Lucene search
+L
DebiancveMost viewed

66261 matches found

Debian CVE
Debian CVE
•added 2020/03/09 3:11 p.m.•84 views

CVE-2020-1737

A flaw was found in Ansible 2.7.17 and prior, 2.8.9 and prior, and 2.9.6 and prior when using the Extract-Zip function from the winunzip module as the extracted files are not checked if they belong to the destination folder. An attacker could take advantage of this flaw by crafting an archive...

7.8CVSS7.3AI score0.00365EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2020/01/23 2:15 a.m.•84 views

CVE-2020-5217

In Secure Headers RubyGem secureheaders, a directive injection vulnerability is present in versions before 3.8.0, 5.1.0, and 6.2.0. If user-supplied input was passed into append/overridecontentsecuritypolicydirectives, a semicolon could be injected leading to directive injection. This could be us...

5.8CVSS7.1AI score0.0183EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2019/12/09 3:15 p.m.•84 views

CVE-2019-19645

alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements...

5.5CVSS7AI score0.00566EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2019/11/07 3:28 p.m.•84 views

CVE-2019-18814

An issue was discovered in the Linux kernel through 5.3.9. There is a use-after-free when aalabelparse fails in aaauditruleinit in security/apparmor/audit.c...

9.8CVSS8AI score0.02503EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2019/09/09 11:49 a.m.•84 views

CVE-2019-16138

An issue was discovered in the image crate before 0.21.3 for Rust, affecting the HDR image format decoder. Vec::setlen is called on an uninitialized vector, leading to a use-after-free and arbitrary code execution...

9.8CVSS9.8AI score0.02478EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2019/07/30 4:22 p.m.•84 views

CVE-2019-10141

A vulnerability was found in openstack-ironic-inspector all versions excluding 5.0.2, 6.0.3, 7.2.4, 8.0.3 and 8.2.1. A SQL-injection vulnerability was found in openstack-ironic-inspector's nodecache.findnode. This function makes a SQL query using unfiltered data from a server reporting inspection...

9.1CVSS8.8AI score0.02484EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2019/07/24 3:30 a.m.•84 views

CVE-2019-14249

dwarfelfloadheaders.c in libdwarf before 2019-07-05 allows attackers to cause a denial of service division by zero via an ELF file with a zero-size section group SHTGROUP, as demonstrated by dwarfdump...

6.5CVSS6.5AI score0.0273EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2019/07/19 10:56 p.m.•84 views

CVE-2019-12815

An arbitrary file copy vulnerability in modcopy in ProFTPD up to 1.3.5b allows for remote code execution and information disclosure without authentication, a related issue to CVE-2015-3306...

9.8CVSS6.7AI score0.57606EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2019/07/16 12:04 p.m.•84 views

CVE-2019-1010057

nfdump 1.6.16 and earlier is affected by: Buffer Overflow. The impact is: The impact could range from a denial of service to local code execution. The component is: nfx.c:546, nffileinline.c:83, minilzo.c redistributed. The attack vector is: nfdump must read and process a specially crafted file...

7.8CVSS7.2AI score0.01654EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2019/06/18 5:34 p.m.•84 views

CVE-2012-6711

A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current locale set in the LCCTYPE environment variable, are printed through the echo built-in function. A local attacker, who can provide data to print through the "echo -e" built-in function, ma...

7.8CVSS7.7AI score0.0051EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2019/05/29 4:26 p.m.•84 views

CVE-2019-9858

Remote code execution was discovered in Horde Groupware Webmail 5.2.22 and 5.2.17. Horde/Form/Type.php contains a vulnerable class that handles image upload in forms. When the HordeFormTypeimage method onSubmit is called on uploads, it invokes the functions getImage and getUpload, which uses...

8.8CVSS9AI score0.19165EPSS
SaveExploits3
Debian CVE
Debian CVE
•added 2019/04/22 3:35 p.m.•84 views

CVE-2015-1340

LXD before version 0.19-0ubuntu5 doUidshiftIntoContainer has an unsafe Chmod call that races against the stat in the Filepath.Walk function. A symbolic link created in that window could cause any file on the system to have any mode of the attacker's choice...

8.1CVSS7.4AI score0.00896EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2019/01/31 6:00 p.m.•84 views

CVE-2019-7282

In NetKit through 0.17, rcp.c in the rcp client allows remote rsh servers to bypass intended access restrictions via the filename of . or an empty filename. The impact is modifying the permissions of the target directory on the client side. This is similar to CVE-2018-20685...

5.9CVSS6.9AI score0.02067EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2019/01/16 7:00 p.m.•84 views

CVE-2019-2525

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualB...

5.6CVSS6.4AI score0.01133EPSS
SaveExploits2
Debian CVE
Debian CVE
•added 2018/09/19 4:00 p.m.•84 views

CVE-2018-17204

An issue was discovered in Open vSwitch OvS 2.7.x through 2.7.6, affecting parsegrouppropntrselectionmethod in lib/ofp-util.c. When decoding a group mod, it validates the group type and command after the whole group mod has been decoded. The OF1.5 decoder, however, tries to use the type and comma...

4.3CVSS5.6AI score0.01911EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2018/08/20 7:00 p.m.•84 views

CVE-2018-1000657

Rust Programming Language Rust standard library version Commit bfa0e1f58acf1c28d500c34ed258f09ae021893e and later; stable release 1.3.0 and later contains a Buffer Overflow vulnerability in std::collections::vecdeque::VecDeque::reserve function that can result in Arbitrary code execution, but no...

7.8CVSS7.7AI score0.0054EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2018/06/26 7:00 p.m.•84 views

CVE-2018-3760

There is an information leak vulnerability in Sprockets. Versions Affected: 4.0.0.beta7 and lower, 3.7.1 and lower, 2.12.4 and lower. Specially crafted requests can be used to access files that exists on the filesystem that is outside an application's root directory, when the Sprockets server is...

7.5CVSS7.6AI score0.26717EPSS
SaveExploits2
Debian CVE
Debian CVE
•added 2018/03/30 7:00 p.m.•84 views

CVE-2018-3728

hoek node module before 4.2.0 and 5.0.x before 5.0.3 suffers from a Modification of Assumed-Immutable Data MAID vulnerability via 'merge' and 'applyToDefaults' functions, which allows a malicious user to modify the prototype of "Object" via proto, causing the addition or modification of an existi...

8.8CVSS8.6AI score0.04269EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2018/03/18 6:00 a.m.•84 views

CVE-2018-8768

In Jupyter Notebook before 5.4.1, a maliciously forged notebook file can bypass sanitization to execute JavaScript in the notebook context. Specifically, invalid HTML is 'fixed' by jQuery after sanitization, making it dangerous...

7.8CVSS7.6AI score0.01072EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2018/03/16 4:00 p.m.•84 views

CVE-2018-1068

A flaw was found in the Linux 4.x kernel's implementation of 32-bit syscall interface for bridging. This allowed a privileged user to arbitrarily write to a limited range of kernel memory...

7.2CVSS6.8AI score0.00448EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2018/03/13 5:00 p.m.•84 views

CVE-2017-1002102

In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using a secret, configMap, projected or downwardAPI volume can trigger deletion of arbitrary files/directories from the nodes where they are running...

7.1CVSS6.3AI score0.00902EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2018/02/13 12:00 p.m.•84 views

CVE-2018-1297

When using Distributed Test only RMI based, Apache JMeter 2.x and 3.x uses an unsecured RMI connection. This could allow an attacker to get Access to JMeterEngine and send unauthorized code...

9.8CVSS9.4AI score0.09911EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2018/01/18 11:00 p.m.•84 views

CVE-2015-9251

Removed by vendor...

6.1CVSS6.9AI score0.29726EPSS
SaveExploits2
Debian CVE
Debian CVE
•added 2017/12/14 6:00 a.m.•84 views

CVE-2017-17682

In ImageMagick 7.0.7-12 Q16, a large loop vulnerability was found in the function ExtractPostscript in coders/wpg.c, which allows attackers to cause a denial of service CPU exhaustion via a crafted wpg image file that triggers a ReadWPGImage call...

7.1CVSS7AI score0.02984EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2017/07/07 5:00 p.m.•84 views

CVE-2017-1000082

systemd v233 and earlier fails to safely parse usernames starting with a numeric digit e.g. "0day", running the service in question with root privileges rather than the user intended...

10CVSS6AI score0.03878EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2017/02/17 7:45 a.m.•84 views

CVE-2017-6056

Removed by vendor...

7.5CVSS7.4AI score0.07486EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2017/01/27 10:01 p.m.•84 views

CVE-2017-3316

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: GUI. Supported versions that are affected are VirtualBox prior to 5.0.32 and prior to 5.1.14. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to...

8.4CVSS8.3AI score0.06961EPSS
SaveExploits4
Debian CVE
Debian CVE
•added 2017/01/12 10:00 p.m.•84 views

CVE-2016-8605

Removed by vendor...

5.3CVSS5.8AI score0.02788EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2016/09/07 7:00 p.m.•84 views

CVE-2016-6316

Cross-site scripting XSS vulnerability in Action View in Ruby on Rails 3.x before 3.2.22.3, 4.x before 4.2.7.1, and 5.x before 5.0.0.1 might allow remote attackers to inject arbitrary web script or HTML via text declared as "HTML safe" and used as attribute values in tag handlers...

6.1CVSS6.3AI score0.03438EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2015/08/24 12:00 a.m.•84 views

CVE-2015-6564

Use-after-free vulnerability in the mmanswerpamfreectx function in monitor.c in sshd in OpenSSH before 7.0 on non-OpenBSD platforms might allow local users to gain privileges by leveraging control of the sshd uid to send an unexpectedly early MONITORREQPAMFREECTX request...

7CVSS7.2AI score0.00604EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2015/02/13 3:00 p.m.•84 views

CVE-2013-2027

Jython 2.2.1 uses the current umask to set the privileges of the class cache files, which allows local users to bypass intended access restrictions via unspecified vectors...

4.6CVSS8.9AI score0.00441EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2014/10/25 9:00 p.m.•84 views

CVE-2014-1927

The shellquote function in python-gnupg 0.3.5 does not properly quote strings, which allows context-dependent attackers to execute arbitrary code via shell metacharacters in unspecified vectors, as demonstrated using "$" command-substitution sequences, a different vulnerability than CVE-2014-1928...

7.5CVSS7.3AI score0.03417EPSS
SaveExploits2
Debian CVE
Debian CVE
•added 2014/03/14 3:00 p.m.•84 views

CVE-2014-0017

The RANDbytes function in libssh before 0.6.3, when forking is enabled, does not properly reset the state of the OpenSSL pseudo-random number generator PRNG, which causes the state to be shared between children processes and allows local users to obtain sensitive information by leveraging a pid...

1.9CVSS6.1AI score0.00356EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2013/12/24 6:00 p.m.•84 views

CVE-2013-4550

Bip before 0.8.9, when running as a daemon, writes SSL handshake errors to an unexpected file descriptor that was previously associated with stderr before stderr has been closed, which allows remote attackers to write to other sockets and have an unspecified impact via a failed SSL handshake, a...

5.1CVSS6.6AI score0.02224EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2013/11/05 8:00 p.m.•84 views

CVE-2013-4497

The XenAPI backend in OpenStack Compute Nova Folsom, Grizzly, and Havana before 2013.2 does not properly apply security groups 1 when resizing an image or 2 during live migration, which allows remote attackers to bypass intended restrictions...

6.4CVSS6.4AI score0.01823EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2013/02/13 4:00 p.m.•84 views

CVE-2013-0208

The boot-from-volume feature in OpenStack Compute Nova Folsom and Essex, when using nova-volumes, allows remote authenticated users to boot from other users' volumes via a volume id in the blockdevicemapping parameter...

6.5CVSS6AI score0.02505EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2010/10/19 7:00 p.m.•84 views

CVE-2010-3495

Removed by vendor...

4.3CVSS7.4AI score0.01347EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2010/08/30 7:00 p.m.•84 views

CVE-2010-2945

The default configuration of SLiM before 1.3.2 places ./ dot slash at the beginning of the defaultpath option, which might allow local users to gain privileges via a Trojan horse program in the current working directory, related to slim.conf and cfg.cpp...

6.9CVSS4.5AI score0.00297EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2010/07/02 7:00 p.m.•84 views

CVE-2009-4924

Removed by vendor...

4.3CVSS6.7AI score0.01354EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2010/06/11 5:28 p.m.•84 views

CVE-2010-1398

Removed by vendor...

9.3CVSS8.4AI score0.08557EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2010/02/18 5:19 p.m.•84 views

CVE-2010-0660

Removed by vendor...

5CVSS6.7AI score0.00756EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2009/10/29 2:00 p.m.•84 views

CVE-2009-3627

The decodeentities function in util.c in HTML-Parser before 3.63 allows context-dependent attackers to cause a denial of service infinite loop via an incomplete SGML numeric character reference, which triggers generation of an invalid UTF-8 character...

4.3CVSS6.2AI score0.01727EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2009/10/23 7:00 p.m.•84 views

CVE-2009-3767

libraries/libldap/tlso.c in OpenLDAP 2.2 and 2.4, and possibly other versions, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the subject's Common Name CN field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers vi...

4.3CVSS8.4AI score0.03273EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2009/07/14 8:16 p.m.•84 views

CVE-2009-1382

Multiple stack-based buffer overflows in mimetex.cgi in mimeTeX, when downloaded before 20090713, allow remote attackers to execute arbitrary code via a TeX file with long 1 picture, 2 circle, or 3 input tags...

10CVSS7.4AI score0.09024EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2004/09/01 4:00 a.m.•84 views

CVE-2003-0023

Removed by vendor...

5CVSS6.9AI score0.0171EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 1976/01/01 12:00 a.m.•84 views

CVE-2022-3638

Removed by vendor...

5.9AI score
SaveExploits0
Debian CVE
Debian CVE
•added 2026/05/10 3:51 a.m.•83 views

CVE-2025-14179

In PHP versions 8.2. before 8.2.31, 8.3. before 8.3.31, 8.4. before 8.4.21, and 8.5. before 8.5.6, the PDO Firebird driver improperly handles NUL bytes when preparing SQL queries. During token-by-token query construction, a string token containing a NUL byte is copied via strncat, which stops at...

9.8CVSS5.8AI score0.00439EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2026/05/08 1:11 p.m.•83 views

CVE-2026-43302

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Set DMA segment size to avoid debug warnings When using V3D rendering with CONFIGDMAAPIDEBUG enabled, the kernel occasionally reports a segment size mismatch. This is because 'maxsegsize' is not set. The kernel defaults ...

5.5CVSS5.7AI score0.00123EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2026/03/19 1:53 p.m.•83 views

CVE-2026-4426

A flaw was found in libarchive. An Undefined Behavior vulnerability exists in the zisofs decompression logic, caused by improper validation of a field pzlog2bs read from ISO9660 Rock Ridge extensions. A remote attacker can exploit this by supplying a specially crafted ISO file. This can lead to...

6.5CVSS5.4AI score0.00305EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2025/11/14 12:00 a.m.•83 views

CVE-2025-63745

A NULL pointer dereference vulnerability was discovered in radare2 6.0.5 and earlier within the info function of binne.c. A crafted binary input can trigger a segmentation fault, leading to a denial of service when the tool processes malformed data...

5.5CVSS5.3AI score0.00149EPSS
SaveExploits0
Total number of security vulnerabilities5000