Lucene search
+L
DebiancveMost viewed

61372 matches found

Debian CVE
Debian CVE
•added 2023/08/11 12:0 a.m.•89 views

CVE-2023-40267

GitPython before 3.1.32 does not block insecure non-multi options in clone and clonefrom. NOTE: this issue exists because of an incomplete fix for CVE-2022-24439...

9.8CVSS8.9AI score0.00984EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2023/03/01 12:0 a.m.•89 views

CVE-2022-3294

Users may have access to secure endpoints in the control plane network. Kubernetes clusters are only affected if an untrusted user can modify Node objects and send proxy requests to them. Kubernetes supports node proxying, which allows clients of kube-apiserver to access endpoints of a Kubelet to...

8.8CVSS8.7AI score0.01618EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2023/02/25 1:27 a.m.•89 views

CVE-2023-26038

ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 contain a Local File Inclusion Untrusted Search Path vulnerability via web/ajax/modal.php, where an arbitrary php file path c...

6.5CVSS3.3AI score0.0051EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2023/02/08 7:3 p.m.•89 views

CVE-2023-0215

The public API function BIOnewNDEF is a helper function used for streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the SMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by end user applications. The function receives a BIO from the...

7.5CVSS7.2AI score0.04494EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2023/01/17 8:6 p.m.•89 views

CVE-2022-23538

Removed by vendor...

7.6CVSS6.7AI score0.00709EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2023/01/12 4:44 p.m.•89 views

CVE-2022-40983

An integer overflow vulnerability exists in the QML QtScript Reflect API of Qt Project Qt 6.3.2. A specially-crafted javascript code can trigger an integer overflow during memory allocation, which can lead to arbitrary code execution. Target application would need to access a malicious web page t...

8.8CVSS8.9AI score0.01076EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/12/23 12:0 a.m.•89 views

CVE-2022-47940

An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.18 before 5.18.18. fs/ksmbd/smb2pdu.c lacks length validation in the non-padding case in smb2write...

8.1CVSS6.1AI score0.01393EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/10/24 12:0 a.m.•89 views

CVE-2022-3344

A flaw was found in the KVM's AMD nested virtualization SVM. A malicious L1 guest could purposely fail to intercept the shutdown of a cooperative nested guest L2, possibly leading to a page fault and kernel panic in the host L0...

5.5CVSS7.1AI score0.00214EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/09/26 3:1 p.m.•89 views

CVE-2022-2854

Use after free in SwiftShader in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS9.5AI score0.00654EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/09/26 12:0 a.m.•89 views

CVE-2022-3200

Heap buffer overflow in Internals in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS9.4AI score0.00688EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/09/23 12:0 a.m.•89 views

CVE-2022-35951

Redis is an in-memory database that persists on disk. Versions 7.0.0 and above, prior to 7.0.5 are vulnerable to an Integer Overflow. Executing an XAUTOCLAIM command on a stream key in a specific state, with a specially crafted COUNT argument may cause an integer overflow, a subsequent heap...

9.8CVSS9.8AI score0.02904EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/08/29 8:35 p.m.•89 views

CVE-2022-21385

A flaw in netrdsallocsgs in Oracle Linux kernels allows unprivileged local users to crash the machine. CVSS 3.1 Base Score 6.2 Availability impacts. CVSS Vector CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H...

6.2CVSS6.7AI score0.00346EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/06/10 2:49 p.m.•89 views

CVE-2022-32978

There is an assertion failure in SingleComponentLSScan::ParseMCU in singlecomponentlsscan.cpp in libjpeg before 1.64 via an empty JPEG-LS scan...

6.5CVSS6.4AI score0.00836EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/05/29 4:37 p.m.•89 views

CVE-2022-31796

libjpeg 1.63 has a heap-based buffer over-read in HierarchicalBitmapRequester::FetchRegion in hierarchicalbitmaprequester.cpp because the MCU size can be different between allocation and use...

6.5CVSS6.5AI score0.00854EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/05/27 9:10 p.m.•89 views

CVE-2022-31782

ftbench.c in FreeType Demo Programs through 2.12.1 has a heap-based buffer overflow...

7.8CVSS7.8AI score0.00714EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/05/10 12:0 a.m.•89 views

CVE-2022-1537

file.copy operations in GruntJS are vulnerable to a TOCTOU race condition leading to arbitrary file write in GitHub repository gruntjs/grunt prior to 1.5.3. This vulnerability is capable of arbitrary file writes which can lead to local privilege escalation to the GruntJS user if a lower-privilege...

7.8CVSS7.6AI score0.00299EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/05/01 3:30 p.m.•89 views

CVE-2022-25647

The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization of Untrusted Data via the writeReplace method in internal classes, which may lead to DoS attacks...

7.7CVSS8.3AI score0.1223EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/05/01 3:25 p.m.•89 views

CVE-2022-21227

The package sqlite3 before 5.0.3 are vulnerable to Denial of Service DoS which will invoke the toString function of the passed parameter. If passed an invalid Function object it will throw and crash the V8 engine...

7.5CVSS7.6AI score0.02068EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/04/21 10:42 p.m.•89 views

CVE-2022-28367

OWASP AntiSamy before 1.6.6 allows XSS via HTML tag smuggling on STYLE content with crafted input. The output serializer does not properly encode the supposed Cascading Style Sheets CSS content...

6.1CVSS6AI score0.00995EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/04/05 12:25 a.m.•89 views

CVE-2022-0804

Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 99.0.4844.51 allowed a remote attacker to hide the contents of the Omnibox URL bar via a crafted HTML page...

6.5CVSS7AI score0.00863EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/04/05 12:25 a.m.•89 views

CVE-2022-0798

Use after free in MediaStream in Google Chrome prior to 99.0.4844.51 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension...

8.8CVSS9.6AI score0.00664EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/04/04 11:55 p.m.•89 views

CVE-2022-0608

Integer overflow in Mojo in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS9.3AI score0.01118EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/03/26 12:0 a.m.•89 views

CVE-2022-27939

tcprewrite in Tcpreplay 4.4.1 has a reachable assertion in getlayer4v6 in common/get.c...

5.5CVSS5.8AI score0.01028EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/03/09 4:49 p.m.•89 views

CVE-2021-4023

A flaw was found in the io-workqueue implementation in the Linux kernel versions prior to 5.15-rc1. The kernel can panic when an improper cancellation operation triggers the submission of new io-uring operations during a shortage of free space. This flaw allows a local user with permissions to...

5.5CVSS6.5AI score0.00234EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/02/16 8:30 p.m.•89 views

CVE-2022-25265

In the Linux kernel through 5.16.10, certain binary files may have the exec-all attribute if they were built in approximately 2003 e.g., with GCC 3.2.2 and Linux kernel 2.4.20. This can cause execution of bytes located in supposedly non-executable regions of a file...

7.8CVSS7AI score0.01054EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/02/11 12:0 a.m.•89 views

CVE-2022-0382

An information leak flaw was found due to uninitialized memory in the Linux kernel's TIPC protocol subsystem, in the way a user sends a TIPC datagram to one or more destinations. This flaw allows a local user to read some kernel memory. This issue is limited to no more than 7 bytes, and the user...

5.5CVSS6.5AI score0.00385EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/02/01 10:33 a.m.•89 views

CVE-2020-8562

As mitigations to a report from 2019 and CVE-2020-8555, Kubernetes attempts to prevent proxied connections from accessing link-local or localhost networks when making user-driven connections to Services, Pods, Nodes, or StorageClass service providers. As part of this mitigation Kubernetes does a...

3.5CVSS5.5AI score0.01082EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/01/18 10:0 p.m.•89 views

CVE-2022-21691

OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. In affected versions chat participants can spoof their channel leave message, tricking others into assuming they left the chatroom...

4.3CVSS4.8AI score0.00673EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/10/11 6:45 p.m.•89 views

CVE-2021-42252

An issue was discovered in aspeedlpcctrlmmap in drivers/soc/aspeed/aspeed-lpc-ctrl.c in the Linux kernel before 5.14.6. Local attackers able to access the Aspeed LPC control interface could overwrite memory in the kernel and potentially execute privileges, aka CID-b49a0e69a7b1. This occurs becaus...

7.8CVSS6.9AI score0.00358EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/08/25 6:36 p.m.•89 views

CVE-2021-22243

Removed by vendor...

5CVSS5.8AI score0.00505EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/07/30 1:17 p.m.•89 views

CVE-2021-37746

textviewurisecuritycheck in textview.c in Claws Mail before 3.18.0, and Sylpheed through 3.7.0, does not have sufficient link checks before accepting a click...

6.1CVSS6.2AI score0.01155EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/04/21 5:41 p.m.•89 views

CVE-2020-23914

An issue was discovered in cpp-peglib through v0.1.12. A NULL pointer dereference exists in the peg::AstOptimizer::optimize located in peglib.h. It allows an attacker to cause Denial of Service...

5.5CVSS5.3AI score0.00869EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2021/03/31 7:35 a.m.•89 views

CVE-2021-28657

A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade to 1.26 or later...

5.5CVSS6AI score0.02752EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/03/10 12:0 a.m.•89 views

CVE-2021-21772

A use-after-free vulnerability exists in the NMR::COpcPackageReader::releaseZIP functionality of 3MF Consortium lib3mf 2.0.0. A specially crafted 3MF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

8.1CVSS8.1AI score0.0417EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2021/02/10 12:0 a.m.•89 views

CVE-2020-13576

A code execution vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to remote code execution. An attacker can send an HTTP request to trigger this vulnerability...

9.8CVSS9.8AI score0.0586EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2020/09/16 2:41 p.m.•89 views

CVE-2020-25614

xmlquery before 1.3.1 lacks a check for whether a LoadURL response is in the XML format, which allows attackers to cause a denial of service SIGSEGV at xmlquery.Node.InnerText or possibly have unspecified other impact...

9.8CVSS9.8AI score0.01936EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2020/03/24 9:15 p.m.•89 views

CVE-2020-6816

In Mozilla Bleach before 3.12, a mutation XSS in bleach.clean when RCDATA and either svg or math tags are whitelisted and the keyword argument strip=False...

6.1CVSS6.3AI score0.01301EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2020/01/09 10:27 p.m.•89 views

CVE-2019-20373

Removed by vendor...

7.8CVSS7.6AI score0.00427EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2019/12/20 7:52 p.m.•89 views

CVE-2019-19918

Removed by vendor...

7.8CVSS7.6AI score0.01599EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2019/08/05 6:29 p.m.•89 views

CVE-2019-14665

Brandy 1.20.1 has a heap-based buffer overflow in definearray in variables.c via crafted BASIC source code...

5.5CVSS5.7AI score0.00842EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2019/06/03 6:4 p.m.•89 views

CVE-2019-3895

An access-control flaw was found in the Octavia service when the cloud platform was deployed using Red Hat OpenStack Platform Director. An attacker could cause new amphorae to run based on any arbitrary image. This meant that a remote attacker could upload a new amphorae image and, if requested t...

8CVSS5.8AI score0.01421EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2019/04/20 12:57 p.m.•89 views

CVE-2019-11365

An issue was discovered in atftpd in atftp 0.7.1. A remote attacker may send a crafted packet triggering a stack-based buffer overflow due to an insecurely implemented strncpy call. The vulnerability is triggered by sending an error packet of 3 bytes or fewer. There are multiple instances of this...

9.8CVSS8.9AI score0.04288EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2018/12/17 3:0 p.m.•89 views

CVE-2018-18245

Nagios Core 4.4.2 has XSS via the alert summary reports of plugin results, as demonstrated by a SCRIPT element delivered by a modified checkload plugin to NRPE...

5.4CVSS5.7AI score0.02552EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2018/09/01 6:0 p.m.•89 views

CVE-2018-16323

ReadXBMImage in coders/xbm.c in ImageMagick before 7.0.8-9 leaves data uninitialized when processing an XBM file that has a negative pixel value. If the affected code is used as a library loaded into a process that includes sensitive information, that information sometimes can be leaked via the...

6.5CVSS6.9AI score0.49324EPSS
SaveExploits3
Debian CVE
Debian CVE
•added 2018/04/25 9:0 p.m.•89 views

CVE-2018-1335

From Apache Tika versions 1.7 to 1.17, clients could send carefully crafted headers to tika-server that could be used to inject commands into the command line of the server running tika-server. This vulnerability only affects those running tika-server on a server that is open to untrusted clients...

9.3CVSS8.1AI score0.93972EPSS
SaveExploits10
Debian CVE
Debian CVE
•added 2018/03/26 3:0 p.m.•89 views

CVE-2017-15715

In Apache httpd 2.4.0 to 2.4.29, the expression specified in could match '$' to a newline character in a malicious filename, rather than matching only the end of the filename. This could be exploited in environments where uploads of some files are are externally blocked, but only by matching the...

8.1CVSS6.3AI score0.86006EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2017/12/24 4:0 a.m.•89 views

CVE-2017-17881

In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service via a crafted MAT image file...

6.5CVSS6.2AI score0.0126EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2017/06/05 11:12 a.m.•89 views

CVE-2017-9430

Stack-based buffer overflow in dnstracer through 1.9 allows attackers to cause a denial of service application crash or possibly have unspecified other impact via a command line with a long name argument that is mishandled in a strcpy call for argv0. An example threat model is a web application...

9.8CVSS10AI score0.1132EPSS
SaveExploits8
Debian CVE
Debian CVE
•added 2017/01/16 6:0 a.m.•89 views

CVE-2017-5223

An issue was discovered in PHPMailer before 5.2.22. PHPMailer's msgHTML method applies transformations to an HTML document to make it usable as an email message body. One of the transformations is to convert relative image URLs into attachments using a script-provided base directory. If no base...

5.5CVSS5.6AI score0.02161EPSS
SaveExploits6
Debian CVE
Debian CVE
•added 2016/09/01 11:0 p.m.•89 views

CVE-2016-6298

The Rsa15 class in the RSA 1.5 algorithm implementation in jwa.py in jwcrypto before 0.3.2 lacks the Random Filling protection mechanism, which makes it easier for remote attackers to obtain cleartext data via a Million Message Attack MMA...

5.3CVSS5AI score0.02226EPSS
SaveExploits0
Total number of security vulnerabilities5000