Lucene search
+L
DebiancveMost viewed

66255 matches found

Debian CVE
Debian CVE
•added 2022/07/22 11:38 p.m.•79 views

CVE-2022-1138

Inappropriate implementation in Web Cursor in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who had compromised the renderer process to obscure the contents of the Omnibox URL bar via a crafted HTML page...

6.5CVSS7.1AI score0.00863EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/07/18 8:14 p.m.•79 views

CVE-2022-34035

HTMLDoc v1.9.12 and below was discovered to contain a heap overflow via enode htmldoc/htmldoc/html.cxx:588...

7.5CVSS7.6AI score0.01545EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/07/13 7:50 p.m.•79 views

CVE-2022-32308

Cross Site Scripting XSS vulnerability in uBlock Origin extension before 1.41.1 allows remote attackers to run arbitrary code via a spoofed 'MessageSender.url' to the browser renderer process...

6.1CVSS6AI score0.0061EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/07/07 12:00 a.m.•79 views

CVE-2022-32207

When curl 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final target file name.In that rename operation, it might accidentally widen the permissions for the target file, leaving the...

9.8CVSS7.4AI score0.07321EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/07/01 3:48 p.m.•79 views

CVE-2022-2281

Removed by vendor...

5.3CVSS6AI score0.00885EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/06/08 10:00 a.m.•79 views

CVE-2022-28614

The aprwrite function in Apache HTTP Server 2.4.53 and earlier may read unintended memory if an attacker can cause the server to reflect very large input using aprwrite or aprputs, such as with modluas r:puts function. Modules compiled and distributed separately from Apache HTTP Server that use t...

5.3CVSS7AI score0.0486EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/05/16 2:55 p.m.•79 views

CVE-2022-1726

Bootstrap Tables XSS vulnerability with Table Export plug-in when exportOptions: htmlContent is true in GitHub repository wenzhixin/bootstrap-table prior to 1.20.2. Disclosing session cookies, disclosing secure session data, exfiltrating data to third-parties...

6.8CVSS0.9AI score0.00758EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/05/10 8:27 p.m.•79 views

CVE-2022-1431

Removed by vendor...

5.3CVSS6.4AI score0.01455EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/05/06 4:32 a.m.•79 views

CVE-2022-30294

Removed by vendor...

8.2AI score
SaveExploits0
Debian CVE
Debian CVE
•added 2022/05/05 3:16 p.m.•79 views

CVE-2021-38443

Eclipse CycloneDDS versions prior to 0.8.0 improperly handle invalid structures, which may allow an attacker to write arbitrary values in the XML parser...

9.8CVSS9.4AI score0.02154EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/05/02 10:24 p.m.•79 views

CVE-2021-42529

XMP Toolkit SDK version 2021.07 and earlier is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file...

9.3CVSS7.8AI score0.03812EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/04/25 12:00 a.m.•79 views

CVE-2022-24792

PJSIP is a free and open source multimedia communication library written in C. A denial-of-service vulnerability affects applications on a 32-bit systems that use PJSIP versions 2.12 and prior to play/read invalid WAV files. The vulnerability occurs when reading WAV file data chunks with length...

7.5CVSS7.2AI score0.01884EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/04/24 8:50 p.m.•79 views

CVE-2022-1451

Out-of-bounds Read in rbinjavaconstantvalueattrnew function in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end 2f the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a...

7.1CVSS7AI score0.008EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/04/19 8:38 p.m.•79 views

CVE-2022-21496

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JNDI. Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1 and 22.0.0.2. Easily exploitable...

5.3CVSS4.9AI score0.02752EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/04/15 12:00 a.m.•79 views

CVE-2022-26498

An issue was discovered in Asterisk through 19.x. When using STIR/SHAKEN, it is possible to download files that are not certificates. These files could be much larger than what one would expect to download, leading to Resource Exhaustion. This is fixed in 16.25.2, 18.11.2, and 19.3.2...

7.5CVSS7.3AI score0.1665EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/04/08 3:33 p.m.•79 views

CVE-2022-27148

Removed by vendor...

5.5CVSS6.5AI score0.00798EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/04/04 7:46 p.m.•79 views

CVE-2022-1121

Removed by vendor...

5.3CVSS6AI score0.01083EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/03/29 12:00 a.m.•79 views

CVE-2022-22941

Removed by vendor...

8.8CVSS7.8AI score0.01346EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/03/28 6:53 p.m.•79 views

CVE-2022-0427

Removed by vendor...

8.8CVSS7.3AI score0.00828EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/03/25 6:03 p.m.•79 views

CVE-2022-1049

A flaw was found in the Pacemaker configuration tool pcs. The pcs daemon was allowing expired accounts, and accounts with expired passwords to login when using PAM authentication. Therefore, unprivileged expired accounts that have been denied access could still login...

8.8CVSS7.7AI score0.01953EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/03/23 7:46 p.m.•79 views

CVE-2021-3748

A use-after-free vulnerability was found in the virtio-net device of QEMU. It could occur when the descriptor's address belongs to the non direct access region, due to numbuffers being set after the virtqueue elem has been unmapped. A malicious guest could use this flaw to crash QEMU, resulting i...

7.5CVSS7AI score0.00522EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/03/14 10:20 p.m.•79 views

CVE-2021-42389

Divide-by-zero in Clickhouse's Delta compression codec when parsing a malicious query. The first byte of the compressed buffer is used in a modulo operation without being checked for 0...

6.5CVSS6.6AI score0.01259EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/03/03 5:21 p.m.•79 views

CVE-2022-26127

A buffer overflow vulnerability exists in FRRouting through 8.1.0 due to missing a check on the input packet length in the babelpacketexamin function in babeld/message.c...

7.8CVSS7.7AI score0.01014EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/02/24 6:50 p.m.•79 views

CVE-2021-4021

A vulnerability was found in Radare2 in versions prior to 5.6.2, 5.6.0, 5.5.4 and 5.5.2. Mapping a huge section filled with zeros of an ELF64 binary for MIPS architecture can lead to uncontrolled resource consumption and DoS...

7.5CVSS7.8AI score0.01046EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/02/16 6:35 p.m.•79 views

CVE-2021-3752

A use-after-free flaw was found in the Linux kernel’s Bluetooth subsystem in the way user calls connect to the socket and disconnect simultaneously due to a race condition. This flaw allows a user to crash the system or escalate their privileges. The highest threat from this vulnerability is to...

7.9CVSS6.7AI score0.01736EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/02/09 10:04 p.m.•79 views

CVE-2021-0127

Insufficient control flow management in some IntelR Processors may allow an authenticated user to potentially enable a denial of service via local access...

5.5CVSS5.5AI score0.00299EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/02/09 10:03 p.m.•79 views

CVE-2022-0534

A vulnerability was found in htmldoc version 1.9.15 where the stack out-of-bounds read takes place in gifgetcode and occurs when opening a malicious GIF file, which can result in a crash segmentation fault...

5.5CVSS5.7AI score0.0094EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/01/20 9:14 p.m.•79 views

CVE-2021-46342

Removed by vendor...

5.5CVSS5.5AI score0.00621EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/01/20 9:14 p.m.•79 views

CVE-2021-46336

Removed by vendor...

5.5CVSS5.5AI score0.00644EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/01/13 3:50 p.m.•79 views

CVE-2022-23134

After the initial setup process, some steps of setup.php file are reachable not only by super-administrators, but by unauthenticated users as well. Malicious actor can pass step checks and potentially change the configuration of Zabbix Frontend...

5.3CVSS3.7AI score0.84657EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/01/10 12:00 a.m.•79 views

CVE-2021-29454

Smarty is a template engine for PHP, facilitating the separation of presentation HTML/CSS from application logic. Prior to versions 3.1.42 and 4.0.2, template authors could run arbitrary PHP code by crafting a malicious math string. If a math string was passed through as user provided data to the...

8.8CVSS6.4AI score0.01927EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/12/30 12:00 a.m.•79 views

CVE-2021-4183

Crash in the pcapng file parser in Wireshark 3.6.0 allows denial of service via crafted capture file...

5.5CVSS3.5AI score0.01479EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2021/12/16 4:37 a.m.•79 views

CVE-2021-45100

The ksmbd server through 3.4.2, as used in the Linux kernel through 5.15.8, sometimes communicates in cleartext even though encryption has been enabled. This occurs because it sets the SMB2GLOBALCAPENCRYPTION flag when using the SMB 3.1.1 protocol, which is a violation of the SMB protocol...

7.5CVSS7.2AI score0.00905EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/11/08 9:45 p.m.•79 views

CVE-2021-41253

Zydis is an x86/x86-64 disassembler library. Users of Zydis versions v3.2.0 and older that use the string functions provided in zycore in order to append untrusted user data to the formatter buffer within their custom formatter hooks can run into heap buffer overflows. Older versions of Zydis...

8.1CVSS1.3AI score0.01864EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2021/08/23 7:34 p.m.•79 views

CVE-2021-22253

Removed by vendor...

5.4CVSS6AI score0.00818EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/08/17 8:17 p.m.•79 views

CVE-2021-39247

Zint Barcode Generator before 2.10.0 has a one-byte buffer over-read, related to islastsingleascii in code1.c, and rsencodeuint in reedsol.c...

6.5CVSS1.9AI score0.00922EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2021/07/07 1:22 p.m.•79 views

CVE-2021-22233

Removed by vendor...

4.3CVSS5.8AI score0.00812EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2021/06/24 1:20 p.m.•79 views

CVE-2021-24000

A race condition with requestPointerLock and setTimeout could have resulted in a user interacting with one tab when they believed they were on a separate tab. In conjunction with certain elements such as input type="file" this could have led to an attack where a user was confused about the origin...

3.1CVSS6.9AI score0.00605EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/06/15 6:59 p.m.•79 views

CVE-2021-33622

Removed by vendor...

9.8CVSS7.3AI score0.01258EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/06/11 3:49 p.m.•79 views

CVE-2021-22901

curl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed memory being used when a TLS 1.3 session ticket arrives over a connection. A malicious server can use this in rare unfortunate circumstances to potentially reach remote code execution in the client...

8.1CVSS8.7AI score0.60122EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2021/06/10 10:13 p.m.•79 views

CVE-2020-23312

Removed by vendor...

7.5CVSS7.6AI score0.01083EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2021/06/08 3:13 p.m.•79 views

CVE-2021-22215

Removed by vendor...

7.5CVSS5.8AI score0.00797EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/06/02 1:22 p.m.•79 views

CVE-2020-35503

A NULL pointer dereference flaw was found in the megasas-gen2 SCSI host bus adapter emulation of QEMU in versions before and including 6.0. This issue occurs in the megasascommandcancelled callback function while dropping a SCSI request. This flaw allows a privileged guest user to crash the QEMU...

6CVSS5.6AI score0.00275EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/05/25 6:25 p.m.•79 views

CVE-2021-32640

ws is an open source WebSocket client and server library for Node.js. A specially crafted value of the Sec-Websocket-Protocol header can be used to significantly slow down a ws server. The vulnerability has been fixed in [email protected]...

5.3CVSS6.2AI score0.02821EPSS
SaveExploits2
Debian CVE
Debian CVE
•added 2021/05/25 5:55 p.m.•79 views

CVE-2020-20448

FFmpeg 4.1.3 is affected by a Divide By Zero issue via libavcodec/ratecontrol.c, which allows a remote malicious user to cause a Denial of Service...

6.5CVSS5.3AI score0.00915EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/05/13 3:12 p.m.•79 views

CVE-2021-32919

An issue was discovered in Prosody before 0.11.9. The undocumented dialbackwithoutdialback option in moddialback enables an experimental feature for server-to-server authentication. It does not correctly authenticate remote server certificates, allowing a remote server to impersonate another serv...

7.5CVSS7.4AI score0.01398EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/03/31 1:41 p.m.•79 views

CVE-2021-23983

By causing a transition on a parent node by removing a CSS rule, an invalid property for a marker could have been applied, resulting in memory corruption and a potentially exploitable crash. This vulnerability affects Firefox 87...

6.5CVSS8.7AI score0.00736EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/02/26 9:31 p.m.•79 views

CVE-2021-27799

eanleadingzeroes in backend/upcean.c in Zint Barcode Generator 2.9.1 has a stack-based buffer overflow that is reachable from the C API through an application that includes the Zint Barcode Generator library code...

7.5CVSS3.1AI score0.02365EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2021/02/26 2:55 a.m.•79 views

CVE-2020-24455

Missing initialization of a variable in the TPM2 source may allow a privileged user to potentially enable an escalation of privilege via local access. This affects tpm2-tss before 3.0.1 and before 2.4.3...

6.7CVSS6.5AI score0.00584EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/02/23 5:21 p.m.•79 views

CVE-2021-20220

A flaw was found in Undertow. A regression in the fix for CVE-2020-10687 was found. HTTP request smuggling related to CVE-2017-2666 is possible against HTTP/1.x and HTTP/2 due to permitting invalid characters in an HTTP request. This flaw allows an attacker to poison a web-cache, perform an XSS...

5.8CVSS6.2AI score0.01119EPSS
SaveExploits0
Total number of security vulnerabilities5000