Lucene search
+L
DebiancveMost viewed

61459 matches found

Debian CVE
Debian CVE
added 2013/12/07 8:0 p.m.75 views

CVE-2013-6408

The DocumentAnalysisRequestHandler in Apache Solr before 4.3.1 does not properly use the EmptyEntityResolver, which allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Enti...

6.4CVSS6.5AI score0.114EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2013/08/28 5:0 p.m.75 views

CVE-2013-2072

Buffer overflow in the Python bindings for the xcvcpusetaffinity call in Xen 4.0.x, 4.1.x, and 4.2.x allows local administrators with permissions to configure VCPU affinity to cause a denial of service memory corruption and xend toolstack crash and possibly gain privileges via a crafted cpumap...

7.4CVSS6.6AI score0.01058EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2013/03/22 9:0 p.m.75 views

CVE-2013-1840

The v1 API in OpenStack Glance Essex 2012.1, Folsom 2012.2, and Grizzly, when using the single-tenant Swift or S3 store, reports the location field, which allows remote authenticated users to obtain the operator's backend credentials via a request for a cached image...

3.5CVSS6AI score0.01356EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2013/02/13 4:0 p.m.75 views

CVE-2013-0208

The boot-from-volume feature in OpenStack Compute Nova Folsom and Essex, when using nova-volumes, allows remote authenticated users to boot from other users' volumes via a volume id in the blockdevicemapping parameter...

6.5CVSS6AI score0.02505EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2012/09/25 11:0 p.m.75 views

CVE-2012-0869

Cross-site scripting XSS vulnerability in fup in Frams' Fast File EXchange FEX, aka fex before 20120215 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

4.3CVSS5.5AI score0.04852EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2011/11/28 11:0 a.m.75 views

CVE-2011-4319

Cross-site scripting XSS vulnerability in the i18n translations helper method in Ruby on Rails 3.0.x before 3.0.11 and 3.1.x before 3.1.2, and the railsxss plugin in Ruby on Rails 2.3.x, allows remote attackers to inject arbitrary web script or HTML via vectors related to a translations string...

4.3CVSS5.5AI score0.01578EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2011/11/17 7:0 p.m.75 views

CVE-2011-4107

The simplexmlloadstring function in the XML import plug-in libraries/import/xml.php in phpMyAdmin 3.4.x before 3.4.7.1 and 3.3.x before 3.3.10.5 allows remote authenticated users to read arbitrary files via XML data containing external entity references, aka an XML external entity XXE injection...

6.5CVSS6.5AI score0.1267EPSS
SaveExploits7
Debian CVE
Debian CVE
added 2011/11/01 7:0 p.m.75 views

CVE-2011-4064

Cross-site scripting XSS vulnerability in the setup interface in phpMyAdmin 3.4.x before 3.4.6 allows remote attackers to inject arbitrary web script or HTML via a crafted value...

4.3CVSS5.4AI score0.02008EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2011/02/14 8:0 p.m.75 views

CVE-2011-0697

Cross-site scripting XSS vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 might allow remote attackers to inject arbitrary web script or HTML via a filename associated with a file upload...

4.3CVSS5.5AI score0.01774EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2009/12/23 6:0 p.m.75 views

CVE-2009-3581

Multiple cross-site scripting XSS vulnerabilities in SQL-Ledger 2.8.24 allow remote authenticated users to inject arbitrary web script or HTML via 1 the DCN Description field in the Accounts Receivables menu item for Add Transaction, 2 the Description field in the Accounts Payable menu item for A...

3.5CVSS2.2AI score0.00861EPSS
SaveExploits2
Debian CVE
Debian CVE
added 2009/08/07 7:0 p.m.75 views

CVE-2009-0668

Removed by vendor...

6.5CVSS6.7AI score0.02163EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2009/07/30 6:0 p.m.75 views

CVE-2009-2410

The localhandlercallback function in server/responder/pam/pamLOCALdomain.c in sssd 0.4.1 does not properly handle blank-password accounts in the SSSD BE database, which allows context-dependent attackers to obtain access by sending the account's username, in conjunction with an arbitrary password...

7.5CVSS5.2AI score0.01979EPSS
SaveExploits2
Debian CVE
Debian CVE
added 2008/05/22 10:0 a.m.75 views

CVE-2008-1804

Removed by vendor...

6.8CVSS6.7AI score0.02269EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2005/06/21 4:0 a.m.75 views

CVE-2005-2040

Multiple buffer overflows in the getterminaltype function in telnetd for Heimdal before 0.6.5 may allow remote attackers to execute arbitrary code, a different vulnerability than CVE-2005-0468 and CVE-2005-0469...

5CVSS7.3AI score0.02843EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2026/05/13 5:57 p.m.74 views

CVE-2026-42578

Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Netty's HttpProxyHandler constructs HTTP CONNECT requests with header validation explicitly disabled. The newInitialMessage method creates headers using...

7.5CVSS5.9AI score0.00952EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2026/05/13 8:28 a.m.74 views

CVE-2026-6429

When asked to both use a .netrc file for credentials and to follow HTTP redirects, libcurl could leak the password used for the first host to the followed-to host under certain circumstances...

5.3CVSS5.8AI score0.00519EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2026/05/07 6:30 p.m.74 views

CVE-2026-8084

A vulnerability was determined in OSGeo gdal up to 3.13.0dev-4. This vulnerability affects the function memmove of the file frmts/hdf4/hdf-eos/SWapi.c of the component HDF-EOS Grid File Handler. This manipulation causes out-of-bounds read. The attack is restricted to local execution. The exploit...

5.5CVSS5.4AI score0.00264EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2026/05/04 5:41 a.m.74 views

CVE-2026-43859

mutt before 2.3.2 sometimes uses strfcpy instead of memcpy for the IMAP authcram MD5 digest...

3.7CVSS5.8AI score0.00162EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2025/10/10 7:25 p.m.74 views

CVE-2025-61920

Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.5, Authlib’s JOSE implementation accepts unbounded JWS/JWT header and signature segments. A remote attacker can craft a token whose base64url‑encoded header or signature spans hundreds of megabytes...

7.5CVSS5.5AI score0.00596EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2025/09/15 2:22 p.m.74 views

CVE-2023-53236

In the Linux kernel, the following vulnerability has been resolved: iommufd: Do not corrupt the pfn list when doing batch carry If batch-end is 0 then setting npfns0 before computing the new value of pfns will fail to adjust the pfn and result in various page accounting corruptions. It should be...

5.5CVSS5.5AI score0.00128EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2025/07/31 8:44 p.m.74 views

CVE-2023-32251

A vulnerability has been identified in the Linux kernel's ksmbd component kernel SMB/CIFS server. A security control designed to prevent dictionary attacks, which introduces a 5-second delay during session setup, can be bypassed through the use of asynchronous requests. This bypass negates the...

3.7CVSS4.9AI score0.00433EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2025/02/11 3:31 p.m.74 views

CVE-2025-24807

eprosima Fast DDS is a C++ implementation of the DDS Data Distribution Service standard of the OMG Object Management Group. Prior to versions 2.6.10, 2.10.7, 2.14.5, 3.0.2, 3.1.2, and 3.2.0, per design, PermissionsCA is not full chain validated, nor is the expiration date validated. Access contro...

7.1CVSS5.3AI score0.00198EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2025/01/31 11:25 a.m.74 views

CVE-2025-21682

In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: always recalculate features after XDP clearing, fix null-deref Recalculate features when XDP is detached. Before: ip li set dev eth0 xdp obj xdpdummy.bpf.o sec xdp ip li set dev eth0 xdp off ethtool -k eth0 | grep gro...

5.5CVSS5.7AI score0.00209EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2025/01/07 4:7 p.m.74 views

CVE-2025-0246

When using an invalid protocol scheme, an attacker could spoof the address bar. Note: This issue only affected Android operating systems. Other operating systems are unaffected. Note: This issue is a different issue from CVE-2025-0244. This vulnerability was fixed in Firefox 134...

6.5CVSS5.6AI score0.00433EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2024/09/23 12:0 a.m.74 views

CVE-2024-42861

An issue in IEEE 802.1AS linuxptp v.4.2 and before allowing a remote attacker to cause a denial of service via a crafted PdelayReq message to the time synchronization function...

7.5CVSS6.4AI score0.01557EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2024/08/21 6:10 a.m.74 views

CVE-2023-52895

In the Linux kernel, the following vulnerability has been resolved: iouring/poll: don't reissue in case of poll race on multishot request A previous commit fixed a poll race that can occur, but it's only applicable for multishot requests. For a multishot request, we can safely ignore a spurious...

5.5CVSS5.4AI score0.00205EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2024/06/17 7:31 p.m.74 views

CVE-2024-6062

A vulnerability was found in GPAC 2.5-DEV-rev228-g11067ea92-master and classified as problematic. Affected by this issue is the function swfsvgaddisosample of the file src/filters/loadtext.c of the component MP4Box. The manipulation leads to null pointer dereference. The attack needs to be...

5.5CVSS3.4AI score0.00346EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2024/06/17 7:9 p.m.74 views

CVE-2024-37890

ws is an open source WebSocket client and server for Node.js. A request with a number of headers exceeding theserver.maxHeadersCount threshold could be used to crash a ws server. The vulnerability was fixed in [email protected] e55e510 and backported to [email protected] 22c2876, [email protected] eeb76d3, and [email protected]...

7.5CVSS6.7AI score0.01357EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2024/05/30 3:29 p.m.74 views

CVE-2024-36907

Removed by vendor...

7.3AI score
SaveExploits0
Debian CVE
Debian CVE
added 2024/05/29 4:2 p.m.74 views

CVE-2024-34161

When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module and the network infrastructure supports a Maximum Transmission Unit MTU of 4096 or greater without fragmentation, undisclosed QUIC packets can cause NGINX worker processes to leak previously freed memory...

5.3CVSS5.6AI score0.00867EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2024/04/28 1:0 p.m.74 views

CVE-2022-48645

In the Linux kernel, the following vulnerability has been resolved: net: enetc: deny offload of tc-based TSN features on VF interfaces TSN features on the ENETC taprio, cbs, gate, police are configured through a mix of command BD ring messages and port registers: enetcportrd, enetcportwr. Port...

5.5CVSS6.8AI score0.00225EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2024/04/17 10:50 p.m.74 views

CVE-2023-4233

A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the smsdecodeaddressfield function during the SMS PDU decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base station, or just SMS...

8.1CVSS8.1AI score0.01006EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2024/04/17 10:27 a.m.74 views

CVE-2024-26902

In the Linux kernel, the following vulnerability has been resolved: perf: RISCV: Fix panic on pmu overflow handler 1 idx of int is not desired when setting bits in unsigned long overflowedctrs, use BIT instead. This panic happens when running 'perf record -e branches' on sophgo sg2042. 273.311852...

5.5CVSS7.2AI score0.00238EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2024/03/27 12:0 a.m.74 views

CVE-2024-28085

wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked. There may be plausible...

3.3CVSS5.9AI score0.02242EPSS
SaveExploits3
Debian CVE
Debian CVE
added 2024/02/29 2:57 p.m.74 views

CVE-2023-52485

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Wake DMCUB before sending a command Why We can hang in place trying to send commands when the DMCUB isn't powered on. How For functions that execute within a DC context or DC lock we can wrap the direct calls to...

5.5CVSS5.2AI score0.00214EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2024/02/28 8:13 a.m.74 views

CVE-2021-47018

In the Linux kernel, the following vulnerability has been resolved: powerpc/64: Fix the definition of the fixmap area At the time being, the fixmap area is defined at the top of the address space or just below KASAN. This definition is not valid for PPC64. For PPC64, use the top of the I/O space...

5.5CVSS6AI score0.00239EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2024/01/08 5:38 p.m.74 views

CVE-2022-2585

It was discovered that when exec'ing from a non-leader thread, armed POSIX CPU timers would be left on a list but freed, leading to a use-after-free...

7.8CVSS6.7AI score0.01284EPSS
SaveExploits3
Debian CVE
Debian CVE
added 2023/12/05 11:35 a.m.74 views

CVE-2023-43628

An integer underflow vulnerability exists in the NTRIP Stream Parsing functionality of GPSd 3.25.1dev. A specially crafted network packet can lead to memory corruption. An attacker can send a malicious packet to trigger this vulnerability...

7.5CVSS7.5AI score0.01225EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2023/11/06 10:30 a.m.74 views

CVE-2023-5825

Removed by vendor...

6.5CVSS6.6AI score0.00643EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2023/09/26 6:19 p.m.74 views

CVE-2023-43646

get-func-name is a module to retrieve a function's name securely and consistently both in NodeJS and the browser. Versions prior to 2.0.1 are subject to a regular expression denial of service redos vulnerability which may lead to a denial of service when parsing malicious input. This vulnerabilit...

8.6CVSS6.3AI score0.01114EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2023/09/15 7:43 p.m.74 views

CVE-2023-41880

Wasmtime is a standalone runtime for WebAssembly. Wasmtime versions from 10.0.0 to versions 10.02, 11.0.2, and 12.0.1 contain a miscompilation of the WebAssembly i64x2.shrs instruction on x8664 platforms when the shift amount is a constant value that is larger than 32. Only x8664 is affected so a...

5.3CVSS5.3AI score0.00605EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2023/08/31 3:53 p.m.74 views

CVE-2023-4681

NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.3-DEV...

5.5CVSS5.2AI score0.00295EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2023/08/22 12:0 a.m.74 views

CVE-2022-48545

An infinite recursion in Catalog::findDestInTree can cause denial of service for xpdf 4.02...

5.5CVSS6.8AI score0.00232EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2023/08/15 5:7 p.m.74 views

CVE-2023-2312

Use after free in Offline in Google Chrome on Android prior to 116.0.5845.96 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS9.3AI score0.00825EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2023/07/21 8:25 p.m.74 views

CVE-2022-41793

An out-of-bounds write vulnerability exists in the CSR format title functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability...

9.8CVSS8.7AI score0.00802EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2023/07/20 12:22 a.m.74 views

CVE-2022-28734

Out-of-bounds write when handling split HTTP headers; When handling split HTTP headers, GRUB2 HTTP code accidentally moves its internal data buffer point by one position. This can lead to a out-of-bound write further when parsing the HTTP request, writing a NULL byte past the buffer. It's...

8.1CVSS8AI score0.01131EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2023/07/06 9:53 a.m.74 views

CVE-2023-3523

Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2...

7.1CVSS7AI score0.00352EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2023/05/26 1:44 p.m.74 views

CVE-2022-39374

Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. If Synapse and a malicious homeserver are both joined to the same room, the malicious homeserver can trick Synapse into accepting previously rejected events into its view of the current state of that...

6.5CVSS6.3AI score0.00941EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2023/05/25 1:54 p.m.74 views

CVE-2023-2798

Removed by vendor...

7.5CVSS7.5AI score0.00907EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2023/05/22 10:8 a.m.74 views

CVE-2023-28709

The fix for CVE-2023-24998 was incomplete for Apache Tomcat 11.0.0-M2 to 11.0.0-M4, 10.1.5 to 10.1.7, 9.0.71 to 9.0.73 and 8.5.85 to 8.5.87. If non-default HTTP connector settings were used such that the maxParameterCount could be reached using query string parameters and a request was submitted...

7.5CVSS7.4AI score0.51547EPSS
SaveExploits1
Total number of security vulnerabilities5000