Lucene search
+L
AlpinelinuxRecent

13582 matches found

AlpineLinux
AlpineLinux
•added 2023/01/10 12:00 a.m.•140 views

CVE-2022-4337

An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch...

9.8CVSS9.5AI score0.01324EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2023/01/10 12:00 a.m.•90 views

CVE-2023-0129

Heap buffer overflow in Network Service in Google Chrome prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page and specific interactions. Chromium security severity: High...

8.8CVSS8.9AI score0.00503EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2023/01/10 12:00 a.m.•173 views

CVE-2022-4338

An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch...

9.8CVSS9.5AI score0.01324EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2023/01/10 12:00 a.m.•40 views

CVE-2023-21538

.NET Denial of Service Vulnerability...

7.5CVSS7.5AI score0.0274EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2023/01/09 1:54 p.m.•97 views

CVE-2023-22472

Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. It is possible to make a user send any POST request with an arbitrary body given they click on a malicious deep link on a Windows computer. e.g. in an email, chat link...

8.8CVSS7AI score0.00204EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2023/01/05 12:00 a.m.•76 views

CVE-2022-47655

Libde265 1.0.9 is vulnerable to Buffer Overflow in function void putqpelfallback...

7.8CVSS8.1AI score0.00385EPSS
SaveExploits1
AlpineLinux
AlpineLinux
•added 2023/01/04 12:00 a.m.•44 views

CVE-2023-0049

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143...

7.8CVSS7.6AI score0.00471EPSS
SaveExploits1
AlpineLinux
AlpineLinux
•added 2023/01/04 12:00 a.m.•36 views

CVE-2023-0054

Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145...

7.8CVSS7.5AI score0.00469EPSS
SaveExploits1
AlpineLinux
AlpineLinux
•added 2023/01/04 12:00 a.m.•39 views

CVE-2023-0051

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144...

7.8CVSS7.5AI score0.00518EPSS
SaveExploits1
AlpineLinux
AlpineLinux
•added 2023/01/01 12:00 a.m.•147 views

CVE-2022-47952

lxc-user-nic in lxc through 5.0.1 is installed setuid root, and may allow local users to infer whether any file exists, even within a protected directory tree, because "Failed to open" often indicates that a file does not exist, whereas "does not refer to a network namespace path" often indicates...

3.3CVSS4.2AI score0.00702EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/29 6:15 p.m.•46 views

CVE-2022-4843

NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.8.2...

7.5CVSS2AI score0.00698EPSS
SaveExploits1
AlpineLinux
AlpineLinux
•added 2022/12/29 8:52 a.m.•11 views

CVE-2021-4296

A vulnerability, which was classified as problematic, has been found in w3c Unicorn. This issue affects the function ValidatorNuMessage of the file src/org/w3c/unicorn/response/impl/ValidatorNuMessage.java. The manipulation of the argument message leads to cross site scripting. The attack may be...

6.1CVSS3.9AI score0.00516EPSS
SaveExploits0References4
AlpineLinux
AlpineLinux
•added 2022/12/27 9:17 p.m.•38 views

CVE-2022-3064

Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory...

7.5CVSS7.4AI score0.017EPSS
SaveExploits0References10
AlpineLinux
AlpineLinux
•added 2022/12/26 12:00 a.m.•67 views

CVE-2021-38561

golang.org/x/text/language in golang.org/x/text before 0.3.7 can panic with an out-of-bounds read during BCP 47 language tag parsing. Index calculation is mishandled. If parsing untrusted user input, this can be used as a vector for a denial-of-service attack...

7.5CVSS7.6AI score0.01356EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/26 12:00 a.m.•84 views

CVE-2021-44758

Heimdal before 7.7.1 allows attackers to cause a NULL pointer dereference in a SPNEGO acceptor via a preferredmechtype of GSSCNOOID and a nonzero initialresponse value to sendaccept...

7.5CVSS8.4AI score0.01223EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/26 12:00 a.m.•72 views

CVE-2019-14802

HashiCorp Nomad 0.5.0 through 0.9.4 fixed in 0.9.5 reveals unintended environment variables to the rendering task during template rendering, aka GHSA-6hv3-7c34-4hx8. This applies to nomad/client/allocrunner/taskrunner/template...

5.3CVSS5.2AI score0.00589EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/25 12:00 a.m.•44 views

CVE-2022-42898

PAC parsing in MIT Kerberos 5 aka krb5 before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution in KDC, kadmind, or a GSS or Kerberos application server on 32-bit platforms which have a resultant heap-based buffer overflow, and cause a denial of service ...

8.8CVSS9.4AI score0.06419EPSS
SaveExploits1
AlpineLinux
AlpineLinux
•added 2022/12/25 12:00 a.m.•37 views

CVE-2022-41318

A buffer over-read was discovered in libntlmauth in Squid 2.5 through 5.6. Due to incorrect integer-overflow protection, the SSPI and SMB authentication helpers are vulnerable to reading unintended memory locations. In some configurations, cleartext credentials from these locations are sent to a...

8.6CVSS8.7AI score0.0282EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/25 12:00 a.m.•81 views

CVE-2022-44640

Heimdal before 7.7.1 allows remote attackers to execute arbitrary code because of an invalid free in the ASN.1 codec used by the Key Distribution Center KDC...

9.8CVSS9.9AI score0.01844EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/25 12:00 a.m.•41 views

CVE-2022-41317

An issue was discovered in Squid 4.9 through 4.17 and 5.0.6 through 5.6. Due to inconsistent handling of internal URIs, there can be Exposure of Sensitive Information about clients using the proxy via an HTTPS request to an internal cache manager URL. This is fixed in 5.7...

6.5CVSS7.2AI score0.0169EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/23 12:15 a.m.•43 views

CVE-2022-40898

An issue discovered in Python Packaging Authority PyPA Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli...

7.5CVSS7.4AI score0.02659EPSS
SaveExploits1
AlpineLinux
AlpineLinux
•added 2022/12/23 12:00 a.m.•117 views

CVE-2022-43551

A vulnerability exists in curl 7.87.0 HSTS check that could be bypassed to trick it to keep using HTTP. Using its HSTS support, curl can be instructed to use HTTPS instead of using an insecure clear-text HTTP step even when HTTP is provided in the URL. However, the HSTS mechanism could be bypasse...

7.5CVSS7.6AI score0.1654EPSS
SaveExploits1
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•44 views

CVE-2022-29909

Documents in deeply-nested cross-origin browsing contexts could have obtained permissions granted to the top-level origin, bypassing the existing prompt and wrongfully inheriting the top-level permissions. This vulnerability affects Thunderbird 91.9, Firefox ESR 91.9, and Firefox 100...

8.8CVSS9AI score0.00855EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•58 views

CVE-2022-31741

A crafted CMS message could have been processed incorrectly, leading to an invalid memory read, and potentially further memory corruption. This vulnerability affects Thunderbird 91.10, Firefox 101, and Firefox ESR 91.10...

8.8CVSS9.2AI score0.00662EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•38 views

CVE-2022-34470

Session history navigations may have led to a use-after-free and potentially exploitable crash. This vulnerability affects Firefox 102, Firefox ESR 91.11, Thunderbird 102, and Thunderbird 91.11...

9.8CVSS9.4AI score0.01064EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•88 views

CVE-2022-34477

The MediaError message property should be consistent to avoid leaking information about cross-origin resources; however for a same-site cross-origin resource, the message could have leaked information enabling XS-Leaks attacks. This vulnerability affects Firefox 102...

7.5CVSS7.7AI score0.00551EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•67 views

CVE-2021-4140

It was possible to construct specific XSLT markup that would be able to bypass an iframe sandbox. This vulnerability affects Firefox ESR 91.5, Firefox 96, and Thunderbird 91.5...

10CVSS9.1AI score0.0134EPSS
SaveExploits1
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•77 views

CVE-2022-22764

Mozilla developers Paul Adenot and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 96 and Firefox ESR 91.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This...

8.8CVSS9.8AI score0.00702EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•69 views

CVE-2022-26384

If an attacker could control the contents of an iframe sandboxed with allow-popups but not allow-scripts, they were able to craft a link that, when clicked, would lead to JavaScript execution in violation of the sandbox. This vulnerability affects Firefox 98, Firefox ESR 91.7, and Thunderbird 91....

9.6CVSS8.9AI score0.00931EPSS
SaveExploits1
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•50 views

CVE-2022-28285

When generating the assembly code for MLoadTypedArrayElementHole, an incorrect AliasSet was used. In conjunction with another vulnerability this could have been used for an out of bounds memory read. This vulnerability affects Thunderbird 91.8, Firefox 99, and Firefox ESR 91.8...

6.5CVSS7.6AI score0.00759EPSS
SaveExploits1
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•78 views

CVE-2022-28288

Mozilla developers and community members Randell Jesup, Sebastian Hengst, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 98. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run...

8.8CVSS9.2AI score0.00521EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•55 views

CVE-2022-22743

When navigating from inside an iframe while requesting fullscreen access, an attacker-controlled tab could have made the browser unable to leave fullscreen mode. This vulnerability affects Firefox ESR 91.5, Firefox 96, and Thunderbird 91.5...

4.3CVSS6.5AI score0.00643EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•60 views

CVE-2022-22747

After accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the certificate data could have lead to a crash. This crash is believed to be unexploitable. This vulnerability affects Firefox ESR 91.5, Firefox 96, and Thunderbird 91.5...

6.5CVSS7.6AI score0.0063EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•50 views

CVE-2022-22759

If a document created a sandboxed iframe without allow-scripts, and subsequently appended an element to the iframe's document that e.g. had a JavaScript event handler - the event handler would have run despite the iframe's sandbox. This vulnerability affects Firefox 97, Thunderbird 91.6, and...

9.6CVSS8.9AI score0.00743EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•72 views

CVE-2022-1097

NSSToken objects were referenced via direct points, and could have been accessed in an unsafe way on different threads, leading to a use-after-free and potentially exploitable crash. This vulnerability affects Thunderbird 91.8, Firefox 99, and Firefox ESR 91.8...

6.5CVSS7.7AI score0.00917EPSS
SaveExploits1
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•103 views

CVE-2022-28283

The sourceMapURL feature in devtools was missing security checks that would have allowed a webpage to attempt to include local files or other files that should have been inaccessible. This vulnerability affects Firefox 99...

6.5CVSS6.7AI score0.00572EPSS
SaveExploits1
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•54 views

CVE-2022-22738

Applying a CSS filter effect could have accessed out of bounds memory. This could have lead to a heap-buffer-overflow causing a potentially exploitable crash. This vulnerability affects Firefox ESR 91.5, Firefox 96, and Thunderbird 91.5...

8.8CVSS9AI score0.00995EPSS
SaveExploits1
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•72 views

CVE-2022-22740

Certain network request objects were freed too early when releasing a network request handle. This could have lead to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox ESR 91.5, Firefox 96, and Thunderbird 91.5...

8.8CVSS9.1AI score0.0096EPSS
SaveExploits1
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•101 views

CVE-2022-22749

When scanning QR codes, Firefox for Android would have allowed navigation to some URLs that do not point to web content.This bug only affects Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox 96...

4.3CVSS4.9AI score0.0042EPSS
SaveExploits1
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•731 views

CVE-2022-22754

If a user installed an extension of a particular type, the extension could have auto-updated itself and while doing so, bypass the prompt which grants the new version the new requested permissions. This vulnerability affects Firefox 97, Thunderbird 91.6, and Firefox ESR 91.6...

6.5CVSS7.5AI score0.00644EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•80 views

CVE-2022-0843

Mozilla developers Kershaw Chang, Ryan VanderMeulen, and Randell Jesup reported memory safety bugs present in Firefox 97. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerabilit...

8.8CVSS9.6AI score0.0056EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•56 views

CVE-2022-26381

An attacker could have caused a use-after-free by forcing a text reflow in an SVG object leading to a potentially exploitable crash. This vulnerability affects Firefox 98, Firefox ESR 91.7, and Thunderbird 91.7...

8.8CVSS8.9AI score0.00849EPSS
SaveExploits1
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•64 views

CVE-2022-26387

When installing an add-on, Firefox verified the signature before prompting the user; but while the user was confirming the prompt, the underlying add-on file could have been modified and Firefox would not have noticed. This vulnerability affects Firefox 98, Firefox ESR 91.7, and Thunderbird 91.7...

7.5CVSS8.1AI score0.00657EPSS
SaveExploits1
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•88 views

CVE-2022-31748

Mozilla developers Gabriele Svelto, Timothy Nikkel, Randell Jesup, Jon Coppeard, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 100. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited ...

9.8CVSS9.9AI score0.00656EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•99 views

CVE-2022-34471

When downloading an update for an addon, the downloaded addon update's version was not verified to match the version selected from the manifest. If the manifest had been tampered with on the server, an attacker could trick the browser into downgrading the addon to a prior version. This...

6.5CVSS7.2AI score0.00248EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•102 views

CVE-2022-34483

An attacker who could have convinced a user to drag and drop an image to a filesystem could have manipulated the resulting filename to contain an executable extension, and by extension potentially tricked the user into executing malicious code. While very similar, this is a separate issue from...

8.8CVSS8.7AI score0.00721EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•42 views

CVE-2022-22763

When a worker is shutdown, it was possible to cause script to run late in the lifecycle, at a point after where it should not be possible. This vulnerability affects Firefox 96, Thunderbird 91.6, and Firefox ESR 91.6...

8.8CVSS8.6AI score0.00564EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•59 views

CVE-2022-1196

After a VR Process is destroyed, a reference to it may have been retained and used, leading to a use-after-free and potentially exploitable crash. This vulnerability affects Thunderbird 91.8 and Firefox ESR 91.8...

6.5CVSS7.7AI score0.00718EPSS
SaveExploits1
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•68 views

CVE-2022-1834

When displaying the sender of an email, and the sender name contained the Braille Pattern Blank space character multiple times, Thunderbird would have displayed all the spaces. This could have been used by an attacker to send an email message with the attacker's digital signature, that was shown...

6.5CVSS7.8AI score0.0038EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•57 views

CVE-2021-4129

Mozilla developers and community members Julian Hector, Randell Jesup, Gabriele Svelto, Tyson Smith, Christian Holler, and Masayuki Nakano reported memory safety bugs present in Firefox 94. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of thes...

9.8CVSS9.9AI score0.01013EPSS
SaveExploits1
Total number of security vulnerabilities13582