Lucene search
+L
DebiancveMost viewed

66255 matches found

Debian CVE
Debian CVE
•added 2020/12/31 8:17 a.m.•78 views

CVE-2020-35921

An issue was discovered in the miow crate before 0.3.6 for Rust. It has false expectations about the std::net::SocketAddr memory representation...

5.5CVSS5.4AI score0.00387EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2020/12/28 6:34 p.m.•78 views

CVE-2020-27837

A flaw was found in GDM in versions prior to 3.38.2.1. A race condition in the handling of session shutdown makes it possible to bypass the lock screen for a user that has autologin enabled, accessing their session without authentication. This is similar to CVE-2017-12164, but requires more...

6.4CVSS5.3AI score0.00225EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2020/12/14 7:59 p.m.•78 views

CVE-2020-29511

Removed by vendor...

9.8CVSS7.4AI score0.01942EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2020/12/09 9:06 p.m.•78 views

CVE-2020-16600

A Use After Free vulnerability exists in Artifex Software, Inc. MuPDF library 1.17.0-rc1 and earlier when a valid page was followed by a page with invalid pixmap dimensions, causing bander - a static - to point to previously freed memory instead of a newbandwriter...

7.8CVSS7.5AI score0.00962EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2020/12/08 9:57 p.m.•78 views

CVE-2020-27753

There are several memory leaks in the MIFF coder in /coders/miff.c due to improper image depth values, which can be triggered by a specially crafted input file. These leaks could potentially lead to an impact to application availability or cause a denial of service. It was originally reported tha...

5.5CVSS6AI score0.00862EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2020/12/08 12:00 a.m.•78 views

CVE-2020-25676

In CatromWeights, MeshInterpolate, InterpolatePixelChannel, InterpolatePixelChannels, and InterpolatePixelInfo, which are all functions in /MagickCore/pixel.c, there were multiple unconstrained pixel offset calculations which were being used with the floor function. These calculations produced...

5.5CVSS6.1AI score0.01186EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2020/12/04 12:00 a.m.•78 views

CVE-2020-27776

A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type unsigned long. This would most likely lead to an impact to application availability,...

4.3CVSS5.7AI score0.00884EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2020/11/18 11:30 p.m.•78 views

CVE-2020-13355

Removed by vendor...

8.1CVSS7.2AI score0.01681EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2020/11/13 8:25 p.m.•78 views

CVE-2020-28638

askpassword in Tomb 2.0 through 2.7 returns a warning when pinentry-curses is used and $DISPLAY is non-empty, causing affected users' files to be encrypted with "tomb W Detected DISPLAY, but only pinentry-curses is found." as the encryption key...

9.8CVSS9.5AI score0.00714EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2020/10/05 1:23 p.m.•78 views

CVE-2020-25635

A flaw was found in Ansible Base when using the awsssm connection plugin as garbage collector is not happening after playbook run is completed. Files would remain in the bucket exposing the data. This issue affects directly data confidentiality...

5.5CVSS5.5AI score0.00319EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2020/07/15 9:24 p.m.•78 views

CVE-2019-20908

An issue was discovered in drivers/firmware/efi/efi.c in the Linux kernel before 5.4. Incorrect access permissions for the efivarssdt ACPI variable could be used by attackers to bypass lockdown or secure boot restrictions, aka CID-1957a85b0032...

6.9CVSS7.2AI score0.00514EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2020/07/14 5:23 p.m.•78 views

CVE-2020-13845

Removed by vendor...

7.5CVSS7.1AI score0.00517EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2020/07/02 7:25 p.m.•78 views

CVE-2020-15469

In QEMU 4.2.0, a MemoryRegionOps object may lack read/write callback methods, leading to a NULL pointer dereference...

2.3CVSS5.8AI score0.00429EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2020/06/25 9:55 p.m.•78 views

CVE-2020-5967

NVIDIA Linux GPU Display Driver, all versions, contains a vulnerability in the UVM driver, in which a race condition may lead to a denial of service...

4.7CVSS4.8AI score0.00272EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2020/06/15 4:52 p.m.•78 views

CVE-2020-14148

The Server-Server protocol implementation in ngIRCd before 26rc2 allows an out-of-bounds access, as demonstrated by the IRCNJOIN function...

7.5CVSS7.4AI score0.02643EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2020/06/05 1:17 p.m.•78 views

CVE-2020-10543

Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow...

8.2CVSS7.8AI score0.11334EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2020/06/04 3:23 p.m.•78 views

CVE-2020-13800

ati-vga in hw/display/ati.c in QEMU 4.2.0 allows guest OS users to trigger infinite recursion via a crafted mmindex value during an atimmread or atimmwrite call...

6CVSS6.8AI score0.00486EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2020/06/02 11:14 p.m.•78 views

CVE-2019-20810

go7007sndinit in drivers/media/usb/go7007/snd-go7007.c in the Linux kernel before 5.6 does not call sndcardfree for a failure path, which causes a memory leak, aka CID-9453264ef586...

5.5CVSS6.7AI score0.00459EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2020/05/18 2:20 p.m.•78 views

CVE-2020-12801

If LibreOffice has an encrypted document open and crashes, that document is auto-saved encrypted. On restart, LibreOffice offers to restore the document and prompts for the password to decrypt it. If the recovery is successful, and if the file format of the recovered document was not LibreOffice'...

5.3CVSS5.7AI score0.01255EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2020/05/15 6:41 p.m.•78 views

CVE-2020-13092

scikit-learn aka sklearn through 0.23.0 can unserialize and execute commands from an untrusted file that is passed to the joblib.load function, if reduce makes an os.system call. NOTE: third parties dispute this issue because the joblib.load function is documented as unsafe and it is the user's...

9.8CVSS9.6AI score0.02667EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2020/05/08 5:03 p.m.•78 views

CVE-2020-12740

tcprewrite in Tcpreplay through 4.3.2 has a heap-based buffer over-read during a getc operation. The issue is being triggered in the function getipv6next at common/get.c...

9.1CVSS9.4AI score0.01652EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2020/04/21 6:40 p.m.•78 views

CVE-2020-11008

Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials to a host controlled by an attacker. This bug is similar to CVE-2020-5260GHSA-qm7j-c969-7j4q. The fix for that bug still left the door open for an exploit where some credential is leaked but...

7.5CVSS7.8AI score0.03899EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2020/02/19 6:27 p.m.•78 views

CVE-2020-6061

An exploitable heap out-of-bounds read vulnerability exists in the way CoTURN 4.5.1.1 web server parses POST requests. A specially crafted HTTP POST request can lead to information leaks and other misbehavior. An attacker needs to send an HTTPS request to trigger this vulnerability...

9.8CVSS6.9AI score0.05116EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2020/01/24 4:59 p.m.•78 views

CVE-2015-4041

The keycomparemb function in sort.c in sort in GNU Coreutils through 8.23 on 64-bit platforms performs a size calculation without considering the number of bytes occupied by multibyte characters, which allows attackers to cause a denial of service heap-based buffer overflow and application crash ...

7.8CVSS8.3AI score0.00518EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2020/01/16 3:55 a.m.•78 views

CVE-2020-7106

Cacti 1.2.8 has stored XSS in datasources.php, colortemplatesitem.php, graphs.php, graphitems.php, lib/apiautomation.php, useradmin.php, and usergroupadmin.php, as demonstrated by the description parameter in datasources.php a raw string from the database that is displayed by $header to trigger t...

6.1CVSS5.8AI score0.02139EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2019/12/26 12:07 a.m.•78 views

CVE-2019-19977

libESMTP through 1.0.6 mishandles domain copying into a fixed-size buffer in ntlmbuildtype2 in ntlm/ntlmstruct.c, as demonstrated by a stack-based buffer over-read...

9.8CVSS9.6AI score0.02937EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2019/12/11 4:53 p.m.•78 views

CVE-2019-19578

An issue was discovered in Xen through 4.12.x allowing x86 PV guest OS users to cause a denial of service via degenerate chains of linear pagetables, because of an incorrect fix for CVE-2017-15595. "Linear pagetables" is a technique which involves either pointing a pagetable at itself, or to...

8.8CVSS0.6AI score0.0039EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2019/12/10 5:32 p.m.•78 views

CVE-2016-1000107

inets in Erlang possibly 22.1 and earlier follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTPPROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an...

6.1CVSS6.4AI score0.01417EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2019/12/10 2:19 p.m.•78 views

CVE-2013-2166

python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache encryption bypass...

9.8CVSS9.5AI score0.02147EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2019/10/29 1:40 p.m.•78 views

CVE-2019-18601

OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to denial of service from unserialized data access because remote attackers can make a series of VOTEDebug RPC calls to crash a database server within the SVOTEDebug RPC handler...

7.5CVSS7.3AI score0.01399EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2019/10/23 4:31 p.m.•78 views

CVE-2019-18348

Removed by vendor...

6.1CVSS7.8AI score0.03513EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2019/10/03 6:53 p.m.•78 views

CVE-2019-16866

Unbound before 1.9.4 accesses uninitialized memory, which allows remote attackers to trigger a crash via a crafted NOTIFY query. The source IP address of the query must match an access-control rule...

7.5CVSS6.2AI score0.03506EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2019/08/29 12:26 a.m.•78 views

CVE-2019-11248

The debugging endpoint /debug/pprof is exposed over the unauthenticated Kubelet healthz port. The go pprof endpoint is exposed over the Kubelet's healthz port. This debugging endpoint can potentially leak sensitive information such as internal Kubelet memory addresses and configuration, or for...

8.2CVSS6.7AI score0.7506EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2019/08/26 5:10 p.m.•78 views

CVE-2019-15542

An issue was discovered in the ammonia crate before 2.1.0 for Rust. There is uncontrolled recursion during HTML DOM tree serialization...

7.5CVSS7.5AI score0.01375EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2019/07/28 12:00 a.m.•78 views

CVE-2019-14370

In Exiv2 0.27.99.0, there is an out-of-bounds read in Exiv2::MrwImage::readMetadata in mrwimage.cpp. It could result in denial of service...

6.5CVSS6.9AI score0.01116EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2019/07/12 2:31 a.m.•78 views

CVE-2019-13574

In lib/minimagick/image.rb in MiniMagick before 4.9.4, a fetched remote image filename could cause remote command execution because Image.open input is directly passed to Kernelopen, which accepts a '|' character followed by a command...

7.8CVSS7.7AI score0.10737EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2019/05/03 12:07 p.m.•78 views

CVE-2019-11690

genranduuid in lib/uuid.c in Das U-Boot v2014.04 through v2019.04 lacks an srand call, which allows attackers to determine UUID values in scenarios where CONFIGRANDOMUUID is enabled, and Das U-Boot is relied upon for UUID values of a GUID Partition Table of a boot device...

5.9CVSS7.6AI score0.01247EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2019/04/22 8:52 p.m.•78 views

CVE-2019-5427

c3p0 version 0.9.5.4 may be exploited by a billion laughs attack when loading XML configuration due to missing protections against recursive entity expansion when loading configuration...

7.5CVSS6.8AI score0.04882EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2019/04/04 12:00 a.m.•78 views

CVE-2019-3886

An incorrect permissions check was discovered in libvirt 4.8.0 and above. The readonly permission was allowed to invoke APIs depending on the guest agent, which could lead to potentially disclosing unintended information or denial of service by causing libvirt to block...

5.4CVSS6.2AI score0.01108EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2019/03/12 6:00 a.m.•78 views

CVE-2019-9721

A denial of service in the subtitle decoder in FFmpeg 3.2 and 4.1 allows attackers to hog the CPU via a crafted video file in Matroska format, because handleopenbrace in libavcodec/htmlsubtitles.c has a complex format argument to sscanf...

6.5CVSS6AI score0.01435EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2019/03/12 6:00 a.m.•78 views

CVE-2019-9718

In FFmpeg 3.2 and 4.1, a denial of service in the subtitle decoder allows attackers to hog the CPU via a crafted video file in Matroska format, because ffhtmlmarkuptoass in libavcodec/htmlsubtitles.c has a complex format argument to sscanf...

6.5CVSS6AI score0.01565EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2019/03/05 11:00 p.m.•78 views

CVE-2019-9578

In devs.c in Yubico libu2f-host before 1.1.8, the response to init is misparsed, leaking uninitialized stack memory back to the device...

7.5CVSS7AI score0.0219EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2019/01/11 5:00 a.m.•78 views

CVE-2019-6130

Artifex MuPDF 1.14.0 has a SEGV in the function fzloadpage of the fitz/document.c file, as demonstrated by mutool. This is related to page-number mishandling in cbz/mucbz.c, cbz/muimg.c, and svg/svg-doc.c...

5.5CVSS5.6AI score0.0236EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2018/11/29 4:00 a.m.•78 views

CVE-2018-19627

In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the IxVeriWave file parser could crash. This was addressed in wiretap/vwr.c by adjusting a buffer boundary...

7.5CVSS3.5AI score0.14397EPSS
SaveExploits2
Debian CVE
Debian CVE
•added 2018/10/17 7:00 p.m.•78 views

CVE-2018-18443

OpenEXR 2.3.0 has a memory leak in ThreadPool in IlmBase/IlmThread/IlmThreadPool.cpp, as demonstrated by exrmultiview...

4.3CVSS6.4AI score0.02328EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2018/09/10 7:00 p.m.•78 views

CVE-2018-14635

When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassing IP address validation. A potential denial of service could occur if an IP address, conflicting with existing guests or routers, is then assigned from...

6.5CVSS6.3AI score0.02527EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2017/12/14 4:00 p.m.•78 views

CVE-2017-17522

Lib/webbrowser.py in Python through 3.6.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. NOTE: a software maintainer indicates that exploitation is...

8.8CVSS8.6AI score0.03507EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2017/12/14 4:00 p.m.•78 views

CVE-2017-17530

common/help.c in Geomview 1.9.5 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. NOTE: this is disputed by a third party because no untrusted input can ...

8.8CVSS8.7AI score0.01495EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2017/11/17 4:00 a.m.•78 views

CVE-2017-1000246

Python package pysaml2 version 4.4.0 and earlier reuses the initialization vector across encryptions in the IDP server, resulting in weak encryption of data...

5.3CVSS5.7AI score0.01017EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2017/11/04 1:00 a.m.•78 views

CVE-2017-16528

sound/core/seqdevice.c in the Linux kernel before 4.13.4 allows local users to cause a denial of service sndrawmididevseqfree use-after-free and system crash or possibly have unspecified other impact via a crafted USB device...

7.2CVSS6.7AI score0.00365EPSS
SaveExploits0
Total number of security vulnerabilities5000