Lucene search
+L

1374 matches found

OSV
OSV
added 2022/02/22 8:15 p.m.2 views

UBUNTU-CVE-2022-0714

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.4436...

8.4CVSS6.8AI score0.12272EPSS
SaveExploits1References7
OSV
OSV
added 2022/02/21 7:15 p.m.6 views

UBUNTU-CVE-2021-44570

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-3200 Reason: This candidate is a duplicate of CVE-2021-3200. Notes: All CVE users should reference CVE-2021-3200 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage...

5.5CVSS5.8AI score
SaveExploits0References6
OSV
OSV
added 2022/02/21 9:15 a.m.5 views

UBUNTU-CVE-2022-0691

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.9...

9.8CVSS7.3AI score0.0222EPSS
SaveExploits1References5
OSV
OSV
added 2022/02/18 5:15 a.m.8 views

UBUNTU-CVE-2022-25315

In Expat aka libexpat before 2.4.5, there is an integer overflow in storeRawNames...

9.8CVSS6.9AI score0.04821EPSS
SaveExploits1References4
OSV
OSV
added 2022/02/18 5:15 a.m.7 views

UBUNTU-CVE-2022-25313

In Expat aka libexpat before 2.4.5, an attacker can trigger stack exhaustion in buildmodel via a large nesting depth in the DTD element...

6.5CVSS6.7AI score0.03295EPSS
SaveExploits0References4
OSV
OSV
added 2022/02/17 6:15 p.m.5 views

UBUNTU-CVE-2022-0639

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.7...

6.5CVSS7.3AI score0.01535EPSS
SaveExploits1References6
OSV
OSV
added 2022/02/16 9:15 p.m.14 views

UBUNTU-CVE-2021-43301

Stack overflow in PJSUA API when calling pjsuaplaylistcreate. An attacker-controlled 'filenames' argument may cause a buffer overflow since it is copied to a fixed-size stack buffer without any size validation...

9.8CVSS7.7AI score0.02376EPSS
SaveExploits0References5
OSV
OSV
added 2022/02/15 12:0 a.m.6 views

UBUNTU-CVE-2022-25235

xmltokimpl.c in Expat aka libexpat before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context...

9.8CVSS6.9AI score0.04955EPSS
SaveExploits0References12
OSV
OSV
added 2022/02/14 12:15 p.m.5 views

UBUNTU-CVE-2022-24976

Atheme IRC Services before 7.2.12, when used in conjunction with InspIRCd, allows authentication bypass by ending an IRC handshake at a certain point during a challenge-response login sequence...

9.1CVSS7.2AI score0.0182EPSS
SaveExploits1References4
OSV
OSV
added 2022/02/12 2:15 a.m.6 views

UBUNTU-CVE-2022-0294

Inappropriate implementation in Push messaging in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page...

6.5CVSS5.7AI score0.00743EPSS
SaveExploits0References2
OSV
OSV
added 2022/02/12 12:15 a.m.2 views

UBUNTU-CVE-2022-0120

Inappropriate implementation in Passwords in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially leak cross-origin data via a malicious website...

6.5CVSS7.3AI score0.0075EPSS
SaveExploits1References2
OSV
OSV
added 2022/02/08 9:15 p.m.4 views

UBUNTU-CVE-2022-0521

Access of Memory Location After End of Buffer in GitHub repository radareorg/radare2 prior to 5.6.2...

7.1CVSS7.2AI score0.00958EPSS
SaveExploits1References4
OSV
OSV
added 2022/02/07 10:15 p.m.37 views

UBUNTU-CVE-2021-3861

The RNDIS USB device class includes a buffer overflow vulnerability. Zephyr versions = v2.6.0 contain Heap-based Buffer Overflow CWE-122. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hvfp-w4h8-gxvj...

8.2CVSS6.1AI score0.00479EPSS
SaveExploits1References3
OSV
OSV
added 2022/02/02 9:15 p.m.3 views

UBUNTU-CVE-2022-0443

Use After Free in GitHub repository vim/vim prior to 8.2...

8.4CVSS7.1AI score0.01395EPSS
SaveExploits1References7
OSV
OSV
added 2022/01/28 10:15 p.m.4 views

UBUNTU-CVE-2022-0393

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...

8.4CVSS7.1AI score0.01393EPSS
SaveExploits1References6
OSV
OSV
added 2022/01/27 12:15 a.m.4 views

UBUNTU-CVE-2022-21723

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In versions 2.11.1 and prior, parsing an incoming SIP message that contains a malformed multipart can potentially cause...

9.1CVSS7.3AI score0.04478EPSS
SaveExploits0References5
OSV
OSV
added 2022/01/25 9:15 a.m.5 views

UBUNTU-CVE-2022-0338

Insertion of Sensitive Information into Log File in Conda loguru prior to 0.5.3...

4.3CVSS5.8AI score0.00752EPSS
SaveExploits1References3
OSV
OSV
added 2022/01/25 1:15 a.m.42 views

UBUNTU-CVE-2021-44994

There is an Assertion ''JERRYCONTEXT jmemheapallocatedsize == 0'' failed at /jerry-core/jmem/jmem-heap.c in Jerryscript 3.0.0...

5.5CVSS6AI score0.01018EPSS
SaveExploits1References6
OSV
OSV
added 2022/01/20 10:15 p.m.6 views

UBUNTU-CVE-2021-46344

There is an Assertion 'flags & PARSERPATTERNHASRESTELEMENT' failed at /jerry-core/parser/js/js-parser-expr.c in JerryScript 3.0.0...

5.5CVSS6AI score0.00621EPSS
SaveExploits1References3
OSV
OSV
added 2022/01/20 10:15 p.m.6 views

UBUNTU-CVE-2021-46345

There is an Assertion 'cesu8cursorp == cesu8endp' failed at /jerry-core/lit/lit-strings.c in JerryScript 3.0.0...

5.5CVSS6AI score0.00621EPSS
SaveExploits1References3
Rows per page
Query Builder