Lucene search
+L
DebiancveMost viewed

61459 matches found

Debian CVE
Debian CVE
•added 2023/08/22 12:0 a.m.•77 views

CVE-2020-21469

An issue was discovered in PostgreSQL 12.2 allows attackers to cause a denial of service via repeatedly sending SIGHUP signals. NOTE: this is disputed by the vendor because untrusted users cannot send SIGHUP signals; they can only be sent by a PostgreSQL superuser, a user with pgreloadconf access...

4.4CVSS5AI score0.00361EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2023/07/28 11:26 p.m.•77 views

CVE-2022-4914

Heap buffer overflow in PrintPreview in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS8.9AI score0.00549EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2023/06/12 4:33 p.m.•77 views

CVE-2023-34246

Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape. Prior to version 5.6.6, Doorkeeper automatically processes authorization requests without user consent for public clients that have been previous approved. Public clients are inherently vulnerable to impersonation, their identity cannot...

6.5CVSS6.3AI score0.00716EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2023/06/02 12:0 a.m.•77 views

CVE-2023-28161

If temporary "one-time" permissions, such as the ability to use the Camera, were granted to a document loaded using a file: URL, that permission persisted in that tab for all other documents loaded from a file: URL. This is potentially dangerous if the local files came from different sources, suc...

8.8CVSS9.2AI score0.00619EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2023/05/27 3:44 p.m.•77 views

CVE-2023-32695

socket.io parser is a socket.io encoder and decoder written in JavaScript complying with version 5 of socket.io-protocol. A specially crafted Socket.IO packet can trigger an uncaught exception on the Socket.IO server, thus killing the Node.js process. A patch has been released in version 4.2.3...

7.5CVSS7.6AI score0.01059EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2023/04/27 2:8 p.m.•77 views

CVE-2023-30847

H2O is an HTTP server. In versions 2.3.0-beta2 and prior, when the reverse proxy handler tries to processes a certain type of invalid HTTP request, it tries to build an upstream URL by reading from uninitialized pointer. This behavior can lead to crashes or leak of information to back end HTTP...

8.2CVSS8AI score0.00902EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2023/04/25 12:0 a.m.•77 views

CVE-2023-30549

Removed by vendor...

7.8CVSS7.1AI score0.00369EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2023/04/04 9:39 p.m.•77 views

CVE-2023-1810

Heap buffer overflow in Visuals in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS9.5AI score0.01077EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2023/03/13 9:4 a.m.•77 views

CVE-2023-1370

Json-smart is a performance focused, JSON processor lib. When reaching a ‘‘ or ‘‘ character in the JSON input, the code parses an array or an object respectively. It was discovered that the code does not have any limit to the nesting of such arrays or objects. Since the parsing of nested arrays a...

7.5CVSS6.6AI score0.01119EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2023/02/24 3:35 a.m.•77 views

CVE-2023-0996

There is a vulnerability in the strided image data parsing code in the emscripten wrapper for libheif. An attacker could exploit this through a crafted image file to cause a buffer overflow in linear memory during a memcpy call...

7.8CVSS8.3AI score0.00307EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2023/02/22 10:2 p.m.•77 views

CVE-2023-26302

Denial of service could be caused to the command line interface of markdown-it-py, before v2.2.0, if an attacker was allowed to use invalid UTF-8 characters as input...

5.5CVSS5.4AI score0.00225EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2023/01/18 12:0 a.m.•77 views

CVE-2022-3100

A flaw was found in the openstack-barbican component. This issue allows an access policy bypass via a query string when accessing the API...

5.9CVSS6.1AI score0.00433EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/11/23 12:0 a.m.•77 views

CVE-2022-45868

The web-based admin console in H2 Database Engine before 2.2.220 can be started via the CLI with the argument -webAdminPassword, which allows the user to specify the password in cleartext for the web admin console. Consequently, a local user or an attacker that has obtained local access through...

8.4CVSS7.1AI score0.00301EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/11/09 12:0 a.m.•77 views

CVE-2022-3448

Use after free in Permissions API in Google Chrome prior to 106.0.5249.119 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS9.5AI score0.00653EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/10/18 12:0 a.m.•77 views

CVE-2022-3595

A vulnerability was found in Linux Kernel. It has been rated as problematic. Affected by this issue is the function sessfreebuffer of the file fs/cifs/sess.c of the component CIFS Handler. The manipulation leads to double free. It is recommended to apply a patch to fix this issue. The identifier ...

5.5CVSS7.1AI score0.00274EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/10/17 12:0 a.m.•77 views

CVE-2022-3533

A vulnerability was found in Linux Kernel. It has been rated as problematic. This issue affects the function parseusdtarg of the file tools/lib/bpf/usdt.c of the component BPF. The manipulation of the argument regname leads to memory leak. It is recommended to apply a patch to fix this issue. The...

5.7CVSS7.7AI score0.00419EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/10/14 12:0 a.m.•77 views

CVE-2022-35053

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x61731f...

6.5CVSS6.7AI score0.00717EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/09/30 5:5 a.m.•77 views

CVE-2022-21222

The package css-what before 2.1.3 are vulnerable to Regular Expression Denial of Service ReDoS due to the usage of insecure regular expression in the reattr variable of index.js. The exploitation of this vulnerability could be triggered via the parse function...

7.5CVSS7.4AI score0.01462EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/09/14 12:0 a.m.•77 views

CVE-2022-40674

libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c...

8.1CVSS8AI score0.0176EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/09/01 5:54 p.m.•77 views

CVE-2020-35534

In LibRaw, there is a memory corruption vulnerability within the "crxFreeSubbandData" function libraw\src\decoders\crx.cpp when processing cr3 files...

5.5CVSS6AI score0.00246EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/08/26 3:25 p.m.•77 views

CVE-2021-3864

A flaw was found in the way the dumpable flag setting was handled when certain SUID binaries executed its descendants. The prerequisite is a SUID binary that sets real UID equal to effective UID, and real GID equal to effective GID. The descendant will then have a dumpable value set to 1. As a...

7CVSS7AI score0.00726EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/08/16 8:13 p.m.•77 views

CVE-2022-38233

XPDF commit ffaf11c was discovered to contain a segmentation violation via DCTStream::readMCURow at /xpdf/Stream.cc...

5.5CVSS3.3AI score0.00286EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/08/12 7:36 p.m.•77 views

CVE-2022-2608

Use after free in Overview Mode in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via specific UI interactions...

8.8CVSS9.7AI score0.00431EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/07/26 9:30 p.m.•77 views

CVE-2022-1364

Type confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS9.4AI score0.1372EPSS
SaveExploits2
Debian CVE
Debian CVE
•added 2022/07/02 12:0 a.m.•77 views

CVE-2022-34911

An issue was discovered in MediaWiki before 1.35.7, 1.36.x and 1.37.x before 1.37.3, and 1.38.x before 1.38.1. XSS can occur in configurations that allow a JavaScript payload in a username. After account creation, when it sets the page title to "Welcome" followed by the username, the username is...

6.1CVSS6AI score0.01016EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/05/19 12:0 a.m.•77 views

CVE-2022-1785

Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.4977...

7.8CVSS1.3AI score0.00494EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/05/13 7:50 a.m.•77 views

CVE-2022-25762

If a web application sends a WebSocket message concurrently with the WebSocket connection closing when running on Apache Tomcat 8.5.0 to 8.5.75 or Apache Tomcat 9.0.0.M1 to 9.0.20, it is possible that the application will continue to use the socket after it has been closed. The error handling...

8.6CVSS7.2AI score0.08033EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/05/11 2:27 p.m.•77 views

CVE-2022-1433

Removed by vendor...

6.1CVSS6.9AI score0.00806EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/05/05 12:0 a.m.•77 views

CVE-2022-24903

Rsyslog is a rocket-fast system for log processing. Modules for TCP syslog reception have a potential heap buffer overflow when octet-counted framing is used. This can result in a segfault or some other malfunction. As of our understanding, this vulnerability can not be used for remote code...

8.1CVSS7.6AI score0.03933EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/04/15 12:0 a.m.•77 views

CVE-2022-26499

An SSRF issue was discovered in Asterisk through 19.x. When using STIR/SHAKEN, it's possible to send arbitrary requests such as GET to interfaces such as localhost by using the Identity header. This is fixed in 16.25.2, 18.11.2, and 19.3.2...

9.1CVSS8.6AI score0.0768EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/04/15 12:0 a.m.•77 views

CVE-2022-28041

stbimage.h v2.27 was discovered to contain an integer overflow via the function stbijpegdecodeblockprogdc. This vulnerability allows attackers to cause a Denial of Service DoS via unspecified vectors...

6.5CVSS6.7AI score0.02069EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/04/08 3:33 p.m.•77 views

CVE-2022-27148

GPAC mp4box 1.1.0-DEV-rev1663-g881c6a94a-master is vulnerable to Integer Overflow...

5.5CVSS6.5AI score0.00786EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/04/04 7:46 p.m.•77 views

CVE-2022-1188

Removed by vendor...

5.3CVSS6AI score0.01187EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/04/04 7:46 p.m.•77 views

CVE-2022-1099

Removed by vendor...

4.3CVSS5.8AI score0.00861EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/03/23 2:5 p.m.•77 views

CVE-2021-44040

Improper Input Validation vulnerability in request line parsing of Apache Traffic Server allows an attacker to send invalid requests. This issue affects Apache Traffic Server 8.0.0 to 8.1.3 and 9.0.0 to 9.1.1...

7.5CVSS7.4AI score0.01961EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/02/24 6:27 p.m.•77 views

CVE-2022-0546

A missing bounds check in the image loader used in Blender 3.x and 2.93.8 leads to out-of-bounds heap access, allowing an attacker to cause denial of service, memory corruption or potentially code execution...

7.8CVSS7.9AI score0.01174EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/02/24 1:11 p.m.•77 views

CVE-2022-24614

When reading a specially crafted JPEG file, metadata-extractor up to 2.16.0 can be made to allocate large amounts of memory that finally leads to an out-of-memory error even for very small inputs. This could be used to mount a denial of service attack against services that use metadata-extractor...

5.5CVSS5.6AI score0.00728EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/02/22 1:41 a.m.•77 views

CVE-2022-25636

net/netfilter/nfdupnetdev.c in the Linux kernel 5.4 through 5.6.10 allows local users to gain privileges because of a heap out-of-bounds write. This is related to nftablesoffload...

7.8CVSS6.9AI score0.02633EPSS
SaveExploits6
Debian CVE
Debian CVE
•added 2022/01/05 9:0 p.m.•77 views

CVE-2022-21653

Jawn is an open source JSON parser. Extenders of the org.typelevel.jawn.SimpleFacade and org.typelevel.jawn.MutableFacade who don't override objectContext are vulnerable to a hash collision attack which may result in a denial of service. Most applications do not implement these traits directly, b...

7.5CVSS7.4AI score0.00793EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2021/11/15 12:0 a.m.•77 views

CVE-2021-42383

A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function...

7.2CVSS6.7AI score0.02117EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/11/04 6:39 p.m.•77 views

CVE-2021-43389

An issue was discovered in the Linux kernel before 5.14.15. There is an array-index-out-of-bounds flaw in the detachcapictr function in drivers/isdn/capi/kcapi.c...

5.5CVSS6.5AI score0.00669EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2021/11/01 12:0 a.m.•77 views

CVE-2021-42574

An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visual reordering of characters via control sequences, which can be used to craft source code that renders different logic than the logical ordering of tokens ingested by compilers and...

8.3CVSS8.3AI score0.12205EPSS
SaveExploits4
Debian CVE
Debian CVE
•added 2021/09/08 7:11 p.m.•77 views

CVE-2021-40797

An issue was discovered in the routes middleware in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before 18.1.1. By making API requests involving nonexistent controllers, an authenticated user may cause the API worker to consume increasing amounts of memory, resulting in API...

6.5CVSS6.3AI score0.0176EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2021/08/25 3:54 p.m.•77 views

CVE-2020-18976

Buffer Overflow in Tcpreplay v4.3.2 allows attackers to cause a Denial of Service via the 'dochecksum' function in 'checksum.c'. It can be triggered by sending a crafted pcap file to the 'tcpreplay-edit' binary. This issue is different than CVE-2019-8381...

5.5CVSS7.1AI score0.0066EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2021/04/12 9:30 p.m.•77 views

CVE-2021-29429

In Gradle before version 7.0, files created with open permissions in the system temporary directory can allow an attacker to access information downloaded by Gradle. Some builds could be vulnerable to a local information disclosure. Remote files accessed through TextResourceFactory are downloaded...

5.5CVSS7.1AI score0.00484EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2021/03/30 8:36 p.m.•77 views

CVE-2021-29649

An issue was discovered in the Linux kernel before 5.11.11. The user mode driver UMD has a copyprocess memory leak, related to a lack of cleanup steps in kernel/usermodedriver.c and kernel/bpf/preload/bpfpreloadkern.c, aka CID-f60a85cad677...

5.5CVSS6.2AI score0.00305EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/02/23 10:4 p.m.•77 views

CVE-2021-3407

A flaw was found in mupdf 1.18.0. Double free of object during linearization may lead to memory corruption and other potential consequences...

7.8CVSS5.6AI score0.50234EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/01/25 4:33 p.m.•77 views

CVE-2021-3185

A flaw was found in the gstreamer h264 component of gst-plugins-bad before v1.18.1 where when parsing a h264 header, an attacker could cause the stack to be smashed, memory corruption and possibly code execution...

9.8CVSS10AI score0.02377EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/01/13 3:7 a.m.•77 views

CVE-2020-28374

In drivers/target/targetcorexcopy.c in the Linux kernel before 5.10.7, insufficient identifier checking in the LIO SCSI target code can be used by remote attackers to read or write files via directory traversal in an XCOPY request, aka CID-2896c93811e3. For example, an attack can occur over a...

8.1CVSS6.8AI score0.06563EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2020/12/11 10:24 p.m.•77 views

CVE-2020-17437

An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. When the Urgent flag is set in a TCP packet, and the stack is configured to ignore the urgent data, the stack attempts to use the value of the Urgent pointer bytes to separate the Urgent data from the normal data, by...

8.2CVSS8.2AI score0.02751EPSS
SaveExploits0
Total number of security vulnerabilities5000