Lucene search
+L
DebiancveMost viewed

66255 matches found

Debian CVE
Debian CVE
added 2022/04/04 7:46 p.m.79 views

CVE-2022-1121

Removed by vendor...

5.3CVSS6AI score0.01083EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2022/03/29 12:00 a.m.79 views

CVE-2022-22941

Removed by vendor...

8.8CVSS7.8AI score0.01346EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2022/03/28 6:53 p.m.79 views

CVE-2022-0427

Removed by vendor...

8.8CVSS7.3AI score0.00828EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2022/03/25 6:03 p.m.79 views

CVE-2022-1049

A flaw was found in the Pacemaker configuration tool pcs. The pcs daemon was allowing expired accounts, and accounts with expired passwords to login when using PAM authentication. Therefore, unprivileged expired accounts that have been denied access could still login...

8.8CVSS7.7AI score0.01953EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2022/03/23 7:46 p.m.79 views

CVE-2021-3748

A use-after-free vulnerability was found in the virtio-net device of QEMU. It could occur when the descriptor's address belongs to the non direct access region, due to numbuffers being set after the virtqueue elem has been unmapped. A malicious guest could use this flaw to crash QEMU, resulting i...

7.5CVSS7AI score0.00522EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2022/03/14 10:20 p.m.79 views

CVE-2021-42389

Divide-by-zero in Clickhouse's Delta compression codec when parsing a malicious query. The first byte of the compressed buffer is used in a modulo operation without being checked for 0...

6.5CVSS6.6AI score0.01259EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2022/03/06 12:00 a.m.79 views

CVE-2022-26495

In nbd-server in nbd before 3.24, there is an integer overflow with a resultant heap-based buffer overflow. A value of 0xffffffff in the name length field will cause a zero-sized buffer to be allocated for the name, resulting in a write to a dangling pointer. This issue exists for the NBDOPTINFO,...

9.8CVSS9.6AI score0.02835EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2022/02/24 6:50 p.m.79 views

CVE-2021-4021

A vulnerability was found in Radare2 in versions prior to 5.6.2, 5.6.0, 5.5.4 and 5.5.2. Mapping a huge section filled with zeros of an ELF64 binary for MIPS architecture can lead to uncontrolled resource consumption and DoS...

7.5CVSS7.8AI score0.01046EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2022/02/16 6:35 p.m.79 views

CVE-2021-3752

A use-after-free flaw was found in the Linux kernel’s Bluetooth subsystem in the way user calls connect to the socket and disconnect simultaneously due to a race condition. This flaw allows a user to crash the system or escalate their privileges. The highest threat from this vulnerability is to...

7.9CVSS6.7AI score0.01736EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2022/02/09 10:03 p.m.79 views

CVE-2022-0534

A vulnerability was found in htmldoc version 1.9.15 where the stack out-of-bounds read takes place in gifgetcode and occurs when opening a malicious GIF file, which can result in a crash segmentation fault...

5.5CVSS5.7AI score0.0094EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2022/01/20 9:14 p.m.79 views

CVE-2021-46342

Removed by vendor...

5.5CVSS5.5AI score0.00621EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2022/01/20 9:14 p.m.79 views

CVE-2021-46336

Removed by vendor...

5.5CVSS5.5AI score0.00644EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2022/01/13 3:50 p.m.79 views

CVE-2022-23134

After the initial setup process, some steps of setup.php file are reachable not only by super-administrators, but by unauthenticated users as well. Malicious actor can pass step checks and potentially change the configuration of Zabbix Frontend...

5.3CVSS3.7AI score0.84657EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2022/01/10 12:00 a.m.79 views

CVE-2021-29454

Smarty is a template engine for PHP, facilitating the separation of presentation HTML/CSS from application logic. Prior to versions 3.1.42 and 4.0.2, template authors could run arbitrary PHP code by crafting a malicious math string. If a math string was passed through as user provided data to the...

8.8CVSS6.4AI score0.01927EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2021/12/30 12:00 a.m.79 views

CVE-2021-4183

Crash in the pcapng file parser in Wireshark 3.6.0 allows denial of service via crafted capture file...

5.5CVSS3.5AI score0.01479EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2021/12/16 4:37 a.m.79 views

CVE-2021-45100

The ksmbd server through 3.4.2, as used in the Linux kernel through 5.15.8, sometimes communicates in cleartext even though encryption has been enabled. This occurs because it sets the SMB2GLOBALCAPENCRYPTION flag when using the SMB 3.1.1 protocol, which is a violation of the SMB protocol...

7.5CVSS7.2AI score0.00905EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2021/11/08 9:45 p.m.79 views

CVE-2021-41253

Zydis is an x86/x86-64 disassembler library. Users of Zydis versions v3.2.0 and older that use the string functions provided in zycore in order to append untrusted user data to the formatter buffer within their custom formatter hooks can run into heap buffer overflows. Older versions of Zydis...

8.1CVSS1.3AI score0.01864EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2021/09/03 7:25 p.m.79 views

CVE-2021-30618

Chromium: CVE-2021-30618 Inappropriate implementation in DevTools...

8.8CVSS8AI score0.04125EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2021/08/23 7:34 p.m.79 views

CVE-2021-22253

Removed by vendor...

5.4CVSS6AI score0.00818EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2021/08/17 8:17 p.m.79 views

CVE-2021-39247

Zint Barcode Generator before 2.10.0 has a one-byte buffer over-read, related to islastsingleascii in code1.c, and rsencodeuint in reedsol.c...

6.5CVSS1.9AI score0.00922EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2021/07/07 1:22 p.m.79 views

CVE-2021-22233

Removed by vendor...

4.3CVSS5.8AI score0.00812EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2021/07/01 2:50 a.m.79 views

CVE-2020-36400

ZeroMQ libzmq 4.3.3 has a heap-based buffer overflow in zmq::tcpread, a different vulnerability than CVE-2021-20235...

9.8CVSS8.2AI score0.01842EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2021/06/24 1:20 p.m.79 views

CVE-2021-24000

A race condition with requestPointerLock and setTimeout could have resulted in a user interacting with one tab when they believed they were on a separate tab. In conjunction with certain elements such as input type="file" this could have led to an attack where a user was confused about the origin...

3.1CVSS6.9AI score0.00605EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2021/06/15 6:59 p.m.79 views

CVE-2021-33622

Removed by vendor...

9.8CVSS7.3AI score0.01258EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2021/06/10 10:13 p.m.79 views

CVE-2020-23312

Removed by vendor...

7.5CVSS7.6AI score0.01083EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2021/06/08 3:13 p.m.79 views

CVE-2021-22215

Removed by vendor...

7.5CVSS5.8AI score0.00797EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2021/06/02 1:22 p.m.79 views

CVE-2020-35503

A NULL pointer dereference flaw was found in the megasas-gen2 SCSI host bus adapter emulation of QEMU in versions before and including 6.0. This issue occurs in the megasascommandcancelled callback function while dropping a SCSI request. This flaw allows a privileged guest user to crash the QEMU...

6CVSS5.6AI score0.00275EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2021/05/13 3:12 p.m.79 views

CVE-2021-32919

An issue was discovered in Prosody before 0.11.9. The undocumented dialbackwithoutdialback option in moddialback enables an experimental feature for server-to-server authentication. It does not correctly authenticate remote server certificates, allowing a remote server to impersonate another serv...

7.5CVSS7.4AI score0.01398EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2021/03/31 1:41 p.m.79 views

CVE-2021-23983

By causing a transition on a parent node by removing a CSS rule, an invalid property for a marker could have been applied, resulting in memory corruption and a potentially exploitable crash. This vulnerability affects Firefox 87...

6.5CVSS8.7AI score0.00736EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2021/03/03 12:00 a.m.79 views

CVE-2021-27927

In Zabbix from 4.0.x before 4.0.28rc1, 5.0.0alpha1 before 5.0.10rc1, 5.2.x before 5.2.6rc1, and 5.4.0alpha1 before 5.4.0beta2, the CControllerAuthenticationUpdate controller lacks a CSRF protection mechanism. The code inside this controller calls diableSIDValidation inside the init method. An...

8.8CVSS4.6AI score0.02196EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2021/02/26 9:31 p.m.79 views

CVE-2021-27799

eanleadingzeroes in backend/upcean.c in Zint Barcode Generator 2.9.1 has a stack-based buffer overflow that is reachable from the C API through an application that includes the Zint Barcode Generator library code...

7.5CVSS3.1AI score0.02365EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2021/02/26 2:55 a.m.79 views

CVE-2020-24455

Missing initialization of a variable in the TPM2 source may allow a privileged user to potentially enable an escalation of privilege via local access. This affects tpm2-tss before 3.0.1 and before 2.4.3...

6.7CVSS6.5AI score0.00584EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2021/02/23 5:21 p.m.79 views

CVE-2021-20220

A flaw was found in Undertow. A regression in the fix for CVE-2020-10687 was found. HTTP request smuggling related to CVE-2017-2666 is possible against HTTP/1.x and HTTP/2 due to permitting invalid characters in an HTTP request. This flaw allows an attacker to poison a web-cache, perform an XSS...

5.8CVSS6.2AI score0.01119EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2021/01/08 5:51 p.m.79 views

CVE-2020-16021

Race in image burner in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker who had compromised the browser process to perform OS-level privilege escalation via a malicious file...

7.5CVSS8.3AI score0.00625EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2020/12/18 7:30 a.m.79 views

CVE-2020-35474

In MediaWiki before 1.35.1, the combination of Html::rawElement and Message::text leads to XSS because the definition of MediaWiki:recentchanges-legend-watchlistexpiry can be changed onwiki so that the output is raw HTML...

6.1CVSS6.2AI score0.01038EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2020/12/04 7:06 a.m.79 views

CVE-2020-29565

An issue was discovered in OpenStack Horizon before 15.3.2, 16.x before 16.2.1, 17.x and 18.x before 18.3.3, 18.4.x, and 18.5.x. There is a lack of validation of the "next" parameter, which would allow someone to supply a malicious URL in Horizon that can cause an automatic redirect to the provid...

6.1CVSS6.1AI score0.01429EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2020/11/23 1:11 p.m.79 views

CVE-2020-28053

Removed by vendor...

6.5CVSS6.7AI score0.01396EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2020/11/21 5:29 a.m.79 views

CVE-2020-25725

In Xpdf 4.02, SplashOutputDev::endType3CharGfxState state SplashOutputDev.cc:3079 is trying to use the freed t3GlyphStack-cache, which causes an heap-use-after-free problem. The codes of a previous fix for nested Type 3 characters wasn't correctly handling the case where a Type 3 char referred to...

5.5CVSS1.4AI score0.01005EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2020/11/04 5:55 p.m.79 views

CVE-2020-8036

The tok2strbuf function in tcpdump 4.10.0-PRE-GIT was used by the SOME/IP dissector in an unsafe way...

7.5CVSS7.6AI score0.01479EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2020/09/27 8:43 p.m.79 views

CVE-2020-25827

An issue was discovered in the OATHAuth extension in MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1.34.4. For Wikis using OATHAuth on a farm/cluster such as via CentralAuth, rate limiting of OATH tokens is only done on a single site level. Thus, multiple requests can be made across...

7.5CVSS7.6AI score0.01752EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2020/09/10 1:20 a.m.79 views

CVE-2020-25220

The Linux kernel 4.9.x before 4.9.233, 4.14.x before 4.14.194, and 4.19.x before 4.19.140 has a use-after-free because skcd-norefcnt was not considered during a backport of a CVE-2020-14356 patch. This is related to the cgroups feature...

7.8CVSS6.6AI score0.00449EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2020/08/11 4:02 p.m.79 views

CVE-2020-17448

Telegram Desktop through 2.1.13 allows a spoofed file type to bypass the Dangerous File Type Execution protection mechanism, as demonstrated by use of the chat window with a filename that lacks an extension...

7.8CVSS7.6AI score0.02281EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2020/08/06 10:25 p.m.79 views

CVE-2020-15114

In etcd before versions 3.3.23 and 3.4.10, the etcd gateway is a simple TCP proxy to allow for basic service discovery and access. However, it is possible to include the gateway address as an endpoint. This results in a denial of service, since the endpoint can become stuck in a loop of requestin...

7.7CVSS8AI score0.01206EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2020/07/01 10:54 a.m.79 views

CVE-2020-15473

In nDPI through 3.2, the OpenVPN dissector is vulnerable to a heap-based buffer over-read in ndpisearchopenvpn in lib/protocols/openvpn.c...

9.1CVSS9.3AI score0.01288EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2020/06/10 3:55 p.m.79 views

CVE-2020-10755

An insecure-credentials flaw was found in all openstack-cinder versions before openstack-cinder 14.1.0, all openstack-cinder 15.x.x versions before openstack-cinder 15.2.0 and all openstack-cinder 16.x.x versions before openstack-cinder 16.1.0. When using openstack-cinder with the Dell EMC ScaleI...

6.5CVSS6.9AI score0.01213EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2020/05/12 1:01 p.m.79 views

CVE-2020-8151

There is a possible information disclosure issue in Active Resource v5.1.1 that could allow an attacker to create specially crafted requests to access data in an unexpected way and possibly leak information...

7.5CVSS7.3AI score0.02224EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2020/05/09 8:16 p.m.79 views

CVE-2020-12769

An issue was discovered in the Linux kernel before 5.4.17. drivers/spi/spi-dw.c allows attackers to cause a panic via concurrent calls to dwspiirq and dwspitransferone, aka CID-19b61392c5a8...

5.5CVSS6.5AI score0.00652EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2020/05/04 2:58 p.m.79 views

CVE-2020-12641

rcubeimage.php in Roundcube Webmail before 1.4.4 allows attackers to execute arbitrary code via shell metacharacters in a configuration setting for imconvertpath or imidentifypath...

9.8CVSS9.7AI score0.84336EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2020/04/06 12:08 a.m.79 views

CVE-2020-11565

An issue was discovered in the Linux kernel through 5.6.2. mpolparsestr in mm/mempolicy.c has a stack-based out-of-bounds write because an empty nodelist is mishandled during mount option parsing, aka CID-aa9f7d5172fa. NOTE: Someone in the security community disagrees that this is a vulnerability...

6CVSS6.5AI score0.00517EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2020/03/24 9:13 p.m.79 views

CVE-2020-6802

In Mozilla Bleach before 3.11, a mutation XSS affects users calling bleach.clean with noscript and a raw tag in the allowed/whitelisted tags option...

6.1CVSS6.3AI score0.01716EPSS
SaveExploits2
Total number of security vulnerabilities5000