsuse / linux_enterprise_software_development_kit

CVE-2016-2782

Published Apr 27, 2016

The treo_attach function in drivers/usb/serial/visor.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service (NULL pointer dereference…

CVSS 4.6 · Medium

Vendor/product tagsBeta · best-effort

linux / linux_kernelsuse / linux_enterprise_debuginfosuse / linux_enterprise_desktopsuse / linux_enterprise_module_for_public_cloudsuse / linux_enterprise_real_time_extensionsuse / linux_enterprise_serversuse / linux_enterprise_software_development_kitsuse / linux_enterprise_workstation_extension

Showing 51-75 of 299 CVEsPage 3 of 12

Previous 1 2 3 4 12 Next

About these shareable results+

Every filter state lives in the URL so you can bookmark, share, and crawl exact historical slices instead of a client-only search session.

Buzz order uses the latest all-time evidence snapshot, refreshed every two hours. Evidence-bearing CVEs rank first; records without a snapshot continue newest-first.