Lucene search
+L
DebiancveMost viewed

66246 matches found

Debian CVE
Debian CVE
•added 2023/09/20 5:02 a.m.•102 views

CVE-2023-2163

Incorrect verifier pruning in BPF in Linux Kernel =5.4 leads to unsafe code paths being incorrectly marked as safe, resulting in arbitrary read/write in kernel memory, lateral privilege escalation, and container escape...

10CVSS7.1AI score0.03546EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2023/03/01 12:00 a.m.•102 views

CVE-2022-3294

Users may have access to secure endpoints in the control plane network. Kubernetes clusters are only affected if an untrusted user can modify Node objects and send proxy requests to them. Kubernetes supports node proxying, which allows clients of kube-apiserver to access endpoints of a Kubelet to...

8.8CVSS8.7AI score0.01618EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2023/02/03 12:00 a.m.•102 views

CVE-2021-37501

Buffer Overflow vulnerability in HDFGroup hdf5-h5dump 1.12.0 through 1.13.0 allows attackers to cause a denial of service via h5toolsstrsprint in /hdf5/tools/lib/h5toolsstr.c...

7.5CVSS6.5AI score0.01545EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/12/22 12:00 a.m.•102 views

CVE-2022-22746

A race condition could have allowed bypassing the fullscreen notification which could have lead to a fullscreen window spoof being unnoticed.This bug only affects Firefox for Windows. Other operating systems are unaffected.. This vulnerability affects Firefox ESR 91.5, Firefox 96, and Thunderbird...

5.9CVSS7.5AI score0.0059EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/10/13 12:00 a.m.•102 views

CVE-2022-42906

powerline-gitstatus aka Powerline Gitstatus before 1.3.2 allows arbitrary code execution. git repositories can contain per-repository configuration that changes the behavior of git, including running arbitrary commands. When using powerline-gitstatus, changing to a directory automatically runs gi...

7.8CVSS7.8AI score0.00442EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/09/09 12:00 a.m.•102 views

CVE-2022-40307

An issue was discovered in the Linux kernel through 5.19.8. drivers/firmware/efi/capsule-loader.c has a race condition with a resultant use-after-free...

4.7CVSS5.5AI score0.00204EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/08/30 12:00 a.m.•102 views

CVE-2022-39028

telnetd in GNU Inetutils through 2.3, MIT krb5-appl through 1.0.3, and derivative works has a NULL pointer dereference via 0xff 0xf7 or 0xff 0xf8. In a typical installation, the telnetd application would crash but the telnet service would remain available through inetd. However, if the telnetd...

7.5CVSS7.4AI score0.02096EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/08/24 3:11 p.m.•102 views

CVE-2021-4041

A flaw was found in ansible-runner. An improper escaping of the shell command, while calling the ansiblerunner.interface.runcommand, can lead to parameters getting executed as host's shell command. A developer could unintentionally write code that gets executed in the host rather than the virtual...

7.8CVSS7.5AI score0.00328EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/08/23 3:51 p.m.•102 views

CVE-2021-3714

A flaw was found in the Linux kernels memory deduplication mechanism. Previous work has shown that memory deduplication can be attacked via a local exploitation mechanism. The same technique can be used if an attacker can upload page sized files and detect the change in access time from a network...

5.9CVSS7AI score0.01488EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/07/21 9:05 p.m.•102 views

CVE-2022-0974

Use after free in Splitscreen in Google Chrome on Chrome OS prior to 99.0.4844.74 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS9.5AI score0.00855EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/06/22 12:00 a.m.•102 views

CVE-2022-22967

Removed by vendor...

8.8CVSS9.2AI score0.02003EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/06/13 10:01 p.m.•102 views

CVE-2022-32278

XFCE 4.16 allows attackers to execute arbitrary code because xdg-open can execute a .desktop file on an attacker-controlled FTP server...

8.8CVSS9AI score0.01667EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/06/01 12:00 a.m.•102 views

CVE-2022-27782

libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been changed that should have prohibited reuse.libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse if one of them matches the setup. However, several TLS andSSH...

7.5CVSS7AI score0.0293EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/05/12 12:00 a.m.•102 views

CVE-2022-30594

The Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACESEIZE code path allows attackers to bypass intended restrictions on setting the PTSUSPENDSECCOMP flag...

7.8CVSS6.7AI score0.00798EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/05/04 10:53 p.m.•102 views

CVE-2022-30292

Heap-based buffer overflow in sqbaselib.cpp in SQUIRREL 3.2 due to lack of a certain sqreservestack call...

10CVSS9.2AI score0.03562EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/05/03 3:45 p.m.•102 views

CVE-2021-22573

The vulnerability is that IDToken verifier does not verify if token is properly signed. Signature verification makes sure that the token's payload comes from valid provider, not from someone else. An attacker can provide a compromised token with custom payload. The token will pass the validation ...

8.7CVSS7.8AI score0.00296EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/04/26 10:30 p.m.•102 views

CVE-2022-26564

HotelDruid Hotel Management Software v3.0.3 contains a cross-site scripting XSS vulnerability via the prezzoperiodo4 parameter in creaprezzi.php...

6.1CVSS6AI score0.02759EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/03/23 7:46 p.m.•102 views

CVE-2021-4150

A use-after-free flaw was found in the addpartition in block/partitions/core.c in the Linux kernel. A local attacker with user privileges could cause a denial of service on the system. The issue results from the lack of code cleanup when deviceadd call fails when adding a partition to the disk...

5.5CVSS6.6AI score0.00336EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/03/15 2:40 p.m.•102 views

CVE-2022-24756

Removed by vendor...

7.5CVSS7.5AI score0.01936EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/02/26 4:06 a.m.•102 views

CVE-2022-24986

KDE KCron through 21.12.2 uses a temporary file in /tmp when saving, but reuses the filename during an editing session. Thus, someone watching it be created the first time could potentially intercept the file the following time, enabling that person to run unauthorized commands...

7.8CVSS7.4AI score0.00253EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/02/15 3:40 p.m.•102 views

CVE-2022-24587

Removed by vendor...

5.4CVSS5.5AI score0.00744EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/01/18 10:03 p.m.•102 views

CVE-2022-21693

OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. In affected versions an adversary with a primitive that allows for filesystem access from the context of the Onionshare process can access sensitive...

6.5CVSS6.4AI score0.01161EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/01/10 8:40 p.m.•102 views

CVE-2022-21670

markdown-it is a Markdown parser. Prior to version 1.3.2, special patterns with length greater than 50 thousand characterss could slow down the parser significantly. Users should upgrade to version 12.3.2 to receive a patch. There are no known workarounds aside from upgrading...

5.3CVSS5.6AI score0.02192EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2021/12/20 11:20 a.m.•102 views

CVE-2021-44224

A crafted URI sent to httpd configured as a forward proxy ProxyRequests on can cause a crash NULL pointer dereference or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint Server Side Request Forgery...

8.2CVSS7.2AI score0.82295EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/06/07 6:12 p.m.•102 views

CVE-2021-33896

Dino before 0.1.2 and 0.2.x before 0.2.1 allows Directory Traversal only for creation of new files via URI-encoded path separators...

5.3CVSS5.3AI score0.01766EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/06/04 1:40 a.m.•102 views

CVE-2021-3490

The eBPF ALU32 bounds tracking for bitwise ops AND, OR and XOR in the Linux kernel did not properly update 32-bit bounds, which could be turned into out of bounds reads and writes in the Linux kernel and therefore, arbitrary code execution. This issue was fixed via commit 049c4e13714e "bpf: Fix...

7.8CVSS6.8AI score0.27477EPSS
SaveExploits7
Debian CVE
Debian CVE
•added 2020/10/10 6:26 p.m.•102 views

CVE-2020-26935

An issue was discovered in SearchController in phpMyAdmin before 4.9.6 and 5.x before 5.0.3. A SQL injection vulnerability was discovered in how phpMyAdmin processes SQL statements in the search feature. An attacker could use this flaw to inject malicious SQL in to a query...

9.8CVSS9.7AI score0.67081EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2020/09/10 6:10 p.m.•102 views

CVE-2020-11998

A regression has been introduced in the commit preventing JMX re-bind. By passing an empty environment map to RMIConnectorServer, instead of the map that contains the authentication credentials, it leaves ActiveMQ open to the following attack:...

9.8CVSS8.7AI score0.51225EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2020/06/02 6:25 p.m.•102 views

CVE-2020-7663

websocket-extensions ruby module prior to 0.1.5 allows Denial of Service DoS via Regex Backtracking. The extension parser may take quadratic time when parsing a header containing an unclosed string parameter value whose content is a repeating two-byte sequence of a backslash and some other...

7.5CVSS7.5AI score0.04526EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2020/03/23 8:15 p.m.•102 views

CVE-2020-8866

This vulnerability allows remote attackers to create arbitrary files on affected installations of Horde Groupware Webmail Edition 5.2.22. Authentication is required to exploit this vulnerability. The specific flaw exists within add.php. The issue results from the lack of proper validation of...

6.5CVSS5AI score0.09579EPSS
SaveExploits6
Debian CVE
Debian CVE
•added 2020/01/23 4:25 p.m.•102 views

CVE-2019-14888

A vulnerability was found in the Undertow HTTP server in versions before 2.0.28.SP1 when listening on HTTPS. An attacker can target the HTTPS port to carry out a Denial Of Service DOS to make the service unavailable on SSL...

7.5CVSS7.5AI score0.02137EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2019/05/16 9:15 p.m.•102 views

CVE-2019-10913

In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, HTTP Methods provided as verbs or using the override header may be treated as trusted input, but they are not validated, possibly causing SQL injection or XSS. This is related to...

9.8CVSS10AI score0.01667EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2019/03/17 5:02 p.m.•102 views

CVE-2019-6690

python-gnupg 0.4.3 allows context-dependent attackers to trick gnupg to decrypt other ciphertext than intended. To perform the attack, the passphrase to gnupg must be controlled by the adversary and the ciphertext should be trusted. Related to a "CWE-20: Improper Input Validation" issue affecting...

7.5CVSS7.5AI score0.08548EPSS
SaveExploits2
Debian CVE
Debian CVE
•added 2018/01/24 9:00 p.m.•102 views

CVE-2018-5759

jsparse.c in Artifex MuJS through 1.0.2 does not properly maintain the AST depth for binary expressions, which allows remote attackers to cause a denial of service excessive recursion via a crafted file...

5.5CVSS5.3AI score0.07141EPSS
SaveExploits5
Debian CVE
Debian CVE
•added 2016/02/25 1:00 a.m.•102 views

CVE-2015-5346

Session fixation vulnerability in Apache Tomcat 7.x before 7.0.66, 8.x before 8.0.30, and 9.x before 9.0.0.M2, when different session settings are used for deployments of multiple versions of the same web application, might allow remote attackers to hijack web sessions by leveraging use of a...

8.1CVSS8.7AI score0.11312EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2015/06/24 4:00 p.m.•102 views

CVE-2013-7397

Async Http Client aka AHC or async-http-client before 1.9.0 skips X.509 certificate verification unless both a keyStore location and a trustStore location are explicitly set, which allows man-in-the-middle attackers to spoof HTTPS servers by presenting an arbitrary certificate during use of a...

4.3CVSS7.4AI score0.00993EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2011/01/13 6:35 p.m.•102 views

CVE-2010-4051

The regcomp implementation in the GNU C Library aka glibc or libc6 through 2.11.3, and 2.12.x through 2.12.2, allows context-dependent attackers to cause a denial of service application crash via a regular expression containing adjacent bounded repetitions that bypass the intended REDUPMAX...

5CVSS6.3AI score0.39995EPSS
SaveExploits12
Debian CVE
Debian CVE
•added 2010/01/15 5:00 p.m.•102 views

CVE-2010-0280

Array index error in Jan Eric Kyprianidis lib3ds 1.x, as used in Google SketchUp 7.x before 7.1 M2, allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via crafted structures in a 3DS file, probably related to mesh.c...

9.3CVSS7.7AI score0.06659EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2008/12/08 11:00 p.m.•102 views

CVE-2008-5366

The postinst script in ppp 2.4.4rel on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on the 1 /tmp/probe-finished or 2 /tmp/ppp-errors temporary file...

6.9CVSS8.6AI score0.00384EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2007/05/21 8:00 p.m.•102 views

CVE-2007-2768

OpenSSH, when using OPIE One-Time Passwords in Everything for PAM, allows remote attackers to determine the existence of certain user accounts, which displays a different response if the user account exists and is configured to use one-time passwords OTP, a similar issue to CVE-2007-2243...

4.3CVSS8.8AI score0.08615EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2005/01/19 5:00 a.m.•102 views

CVE-2005-0064

Buffer overflow in the Decrypt::makeFileKey2 function in Decrypt.cc for xpdf 3.00 and earlier allows remote attackers to execute arbitrary code via a PDF file with a large /Encrypt /Length keyLength value...

7.5CVSS7.6AI score0.07217EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2026/05/01 1:56 p.m.•101 views

CVE-2026-31717

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate owner of durable handle on reconnect Currently, ksmbd does not verify if the user attempting to reconnect to a durable handle is the same user who originally opened the file. This allows any authenticated user to...

8.8CVSS5.7AI score0.00437EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2025/10/16 9:22 a.m.•101 views

CVE-2025-6338

There is an incomplete cleanup vulnerability in Qt Network's Schannel support on Windows which can lead to a Denial of Service over a long period. This issue affects Qt from 5.15.0 through 6.8.3, from 6.9.0 before 6.9.2...

9.2CVSS5.8AI score0.00395EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2025/08/01 5:41 a.m.•101 views

CVE-2025-8454

It was discovered that uscan, a tool to scan/watch upstream sources for new releases of software, included in devscripts a collection of scripts to make the life of a Debian Package maintainer easier, skips OpenPGP verification if the upstream source is already downloaded from a previous run even...

9.8CVSS5.2AI score0.00235EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2024/12/05 3:24 p.m.•101 views

CVE-2024-53856

rPGP is a pure Rust implementation of OpenPGP. Prior to 0.14.1, rPGP allows an attacker to trigger rpgp crashes by providing crafted data. This vulnerability is fixed in 0.14.1...

7.5CVSS5.3AI score0.00448EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2024/11/06 8:51 p.m.•101 views

CVE-2024-51736

Symphony process is a module for the Symphony PHP framework which executes commands in sub-processes. On Windows, when an executable file named cmd.exe is located in the current working directory it will be called by the Process class when preparing command arguments, leading to possible hijackin...

9.8CVSS5.3AI score0.00425EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2024/06/30 8:22 p.m.•101 views

CVE-2024-34703

Botan is a C++ cryptography library. X.509 certificates can identify elliptic curves using either an object identifier or using explicit encoding of the parameters. Prior to versions 3.3.0 and 2.19.4, an attacker could present an ECDSA X.509 certificate using explicit encoding where the parameter...

7.5CVSS7AI score0.005EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2024/04/26 12:00 a.m.•101 views

CVE-2024-33259

Removed by vendor...

5.5CVSS5.6AI score0.00275EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2024/01/04 8:19 p.m.•101 views

CVE-2024-22049

httparty before 0.21.0 is vulnerable to an assumed-immutable web parameter vulnerability. A remote and unauthenticated attacker can provide a crafted filename parameter during multipart/form-data uploads which could result in attacker controlled filenames being written...

5.3CVSS5.2AI score0.0129EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2023/12/24 12:00 a.m.•101 views

CVE-2023-51764

Postfix through 3.8.5 allows SMTP smuggling unless configured with smtpddatarestrictions=rejectunauthpipelining and smtpddiscardehlokeywords=chunking or certain other options that exist in recent versions. Remote attackers can use a published exploitation technique to inject e-mail messages with ...

5.3CVSS5.3AI score0.02635EPSS
SaveExploits4
Total number of security vulnerabilities5000