Lucene search
+L
DebiancveMost viewed

61507 matches found

Debian CVE
Debian CVE
•added 2014/10/31 3:0 p.m.•75 views

CVE-2014-3475

Cross-site scripting XSS vulnerability in the Users panel admin/users/ in OpenStack Dashboard Horizon before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 allows remote administrators to inject arbitrary web script or HTML via a user email address, a different vulnerability than...

3.5CVSS5.4AI score0.01235EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2014/07/17 2:36 a.m.•75 views

CVE-2014-2477

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3.2.24, 4.0.26, 4.1.34, 4.2.26, and 4.3.12 allows local users to affect integrity and availability via unknown vectors related to Core, a different vulnerability than CVE-2014-2486...

3.6CVSS4.1AI score0.07197EPSS
SaveExploits7
Debian CVE
Debian CVE
•added 2014/05/14 12:0 a.m.•75 views

CVE-2011-2513

The Java Network Launching Protocol JNLP implementation in IcedTea6 1.9.x before 1.9.9 and before 1.8.9, and IcedTea-Web 1.1.x before 1.1.1 and before 1.0.4, allows remote attackers to obtain the username and full path of the home and cache directories by accessing properties of the ClassLoader...

5CVSS6.3AI score0.02497EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2014/04/17 2:0 p.m.•75 views

CVE-2014-2707

cups-browsed in cups-filters 1.0.41 before 1.0.51 allows remote IPP printers to execute arbitrary commands via shell metacharacters in the 1 model or 2 PDL, related to "System V interface scripts generated for queues."...

8.3CVSS7.6AI score0.01174EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2014/04/06 4:0 p.m.•75 views

CVE-2013-5680

Heap-based buffer overflow in hfaxd in HylaFAX+ 5.2.4 through 5.5.3, when using LDAP authentication, might allow remote attackers to cause a denial of service child hang or execute arbitrary code via a long USER command...

6.8CVSS8AI score0.07914EPSS
SaveExploits5
Debian CVE
Debian CVE
•added 2014/02/28 2:0 a.m.•75 views

CVE-2014-1690

The help function in net/netfilter/nfnatirc.c in the Linux kernel before 3.12.8 allows remote attackers to obtain sensitive information from kernel memory by establishing an IRC DCC session in which incorrect packet data is transmitted during use of the NAT mangle feature...

2.6CVSS6.4AI score0.03849EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2013/12/07 8:0 p.m.•75 views

CVE-2013-6408

The DocumentAnalysisRequestHandler in Apache Solr before 4.3.1 does not properly use the EmptyEntityResolver, which allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Enti...

6.4CVSS6.5AI score0.114EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2013/08/28 5:0 p.m.•75 views

CVE-2013-2072

Buffer overflow in the Python bindings for the xcvcpusetaffinity call in Xen 4.0.x, 4.1.x, and 4.2.x allows local administrators with permissions to configure VCPU affinity to cause a denial of service memory corruption and xend toolstack crash and possibly gain privileges via a crafted cpumap...

7.4CVSS6.6AI score0.01058EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2013/03/22 9:0 p.m.•75 views

CVE-2013-1840

The v1 API in OpenStack Glance Essex 2012.1, Folsom 2012.2, and Grizzly, when using the single-tenant Swift or S3 store, reports the location field, which allows remote authenticated users to obtain the operator's backend credentials via a request for a cached image...

3.5CVSS6AI score0.01356EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2013/02/13 4:0 p.m.•75 views

CVE-2013-0208

The boot-from-volume feature in OpenStack Compute Nova Folsom and Essex, when using nova-volumes, allows remote authenticated users to boot from other users' volumes via a volume id in the blockdevicemapping parameter...

6.5CVSS6AI score0.02505EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2012/09/25 11:0 p.m.•75 views

CVE-2012-0869

Cross-site scripting XSS vulnerability in fup in Frams' Fast File EXchange FEX, aka fex before 20120215 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

4.3CVSS5.5AI score0.04852EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2011/11/28 11:0 a.m.•75 views

CVE-2011-4319

Cross-site scripting XSS vulnerability in the i18n translations helper method in Ruby on Rails 3.0.x before 3.0.11 and 3.1.x before 3.1.2, and the railsxss plugin in Ruby on Rails 2.3.x, allows remote attackers to inject arbitrary web script or HTML via vectors related to a translations string...

4.3CVSS5.5AI score0.01578EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2011/11/17 7:0 p.m.•75 views

CVE-2011-4107

The simplexmlloadstring function in the XML import plug-in libraries/import/xml.php in phpMyAdmin 3.4.x before 3.4.7.1 and 3.3.x before 3.3.10.5 allows remote authenticated users to read arbitrary files via XML data containing external entity references, aka an XML external entity XXE injection...

6.5CVSS6.5AI score0.1267EPSS
SaveExploits7
Debian CVE
Debian CVE
•added 2011/11/01 7:0 p.m.•75 views

CVE-2011-4064

Cross-site scripting XSS vulnerability in the setup interface in phpMyAdmin 3.4.x before 3.4.6 allows remote attackers to inject arbitrary web script or HTML via a crafted value...

4.3CVSS5.4AI score0.02008EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2011/02/14 8:0 p.m.•75 views

CVE-2011-0697

Cross-site scripting XSS vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 might allow remote attackers to inject arbitrary web script or HTML via a filename associated with a file upload...

4.3CVSS5.5AI score0.01774EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2009/12/23 6:0 p.m.•75 views

CVE-2009-3581

Multiple cross-site scripting XSS vulnerabilities in SQL-Ledger 2.8.24 allow remote authenticated users to inject arbitrary web script or HTML via 1 the DCN Description field in the Accounts Receivables menu item for Add Transaction, 2 the Description field in the Accounts Payable menu item for A...

3.5CVSS2.2AI score0.00861EPSS
SaveExploits2
Debian CVE
Debian CVE
•added 2009/08/07 7:0 p.m.•75 views

CVE-2009-0668

Removed by vendor...

6.5CVSS6.7AI score0.02163EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2009/07/30 6:0 p.m.•75 views

CVE-2009-2410

The localhandlercallback function in server/responder/pam/pamLOCALdomain.c in sssd 0.4.1 does not properly handle blank-password accounts in the SSSD BE database, which allows context-dependent attackers to obtain access by sending the account's username, in conjunction with an arbitrary password...

7.5CVSS5.2AI score0.01979EPSS
SaveExploits2
Debian CVE
Debian CVE
•added 2008/05/22 10:0 a.m.•75 views

CVE-2008-1804

Removed by vendor...

6.8CVSS6.7AI score0.02269EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2005/06/21 4:0 a.m.•75 views

CVE-2005-2040

Multiple buffer overflows in the getterminaltype function in telnetd for Heimdal before 0.6.5 may allow remote attackers to execute arbitrary code, a different vulnerability than CVE-2005-0468 and CVE-2005-0469...

5CVSS7.3AI score0.02843EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2026/05/13 5:57 p.m.•74 views

CVE-2026-42578

Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Netty's HttpProxyHandler constructs HTTP CONNECT requests with header validation explicitly disabled. The newInitialMessage method creates headers using...

7.5CVSS5.9AI score0.00952EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2026/05/13 8:28 a.m.•74 views

CVE-2026-6429

When asked to both use a .netrc file for credentials and to follow HTTP redirects, libcurl could leak the password used for the first host to the followed-to host under certain circumstances...

5.3CVSS5.8AI score0.00519EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2026/05/07 6:30 p.m.•74 views

CVE-2026-8084

A vulnerability was determined in OSGeo gdal up to 3.13.0dev-4. This vulnerability affects the function memmove of the file frmts/hdf4/hdf-eos/SWapi.c of the component HDF-EOS Grid File Handler. This manipulation causes out-of-bounds read. The attack is restricted to local execution. The exploit...

5.5CVSS5.4AI score0.00264EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2026/05/04 5:41 a.m.•74 views

CVE-2026-43859

mutt before 2.3.2 sometimes uses strfcpy instead of memcpy for the IMAP authcram MD5 digest...

3.7CVSS5.8AI score0.00162EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2025/10/10 7:25 p.m.•74 views

CVE-2025-61920

Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.5, Authlib’s JOSE implementation accepts unbounded JWS/JWT header and signature segments. A remote attacker can craft a token whose base64url‑encoded header or signature spans hundreds of megabytes...

7.5CVSS5.5AI score0.00596EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2025/09/16 8:11 a.m.•74 views

CVE-2023-53278

In the Linux kernel, the following vulnerability has been resolved: ubifs: Fix memory leak in ubifssysfsinit When insmod ubifs.ko, a kmemleak reported as below: unreferenced object 0xffff88817fb1a780 size 8: comm "insmod", pid 25265, jiffies 4295239702 age 100.130s hex dump first 8 bytes: 75 62 6...

5.5CVSS5.4AI score0.00143EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2025/09/15 2:22 p.m.•74 views

CVE-2023-53236

In the Linux kernel, the following vulnerability has been resolved: iommufd: Do not corrupt the pfn list when doing batch carry If batch-end is 0 then setting npfns0 before computing the new value of pfns will fail to adjust the pfn and result in various page accounting corruptions. It should be...

5.5CVSS5.5AI score0.00128EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2025/02/11 3:31 p.m.•74 views

CVE-2025-24807

eprosima Fast DDS is a C++ implementation of the DDS Data Distribution Service standard of the OMG Object Management Group. Prior to versions 2.6.10, 2.10.7, 2.14.5, 3.0.2, 3.1.2, and 3.2.0, per design, PermissionsCA is not full chain validated, nor is the expiration date validated. Access contro...

7.1CVSS5.3AI score0.00198EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2025/01/31 11:25 a.m.•74 views

CVE-2025-21682

In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: always recalculate features after XDP clearing, fix null-deref Recalculate features when XDP is detached. Before: ip li set dev eth0 xdp obj xdpdummy.bpf.o sec xdp ip li set dev eth0 xdp off ethtool -k eth0 | grep gro...

5.5CVSS5.7AI score0.00209EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2025/01/07 4:7 p.m.•74 views

CVE-2025-0246

When using an invalid protocol scheme, an attacker could spoof the address bar. Note: This issue only affected Android operating systems. Other operating systems are unaffected. Note: This issue is a different issue from CVE-2025-0244. This vulnerability was fixed in Firefox 134...

6.5CVSS5.6AI score0.00433EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2025/01/06 6:2 p.m.•74 views

CVE-2024-55628

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.8, DNS resource name compression can lead to small DNS messages containing very large hostnames which can be costly to decode, and lead to very large DNS log...

7.5CVSS8.3AI score0.0068EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2024/10/16 1:46 p.m.•74 views

CVE-2024-22034

Attackers could put the special files in .osc into the actual package sources e.g. apiurl. This allows the attacker to change the configuration of osc for the victim...

5.5CVSS5.2AI score0.00209EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2024/09/23 12:0 a.m.•74 views

CVE-2024-42861

An issue in IEEE 802.1AS linuxptp v.4.2 and before allowing a remote attacker to cause a denial of service via a crafted PdelayReq message to the time synchronization function...

7.5CVSS6.4AI score0.01557EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2024/08/21 6:10 a.m.•74 views

CVE-2023-52895

In the Linux kernel, the following vulnerability has been resolved: iouring/poll: don't reissue in case of poll race on multishot request A previous commit fixed a poll race that can occur, but it's only applicable for multishot requests. For a multishot request, we can safely ignore a spurious...

5.5CVSS5.4AI score0.00205EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2024/06/17 7:31 p.m.•74 views

CVE-2024-6062

A vulnerability was found in GPAC 2.5-DEV-rev228-g11067ea92-master and classified as problematic. Affected by this issue is the function swfsvgaddisosample of the file src/filters/loadtext.c of the component MP4Box. The manipulation leads to null pointer dereference. The attack needs to be...

5.5CVSS3.4AI score0.00346EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2024/06/17 7:9 p.m.•74 views

CVE-2024-37890

ws is an open source WebSocket client and server for Node.js. A request with a number of headers exceeding theserver.maxHeadersCount threshold could be used to crash a ws server. The vulnerability was fixed in [email protected] e55e510 and backported to [email protected] 22c2876, [email protected] eeb76d3, and [email protected]...

7.5CVSS6.7AI score0.01357EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2024/05/30 3:29 p.m.•74 views

CVE-2024-36907

Removed by vendor...

7.3AI score
SaveExploits0
Debian CVE
Debian CVE
•added 2024/05/29 4:2 p.m.•74 views

CVE-2024-34161

When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module and the network infrastructure supports a Maximum Transmission Unit MTU of 4096 or greater without fragmentation, undisclosed QUIC packets can cause NGINX worker processes to leak previously freed memory...

5.3CVSS5.6AI score0.00867EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2024/04/28 1:0 p.m.•74 views

CVE-2022-48645

In the Linux kernel, the following vulnerability has been resolved: net: enetc: deny offload of tc-based TSN features on VF interfaces TSN features on the ENETC taprio, cbs, gate, police are configured through a mix of command BD ring messages and port registers: enetcportrd, enetcportwr. Port...

5.5CVSS6.8AI score0.00225EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2024/04/17 10:50 p.m.•74 views

CVE-2023-4233

A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the smsdecodeaddressfield function during the SMS PDU decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base station, or just SMS...

8.1CVSS8.1AI score0.01006EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2024/04/17 10:27 a.m.•74 views

CVE-2024-26902

In the Linux kernel, the following vulnerability has been resolved: perf: RISCV: Fix panic on pmu overflow handler 1 idx of int is not desired when setting bits in unsigned long overflowedctrs, use BIT instead. This panic happens when running 'perf record -e branches' on sophgo sg2042. 273.311852...

5.5CVSS7.2AI score0.00238EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2024/03/27 12:0 a.m.•74 views

CVE-2024-28085

wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked. There may be plausible...

3.3CVSS5.9AI score0.02242EPSS
SaveExploits3
Debian CVE
Debian CVE
•added 2024/02/29 2:57 p.m.•74 views

CVE-2023-52485

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Wake DMCUB before sending a command Why We can hang in place trying to send commands when the DMCUB isn't powered on. How For functions that execute within a DC context or DC lock we can wrap the direct calls to...

5.5CVSS5.2AI score0.00214EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2024/02/28 8:13 a.m.•74 views

CVE-2021-47018

In the Linux kernel, the following vulnerability has been resolved: powerpc/64: Fix the definition of the fixmap area At the time being, the fixmap area is defined at the top of the address space or just below KASAN. This definition is not valid for PPC64. For PPC64, use the top of the I/O space...

5.5CVSS6AI score0.00239EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2024/02/21 11:30 p.m.•74 views

CVE-2024-1525

Removed by vendor...

5.3CVSS6AI score0.00453EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2024/01/08 5:38 p.m.•74 views

CVE-2022-2585

It was discovered that when exec'ing from a non-leader thread, armed POSIX CPU timers would be left on a list but freed, leading to a use-after-free...

7.8CVSS6.7AI score0.01284EPSS
SaveExploits3
Debian CVE
Debian CVE
•added 2023/12/05 11:35 a.m.•74 views

CVE-2023-43628

An integer underflow vulnerability exists in the NTRIP Stream Parsing functionality of GPSd 3.25.1dev. A specially crafted network packet can lead to memory corruption. An attacker can send a malicious packet to trigger this vulnerability...

7.5CVSS7.5AI score0.01225EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2023/11/06 10:30 a.m.•74 views

CVE-2023-5825

Removed by vendor...

6.5CVSS6.6AI score0.00643EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2023/09/26 6:19 p.m.•74 views

CVE-2023-43646

get-func-name is a module to retrieve a function's name securely and consistently both in NodeJS and the browser. Versions prior to 2.0.1 are subject to a regular expression denial of service redos vulnerability which may lead to a denial of service when parsing malicious input. This vulnerabilit...

8.6CVSS6.3AI score0.01114EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2023/09/15 7:43 p.m.•74 views

CVE-2023-41880

Wasmtime is a standalone runtime for WebAssembly. Wasmtime versions from 10.0.0 to versions 10.02, 11.0.2, and 12.0.1 contain a miscompilation of the WebAssembly i64x2.shrs instruction on x8664 platforms when the shift amount is a constant value that is larger than 32. Only x8664 is affected so a...

5.3CVSS5.3AI score0.00605EPSS
SaveExploits0
Total number of security vulnerabilities5000