Lucene search
+L
DebiancveMost viewed

66301 matches found

Debian CVE
Debian CVE
•added 2012/01/27 3:00 p.m.•86 views

CVE-2011-4314

message/ax/AxMessage.java in OpenID4Java before 0.9.6 final, as used in JBoss Enterprise Application Platform 5.1 before 5.1.2, Step2, Kay Framework before 1.0.2, and possibly other products does not verify that Attribute Exchange AX information is signed, which allows remote attackers to modify...

5.8CVSS6AI score0.03201EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2011/01/20 6:00 p.m.•86 views

CVE-2011-0008

A certain Fedora patch for parse.c in sudo before 1.7.4p5-1.fc14 on Fedora 14 does not properly interpret a system group aka %group in the sudoers file during authorization decisions for a user who belongs to that group, which allows local users to leverage an applicable sudoers file and gain roo...

6.9CVSS6AI score0.00333EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2010/08/02 9:00 p.m.•86 views

CVE-2010-2539

Buffer overflow in the msTmpFile function in maputil.c in mapserv in MapServer before 4.10.6 and 5.x before 5.6.4 allows local users to cause a denial of service via vectors involving names of temporary files...

2.1CVSS6.1AI score0.00323EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2009/10/23 7:00 p.m.•86 views

CVE-2009-3767

libraries/libldap/tlso.c in OpenLDAP 2.2 and 2.4, and possibly other versions, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the subject's Common Name CN field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers vi...

4.3CVSS8.4AI score0.03273EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2008/11/10 10:00 p.m.•86 views

CVE-2008-5036

Stack-based buffer overflow in VideoLAN VLC media player 0.9.x before 0.9.6 might allow user-assisted attackers to execute arbitrary code via an an invalid RealText rt subtitle file, related to the ParseRealText function in modules/demux/subtitle.c. NOTE: this issue was SPLIT from CVE-2008-5032 o...

9.3CVSS6.6AI score0.41444EPSS
SaveExploits11
Debian CVE
Debian CVE
•added 2008/08/14 11:00 p.m.•86 views

CVE-2008-3699

The MagnatuneBrowser::listDownloadComplete function in magnatunebrowser/magnatunebrowser.cpp in Amarok before 1.4.10 allows local users to overwrite arbitrary files via a symlink attack on the albuminfo.xml temporary file...

3.3CVSS6.1AI score0.00353EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2008/01/31 8:00 p.m.•86 views

CVE-2007-4998

cp, when running with an option to preserve symlinks on multiple OSes, allows local, user-assisted attackers to overwrite arbitrary files via a symlink attack using crafted directories containing multiple source files that are copied to the same destination...

6.9CVSS6.5AI score0.00347EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 1976/01/01 12:00 a.m.•86 views

CVE-2021-33235

Removed by vendor...

5.5AI score
SaveExploits0
Debian CVE
Debian CVE
•added 2026/05/06 11:27 a.m.•85 views

CVE-2026-43174

In the Linux kernel, the following vulnerability has been resolved: iouring/zcrx: fix post open error handling Closing a queue doesn't guarantee that all associated page pools are terminated right away, let the refcounting do the work instead of releasing the zcrx ctx directly...

5.5CVSS5.7AI score0.00112EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2026/05/04 6:13 p.m.•85 views

CVE-2026-42154

Prometheus is an open-source monitoring system and time series database. Prior to versions 3.5.3 and 3.11.3, the remote read endpoint /api/v1/read does not validate the declared decoded length in a snappy-compressed request body before allocating memory. An unauthenticated attacker can send a sma...

7.5CVSS5.8AI score0.00813EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2025/10/09 8:57 p.m.•85 views

CVE-2025-61783

Python Social Auth is a social authentication/registration mechanism. In versions prior to 5.6.0, upon authentication, the user could be associated by e-mail even if the associatebyemail pipeline was not included. This could lead to account compromise when a third-party authentication service doe...

6.3CVSS5.3AI score0.00514EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2024/12/27 3:02 p.m.•85 views

CVE-2024-56647

In the Linux kernel, the following vulnerability has been resolved: net: Fix icmp host relookup triggering iprtbug arp link failure may trigger iprtbug while xfrm enabled, call trace is: WARNING: CPU: 0 PID: 0 at net/ipv4/route.c:1241 iprtbug+0x14/0x20 Modules linked in: CPU: 0 UID: 0 PID: 0 Comm...

5.5CVSS5.6AI score0.00223EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2024/08/22 1:32 a.m.•85 views

CVE-2022-48922

In the Linux kernel, the following vulnerability has been resolved: riscv: fix oops caused by irqsoff latency tracer The tracehardirqson,off require the caller to setup frame pointer properly. This because these two functions use macro 'CALLERADDR1' aka. builtinreturnaddress1 to acquire caller...

5.5CVSS5.4AI score0.00207EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2024/08/21 6:10 a.m.•85 views

CVE-2022-48871

In the Linux kernel, the following vulnerability has been resolved: tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer Driver's probe allocates memory for RX FIFO port-rxfifo based on default RX FIFO depth, e.g. 16. Later during serial startup the qcomgeniserialportsetup...

8.8CVSS5.7AI score0.00349EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2024/08/06 3:55 p.m.•85 views

CVE-2024-43111

Long pressing on a download link could potentially allow Javascript commands to be executed within the browser This vulnerability affects Firefox for iOS 129...

9.8CVSS5.3AI score0.0027EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2024/07/12 12:32 p.m.•85 views

CVE-2024-40975

In the Linux kernel, the following vulnerability has been resolved: platform/x86: x86-android-tablets: Unregister devices in reverse order Not all subsystems support a device getting removed while there are still consumers of the device with a reference to the device. One example of this is the...

5.5CVSS5AI score0.00288EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2024/07/02 7:51 p.m.•85 views

CVE-2022-30636

httpTokenCacheKey uses path.Base to extract the expected HTTP-01 token value to lookup in the DirCache implementation. On Windows, path.Base acts differently to filepath.Base, since Windows uses a different path separator \ vs. /, allowing a user to provide a relative path, i.e...

7.5CVSS7.4AI score0.00637EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2024/06/26 11:31 p.m.•85 views

CVE-2024-1493

Removed by vendor...

6.5CVSS5.8AI score0.0049EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2024/05/29 4:02 p.m.•85 views

CVE-2024-34161

When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module and the network infrastructure supports a Maximum Transmission Unit MTU of 4096 or greater without fragmentation, undisclosed QUIC packets can cause NGINX worker processes to leak previously freed memory...

5.3CVSS5.6AI score0.00867EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2024/04/17 3:59 p.m.•85 views

CVE-2024-26914

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix incorrect mpccombine array size why MAXSURFACES is per stream, while MAXPLANES is per asic. The mpccombine is an array that records all the planes per asic. Therefore MAXPLANES should be used as the array siz...

7.8CVSS5.7AI score0.00216EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2024/04/08 12:00 a.m.•85 views

CVE-2024-23079

Removed by vendor...

6.2CVSS6.6AI score0.00205EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2024/04/03 5:00 p.m.•85 views

CVE-2024-26730

In the Linux kernel, the following vulnerability has been resolved: hwmon: nct6775 Fix access to temperature configuration registers The number of temperature configuration registers does not always match the total number of temperature registers. This can result in access errors reported if KASA...

7.3CVSS5.8AI score0.00248EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2024/04/02 7:01 a.m.•85 views

CVE-2024-26678

In the Linux kernel, the following vulnerability has been resolved: x86/efistub: Use 1:1 file:memory mapping for PE/COFF .compat section The .compat section is a dummy PE section that contains the address of the 32-bit entrypoint of the 64-bit kernel image if it is bootable from 32-bit firmware...

5.5CVSS6.7AI score0.00225EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2024/03/24 7:27 p.m.•85 views

CVE-2024-29034

CarrierWave is a solution for file uploads for Rails, Sinatra and other Ruby web frameworks. The vulnerability CVE-2023-49090 wasn't fully addressed. This vulnerability is caused by the fact that when uploading to object storage, including Amazon S3, it is possible to set a Content-Type value tha...

6.8CVSS6.3AI score0.0044EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2023/12/26 12:00 a.m.•85 views

CVE-2023-51104

A floating point exception divide-by-zero vulnerability was discovered in Artifex MuPDF 1.23.4 in function pnmbinaryreadimage of load-pnm.c when span equals zero...

7.5CVSS7.5AI score0.00914EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2023/11/28 3:31 p.m.•85 views

CVE-2023-46589

Improper Input Validation vulnerability in Apache Tomcat.Tomcat from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.1.15, from 9.0.0-M1 through 9.0.82 and from 8.5.0 through 8.5.95 did not correctly parse HTTP trailer headers. A trailer header that exceeded the header size limit could...

7.5CVSS7.9AI score0.02651EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2023/11/06 10:30 a.m.•85 views

CVE-2023-5825

Removed by vendor...

6.5CVSS6.6AI score0.00643EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2023/11/03 7:58 a.m.•85 views

CVE-2023-42670

A flaw was found in Samba. It is susceptible to a vulnerability where multiple incompatible RPC listeners can be initiated, causing disruptions in the AD DC service. When Samba's RPC server experiences a high load or unresponsiveness, servers intended for non-AD DC purposes for example,...

6.5CVSS6.5AI score0.01102EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2023/09/24 12:09 a.m.•85 views

CVE-2023-1636

A vulnerability was found in OpenStack Barbican containers. This vulnerability is only applicable to deployments that utilize an all-in-one configuration. Barbican containers share the same CGROUP, USER, and NET namespace with the host system and other OpenStack services. If any service is...

6CVSS5.5AI score0.00484EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2023/08/22 12:00 a.m.•85 views

CVE-2020-18831

Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows remote attackers to cause a denial of service and other unspecified impacts via use of crafted file...

7.8CVSS7.4AI score0.00801EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2023/08/14 12:00 a.m.•85 views

CVE-2023-40303

GNU inetutils before 2.5 may allow privilege escalation because of unchecked return values of setid family functions in ftpd, rcp, rlogin, rsh, rshd, and uucpd. This is, for example, relevant if the setuid system call fails when a process is trying to drop privileges before letting an ordinary us...

7.8CVSS7.7AI score0.00412EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2023/07/21 8:25 p.m.•85 views

CVE-2022-41793

An out-of-bounds write vulnerability exists in the CSR format title functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability...

9.8CVSS8.7AI score0.00802EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2023/07/06 3:06 p.m.•85 views

CVE-2023-36823

Sanitize is an allowlist-based HTML and CSS sanitizer. Using carefully crafted input, an attacker may be able to sneak arbitrary HTML and CSS through Sanitize starting with version 3.0.0 and prior to version 6.0.2 when Sanitize is configured to use the built-in "relaxed" config or when using a...

7.1CVSS6.2AI score0.00712EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2023/04/25 6:32 p.m.•85 views

CVE-2021-23176

Improper access control in reporting engine of l10nfrfec module in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows remote authenticated users to extract accounting information via crafted RPC packets...

6.5CVSS6.5AI score0.00788EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2023/04/15 12:00 a.m.•85 views

CVE-2020-17354

LilyPond before 2.24 allows attackers to bypass the -dsafe protection mechanism via output-def-lookup or output-def-scope, as demonstrated by dangerous Scheme code in a .ly file that causes arbitrary code execution during conversion to a different file format. NOTE: in 2.24 and later versions, sa...

8.6CVSS6.3AI score0.00414EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2023/02/16 6:24 a.m.•85 views

CVE-2023-0662

In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, excessive number of parts in HTTP form upload can cause high resource consumption and excessive number of log entries. This can cause denial of service on the affected server by exhausting CPU resources or disk space...

7.5CVSS6.7AI score0.01408EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2023/02/16 12:00 a.m.•85 views

CVE-2020-6817

bleach.clean behavior parsing style attributes could result in a regular expression denial of service ReDoS. Calls to bleach.clean with an allowed tag with an allowed style attribute are vulnerable to ReDoS. For example, bleach.clean..., attributes='a': 'style'...

7.5CVSS7.4AI score0.00713EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/12/30 12:00 a.m.•85 views

CVE-2022-42262

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager vGPU plugin, where an input index is not validated, which may lead to buffer overrun, which in turn may cause data tampering, information disclosure, or denial of service...

7.8CVSS7.4AI score0.0022EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/12/30 12:00 a.m.•85 views

CVE-2022-42261

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager vGPU plugin, where an input index is not validated, which may lead to buffer overrun, which in turn may cause data tampering, information disclosure, or denial of service...

7.8CVSS7.5AI score0.00258EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/12/30 12:00 a.m.•85 views

CVE-2022-34680

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an integer truncation can lead to an out-of-bounds read, which may lead to denial of service...

5.5CVSS5.1AI score0.00274EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/12/23 11:03 p.m.•85 views

CVE-2022-41684

A heap out of bounds read vulnerability exists in the OpenImageIO master-branch-9aeece7a when parsing the image file directory part of a PSD image file. A specially-crafted .psd file can cause a read of arbitrary memory address which can lead to denial of service. An attacker can provide a...

7.5CVSS7.3AI score0.00765EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/12/22 12:00 a.m.•85 views

CVE-2022-22749

When scanning QR codes, Firefox for Android would have allowed navigation to some URLs that do not point to web content.This bug only affects Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox 96...

4.3CVSS7AI score0.0042EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/12/22 12:00 a.m.•85 views

CVE-2022-26381

An attacker could have caused a use-after-free by forcing a text reflow in an SVG object leading to a potentially exploitable crash. This vulnerability affects Firefox 98, Firefox ESR 91.7, and Thunderbird 91.7...

8.8CVSS9.6AI score0.00849EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/11/09 12:00 a.m.•85 views

CVE-2022-3265

Removed by vendor...

7.3CVSS6.6AI score0.86326EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/10/14 12:00 a.m.•85 views

CVE-2022-35045

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b0d63...

6.5CVSS6.7AI score0.00758EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/10/14 12:00 a.m.•85 views

CVE-2022-35053

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x61731f...

6.5CVSS6.7AI score0.00758EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/09/16 7:50 p.m.•85 views

CVE-2022-35952

TensorFlow is an open source platform for machine learning. The UnbatchGradOp function takes an argument id that is assumed to be a scalar. A nonscalar id can trigger a CHECK failure and crash the program. It also requires its argument batchindex to contain three times the number of elements as...

7.5CVSS6.9AI score0.00596EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/09/16 2:45 p.m.•85 views

CVE-2021-42949

The component controllalogin function in HotelDruid Hotel Management Software v3.0.3 generates a predictable session token, allowing attackers to bypass authentication via bruteforce attacks...

9.8CVSS9.6AI score0.05947EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/09/06 5:18 p.m.•85 views

CVE-2022-23451

An authorization flaw was found in openstack-barbican. The default policy rules for the secret metadata API allowed any authenticated user to add, modify, or delete metadata from any secret regardless of ownership. This flaw allows an attacker on the network to modify or delete protected data,...

8.1CVSS6.5AI score0.01244EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/08/12 7:36 p.m.•85 views

CVE-2022-2608

Use after free in Overview Mode in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via specific UI interactions...

8.8CVSS9.7AI score0.00502EPSS
SaveExploits0
Total number of security vulnerabilities5000