Lucene search
+L
CvelistMost viewed

397976 matches found

Cvelist
Cvelist
•added 2020/03/18 3:45 p.m.•75 views

CVE-2019-19335

During installation of an OpenShift 4 cluster, the openshift-install command line tool creates an auth directory, with kubeconfig and kubeadmin-password files. Both files contain credentials used to authenticate to the OpenShift API server, and are incorrectly assigned word-readable permissions...

4.4CVSS4.8AI score0.00327EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2020/01/21 12:00 a.m.•76 views

CVE-2019-14907

All samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an issue where if it is set with "log level = 3" or above then the string obtained from the client, after a failed character conversion, is printed. Such strings can be provided during the NTLMSSP...

6.5CVSS6.7AI score0.03151EPSS
SaveExploits0References11
Cvelist
Cvelist
•added 2020/01/15 4:34 p.m.•75 views

CVE-2020-2654

Vulnerability in the Java SE product of Oracle Java SE component: Libraries. Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE...

3.7CVSS4.5AI score0.0396EPSS
SaveExploits0References21
Cvelist
Cvelist
•added 2020/01/14 11:11 p.m.•75 views

CVE-2020-0601

A spoofing vulnerability exists in the way Windows CryptoAPI Crypt32.dll validates Elliptic Curve Cryptography ECC certificates.An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file was from a trusted,...

8.2AI score0.89436EPSS
SaveExploits15References3
Cvelist
Cvelist
•added 2019/11/18 5:24 a.m.•75 views

CVE-2019-19062

A memory leak in the cryptoreport function in crypto/cryptouserbase.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service memory consumption by triggering cryptoreportalg failures, aka CID-ffdde5932042...

6.7AI score0.00633EPSS
SaveExploits0References15
Cvelist
Cvelist
•added 2019/11/14 7:08 p.m.•75 views

CVE-2019-0117

Insufficient access control in protected memory subsystem for IntelR SGX for 6th, 7th, 8th, 9th Generation IntelR CoreTM Processor Families; IntelR XeonR Processor E3-1500 v5, v6 Families; IntelR XeonR E-2100 & E-2200 Processor Families with IntelR Processor Graphics may allow a privileged user t...

5.3AI score0.00415EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2019/10/23 4:31 p.m.•75 views

CVE-2019-18348

An issue was discovered in urllib2 in Python 2.x through 2.7.17 and urllib in Python 3.x through 3.8.0. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the first argument to urllib.request.urlopen with \r\n specifically in the host component of a URL follow...

6.4AI score0.03513EPSS
SaveExploits0References13
Cvelist
Cvelist
•added 2019/04/23 6:16 p.m.•75 views

CVE-2019-2684

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: RMI. Supported versions that are affected are Java SE: 7u211, 8u202, 11.0.2 and 12; Java SE Embedded: 8u201. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...

5.8AI score0.37618EPSS
SaveExploits0References37
Cvelist
Cvelist
•added 2019/04/05 4:42 a.m.•75 views

CVE-2019-10874

Cross Site Request Forgery CSRF in the bolt/upload File Upload feature in Bolt CMS 3.6.6 allows remote attackers to execute arbitrary code by uploading a JavaScript file to include executable extensions in the file/edit/config/config.yml configuration file...

9.1AI score0.04522EPSS
SaveExploits4References4
Cvelist
Cvelist
•added 2019/03/11 6:00 p.m.•75 views

CVE-2019-9692

class.showtime2image.php in CMS Made Simple CMSMS before 2.2.10 does not ensure that a watermark file has a standard image file extension GIF, JPG, JPEG, or PNG...

7AI score0.45896EPSS
SaveExploits8References6
Cvelist
Cvelist
•added 2019/02/26 2:00 a.m.•75 views

CVE-2018-20796

In the GNU C Library aka glibc or libc6 through 2.29, checkdstlimitscalcpos1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by '\227|\1\1|t1|\\2537+' in grep...

5.4AI score0.05757EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2018/10/17 1:00 a.m.•75 views

CVE-2018-3282

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Storage Engines. Supported versions that are affected are 5.5.61 and prior, 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network acce...

6AI score0.03968EPSS
SaveExploits0References13
Cvelist
Cvelist
•added 2018/09/13 12:00 a.m.•75 views

CVE-2018-8466

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8367, CVE-2018-8465,...

7.5AI score0.69019EPSS
SaveExploits3References4
Cvelist
Cvelist
•added 2018/08/14 7:00 p.m.•75 views

CVE-2018-3646

Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access with guest OS privilege via a terminal page fault and a side-channel analysis...

6.8AI score0.08573EPSS
SaveExploits0References56
Cvelist
Cvelist
•added 2018/07/09 8:00 p.m.•75 views

CVE-2018-1000622

The Rust Programming Language rustdoc version Between 0.8 and 1.27.0 contains a CWE-427: Uncontrolled Search Path Element vulnerability in rustdoc plugins that can result in local code execution as a different user. This attack appear to be exploitable via using the --plugin flag without the...

7.8AI score0.01819EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2018/06/18 12:00 p.m.•75 views

CVE-2018-12533

JBoss RichFaces 3.1.0 through 3.3.4 allows unauthenticated remote attackers to inject expression language EL expressions and execute arbitrary Java code via a /DATA/ substring in a path with an org.richfaces.renderkit.html.Paint2DResource$ImageData object, aka RF-14310...

9.7AI score0.19041EPSS
SaveExploits1References7
Cvelist
Cvelist
•added 2018/05/24 1:00 p.m.•76 views

CVE-2018-1000199

The Linux Kernel version 3.18 contains a dangerous feature vulnerability in modifyuserhwbreakpoint that can result in crash and possibly memory corruption. This attack appear to be exploitable via local code execution and the ability to use ptrace. This vulnerability appears to have been fixed in...

7.2AI score0.01221EPSS
SaveExploits0References15
Cvelist
Cvelist
•added 2018/05/01 4:00 p.m.•75 views

CVE-2018-10583

An information disclosure vulnerability occurs when LibreOffice 6.0.3 and Apache OpenOffice Writer 4.1.5 automatically process and initiate an SMB connection embedded in a malicious file, as demonstrated by xlink:href=file://192.168.0.2/test.jpg within an office:document-content element in a .odt...

6.6AI score0.78342EPSS
SaveExploits7References9
Cvelist
Cvelist
•added 2018/04/19 2:00 a.m.•75 views

CVE-2018-2628

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Core Components. Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.2 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to...

9.4AI score0.99959EPSS
SaveExploits70References7
Cvelist
Cvelist
•added 2018/03/13 5:00 p.m.•75 views

CVE-2017-1002101

In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using subpath volume mounts with any volume type including non-privileged pods, subject to file permissions can access files/directories outside of the volume, including the host's filesyste...

8.8CVSS8.6AI score0.13267EPSS
SaveExploits2References4
Cvelist
Cvelist
•added 2018/02/15 2:00 a.m.•75 views

CVE-2018-0837

Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0834,...

7.4AI score0.65312EPSS
SaveExploits4References4
Cvelist
Cvelist
•added 2018/01/04 2:00 p.m.•75 views

CVE-2018-0775

Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0758, CVE-2018-0762,...

6.7AI score0.6787EPSS
SaveExploits5References4
Cvelist
Cvelist
•added 2017/10/04 1:00 a.m.•75 views

CVE-2017-1000253

Linux distributions that have not patched their long-term kernels with https://git.kernel.org/linus/a87938b2e246b81b4fb713edb371a9fa3c5c3c86 committed on April 14, 2015. This kernel vulnerability was fixed in April 2015 by commit a87938b2e246b81b4fb713edb371a9fa3c5c3c86 backported to Linux 3.10.7...

7.4AI score0.10695EPSS
SaveExploits5References13
Cvelist
Cvelist
•added 2017/04/24 7:00 p.m.•75 views

CVE-2017-3308

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DML. Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protoco...

7.4AI score0.03078EPSS
SaveExploits0References10
Cvelist
Cvelist
•added 2016/10/10 4:00 p.m.•75 views

CVE-2016-5325

CRLF injection vulnerability in the ServerResponsewriteHead function in Node.js 0.10.x before 0.10.47, 0.12.x before 0.12.16, 4.x before 4.6.0, and 6.x before 6.7.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the reason argument...

6.8AI score0.04093EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2016/05/05 12:00 a.m.•75 views

CVE-2016-2107

The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a certain padding check, which allows remote attackers to obtain sensitive cleartext information via a padding-oracle attack against an AES CBC session. NOTE: this vulnerability...

6.7AI score0.89058EPSS
SaveExploits7References58
Cvelist
Cvelist
•added 2016/04/21 10:00 a.m.•75 views

CVE-2016-3427

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX...

7AI score0.92334EPSS
SaveExploits1References59
Cvelist
Cvelist
•added 2016/01/14 12:00 a.m.•75 views

CVE-2016-0777

The resendbytes function in roamingcommon.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote servers to obtain sensitive information from process memory by requesting transmission of an entire buffer, as demonstrated by reading a private key...

6.5AI score0.63468EPSS
SaveExploits2References34
Cvelist
Cvelist
•added 2015/01/21 6:00 p.m.•75 views

CVE-2015-0381

Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows remote attackers to affect availability via unknown vectors related to Server : Replication, a different vulnerability than CVE-2015-0382...

6.6AI score0.05428EPSS
SaveExploits0References18
Cvelist
Cvelist
•added 2015/01/21 6:00 p.m.•75 views

CVE-2015-0382

Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows remote attackers to affect availability via unknown vectors related to Server : Replication, a different vulnerability than CVE-2015-0381...

6.6AI score0.10066EPSS
SaveExploits0References19
Cvelist
Cvelist
•added 2014/01/31 11:00 p.m.•75 views

CVE-2014-0001

Buffer overflow in client/mysql.cc in Oracle MySQL and MariaDB before 5.5.35 allows remote database servers to cause a denial of service crash and possibly execute arbitrary code via a long server version string...

7.3AI score0.06353EPSS
SaveExploits0References15
Cvelist
Cvelist
•added 2013/07/28 6:00 p.m.•75 views

CVE-2011-1483

wsf/common/DOMUtils.java in JBossWS Native in Red Hat JBoss Enterprise Application Platform 4.2.0.CP09, 4.3, and 5.1.1; JBoss Enterprise Portal Platform 4.3.CP06 and 5.1.1; JBoss Enterprise SOA Platform 4.2.CP05, 4.3.CP05, and 5.1.0; JBoss Communications Platform 1.2.11 and 5.1.1; JBoss Enterpris...

7.1AI score0.02664EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2013/06/05 10:00 a.m.•75 views

CVE-2013-3949

The posixspawn system call in the XNU kernel in Apple Mac OS X 10.8.x does not prevent use of the POSIXSPAWNDISABLEASLR and POSIXSPAWNALLOWDATAEXEC flags for setuid and setgid programs, which allows local users to bypass intended access restrictions via a wrapper program that calls the...

5.8AI score0.00494EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2013/05/29 10:00 a.m.•75 views

CVE-2013-3666

The LG Hidden Menu component for Android on the LG Optimus G E973 allows physically proximate attackers to execute arbitrary commands by entering USB Debugging mode, using Android Debug Bridge adb to establish a USB connection, dialing 3845973, modifying the WLAN Test Wi-Fi Ping Test/User Command...

7.7AI score0.00199EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2013/01/31 9:00 p.m.•75 views

CVE-2013-0230

Stack-based buffer overflow in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to execute arbitrary code via a long quoted method...

7.8AI score0.69151EPSS
SaveExploits14References5
Cvelist
Cvelist
•added 2013/01/17 1:30 a.m.•75 views

CVE-2013-0368

Unspecified vulnerability in the Server component in Oracle MySQL 5.5.28 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB...

4.4AI score0.02547EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2013/01/17 1:30 a.m.•75 views

CVE-2013-0371

Unspecified vulnerability in the Server component in Oracle MySQL 5.5.28 and earlier allows remote authenticated users to affect availability, related to MyISAM...

4.6AI score0.02547EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2013/01/17 1:30 a.m.•75 views

CVE-2013-0384

Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.5.28 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Information Schema...

4.4AI score0.02835EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2011/04/08 3:00 p.m.•75 views

CVE-2011-1658

ld.so in the GNU C Library aka glibc or libc6 2.13 and earlier expands the $ORIGIN dynamic string token when RPATH is composed entirely of this token, which might allow local users to gain privileges by creating a hard link in an arbitrary directory to a 1 setuid or 2 setgid program with this RPA...

8.1AI score0.00311EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2010/12/17 6:00 p.m.•75 views

CVE-2010-4481

phpMyAdmin before 3.4.0-beta1 allows remote attackers to bypass authentication and obtain sensitive information via a direct request to phpinfo.php, which calls the phpinfo function...

6.2AI score0.02017EPSS
SaveExploits0References9
Cvelist
Cvelist
•added 2009/04/03 6:00 p.m.•75 views

CVE-2009-0556

Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac, allows remote attackers to execute arbitrary code via a PowerPoint file with an OutlineTextRefAtom containing an an invalid index value that triggers memory corruption, as exploited in t...

7.3AI score0.67312EPSS
SaveExploits5References18
Cvelist
Cvelist
•added 2009/01/28 11:00 a.m.•75 views

CVE-2008-5984

Untrusted search path vulnerability in the Python plugin in Dia 0.96.1, and possibly other versions, allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySysSetArgv function CVE-2008-5983...

6.3AI score0.00491EPSS
SaveExploits2References10
Cvelist
Cvelist
•added 2026/09/16 8:08 p.m.•74 views

CVE-2026-20242 Cisco Secure Firewall Management Center Software Java Deserialization Remote Code Execution Vulnerability

A vulnerability in the External Database Access feature of Cisco Secure Firewall Management Center FMC Software could allow an unauthenticated, remote attacker to execute arbitrary commands as root on an affected device. This vulnerability is due to insecure deserialization of a user-supplied Jav...

9.8CVSS0.00639EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/12 12:08 p.m.•74 views

CVE-2026-90551 WWBN AVideo Missing Authorization via video_from_program API

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate playlist ownership in the videofromprogram API endpoint, allowing unauthenticated access to private playlist contents. Attackers can query the API without authentication to enumerate private playlist names, owne...

6.9CVSS0.004EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/01 11:42 p.m.•74 views

CVE-2026-84352

Use after free in WebGL in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

0.00462EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/08/24 9:19 p.m.•74 views

CVE-2026-45404 OpenTelemetry-Go: Unsynchronized baggage map can panic under concurrent access

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 0.11.0 through 1.44.0, the OpenTracing bridge's bridgeSpan contains an unsynchronized extraBaggageItems map which can cause a panic. Because Go maps are not safe for concurrent read/write access, concurrent SetBaggageItem an...

5.9CVSS0.00139EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/08/24 3:45 a.m.•74 views

CVE-2026-78182 Shenzhen Gongji Technology XBROTHER Dynamic Environment Monitoring System plansImmediate PlanController.getImmediatePlans sql injection

A security vulnerability has been detected in Shenzhen Gongji Technology XBROTHER Dynamic Environment Monitoring System up to 300R004C00B300. The affected element is the function PlanController.getImmediatePlans of the file /xbreport/api/v1/plamange/plansImmediate. The manipulation of the argumen...

7.5CVSS0.00411EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/08/11 5:07 p.m.•74 views

CVE-2026-71331 Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability

...

8.1CVSS0.00707EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/08/11 5:06 p.m.•74 views

CVE-2026-64911 Microsoft Office Remote Code Execution Vulnerability

...

7.8CVSS0.00466EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/08/11 11:23 a.m.•74 views

CVE-2026-50236 Openshift/console: authenticated ssrf with full response reflection and path neutralization via dev console webhook helpers in openshift console

An authenticated SSRF flaw was found in the OpenShift Console Dev Console webhook helpers. User-supplied target URLs are fetched server-side without validation, with path neutralization enabling arbitrary endpoint targeting and full response reflection from the console pod's privileged network...

7.4CVSS0.00472EPSS
SaveExploits0References11
Total number of security vulnerabilities5000