Lucene search
+L
DebiancveMost viewed

61440 matches found

Debian CVE
Debian CVE
•added 2022/08/12 7:36 p.m.•77 views

CVE-2022-2608

Use after free in Overview Mode in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via specific UI interactions...

8.8CVSS9.7AI score0.00431EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/07/26 9:30 p.m.•77 views

CVE-2022-1364

Type confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS9.4AI score0.1372EPSS
SaveExploits2
Debian CVE
Debian CVE
•added 2022/05/19 12:0 a.m.•77 views

CVE-2022-1785

Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.4977...

7.8CVSS1.3AI score0.00494EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/05/13 7:50 a.m.•77 views

CVE-2022-25762

If a web application sends a WebSocket message concurrently with the WebSocket connection closing when running on Apache Tomcat 8.5.0 to 8.5.75 or Apache Tomcat 9.0.0.M1 to 9.0.20, it is possible that the application will continue to use the socket after it has been closed. The error handling...

8.6CVSS7.2AI score0.08033EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/05/11 2:27 p.m.•77 views

CVE-2022-1433

Removed by vendor...

6.1CVSS6.9AI score0.00806EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/05/05 12:0 a.m.•77 views

CVE-2022-24903

Rsyslog is a rocket-fast system for log processing. Modules for TCP syslog reception have a potential heap buffer overflow when octet-counted framing is used. This can result in a segfault or some other malfunction. As of our understanding, this vulnerability can not be used for remote code...

8.1CVSS7.6AI score0.03933EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/04/15 5:38 p.m.•77 views

CVE-2021-44495

An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, an attacker can cause a NULL pointer dereference after calls to ZPrint...

7.5CVSS7.3AI score0.01493EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/04/15 12:0 a.m.•77 views

CVE-2022-26499

An SSRF issue was discovered in Asterisk through 19.x. When using STIR/SHAKEN, it's possible to send arbitrary requests such as GET to interfaces such as localhost by using the Identity header. This is fixed in 16.25.2, 18.11.2, and 19.3.2...

9.1CVSS8.6AI score0.0768EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/04/15 12:0 a.m.•77 views

CVE-2022-28041

stbimage.h v2.27 was discovered to contain an integer overflow via the function stbijpegdecodeblockprogdc. This vulnerability allows attackers to cause a Denial of Service DoS via unspecified vectors...

6.5CVSS6.7AI score0.02069EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/04/08 3:33 p.m.•77 views

CVE-2022-27148

GPAC mp4box 1.1.0-DEV-rev1663-g881c6a94a-master is vulnerable to Integer Overflow...

5.5CVSS6.5AI score0.00786EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/04/04 7:46 p.m.•77 views

CVE-2022-1188

Removed by vendor...

5.3CVSS6AI score0.01187EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/04/04 7:46 p.m.•77 views

CVE-2022-1099

Removed by vendor...

4.3CVSS5.8AI score0.00861EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/03/23 2:5 p.m.•77 views

CVE-2021-44040

Improper Input Validation vulnerability in request line parsing of Apache Traffic Server allows an attacker to send invalid requests. This issue affects Apache Traffic Server 8.0.0 to 8.1.3 and 9.0.0 to 9.1.1...

7.5CVSS7.4AI score0.01961EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/02/24 6:27 p.m.•77 views

CVE-2022-0546

A missing bounds check in the image loader used in Blender 3.x and 2.93.8 leads to out-of-bounds heap access, allowing an attacker to cause denial of service, memory corruption or potentially code execution...

7.8CVSS7.9AI score0.01174EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/02/24 1:11 p.m.•77 views

CVE-2022-24614

When reading a specially crafted JPEG file, metadata-extractor up to 2.16.0 can be made to allocate large amounts of memory that finally leads to an out-of-memory error even for very small inputs. This could be used to mount a denial of service attack against services that use metadata-extractor...

5.5CVSS5.6AI score0.00728EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/02/22 1:41 a.m.•77 views

CVE-2022-25636

net/netfilter/nfdupnetdev.c in the Linux kernel 5.4 through 5.6.10 allows local users to gain privileges because of a heap out-of-bounds write. This is related to nftablesoffload...

7.8CVSS6.9AI score0.02633EPSS
SaveExploits6
Debian CVE
Debian CVE
•added 2022/01/05 9:0 p.m.•77 views

CVE-2022-21653

Jawn is an open source JSON parser. Extenders of the org.typelevel.jawn.SimpleFacade and org.typelevel.jawn.MutableFacade who don't override objectContext are vulnerable to a hash collision attack which may result in a denial of service. Most applications do not implement these traits directly, b...

7.5CVSS7.4AI score0.00793EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2021/11/15 12:0 a.m.•77 views

CVE-2021-42383

A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function...

7.2CVSS6.7AI score0.02117EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/11/04 6:39 p.m.•77 views

CVE-2021-43389

An issue was discovered in the Linux kernel before 5.14.15. There is an array-index-out-of-bounds flaw in the detachcapictr function in drivers/isdn/capi/kcapi.c...

5.5CVSS6.5AI score0.00669EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2021/11/01 12:0 a.m.•77 views

CVE-2021-42574

An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visual reordering of characters via control sequences, which can be used to craft source code that renders different logic than the logical ordering of tokens ingested by compilers and...

8.3CVSS8.3AI score0.12205EPSS
SaveExploits4
Debian CVE
Debian CVE
•added 2021/09/08 7:11 p.m.•77 views

CVE-2021-40797

An issue was discovered in the routes middleware in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before 18.1.1. By making API requests involving nonexistent controllers, an authenticated user may cause the API worker to consume increasing amounts of memory, resulting in API...

6.5CVSS6.3AI score0.0176EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2021/08/25 3:54 p.m.•77 views

CVE-2020-18976

Buffer Overflow in Tcpreplay v4.3.2 allows attackers to cause a Denial of Service via the 'dochecksum' function in 'checksum.c'. It can be triggered by sending a crafted pcap file to the 'tcpreplay-edit' binary. This issue is different than CVE-2019-8381...

5.5CVSS7.1AI score0.0066EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2021/08/12 2:37 p.m.•77 views

CVE-2021-20314

Stack buffer overflow in libspf2 versions below 1.2.11 when processing certain SPF macros can lead to Denial of service and potentially code execution via malicious crafted SPF explanation messages...

9.8CVSS9.8AI score0.0281EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/05/24 5:13 p.m.•77 views

CVE-2020-26559

Removed by vendor...

8.8CVSS8.9AI score0.00852EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/04/12 9:30 p.m.•77 views

CVE-2021-29429

In Gradle before version 7.0, files created with open permissions in the system temporary directory can allow an attacker to access information downloaded by Gradle. Some builds could be vulnerable to a local information disclosure. Remote files accessed through TextResourceFactory are downloaded...

5.5CVSS7.1AI score0.00484EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2021/04/02 4:16 p.m.•77 views

CVE-2021-22203

Removed by vendor...

9.8CVSS7.3AI score0.01388EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2021/02/23 10:4 p.m.•77 views

CVE-2021-3407

A flaw was found in mupdf 1.18.0. Double free of object during linearization may lead to memory corruption and other potential consequences...

7.8CVSS5.6AI score0.50234EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/01/25 4:33 p.m.•77 views

CVE-2021-3185

A flaw was found in the gstreamer h264 component of gst-plugins-bad before v1.18.1 where when parsing a h264 header, an attacker could cause the stack to be smashed, memory corruption and possibly code execution...

9.8CVSS10AI score0.02377EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/01/13 3:7 a.m.•77 views

CVE-2020-28374

In drivers/target/targetcorexcopy.c in the Linux kernel before 5.10.7, insufficient identifier checking in the LIO SCSI target code can be used by remote attackers to read or write files via directory traversal in an XCOPY request, aka CID-2896c93811e3. For example, an attack can occur over a...

8.1CVSS6.8AI score0.06563EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2020/12/24 7:49 p.m.•77 views

CVE-2020-28912

With MariaDB running on Windows, when local clients connect to the server over named pipes, it's possible for an unprivileged user with an ability to run code on the server machine to intercept the named pipe connection and act as a man-in-the-middle, gaining access to all the data passed between...

7CVSS8.2AI score0.00421EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2020/12/11 10:24 p.m.•77 views

CVE-2020-17437

An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. When the Urgent flag is set in a TCP packet, and the stack is configured to ignore the urgent data, the stack attempts to use the value of the Urgent pointer bytes to separate the Urgent data from the normal data, by...

8.2CVSS8.2AI score0.02751EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2020/09/27 8:27 p.m.•77 views

CVE-2020-25815

An issue was discovered in MediaWiki 1.32.x through 1.34.x before 1.34.4. LogEventList::getFiltersDesc is insecurely using message text to build options names for an HTML multi-select field. The relevant code should use escaped instead of text...

6.1CVSS6.5AI score0.01104EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2020/09/16 2:39 p.m.•77 views

CVE-2020-24890

libraw 20.0 has a null pointer dereference vulnerability in parsetiffifd in src/metadata/tiff.cpp, which may result in context-dependent arbitrary code execution. Note: this vulnerability occurs only if you compile the software in a certain way...

5.5CVSS5.8AI score0.01551EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2020/09/11 12:0 a.m.•77 views

CVE-2020-14330

An Improper Output Neutralization for Logs flaw was found in Ansible when using the uri module, where sensitive data is exposed to content and json output. This flaw allows an attacker to access the logs or outputs of performed tasks to read keys used in playbooks from other users within the uri...

5.5CVSS6.9AI score0.00568EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2020/08/19 2:25 p.m.•77 views

CVE-2020-24368

Icinga Icinga Web2 2.0.0 through 2.6.4, 2.7.4 and 2.8.2 has a Directory Traversal vulnerability which allows an attacker to access arbitrary files that are readable by the process running Icinga Web 2. This issue is fixed in Icinga Web 2 in v2.6.4, v2.7.4 and v2.8.2...

7.5CVSS7.4AI score0.0328EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2020/07/04 10:54 p.m.•77 views

CVE-2020-15523

In Python 3.6 through 3.6.10, 3.7 through 3.7.8, 3.8 through 3.8.4rc1, and 3.9 through 3.9.0b4 on Windows, a Trojan horse python3.dll might be used in cases where CPython is embedded in a native application. This occurs because python3X.dll may use an invalid search path for python3.dll loading...

7.8CVSS6.6AI score0.00895EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2020/06/08 4:32 p.m.•77 views

CVE-2020-13696

An issue was discovered in LinuxTV xawtv before 3.107. The function devopen in v4l-conf.c does not perform sufficient checks to prevent an unprivileged caller of the program from opening unintended filesystem paths. This allows a local attacker with access to the v4l-conf setuid-root program to...

4.4CVSS3.7AI score0.00355EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2020/04/30 10:15 p.m.•77 views

CVE-2020-11028

In affected versions of WordPress, some private posts, which were previously public, can result in unauthenticated disclosure under a specific set of conditions. This has been patched in version 5.4.1, along with all the previously affected versions via a minor release 5.3.3, 5.2.6, 5.1.5, 5.0.9,...

7.5CVSS3.7AI score0.02334EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2020/04/29 12:0 a.m.•77 views

CVE-2020-11023

In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods i.e. .html, .append, and others may execute untrusted code. This problem is patched in jQuery 3.5.0...

6.9CVSS6.8AI score0.8383EPSS
SaveExploits6
Debian CVE
Debian CVE
•added 2020/04/13 12:4 p.m.•77 views

CVE-2020-1759

A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the messenger v2 protocol, which can allow an attacker to forge auth tags and potentially manipulate the data by leveraging the...

6.8CVSS6.8AI score0.01585EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2020/01/28 4:15 p.m.•77 views

CVE-2020-8086

The modauthldap and modauthldap2 Community Modules through 2020-01-27 for Prosody incompletely verify the XMPP address passed to the isadmin function. This grants remote entities admin-only functionality if their username matches the username of a local admin...

9.8CVSS9.3AI score0.01564EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2019/12/13 9:59 p.m.•77 views

CVE-2019-19796

Yabasic 2.86.2 has a heap-based buffer overflow in myformat in function.c via a crafted BASIC source file...

7.8CVSS3.7AI score0.00778EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2019/11/21 10:15 p.m.•77 views

CVE-2019-11325

An issue was discovered in Symfony before 4.2.12 and 4.3.x before 4.3.8. The VarExport component incorrectly escapes strings, allowing some specially crafted ones to escalate to execution of arbitrary PHP code. This is related to symfony/var-exporter...

9.8CVSS9.7AI score0.03354EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2019/11/12 2:23 p.m.•77 views

CVE-2019-18848

The json-jwt gem before 1.11.0 for Ruby lacks an element count during the splitting of a JWE string...

7.5CVSS7.5AI score0.01257EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2019/11/08 2:45 p.m.•77 views

CVE-2019-10222

A flaw was found in the Ceph RGW configuration with Beast as the front end handling client requests. An unauthenticated attacker could crash the Ceph RGW server by sending valid HTTP headers and terminating the connection, resulting in a remote denial of service for Ceph RGW clients...

7.5CVSS7.6AI score0.0461EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2019/11/07 11:12 p.m.•77 views

CVE-2019-18835

Matrix Synapse before 1.5.0 mishandles signature checking on some federation APIs. Events sent over /sendjoin, /sendleave, and /invite may not be correctly signed, or may not come from the expected servers...

9.8CVSS8.7AI score0.00864EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2019/10/06 9:48 p.m.•77 views

CVE-2019-17266

libsoup from versions 2.65.1 until 2.68.1 have a heap-based buffer over-read because soupntlmparsechallenge in soup-auth-ntlm.c does not properly check an NTLM message's length before proceeding with a memcpy...

9.8CVSS8.7AI score0.02784EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2019/09/26 2:7 p.m.•77 views

CVE-2019-10092

In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting the modproxy error page. An attacker could cause the link on the error page to be malformed and instead point to a page of their choice. This would only be exploitable where a server was set up with...

6.1CVSS5.9AI score0.81466EPSS
SaveExploits4
Debian CVE
Debian CVE
•added 2019/08/07 2:58 p.m.•77 views

CVE-2019-14745

In radare2 before 3.7.0, a command injection vulnerability exists in binsymbols in libr/core/cbin.c. By using a crafted executable file, it's possible to execute arbitrary shell commands with the permissions of the victim. This vulnerability is due to improper handling of symbol names embedded in...

7.8CVSS7.9AI score0.04414EPSS
SaveExploits2
Debian CVE
Debian CVE
•added 2019/07/01 7:27 p.m.•77 views

CVE-2019-13137

ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadPSImage in coders/ps.c...

6.5CVSS6.4AI score0.01901EPSS
SaveExploits1
Total number of security vulnerabilities5000