Lucene search
+L
DebiancveMost viewed

66259 matches found

Debian CVE
Debian CVE
•added 2023/04/03 12:00 a.m.•81 views

CVE-2022-36440

A reachable assertion was found in Frrouting frr-bgpd 8.3.0 in the peekforas4capability function. Attackers can maliciously construct BGP open packets and send them to BGP peers running frr-bgpd, resulting in DoS...

7.5CVSS7.4AI score0.01638EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2023/03/29 12:00 a.m.•81 views

CVE-2023-0664

A flaw was found in the QEMU Guest Agent service for Windows. A local unprivileged user may be able to manipulate the QEMU Guest Agent's Windows installer via repair custom actions to elevate their privileges on the system...

7.8CVSS6.5AI score0.00306EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2023/03/06 12:00 a.m.•81 views

CVE-2022-4134

Removed by vendor...

2.8CVSS4.8AI score0.00326EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2023/02/23 12:00 a.m.•81 views

CVE-2023-23918

A privilege escalation vulnerability exists in Node.js 19.6.1, 18.14.1, 16.19.1 and 14.21.3 that made it possible to bypass the experimental Permissions https://nodejs.org/api/permissions.html feature in Node.js and access non authorized modules by using process.mainModule.require. This only...

7.5CVSS7.7AI score0.02023EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2023/01/27 12:00 a.m.•81 views

CVE-2020-36658

In Apache::Session::LDAP before 0.5, validity of the X.509 certificate is not checked by default when connecting to remote LDAP backends, because the default configuration of the Net::LDAPS module for Perl is used. NOTE: this can, for example, be fixed in conjunction with the CVE-2020-16093 fix...

8.1CVSS7.7AI score0.00441EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2023/01/24 8:36 p.m.•81 views

CVE-2023-23612

OpenSearch is an open source distributed and RESTful search engine. OpenSearch uses JWTs to store role claims obtained from the Identity Provider IdP when the authentication backend is SAML or OpenID Connect. There is an issue in how those claims are processed from the JWTs where the leading and...

8.8CVSS8.4AI score0.00796EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2023/01/10 12:00 a.m.•81 views

CVE-2023-22899

Zip4j through 2.11.2, as used in Threema and other products, does not always check the MAC when decrypting a ZIP archive...

5.9CVSS1.8AI score0.00619EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/12/22 12:00 a.m.•81 views

CVE-2022-46883

Mozilla developers Gabriele Svelto, Yulia Startsev, Andrew McCreight and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 106. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run...

8.8CVSS8.7AI score0.00568EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/11/18 12:00 a.m.•81 views

CVE-2022-34667

NVIDIA CUDA Toolkit SDK contains a stack-based buffer overflow vulnerability in cuobjdump, where an unprivileged remote attacker could exploit this buffer overflow condition by persuading a local user to download a specially crafted corrupted file and execute cuobjdump against it locally, which m...

4.4CVSS5AI score0.00417EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/11/09 12:00 a.m.•81 views

CVE-2022-3413

Removed by vendor...

4.3CVSS5.8AI score0.00471EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/09/09 9:48 p.m.•81 views

CVE-2021-37819

PDF Labs pdftk-java v3.2.3 was discovered to contain an infinite loop via the component /text/pdf/PdfReader.java...

7.5CVSS7.5AI score0.00814EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/09/07 9:55 p.m.•81 views

CVE-2022-36083

JOSE is "JSON Web Almost Everything" - JWA, JWS, JWE, JWT, JWK, JWKS with no dependencies using runtime's native crypto in Node.js, Browser, Cloudflare Workers, Electron, and Deno. The PBKDF2-based JWE key management algorithms expect a JOSE Header Parameter named p2c PBES2 Count, which determine...

5.3CVSS6.1AI score0.01525EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/08/26 3:25 p.m.•81 views

CVE-2021-3864

A flaw was found in the way the dumpable flag setting was handled when certain SUID binaries executed its descendants. The prerequisite is a SUID binary that sets real UID equal to effective UID, and real GID equal to effective GID. The descendant will then have a dumpable value set to 1. As a...

7CVSS7AI score0.00769EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/08/23 12:00 a.m.•81 views

CVE-2021-3996

A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This flaw allows a local user on a vulnerable system to unmount other users' filesystems that are either world-writable themselves like /tmp or mounted in a...

5.5CVSS6AI score0.00634EPSS
SaveExploits3
Debian CVE
Debian CVE
•added 2022/07/27 9:16 p.m.•81 views

CVE-2022-1858

Out of bounds read in DevTools in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to perform an out of bounds memory read via specific user interaction...

6.5CVSS7.7AI score0.00787EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/07/26 9:30 p.m.•81 views

CVE-2022-1364

Type confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS9.4AI score0.1372EPSS
SaveExploits2
Debian CVE
Debian CVE
•added 2022/07/22 11:36 p.m.•81 views

CVE-2022-1128

Inappropriate implementation in Web Share API in Google Chrome on Windows prior to 100.0.4896.60 allowed an attacker on the local network segment to leak cross-origin data via a crafted HTML page...

6.5CVSS7.2AI score0.00687EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/07/22 12:00 a.m.•81 views

CVE-2022-2327

iouring use workflags to determine which identity need to grab from the calling process to make sure it is consistent with the calling process when executing IORINGOP. Some operations are missing some types, which can lead to incorrect reference counts which can then lead to a double free. We...

7.8CVSS5.7AI score0.0027EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/06/27 8:45 p.m.•81 views

CVE-2022-31088

LDAP Account Manager LAM is a webfrontend for managing entries e.g. users, groups, DHCP settings stored in an LDAP directory. In versions prior to 8.0 the user name field at login could be used to enumerate LDAP data. This is only the case for LDAP search configuration. This issue has been fixed ...

6.5CVSS6AI score0.01236EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/06/09 8:15 p.m.•81 views

CVE-2022-21499

KGDB and KDB allow read and write access to kernel memory, and thus should be restricted during lockdown. An attacker with access to a serial port could trigger the debugger so it is important that the debugger respect the lockdown mode when/if it is triggered. CVSS 3.1 Base Score 6.7...

6.7CVSS6AI score0.00619EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/06/02 1:02 p.m.•81 views

CVE-2022-29788

libmobi before v0.10 contains a NULL pointer dereference via the component mobibuffergetpointer. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted mobi file...

6.5CVSS4AI score0.00836EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/05/19 5:11 p.m.•81 views

CVE-2022-1413

Removed by vendor...

7.5CVSS7.1AI score0.00912EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/05/19 12:00 a.m.•81 views

CVE-2022-1785

Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.4977...

7.8CVSS1.3AI score0.00494EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/05/17 12:00 a.m.•81 views

CVE-2022-28184

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape, where an unprivileged regular user can access administrator- privileged registers, which may lead to denial of service, information disclosure, and data...

7.8CVSS7.4AI score0.00293EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/05/06 8:05 p.m.•81 views

CVE-2021-23792

The package com.twelvemonkeys.imageio:imageio-metadata before 3.7.1 are vulnerable to XML External Entity XXE Injection due to an insecurely initialized XML parser for reading XMP Metadata. An attacker can exploit this vulnerability if they are able to supply a file e.g. when an online profile...

9.8CVSS9.6AI score0.0105EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/04/15 12:00 a.m.•81 views

CVE-2022-26498

An issue was discovered in Asterisk through 19.x. When using STIR/SHAKEN, it is possible to download files that are not certificates. These files could be much larger than what one would expect to download, leading to Resource Exhaustion. This is fixed in 16.25.2, 18.11.2, and 19.3.2...

7.5CVSS7.3AI score0.1665EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/04/14 6:15 a.m.•81 views

CVE-2022-1350

A vulnerability classified as problematic was found in GhostPCL 9.55.0. This vulnerability affects the function chunkfreeobject of the file gsmchunk.c. The manipulation with a malicious file leads to a memory corruption. The attack can be initiated remotely but requires user interaction. The...

7.8CVSS7.5AI score0.0084EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/04/12 7:52 p.m.•81 views

CVE-2022-27419

rtl433 21.12 was discovered to contain a stack overflow in the function acurite00275rmdecode at /devices/acurite.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file...

5.5CVSS5.3AI score0.00639EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/04/11 7:38 p.m.•81 views

CVE-2022-1193

Removed by vendor...

4.3CVSS5.8AI score0.00946EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/04/05 12:25 a.m.•81 views

CVE-2022-0802

Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 99.0.4844.51 allowed a remote attacker to hide the contents of the Omnibox URL bar via a crafted HTML page...

6.5CVSS7AI score0.00898EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/04/05 12:25 a.m.•81 views

CVE-2022-0795

Type confusion in Blink Layout in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS9.1AI score0.00997EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/04/05 12:00 a.m.•81 views

CVE-2022-26358

IOMMU: RMRR VT-d and unity map AMD-Vi handling issues This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Certain PCI devices in a system might be assigned Reserved Memory Regions specified via Reserved Memory Region...

7.8CVSS1.4AI score0.00358EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/04/04 7:46 p.m.•81 views

CVE-2022-1185

Removed by vendor...

6.5CVSS6.9AI score0.01328EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/03/26 3:40 a.m.•81 views

CVE-2022-1071

User after free in mrbvmexec in GitHub repository mruby/mruby prior to 3.2...

8.2CVSS7.9AI score0.0092EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/03/23 2:05 p.m.•81 views

CVE-2021-44040

Improper Input Validation vulnerability in request line parsing of Apache Traffic Server allows an attacker to send invalid requests. This issue affects Apache Traffic Server 8.0.0 to 8.1.3 and 9.0.0 to 9.1.1...

7.5CVSS7.4AI score0.01991EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/03/23 12:00 a.m.•81 views

CVE-2021-28275

A Denial of Service vulnerability exists in jhead 3.04 and 3.05 due to a wild address read in the Get16u function in exif.c in will cause segmentation fault via a craftedfile...

5.5CVSS5.2AI score0.00664EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/03/21 12:00 a.m.•81 views

CVE-2022-1035

Removed by vendor...

5.5CVSS6AI score0.00824EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/03/09 7:30 p.m.•81 views

CVE-2022-24917

An authenticated user can create a link with reflected Javascript code inside it for services’ page and send it to other users. The payload can be executed only with a known CSRF token value of the victim, which is changed periodically and is difficult to predict. Malicious code has access to all...

4.4CVSS4.6AI score0.01222EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/03/09 4:32 p.m.•81 views

CVE-2022-0433

A NULL pointer dereference flaw was found in the Linux kernel's BPF subsystem in the way a user triggers the mapgetnextkey function of the BPF bloom filter. This flaw allows a local user to crash the system. This flaw affects Linux kernel versions prior to 5.17-rc1...

5.5CVSS6.6AI score0.00292EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/03/05 9:30 a.m.•81 views

CVE-2022-0849

Use After Free in rreggetnameidx in GitHub repository radareorg/radare2 prior to 5.6.6...

7.3CVSS6.4AI score0.0066EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/03/03 5:22 p.m.•81 views

CVE-2022-26128

A buffer overflow vulnerability exists in FRRouting through 8.1.0 due to a wrong check on the input packet length in the babelpacketexamin function in babeld/message.c...

7.8CVSS7.7AI score0.00981EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/03/02 9:00 p.m.•81 views

CVE-2022-0675

In certain situations it is possible for an unmanaged rule to exist on the target system that has the same comment as the rule specified in the manifest. This could allow for unmanaged rules to exist on the target system and leave the system in an unsafe state...

9.8CVSS9.4AI score0.00918EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/03/02 12:00 a.m.•81 views

CVE-2021-3772

A flaw was found in the Linux SCTP stack. A blind attacker may be able to kill an existing SCTP association through invalid chunks if the attacker knows the IP-addresses and port numbers being used and the attacker can send packets with spoofed IP addresses...

6.5CVSS6.5AI score0.0124EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/02/24 6:27 p.m.•81 views

CVE-2022-0546

A missing bounds check in the image loader used in Blender 3.x and 2.93.8 leads to out-of-bounds heap access, allowing an attacker to cause denial of service, memory corruption or potentially code execution...

7.8CVSS7.9AI score0.01174EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/02/23 2:05 a.m.•81 views

CVE-2022-0717

Out-of-bounds Read in GitHub repository mruby/mruby prior to 3.2...

9.1CVSS1.6AI score0.00921EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/02/21 7:03 p.m.•81 views

CVE-2021-44571

Removed by vendor...

6.7AI score
SaveExploits0
Debian CVE
Debian CVE
•added 2022/02/20 12:00 a.m.•81 views

CVE-2022-0685

Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4418...

8.4CVSS8.2AI score0.0178EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/02/14 9:47 p.m.•81 views

CVE-2021-45005

Artifex MuJS v1.1.3 was discovered to contain a heap buffer overflow which is caused by conflicting JumpList of nested try/finally statements...

9.8CVSS8.9AI score0.01456EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/02/09 10:04 p.m.•81 views

CVE-2021-33139

Removed by vendor...

5.7CVSS5.9AI score0.00491EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/02/09 10:04 p.m.•81 views

CVE-2021-0174

Removed by vendor...

6.5CVSS6AI score0.00515EPSS
SaveExploits0
Total number of security vulnerabilities5000