Lucene search
+L
DebiancveMost viewed

61459 matches found

Debian CVE
Debian CVE
•added 2024/05/09 4:47 p.m.•69 views

CVE-2024-33876

HDF5 Library through 1.14.3 has a heap buffer overflow in H5Spointdeserialize in H5Spoint.c...

5.7CVSS6.7AI score0.00227EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2024/05/06 7:21 p.m.•69 views

CVE-2024-33599

nscd: Stack-based buffer overflow in netgroup cache If the Name Service Cache Daemon's nscd fixed size cache is exhausted by client requests then a subsequent client request for netgroup data may result in a stack-based buffer overflow. This flaw was introduced in glibc 2.15 when the cache was...

8.1CVSS7.3AI score0.0131EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2024/04/26 12:0 a.m.•69 views

CVE-2024-33258

Removed by vendor...

7.1CVSS6.9AI score0.003EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2024/04/04 8:20 a.m.•69 views

CVE-2024-26784

In the Linux kernel, the following vulnerability has been resolved: pmdomain: arm: Fix NULL dereference on scmiperfdomain removal On unloading of the scmiperfdomain module got the below splat, when in the DT provided to the system under test the 'power-domain-cells' property was missing. Indeed,...

5.5CVSS5.3AI score0.00195EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2024/04/02 6:8 a.m.•69 views

CVE-2024-26657

In the Linux kernel, the following vulnerability has been resolved: drm/sched: fix null-ptr-deref in init entity The bug can be triggered by sending an amdgpucswaitioctl to the AMDGPU DRM driver on any ASICs with valid context. The bug was reported by Joonkyo Jung . For example the following code...

5.5CVSS6.4AI score0.00228EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2024/03/05 11:18 a.m.•69 views

CVE-2022-48629

In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - ensure buffer for generate is completely filled The generate function in struct rngalg expects that the destination buffer is completely filled if the function returns 0. qcomrngread can run into a situation...

5.5CVSS5.3AI score0.00378EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2024/02/29 10:31 p.m.•69 views

CVE-2021-47016

In the Linux kernel, the following vulnerability has been resolved: m68k: mvme147,mvme16x: Don't wipe PCC timer config bits Don't clear the timer 1 configuration bits when clearing the interrupt flag and counter overflow. As Michael reported, "This results in no timer interrupts being delivered...

5.5CVSS4.8AI score0.00222EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2024/02/22 4:13 p.m.•69 views

CVE-2024-26587

In the Linux kernel, the following vulnerability has been resolved: net: netdevsim: don't try to destroy PHC on VFs PHC gets initialized in nsiminitnetdevsim, which is only called if nsimdevportispf. Create a counterpart of nsiminitnetdevsim and move the mockphcdestroy there. This fixes a crash...

5.5CVSS7AI score0.00226EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2024/01/05 4:34 p.m.•69 views

CVE-2023-34327

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. AMD CPUs since 2014 have extensions to normal x86 debugging functionality. Xen supports guests using these extensions. Unfortunately there are errors in Xen's handling of...

5.5CVSS8.4AI score0.00256EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2023/12/18 9:19 a.m.•69 views

CVE-2023-32728

The Zabbix Agent 2 item key smart.disk.get does not sanitize its parameters before passing them to a shell command resulting possible vulnerability for remote code execution...

9.8CVSS8.2AI score0.00753EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2023/12/15 4:3 p.m.•69 views

CVE-2023-5512

Removed by vendor...

5.7CVSS6.2AI score0.00494EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2023/12/12 7:42 p.m.•69 views

CVE-2023-41337

h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. In version 2.3.0-beta2 and prior, when h2o is configured to listen to multiple addresses or ports with each of them using different backend servers managed by multiple entities, a malicious backend entity that also has the...

6.7CVSS6.5AI score0.00181EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2023/10/24 12:47 p.m.•69 views

CVE-2023-5727

The executable file warning was not presented when downloading .msix, .msixbundle, .appx, and .appxbundle files, which can run commands on a user's computer. Note: This issue only affected Windows operating systems. Other operating systems are unaffected. This vulnerability affects Firefox 119,...

6.5CVSS8AI score0.00863EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2023/09/01 10:30 a.m.•69 views

CVE-2023-4378

Removed by vendor...

5.5CVSS5.8AI score0.00429EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2023/09/01 12:0 a.m.•69 views

CVE-2023-28366

The broker in Eclipse Mosquitto 1.3.2 through 2.x before 2.0.16 has a memory leak that can be abused remotely when a client sends many QoS 2 messages with duplicate message IDs, and fails to respond to PUBREC commands. This occurs because of mishandling of EAGAIN from the libc send function...

7.5CVSS7.4AI score0.01116EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2023/08/22 12:0 a.m.•69 views

CVE-2022-48522

In Perl 5.34.0, function Sfinduninitvar in sv.c has a stack-based crash that can lead to remote code execution or local privilege escalation...

9.8CVSS7.8AI score0.02046EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2023/08/21 4:52 p.m.•69 views

CVE-2023-32002

The use of Module.load can bypass the policy mechanism and require modules outside of the policy.json definition for a given module. This vulnerability affects all users using the experimental policy mechanism in all active release lines: 16.x, 18.x and, 20.x. Please note that at the time this CV...

9.8CVSS7.4AI score0.0143EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2023/07/31 4:22 p.m.•69 views

CVE-2023-4010

A flaw was found in the USB Host Controller Driver framework in the Linux kernel. The usbgivebackurb function has a logic loophole in its implementation. Due to the inappropriate judgment condition of the goto statement, the function cannot return under the input of a specific malformed descripto...

4.6CVSS4.4AI score0.00516EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2023/07/28 11:26 p.m.•69 views

CVE-2022-4909

Inappropriate implementation in XML in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to potentially perform an ASLR bypass via a crafted HTML page. Chromium security severity: Low...

6.3CVSS5.7AI score0.0044EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2023/07/24 3:19 p.m.•69 views

CVE-2023-32247

A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the handling of SMB2SESSIONSETUP commands. The issue results from the lack of control of resource consumption. An attacker can leverage this vulnerability to create a...

7.5CVSS6.8AI score0.03872EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2023/07/21 8:25 p.m.•69 views

CVE-2022-46289

Multiple out-of-bounds write vulnerabilities exist in the ORCA format nAtoms functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.nAtoms...

9.8CVSS9AI score0.00804EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2023/07/18 12:0 a.m.•69 views

CVE-2023-37788

goproxy v1.1 was discovered to contain an issue which can lead to a Denial of service DoS via unspecified vectors...

7.5CVSS5.5AI score0.00979EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2023/07/07 12:0 a.m.•69 views

CVE-2023-36201

Removed by vendor...

7.5CVSS7.5AI score0.00609EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2023/07/05 9:5 p.m.•69 views

CVE-2023-36813

Kanboard is project management software that focuses on the Kanban methodology. In versions prior to 1.2.31authenticated user is able to perform a SQL Injection, leading to a privilege escalation or loss of confidentiality. It appears that in some insert and update operations, the code improperly...

8.8CVSS9.1AI score0.00923EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2023/07/03 12:0 a.m.•69 views

CVE-2023-37378

Nullsoft Scriptable Install System NSIS before 3.09 mishandles access control for an uninstaller directory...

5.3CVSS5.3AI score0.00892EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2023/06/26 8:40 p.m.•69 views

CVE-2023-3421

Use after free in Media in Google Chrome prior to 114.0.5735.198 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS9.2AI score0.01151EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2023/06/18 12:0 a.m.•69 views

CVE-2023-35827

An issue was discovered in the Linux kernel through 6.3.8. A use-after-free was found in ravbremove in drivers/net/ethernet/renesas/ravbmain.c...

7CVSS7.5AI score0.00189EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2023/06/02 12:0 a.m.•69 views

CVE-2023-25741

When dragging and dropping an image cross-origin, the image's size could potentially be leaked. This behavior was shipped in 109 and caused web compatibility problems as well as this security concern, so the behavior was disabled until further review. This vulnerability affects Firefox 110...

6.5CVSS8.3AI score0.00767EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2023/05/12 12:0 a.m.•69 views

CVE-2023-31919

Removed by vendor...

5.5CVSS5.5AI score0.00332EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2023/05/10 12:0 a.m.•69 views

CVE-2023-31908

Removed by vendor...

7.8CVSS7.6AI score0.00328EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2023/04/25 6:33 p.m.•69 views

CVE-2021-23178

Improper access control in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows attackers to validate online payments with a tokenized payment method that belongs to another user, causing the victim's payment method to be charged instead...

7.5CVSS7.6AI score0.00563EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2023/04/21 2:51 p.m.•69 views

CVE-2023-1998

The Linux kernel allows userspace processes to enable mitigations by calling prctl with PRSETSPECULATIONCTRL which disables the speculation feature as well as by using seccomp. We had noticed that on VMs of at least one major cloud provider, the kernel still left the victim process exposed to...

5.6CVSS7.6AI score0.01377EPSS
SaveExploits3
Debian CVE
Debian CVE
•added 2023/04/18 7:54 p.m.•69 views

CVE-2023-21990

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 6.1.44 and Prior to 7.0.8. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox...

8.2CVSS7.4AI score0.00332EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2023/04/04 9:39 p.m.•69 views

CVE-2023-1811

Use after free in Frames in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS9.6AI score0.00968EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2023/04/04 12:45 p.m.•69 views

CVE-2023-28998

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server. Starting with version 3.0.0 and prior to version 3.6.5, a malicious server administrator can gain full access to an end-to-end encrypted folder. They can decrypt files, recover the folder structure, and add new...

6.7CVSS6.3AI score0.00679EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2023/03/24 12:0 a.m.•69 views

CVE-2021-43313

A heap-based buffer overflow was discovered in upx, during the variable 'bucket' points to an inaccessible address. The issue is being triggered in the function PackLinuxElf32::invertptdynamic at plxelf.cpp:1688...

7.5CVSS7.5AI score0.00817EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2023/03/24 12:0 a.m.•69 views

CVE-2021-43315

A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func getle32. The problem is essentially caused in PackLinuxElf32::elflookup at plxelf.cpp:5349...

7.5CVSS7.5AI score0.00817EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2023/02/17 12:0 a.m.•69 views

CVE-2021-33391

An issue in HTACG HTML Tidy v5.7.28 allows attacker to execute arbitrary code via the -g option of the CleanNode function in gdoc.c...

9.8CVSS9.7AI score0.01128EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2023/01/30 12:0 a.m.•69 views

CVE-2023-22332

Information disclosure vulnerability exists in Pgpool-II 4.4.0 to 4.4.1 4.4 series, 4.3.0 to 4.3.4 4.3 series, 4.2.0 to 4.2.11 4.2 series, 4.1.0 to 4.1.14 4.1 series, 4.0.0 to 4.0.21 4.0 series, All versions of 3.7 series, All versions of 3.6 series, All versions of 3.5 series, All versions of 3....

6.5CVSS6.3AI score0.00704EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2023/01/17 11:35 p.m.•69 views

CVE-2023-21843

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Sound. Supported versions that are affected are Oracle Java SE: 8u351, 8u351-perf, 11.0.17, 17.0.5, 19.0.1; Oracle GraalVM Enterprise Edition: 20.3.8, 21.3.4 and 22.3.0. Difficult to exploi...

3.7CVSS4.8AI score0.01357EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2023/01/10 12:0 a.m.•69 views

CVE-2023-0130

Inappropriate implementation in in Fullscreen API in Google Chrome on Android prior to 109.0.5414.74 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS7AI score0.0056EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/12/23 2:0 p.m.•69 views

CVE-2022-23547

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. This issue is similar to GHSA-9pfh-r8x4-w26w. Possible buffer overread when parsing a certain STUN message. The vulnerability...

9.8CVSS8.6AI score0.00945EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/12/22 12:0 a.m.•69 views

CVE-2022-42931

Logins saved by Firefox should be managed by the Password Manager component which uses encryption to save files on-disk. Instead, the username not password was saved by the Form Manager to an unencrypted file on disk. This vulnerability affects Firefox 106...

3.3CVSS6.9AI score0.00136EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/12/19 10:51 a.m.•69 views

CVE-2022-32749

Improper Check for Unusual or Exceptional Conditions vulnerability handling requests in Apache Traffic Server allows an attacker to crash the server under certain conditions. This issue affects Apache Traffic Server: from 8.0.0 through 9.1.3...

7.5CVSS7.4AI score0.013EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/12/15 12:0 a.m.•69 views

CVE-2022-46392

An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. An adversary with access to precise enough information about memory accesses typically, an untrusted operating system attacking a secure enclave can recover an RSA private key after observing the victim performing a single...

5.3CVSS5.1AI score0.00787EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/12/15 12:0 a.m.•69 views

CVE-2022-46393

An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. There is a potential heap-based buffer overflow and heap-based buffer over-read in DTLS if MBEDTLSSSLDTLSCONNECTIONID is enabled and MBEDTLSSSLCIDINLENMAX 2 MBEDTLSSSLCIDOUTLENMAX...

9.8CVSS9.7AI score0.01147EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/11/18 12:0 a.m.•69 views

CVE-2022-31608

NVIDIA GPU Display Driver for Linux contains a vulnerability in an optional D-Bus configuration file, where a local user with basic capabilities can impact protected D-Bus endpoints, which may lead to code execution, denial of service, escalation of privileges, information disclosure, and data...

7.8CVSS7.7AI score0.00226EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/11/03 12:0 a.m.•69 views

CVE-2022-44638

In libpixman in Pixman before 0.42.2, there is an out-of-bounds write aka heap-based buffer overflow in rasterizeedges8 due to an integer overflow in pixmansamplefloory...

8.8CVSS8.4AI score0.0144EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/09/26 3:1 p.m.•69 views

CVE-2022-2858

Use after free in Sign-In Flow in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via specific UI interaction...

8.8CVSS9.7AI score0.00793EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/09/22 4:55 p.m.•69 views

CVE-2022-35036

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6e1fc8...

6.5CVSS6.7AI score0.00796EPSS
SaveExploits1
Total number of security vulnerabilities5000