Lucene search
+L
DebiancveMost viewed

66259 matches found

Debian CVE
Debian CVE
•added 2022/02/24 6:27 p.m.•81 views

CVE-2022-0546

A missing bounds check in the image loader used in Blender 3.x and 2.93.8 leads to out-of-bounds heap access, allowing an attacker to cause denial of service, memory corruption or potentially code execution...

7.8CVSS7.9AI score0.01174EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/02/23 2:05 a.m.•81 views

CVE-2022-0717

Out-of-bounds Read in GitHub repository mruby/mruby prior to 3.2...

9.1CVSS1.6AI score0.00921EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/02/21 7:03 p.m.•81 views

CVE-2021-44571

Removed by vendor...

6.7AI score
SaveExploits0
Debian CVE
Debian CVE
•added 2022/02/20 12:00 a.m.•81 views

CVE-2022-0685

Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4418...

8.4CVSS8.2AI score0.0178EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/02/14 9:47 p.m.•81 views

CVE-2021-45005

Artifex MuJS v1.1.3 was discovered to contain a heap buffer overflow which is caused by conflicting JumpList of nested try/finally statements...

9.8CVSS8.9AI score0.01456EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/02/09 10:04 p.m.•81 views

CVE-2021-33139

Removed by vendor...

5.7CVSS5.9AI score0.00491EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/02/09 10:04 p.m.•81 views

CVE-2021-0174

Removed by vendor...

6.5CVSS6AI score0.00515EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/02/09 10:04 p.m.•81 views

CVE-2021-0167

Removed by vendor...

6.7CVSS6.6AI score0.0024EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/02/09 10:04 p.m.•81 views

CVE-2021-0076

Removed by vendor...

5.5CVSS5.4AI score0.00264EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/02/04 10:32 p.m.•81 views

CVE-2022-23593

Tensorflow is an Open Source Machine Learning Framework. The simplifyBroadcast function in the MLIR-TFRT infrastructure in TensorFlow is vulnerable to a segfault hence, denial of service, if called with scalar shapes. If all shapes are scalar, then maxRank is 0, so we build an empty SmallVector...

7.5CVSS7AI score0.0087EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/02/01 12:13 p.m.•81 views

CVE-2021-43848

h2o is an open source http server. In code prior to the 8c0eca3 commit h2o may attempt to access uninitialized memory. When receiving QUIC frames in certain order, HTTP/3 server-side implementation of h2o can be misguided to treat uninitialized memory as HTTP/3 frames that have been received. Whe...

7.4CVSS6.2AI score0.02667EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/01/20 10:16 p.m.•81 views

CVE-2022-22888

Removed by vendor...

7.8CVSS7.7AI score0.00742EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/01/17 1:35 p.m.•81 views

CVE-2022-0240

mruby is vulnerable to NULL Pointer Dereference...

7.5CVSS2.6AI score0.00963EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/01/14 12:00 a.m.•81 views

CVE-2022-23218

The deprecated compatibility function svcunixcreate in the sunrpc module of the GNU C Library aka glibc through 2.34 copies its path argument on the stack without validating its length, which may result in a buffer overflow, potentially resulting in a denial of service or if an application is not...

9.8CVSS8.6AI score0.04729EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/01/06 5:55 a.m.•81 views

CVE-2022-22707

In lighttpd 1.4.46 through 1.4.63, the modextforwardForwarded function of the modextforward plugin has a stack-based buffer overflow 4 bytes representing -1, as demonstrated by remote denial of service daemon crash in a non-default configuration. The non-default configuration requires handling of...

5.9CVSS5.9AI score0.08969EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2021/12/30 1:40 p.m.•81 views

CVE-2021-43861

Mermaid is a Javascript based diagramming and charting tool that uses Markdown-inspired text definitions and a renderer to create and modify complex diagrams. Prior to version 8.13.8, malicious diagrams can run javascript code at diagram readers' machines. Users should upgrade to version 8.13.8 t...

7.2CVSS6.2AI score0.00912EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/12/28 12:02 a.m.•81 views

CVE-2021-45908

Removed by vendor...

7.8CVSS7.8AI score0.0073EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2021/12/16 4:07 a.m.•81 views

CVE-2021-45098

An issue was discovered in Suricata before 6.0.4. It is possible to bypass/evade any HTTP-based signature by faking an RST TCP packet with random TCP options of the md5header from the client side. After the three-way handshake, it's possible to inject an RST ACK with a random TCP md5header option...

7.5CVSS7.5AI score0.01824EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2021/12/15 6:37 a.m.•81 views

CVE-2021-40827

Clementine Music Player through 1.3.1 when a GLib 2.0.0 DLL is used is vulnerable to a Read Access Violation on Block Data Move, affecting the MP3 file parsing functionality at memcpy+0x265. The vulnerability is triggered when the user opens a crafted MP3 file or loads a remote stream URL that is...

7.8CVSS7.9AI score0.01181EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2021/11/15 12:00 a.m.•81 views

CVE-2021-42373

A NULL pointer dereference in Busybox's man applet leads to denial of service when a section name is supplied but no page argument is given...

5.5CVSS6.4AI score0.00377EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/10/08 9:30 p.m.•81 views

CVE-2021-37968

Inappropriate implementation in Background Fetch API in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

4.3CVSS5.8AI score0.01278EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/10/05 1:43 p.m.•81 views

CVE-2021-39889

Removed by vendor...

4.3CVSS5.8AI score0.00833EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/10/01 3:42 p.m.•81 views

CVE-2021-40926

Cross-site scripting XSS vulnerability in demos/demo.mysqli.php in getID3 1.X and v2.0.0-beta allows remote attackers to inject arbitrary web script or HTML via the showtagfiles parameter...

6.1CVSS6.1AI score0.01008EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2021/09/30 1:12 p.m.•81 views

CVE-2021-41720

Removed by vendor...

7.5AI score
SaveExploits0
Debian CVE
Debian CVE
•added 2021/09/23 8:10 a.m.•81 views

CVE-2021-33035

Apache OpenOffice opens dBase/DBF documents and shows the contents as spreadsheets. DBF are database files with data organized in fields. When reading DBF data the size of certain fields is not checked: the data is just copied into local variables. A carefully crafted document could overflow the...

7.8CVSS7.8AI score0.50563EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/09/20 5:05 p.m.•81 views

CVE-2020-8561

A security issue was discovered in Kubernetes where actors that control the responses of MutatingWebhookConfiguration or ValidatingWebhookConfiguration requests are able to redirect kube-apiserver requests to private networks of the apiserver. If that user can view kube-apiserver logs when the lo...

4.1CVSS4.5AI score0.021EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/09/16 3:10 p.m.•81 views

CVE-2021-39214

mitmproxy is an interactive, SSL/TLS-capable intercepting proxy. In mitmproxy 7.0.2 and below, a malicious client or server is able to perform HTTP request smuggling attacks through mitmproxy. This means that a malicious client/server could smuggle a request/response through mitmproxy as part of...

9.8CVSS9.4AI score0.01055EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/09/16 12:00 a.m.•81 views

CVE-2020-21529

fig2dev 3.2.7b contains a stack buffer overflow in the bezierspline function in genepic.c...

5.5CVSS6AI score0.0109EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2021/09/09 9:35 p.m.•81 views

CVE-2021-39201

WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Impact The issue allows an authenticated but low-privileged user like contributor/author to execute XSS in the editor. This bypasses the restrictions imposed on users who do n...

7.6CVSS5.8AI score0.01494EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/08/23 12:00 a.m.•81 views

CVE-2020-36478

An issue was discovered in Mbed TLS before 2.25.0 and before 2.16.9 LTS and before 2.7.18 LTS. A NULL algorithm parameters entry looks identical to an array of REAL size zero and thus the certificate is considered valid. However, if the parameters do not match in any way, then the certificate...

7.5CVSS7.4AI score0.0118EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2021/08/17 7:12 p.m.•81 views

CVE-2021-29990

Mozilla developers and community members reported memory safety bugs present in Firefox 90. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox 91...

8.8CVSS10AI score0.01009EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/06/24 1:25 p.m.•81 views

CVE-2021-23996

By utilizing 3D CSS in conjunction with Javascript, content could have been rendered outside the webpage's viewport, resulting in a spoofing attack that could have been used for phishing or other attacks on a user. This vulnerability affects Firefox 88...

6.5CVSS8AI score0.00719EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/05/25 5:55 p.m.•81 views

CVE-2020-20448

FFmpeg 4.1.3 is affected by a Divide By Zero issue via libavcodec/ratecontrol.c, which allows a remote malicious user to cause a Denial of Service...

6.5CVSS5.3AI score0.00915EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/05/14 10:57 p.m.•81 views

CVE-2019-25044

The block subsystem in the Linux kernel before 5.2 has a use-after-free that can lead to arbitrary code execution in the kernel context and privilege escalation, aka CID-c3e2219216c9. This is related to blkmqfreerqs and blkcleanupqueue...

7.8CVSS7.7AI score0.00645EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2021/03/31 1:41 p.m.•81 views

CVE-2021-23986

A malicious extension with the 'search' permission could have installed a new search engine whose favicon referenced a cross-origin URL. The response to this cross-origin request could have been read by the extension, allowing a same-origin policy bypass by the extension, which should not have...

6.5CVSS8.1AI score0.00436EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/02/25 8:29 a.m.•81 views

CVE-2020-36254

scp.c in Dropbear before 2020.79 mishandles the filename of . or an empty filename, a related issue to CVE-2018-20685...

8.1CVSS6.8AI score0.01554EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/01/13 3:33 p.m.•81 views

CVE-2021-3139

In Open-iSCSI tcmu-runner 1.3.x, 1.4.x, and 1.5.x through 1.5.2, xcopylocateudev in tcmurcmdhandler.c lacks a check for transport-layer restrictions, allowing remote attackers to read or write files via directory traversal in an XCOPY request. For example, an attack can occur over a network if th...

8.1CVSS7AI score0.02649EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/01/12 8:06 a.m.•81 views

CVE-2020-35654

In Pillow before 8.1.0, TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode...

8.8CVSS7.4AI score0.0178EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2020/12/10 10:10 p.m.•81 views

CVE-2020-26268

In affected versions of TensorFlow the tf.rawops.ImmutableConst operation returns a constant tensor created from a memory mapped file which is assumed immutable. However, if the type of the tensor is not an integral type, the operation crashes the Python interpreter as it tries to write to the...

4.4CVSS7AI score0.00212EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2020/11/06 7:35 a.m.•81 views

CVE-2020-26521

The JWT library in NATS nats-server before 2.1.9 allows a denial of service a nil dereference in Go code...

7.5CVSS7.3AI score0.02116EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2020/10/22 12:27 p.m.•81 views

CVE-2020-27638

receive.c in fastd before v21 allows denial of service assertion failure when receiving packets with an invalid type code...

7.5CVSS7.4AI score0.02362EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2020/10/21 2:04 p.m.•81 views

CVE-2020-14878

Removed by vendor...

8CVSS7AI score0.01199EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2020/10/06 1:33 p.m.•81 views

CVE-2020-25641

A flaw was found in the Linux kernel's implementation of biovecs in versions before 5.9-rc7. A zero-length biovec request issued by the block subsystem could cause the kernel to enter an infinite loop, causing a denial of service. This flaw allows a local attacker with basic privileges to issue...

5.5CVSS6.1AI score0.00385EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2020/09/15 6:51 p.m.•81 views

CVE-2020-14331

A flaw was found in the Linux kernel’s implementation of the invert video code on VGA consoles when a local attacker attempts to resize the console, calling an ioctl VTRESIZE, which causes an out-of-bounds write to occur. This flaw allows a local user with access to the VGA console to crash the...

7.2CVSS7AI score0.00563EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2020/09/11 4:43 a.m.•81 views

CVE-2019-20917

An issue was discovered in InspIRCd 2 before 2.0.28 and 3 before 3.3.0. The mysql module contains a NULL pointer dereference when built against mariadb-connector-c 3.0.5 or newer. When combined with the sqlauth or sqloper modules, this vulnerability can be used for remote crashing of an InspIRCd...

6.8CVSS5.7AI score0.02787EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2020/09/11 12:00 a.m.•81 views

CVE-2020-14330

An Improper Output Neutralization for Logs flaw was found in Ansible when using the uri module, where sensitive data is exposed to content and json output. This flaw allows an attacker to access the logs or outputs of performed tasks to read keys used in playbooks from other users within the uri...

5.5CVSS6.9AI score0.00573EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2020/08/27 3:31 p.m.•81 views

CVE-2020-14415

osswrite in audio/ossaudio.c in QEMU before 5.0.0 mishandles a buffer position...

3.3CVSS6.1AI score0.00453EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2020/08/21 8:34 p.m.•81 views

CVE-2020-8189

A cross-site scripting error in Nextcloud Desktop client 2.6.4 allowed to present any html including local links when responding with invalid data on the login attempt...

5.4CVSS5.1AI score0.01401EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2020/07/13 9:02 p.m.•81 views

CVE-2020-14300

The docker packages version docker-1.13.1-108.git4ef4b30.el7 as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 https://access.redhat.com/errata/RHBA-2020:0053 included an incorrect version of runc that was missing multiple bug and security fixes. One of the fixes regressed in...

8.8CVSS7.5AI score0.00382EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2020/07/07 12:25 p.m.•81 views

CVE-2020-15564

An issue was discovered in Xen through 4.13.x, allowing Arm guest OS users to cause a hypervisor crash because of a missing alignment check in VCPUOPregistervcpuinfo. The hypercall VCPUOPregistervcpuinfo is used by a guest to register a shared region with the hypervisor. The region will be mapped...

6.5CVSS7.1AI score0.00398EPSS
SaveExploits0
Total number of security vulnerabilities5000