Lucene search
+L
DebiancveMost viewed

61425 matches found

Debian CVE
Debian CVE
•added 2024/10/11 2:20 p.m.•66 views

CVE-2024-25622

h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. The configuration directives provided by the headers handler allows users to modify the response headers being sent by h2o. The configuration file of h2o has scopes, and the inner scopes e.g., path level are expected to inherit t...

4.3CVSS5.5AI score0.0044EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2024/08/22 3:31 p.m.•66 views

CVE-2024-3127

Removed by vendor...

4.3CVSS5.8AI score0.00325EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2024/08/22 1:30 a.m.•66 views

CVE-2022-48908

In the Linux kernel, the following vulnerability has been resolved: net: arcnet: com20020: Fix null-ptr-deref in com20020pciprobe During driver initialization, the pointer of card info, i.e. the variable 'ci' is required. However, the definition of 'com20020pciidtable' reveals that this field is...

5.5CVSS5.4AI score0.0021EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2024/08/05 11:53 p.m.•66 views

CVE-2024-7537

oFono QMI SMS Handling Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installations of oFono. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

5.5CVSS3.4AI score0.00296EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2024/07/16 10:39 p.m.•66 views

CVE-2024-21141

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 7.0.20. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

8.2CVSS7.5AI score0.0026EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2024/06/07 8:9 p.m.•66 views

CVE-2023-7261

Inappropriate implementation in Google Updator prior to 1.3.36.351 in Google Chrome allowed a local attacker to perform privilege escalation via a malicious file. Chromium security severity: High...

7.8CVSS7.1AI score0.00162EPSS
SaveExploits2
Debian CVE
Debian CVE
•added 2024/06/06 12:0 a.m.•66 views

CVE-2024-33655

The DNS protocol in RFC 1035 and updates allows remote attackers to cause a denial of service resource consumption by arranging for DNS queries to be accumulated for seconds, such that responses are later sent in a pulsing burst which can be considered traffic amplification in some cases, aka the...

7.5CVSS7AI score0.01743EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2024/05/28 2:2 p.m.•66 views

CVE-2023-35950

Removed by vendor...

7.8CVSS7.5AI score0.00495EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2024/05/28 2:2 p.m.•66 views

CVE-2024-23951

Removed by vendor...

8.8CVSS8.5AI score0.00916EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2024/05/22 6:19 a.m.•66 views

CVE-2021-47436

In the Linux kernel, the following vulnerability has been resolved: usb: musb: dsps: Fix the probe error path Commit 7c75bde329d7 "usb: musb: musbdsps: requestirq after initializing musb" has inverted the calls to dspssetupoptionalvbusirq and dspscreatemusbpdev without updating correctly the erro...

5.5CVSS6.5AI score0.00226EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2024/05/21 3:31 p.m.•66 views

CVE-2023-52797

In the Linux kernel, the following vulnerability has been resolved: drivers: perf: Check findfirstbit return value We must check the return value of findfirstbit before using the return value as an index array since it happens to overflow the array and then panic: 107.318430 Kernel BUG 1 107.3194...

5.5CVSS4.7AI score0.0028EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2024/05/21 3:30 p.m.•66 views

CVE-2023-52771

In the Linux kernel, the following vulnerability has been resolved: cxl/port: Fix deleteendpoint vs parent unregistration race The CXL subsystem, at cxlmem -probe time, establishes a lineage of ports struct cxlport objects between an endpoint and the root of a CXL topology. Each port including th...

4.7CVSS6.7AI score0.00182EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2024/05/21 2:19 p.m.•66 views

CVE-2021-47229

In the Linux kernel, the following vulnerability has been resolved: PCI: aardvark: Fix kernel panic during PIO transfer Trying to start a new PIO transfer by writing value 0 in PIOSTART register when previous transfer has not yet completed which is indicated by value 1 in PIOSTART causes an...

5.5CVSS6.4AI score0.00226EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2024/05/17 1:23 p.m.•66 views

CVE-2024-35816

In the Linux kernel, the following vulnerability has been resolved: firewire: ohci: prevent leak of left-over IRQ on unbind Commit 5a95f1ded28691e6 "firewire: ohci: use devres for requested IRQ" also removed the call to freeirq in pciremove, leading to a leftover irq of devmrequestirq at...

5.5CVSS5.3AI score0.00222EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2024/05/17 12:24 p.m.•66 views

CVE-2024-35784

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix deadlock with fiemap and extent locking While working on the patchset to remove extent locking I got a lockdep splat with fiemap and pagefaulting with my new extent lock replacement lock. This deadlock exists with our...

5.5CVSS6.9AI score0.00173EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2024/05/17 12:8 p.m.•66 views

CVE-2023-52660

In the Linux kernel, the following vulnerability has been resolved: media: rkisp1: Fix IRQ handling due to shared interrupts The driver requests the interrupts as IRQFSHARED, so the interrupt handlers can be called at any time. If such a call happens while the ISP is powered down, the SoC will ha...

5.5CVSS7.1AI score0.00219EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2024/05/17 11:40 a.m.•66 views

CVE-2024-27405

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs It is observed sometimes when tethering is used over NCM with Windows 11 as host, at some instances, the gadgetgiveback has one byte appended at the end of a prop...

7.5CVSS7.3AI score0.01287EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2024/05/03 2:13 a.m.•66 views

CVE-2023-42119

Exim dnsdb Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Exim. Authentication is not required to exploit this vulnerability. The specific flaw exists within the smtp...

3.1CVSS6.1AI score0.01593EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2024/05/03 2:11 a.m.•66 views

CVE-2023-40481

7-Zip SquashFS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page o...

7.8CVSS7.8AI score0.27087EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2024/04/17 5:27 p.m.•66 views

CVE-2024-2961

The iconv function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable...

7.3CVSS7.1AI score0.8833EPSS
SaveExploits16
Debian CVE
Debian CVE
•added 2024/04/17 10:27 a.m.•66 views

CVE-2024-26908

Removed by vendor...

7.2AI score
SaveExploits0
Debian CVE
Debian CVE
•added 2024/04/17 7:46 a.m.•66 views

CVE-2024-3845

Inappropriate implementation in Networks in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to bypass mixed content policy via a crafted HTML page. Chromium security severity: Low...

9.8CVSS5.1AI score0.00758EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2024/04/16 9:26 p.m.•66 views

CVE-2024-21114

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

8.8CVSS8.4AI score0.00392EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2024/04/16 9:26 p.m.•66 views

CVE-2024-21111

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

7.8CVSS7.6AI score0.0178EPSS
SaveExploits3
Debian CVE
Debian CVE
•added 2024/04/04 8:20 a.m.•66 views

CVE-2024-26745

In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries/iommu: IOMMU table is not initialized for kdump over SR-IOV When kdump kernel tries to copy dump data over SR-IOV, LPAR panics due to NULL pointer exception: Kernel attempted to read user page 0 - exploit attempt?...

4.4CVSS6.2AI score0.0022EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2024/04/03 2:55 p.m.•66 views

CVE-2024-26712

In the Linux kernel, the following vulnerability has been resolved: powerpc/kasan: Fix addr error caused by page alignment In kasaninitregion, when kstart is not page aligned, at the begin of for loop, kcur = kstart & PAGEMASK is less than kstart, and then va = block + kcur - kstart is less than...

4.4CVSS6.8AI score0.00223EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2024/03/27 12:0 a.m.•66 views

CVE-2023-45927

S-Lang 2.3.2 was discovered to contain an arithmetic exception via the function ttsprintf...

9.1CVSS9.3AI score0.00844EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2024/03/19 12:2 p.m.•66 views

CVE-2024-2606

Passing invalid data could have led to invalid wasm values being created, such as arbitrary integers turning into pointer values. This vulnerability affects Firefox 124...

3.7CVSS7.2AI score0.00437EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2024/03/01 12:0 a.m.•66 views

CVE-2024-27355

An issue was discovered in phpseclib 1.x before 1.0.23, 2.x before 2.0.47, and 3.x before 3.0.36. When processing the ASN.1 object identifier of a certificate, a sub identifier may be provided that leads to a denial of service CPU consumption for decodeOID...

7.5CVSS7.4AI score0.00569EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2024/02/28 8:13 a.m.•66 views

CVE-2020-36787

In the Linux kernel, the following vulnerability has been resolved: media: aspeed: fix clock handling logic Video engine uses eclk and vclk for its clock sources and its reset control is coupled with eclk so the current clock enabling sequence works like below. Enable eclk De-assert Video Engine...

5.5CVSS5.2AI score0.00222EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2024/02/27 3:44 p.m.•66 views

CVE-2024-26144

Rails is a web-application framework. Starting with version 5.2.0, there is a possible sensitive session information leak in Active Storage. By default, Active Storage sends a Set-Cookie header along with the user's session cookie when serving blobs. It also sets Cache-Control to public. Certain...

5.3CVSS5.1AI score0.01119EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2024/02/20 3:29 p.m.•66 views

CVE-2024-23310

A use-after-free vulnerability exists in the sopenFAMOSread functionality of The Biosig Project libbiosig 2.5.0 and Master Branch ab0ee111. A specially crafted .famos file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability...

9.8CVSS9.6AI score0.01703EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2024/02/07 10:2 p.m.•66 views

CVE-2023-6736

Removed by vendor...

6.5CVSS6.6AI score0.00643EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2023/12/19 12:0 a.m.•66 views

CVE-2023-49006

Cross Site Request Forgery CSRF vulnerability in Phpsysinfo version 3.4.3 allows a remote attacker to obtain sensitive information via a crafted page in the XML.php file...

6.5CVSS6.2AI score0.00524EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2023/11/16 10:50 p.m.•66 views

CVE-2023-48235

Vim is an open source command line text editor. When parsing relative ex addresses one may unintentionally cause an overflow. Ironically this happens in the existing overflow check, because the line number becomes negative and LONGMAX - lnum will cause the overflow. Impact is low, user interactio...

4.3CVSS6.4AI score0.00749EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2023/11/14 8:44 p.m.•66 views

CVE-2023-47641

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Affected versions of aiohttp have a security vulnerability regarding the inconsistent interpretation of the http protocol. HTTP/1.1 is a persistent protocol, if both Content-LengthCL and Transfer-EncodingTE header...

6.5CVSS5.1AI score0.00827EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2023/11/01 1:28 p.m.•66 views

CVE-2023-5625

A regression was introduced in the Red Hat build of python-eventlet due to a change in the patch application strategy, resulting in a patch for CVE-2021-21419 not being applied for all builds of all products...

7.5CVSS6.3AI score0.00802EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2023/10/20 11:26 p.m.•66 views

CVE-2023-45676

stbvorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds write in f-vendori = get8packetf;. The root cause is an integer overflow in setupmalloc. A sufficiently large value in the variable sz overflows with sz+7 in and the negative...

7.8CVSS8AI score0.00518EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2023/09/25 3:20 p.m.•66 views

CVE-2023-3550

Mediawiki v1.40.0 does not validate namespaces used in XML files. Therefore, if the instance administrator allows XML file uploads, a remote attacker with a low-privileged user account can use this exploit to become an administrator by sending a malicious link to the instance administrator...

9CVSS7AI score0.01151EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2023/09/11 8:2 a.m.•66 views

CVE-2023-4104

Removed by vendor...

5.5CVSS5.5AI score0.00353EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2023/08/28 5:24 p.m.•66 views

CVE-2023-40590

GitPython is a python library used to interact with Git repositories. When resolving a program, Python/Windows look for the current working directory, and after that the PATH environment. GitPython defaults to use the git command, if a user runs GitPython from a repo has a git.exe or git...

7.8CVSS7.4AI score0.00465EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2023/08/22 12:0 a.m.•66 views

CVE-2022-34038

Etcd v3.5.4 allows remote attackers to cause a denial of service via function PageWriter.write in pagewriter.go. NOTE: the vendor's position is that this is not a vulnerability...

7.5CVSS7.4AI score0.01314EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2023/08/22 12:0 a.m.•66 views

CVE-2020-21490

An issue was discovered in GNU Binutils 2.34. It is a memory leak when process microblaze-dis.c. This one will consume memory on each insn disassembled...

5.5CVSS5.5AI score0.00302EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2023/08/22 12:0 a.m.•66 views

CVE-2022-48554

File before 5.43 has an stack-based buffer over-read in filecopystr in funcs.c. NOTE: "File" is the name of an Open Source project...

5.5CVSS6.9AI score0.00656EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2023/08/15 12:0 a.m.•66 views

CVE-2023-38852

Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted XLS file to the unicodedecodewcstombs function in xlstool.c:266...

6.5CVSS6.9AI score0.0117EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2023/08/11 12:0 a.m.•66 views

CVE-2020-24904

An issue was discovered in attach parameter in GNOME Gmail version 2.5.4, allows remote attackers to gain sensitive information via crafted "mailto" link...

6.5CVSS6.5AI score0.00665EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2023/08/08 5:2 p.m.•66 views

CVE-2023-20569

A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in speculative execution at an attacker-controlled address, potentially leading to information disclosure...

4.7CVSS6.6AI score0.06657EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2023/08/02 7:52 p.m.•66 views

CVE-2023-29408

The TIFF decoder does not place a limit on the size of compressed tile data. A maliciously-crafted image can exploit this to cause a small image both in terms of pixel width/height, and encoded size to make the decoder decode large amounts of compressed data, consuming excessive memory and CPU...

6.5CVSS6.6AI score0.0086EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2023/07/05 7:25 p.m.•66 views

CVE-2023-34457

MechanicalSoup is a Python library for automating interaction with websites. Starting in version 0.2.0 and prior to version 1.3.0, a malicious web server can read arbitrary files on the client using a inside HTML form. All users of MechanicalSoup's form submission are affected, unless they took...

7.5CVSS7.4AI score0.01082EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2023/06/28 12:0 a.m.•66 views

CVE-2023-3355

A NULL pointer dereference flaw was found in the Linux kernel's drivers/gpu/drm/msm/msmgemsubmit.c code in the submitlookupcmds function, which fails because it lacks a check of the return value of kmalloc. This issue allows a local user to crash the system...

5.5CVSS6.5AI score0.00288EPSS
SaveExploits0
Total number of security vulnerabilities5000