Lucene search
+L
DebiancveMost viewed

66255 matches found

Debian CVE
Debian CVE
•added 2022/02/11 12:00 a.m.•78 views

CVE-2021-45386

tcpreplay 4.3.4 has a Reachable Assertion in addtreeipv6 at tree.c...

5.5CVSS1.3AI score0.00712EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/02/03 1:19 p.m.•78 views

CVE-2022-21738

Tensorflow is an Open Source Machine Learning Framework. The implementation of SparseCountSparseOutput can be made to crash a TensorFlow process by an integer overflow whose result is then used in a memory allocation. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this comm...

6.5CVSS7.2AI score0.00783EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/02/02 11:48 a.m.•78 views

CVE-2022-21724

pgjdbc is the offical PostgreSQL JDBC Driver. A security hole was found in the jdbc driver for postgresql database while doing security research. The system using the postgresql library will be attacked when attacker control the jdbc url or properties. pgjdbc instantiates plugin instances based o...

9.8CVSS8.8AI score0.0301EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/02/01 11:01 a.m.•78 views

CVE-2022-23607

treq is an HTTP library inspired by requests but written on top of Twisted's Agents. Treq's request methods treq.get, treq.post, etc. and treq.client.HTTPClient constructor accept cookies as a dictionary. Such cookies are not bound to a single domain, and are therefore sent to every domain...

6.5CVSS6.2AI score0.01083EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/01/26 9:10 p.m.•78 views

CVE-2021-32841

SharpZipLib or ziplib is a Zip, GZip, Tar and BZip2 library. Starting version 1.3.0 and prior to version 1.3.3, a check was added if the destination file is under destination directory. However, it is not enforced that destDir ends with slash. If the destDir is not slash terminated like...

5.3CVSS5.3AI score0.01079EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/01/19 11:25 a.m.•78 views

CVE-2022-21349

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE: 7u321, 8u311; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthenticated...

5.3CVSS5.5AI score0.03306EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/01/19 12:00 a.m.•78 views

CVE-2021-33913

libspf2 before 1.2.11 has a heap-based buffer overflow that might allow remote attackers to execute arbitrary code via an unauthenticated e-mail message from anywhere on the Internet with a crafted SPF DNS record, because of SPFrecordexpanddata in spfexpand.c. The amount of overflowed data depend...

9.8CVSS9.9AI score0.09643EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/01/18 4:51 p.m.•78 views

CVE-2021-39927

Removed by vendor...

4.3CVSS5.8AI score0.00573EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/12/15 6:38 a.m.•78 views

CVE-2021-40826

Clementine Music Player through 1.3.1 is vulnerable to a User Mode Write Access Violation, affecting the MP3 file parsing functionality at clementine+0x3aa207. The vulnerability is triggered when the user opens a crafted MP3 file or loads a remote stream URL that is mishandled by Clementine...

7.8CVSS7.9AI score0.01181EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2021/11/08 9:45 p.m.•78 views

CVE-2021-41253

Zydis is an x86/x86-64 disassembler library. Users of Zydis versions v3.2.0 and older that use the string functions provided in zycore in order to append untrusted user data to the formatter buffer within their custom formatter hooks can run into heap buffer overflows. Older versions of Zydis...

8.1CVSS1.3AI score0.01864EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2021/10/25 1:20 p.m.•78 views

CVE-2021-0938

In memzeroexplicit of compiler-clang.h, there is a possible bypass of defense in depth due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

5.5CVSS5AI score0.00155EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/10/05 2:01 p.m.•78 views

CVE-2021-39880

A Denial Of Service vulnerability in the apollouploadserver Ruby gem in GitLab CE/EE all versions starting from 11.9 before 14.0.9, all versions starting from 14.1 before 14.1.4, and all versions starting from 14.2 before 14.2.2 allows an attacker to deny access to all users via specially crafted...

6.5CVSS6.1AI score0.01372EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/10/05 12:28 p.m.•78 views

CVE-2021-39875

Removed by vendor...

5.3CVSS6AI score0.01171EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/09/27 12:25 p.m.•78 views

CVE-2021-3828

nltk is vulnerable to Inefficient Regular Expression Complexity...

7.5CVSS7.3AI score0.01703EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2021/09/20 3:27 p.m.•78 views

CVE-2021-39595

Removed by vendor...

7.8CVSS7.7AI score0.01095EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2021/08/31 4:20 p.m.•78 views

CVE-2021-39164

Matrix is an ecosystem for open federated Instant Messaging and Voice over IP. In versions 1.41.0 and prior, unauthorised users can access the membership list of members, with their display names of a room if they know the ID of the room. The vulnerability is limited to rooms with shared history...

3.5CVSS4.2AI score0.01457EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/08/25 6:37 p.m.•78 views

CVE-2021-22237

Removed by vendor...

6.6CVSS6.2AI score0.00844EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/08/24 2:50 p.m.•78 views

CVE-2021-3711

In order to decrypt SM2 encrypted data an application is expected to call the API function EVPPKEYdecrypt. Typically an application will call this function twice. The first time, on entry, the "out" parameter can be NULL and, on exit, the "outlen" parameter is populated with the buffer size...

9.8CVSS8.3AI score0.87816EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2021/08/23 12:41 p.m.•78 views

CVE-2021-3694

LedgerSMB does not sufficiently HTML-encode error messages sent to the browser. By sending a specially crafted URL to an authenticated user, this flaw can be abused for remote code execution and information disclosure...

9.6CVSS6.3AI score0.02509EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/08/12 9:10 p.m.•78 views

CVE-2021-37646

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of tf.rawops.StringNGrams is vulnerable to an integer overflow issue caused by converting a signed integer value to an unsigned one and then allocating memory based on this value. The...

5.5CVSS7.2AI score0.00154EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/08/08 7:27 p.m.•78 views

CVE-2021-38200

arch/powerpc/perf/core-book3s.c in the Linux kernel before 5.12.13, on systems with perfeventparanoid=-1 and no specific PMU driver support registered, allows local users to cause a denial of service perfinstructionpointer NULL pointer dereference and OOPS via a "perf record" command...

5.5CVSS5.5AI score0.00255EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/07/26 9:36 p.m.•78 views

CVE-2020-18428

tinyexr commit 0.9.5 was discovered to contain an array index error in the tinyexr::SaveEXR component, which can lead to a denial of service DOS...

7.5CVSS7.4AI score0.01233EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2021/07/14 1:28 p.m.•78 views

CVE-2019-11098

Insufficient input validation in MdeModulePkg in EDKII may allow an unauthenticated user to potentially enable escalation of privilege, denial of service and/or information disclosure via physical access...

6.8CVSS6.3AI score0.00345EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/06/11 3:07 p.m.•78 views

CVE-2020-13663

Removed by vendor...

8.8CVSS8.7AI score0.00695EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/05/25 6:25 p.m.•78 views

CVE-2021-32640

ws is an open source WebSocket client and server library for Node.js. A specially crafted value of the Sec-Websocket-Protocol header can be used to significantly slow down a ws server. The vulnerability has been fixed in [email protected]...

5.3CVSS6.2AI score0.02821EPSS
SaveExploits2
Debian CVE
Debian CVE
•added 2021/05/18 7:43 p.m.•78 views

CVE-2021-31321

Telegram Android 7.1.0 2090, Telegram iOS 7.1, and Telegram macOS 7.1 are affected by a Stack Based Overflow in the graysplitcubic function of their custom fork of the rlottie library. A remote attacker might be able to overwrite Telegram's stack memory out-of-bounds on a victim device via a...

7.1CVSS6.4AI score0.01101EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2021/05/14 7:16 p.m.•78 views

CVE-2021-29565

TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a null pointer dereference in the implementation of tf.rawops.SparseFillEmptyRows. This is because of missing...

5.5CVSS6.9AI score0.00189EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2021/05/13 9:03 p.m.•78 views

CVE-2021-31876

Removed by vendor...

6.5CVSS6.5AI score0.01608EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/05/10 1:05 p.m.•78 views

CVE-2021-32056

Cyrus IMAP before 3.2.7, and 3.3.x and 3.4.x before 3.4.1, allows remote authenticated users to bypass intended access restrictions on server annotations and consequently cause replication to stall...

4.3CVSS4.8AI score0.017EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/05/05 1:50 p.m.•78 views

CVE-2020-13666

Removed by vendor...

6.1CVSS6.2AI score0.02925EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/04/29 5:10 p.m.•78 views

CVE-2021-21417

fluidsynth is a software synthesizer based on the SoundFont 2 specifications. A use after free violation was discovered in fluidsynth, that can be triggered when loading an invalid SoundFont file...

7.2CVSS6.2AI score0.00939EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2021/04/27 3:33 a.m.•78 views

CVE-2021-31826

Shibboleth Service Provider 3.x before 3.2.2 is prone to a NULL pointer dereference flaw involving the session recovery feature. The flaw is exploitable for a daemon crash on systems not using this feature if a crafted cookie is supplied...

7.5CVSS7.4AI score0.02EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2021/04/21 12:00 a.m.•78 views

CVE-2021-1077

NVIDIA GPU Display Driver for Windows and Linux, R450 and R460 driver branch, contains a vulnerability where the software uses a reference count to manage a resource that is incorrectly updated, which may lead to denial of service...

6.6CVSS5.7AI score0.00277EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/04/02 4:17 p.m.•78 views

CVE-2021-22201

Removed by vendor...

9.6CVSS6.9AI score0.03073EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2021/03/23 4:34 p.m.•78 views

CVE-2021-20219

A denial of service vulnerability was found in nttyreceivecharspecial in drivers/tty/ntty.c of the Linux kernel. In this flaw a local attacker with a normal user privilege could delay the loop due to a changing ldata-readhead, and a missing sanity check and cause a threat to the system availabili...

5.5CVSS6.2AI score0.00401EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/02/26 1:57 a.m.•78 views

CVE-2021-23970

Context-specific code was included in a shared jump table; resulting in assertions being triggered in multithreaded wasm code. This vulnerability affects Firefox 86...

6.5CVSS8.3AI score0.01007EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/02/17 12:00 a.m.•78 views

CVE-2021-26931

An issue was discovered in the Linux kernel 2.6.39 through 5.10.16, as used in Xen. Block, net, and SCSI backends consider certain errors a plain bug, deliberately causing a kernel crash. For errors potentially being at least under the influence of guests such as out of memory conditions, it isn'...

5.5CVSS6.4AI score0.00544EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/02/10 9:51 p.m.•78 views

CVE-2020-28595

An out-of-bounds write vulnerability exists in the Obj.cpp loadobj functionality of Prusa Research PrusaSlicer 2.2.0 and Master commit 4b040b856. A specially crafted obj file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

8.8CVSS8.3AI score0.01467EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2021/01/28 7:38 p.m.•78 views

CVE-2019-25016

Removed by vendor...

8.8CVSS8.8AI score0.02654EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2021/01/20 3:22 p.m.•78 views

CVE-2020-25684

A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in the forward.c:replyquery if the reply destination address/port is used by the pending forwarded queries. However, it does not use the address/port to retrieve the exact forwarded query,...

4.3CVSS4.6AI score0.04041EPSS
SaveExploits2
Debian CVE
Debian CVE
•added 2021/01/07 11:24 p.m.•78 views

CVE-2020-36049

socket.io-parser before 3.4.1 allows attackers to cause a denial of service memory consumption via a large packet because a concatenation approach is used...

7.5CVSS7.3AI score0.02589EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2021/01/05 8:41 p.m.•78 views

CVE-2020-36067

GJSON =v1.6.5 allows attackers to cause a denial of service panic: runtime error: slice bounds out of range via a crafted GET call...

7.5CVSS7.2AI score0.01387EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2020/12/31 8:17 a.m.•78 views

CVE-2020-35921

An issue was discovered in the miow crate before 0.3.6 for Rust. It has false expectations about the std::net::SocketAddr memory representation...

5.5CVSS5.4AI score0.00387EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2020/12/28 6:34 p.m.•78 views

CVE-2020-27837

A flaw was found in GDM in versions prior to 3.38.2.1. A race condition in the handling of session shutdown makes it possible to bypass the lock screen for a user that has autologin enabled, accessing their session without authentication. This is similar to CVE-2017-12164, but requires more...

6.4CVSS5.3AI score0.00225EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2020/12/14 7:59 p.m.•78 views

CVE-2020-29511

Removed by vendor...

9.8CVSS7.4AI score0.01942EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2020/12/11 3:29 a.m.•78 views

CVE-2020-26415

Removed by vendor...

4.3CVSS5.8AI score0.00825EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2020/12/09 9:06 p.m.•78 views

CVE-2020-16600

A Use After Free vulnerability exists in Artifex Software, Inc. MuPDF library 1.17.0-rc1 and earlier when a valid page was followed by a page with invalid pixmap dimensions, causing bander - a static - to point to previously freed memory instead of a newbandwriter...

7.8CVSS7.5AI score0.00962EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2020/12/08 9:57 p.m.•78 views

CVE-2020-27753

There are several memory leaks in the MIFF coder in /coders/miff.c due to improper image depth values, which can be triggered by a specially crafted input file. These leaks could potentially lead to an impact to application availability or cause a denial of service. It was originally reported tha...

5.5CVSS6AI score0.00862EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2020/12/08 12:00 a.m.•78 views

CVE-2020-25676

In CatromWeights, MeshInterpolate, InterpolatePixelChannel, InterpolatePixelChannels, and InterpolatePixelInfo, which are all functions in /MagickCore/pixel.c, there were multiple unconstrained pixel offset calculations which were being used with the floor function. These calculations produced...

5.5CVSS6.1AI score0.01186EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2020/12/04 12:00 a.m.•78 views

CVE-2020-27776

A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type unsigned long. This would most likely lead to an impact to application availability,...

4.3CVSS5.7AI score0.00884EPSS
SaveExploits1
Total number of security vulnerabilities5000