Lucene search
+L
DebiancveMost viewed

61371 matches found

Debian CVE
Debian CVE
added 2024/12/05 11:13 p.m.65 views

CVE-2024-6219

Mark Laing discovered in LXD's PKI mode, until version 5.21.1, that a restricted certificate could be added to the trust store with its restrictions not honoured...

3.8CVSS5.2AI score0.00156EPSS
Exploits1
Debian CVE
Debian CVE
added 2024/10/29 12:50 a.m.65 views

CVE-2024-50073

In the Linux kernel, the following vulnerability has been resolved: tty: ngsm: Fix use-after-free in gsmcleanupmux BUG: KASAN: slab-use-after-free in gsmcleanupmux+0x77b/0x7b0 drivers/tty/ngsm.c:3160 ngsm Read of size 8 at addr ffff88815fe99c00 by task poc/3379 CPU: 0 UID: 0 PID: 3379 Comm: poc N...

7.8CVSS5.7AI score0.00258EPSS
Exploits0
Debian CVE
Debian CVE
added 2024/10/16 1:46 p.m.65 views

CVE-2024-22034

Attackers could put the special files in .osc into the actual package sources e.g. apiurl. This allows the attacker to change the configuration of osc for the victim...

5.5CVSS5.2AI score0.00209EPSS
Exploits0
Debian CVE
Debian CVE
added 2024/09/18 7:12 a.m.65 views

CVE-2024-46764

In the Linux kernel, the following vulnerability has been resolved: bpf: add check for invalid name in btfnamevalidsection If the length of the name string is 1 and the value of name0 is NULL byte, an OOB vulnerability occurs in btfnamevalidsection and the return value is true, so the invalid nam...

7.1CVSS5.7AI score0.00223EPSS
Exploits0
Debian CVE
Debian CVE
added 2024/09/06 1:10 p.m.65 views

CVE-2024-45405

gix-path is a crate of the gitoxide project an implementation of git written in Rust dealing paths and their conversions. Prior to version 0.10.11, gix-path runs git to find the path of a configuration file associated with the git installation, but improperly resolves paths containing unusual or...

6CVSS5.6AI score0.00257EPSS
Exploits0
Debian CVE
Debian CVE
added 2024/09/04 6:35 p.m.65 views

CVE-2024-44949

In the Linux kernel, the following vulnerability has been resolved: parisc: fix a possible DMA corruption ARCHDMAMINALIGN was defined as 16 - this is too small - it may be possible that two unrelated 16-byte allocations share a cache line. If one of these allocations is written using DMA and the...

7.8CVSS6.7AI score0.00231EPSS
Exploits0
Debian CVE
Debian CVE
added 2024/08/21 6:10 a.m.65 views

CVE-2022-48882

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix macsec possible null dereference when updating MAC security entity SecY Upon updating MAC security entity SecY in hw offload path, the macsec security association SA initialization routine is called. In case of...

5.5CVSS5.3AI score0.00205EPSS
Exploits0
Debian CVE
Debian CVE
added 2024/07/11 2:31 a.m.65 views

CVE-2016-15039

A vulnerability classified as critical was found in mhuertos phpLDAPadmin up to 665dbc2690ebeb5392d38f1fece0a654225a0b38. Affected by this vulnerability is the function makeHttpRequest of the file htdocs/js/ajaxfunctions.js. The manipulation leads to http request smuggling. The attack can be...

6.5CVSS5.9AI score0.00426EPSS
Exploits0
Debian CVE
Debian CVE
added 2024/07/01 12:0 a.m.65 views

CVE-2024-32230

FFmpeg 7.0 is vulnerable to Buffer Overflow. There is a negative-size-param bug at libavcodec/mpegvideoenc.c:1216:21 in loadinputpicture in FFmpeg7.0...

7.8CVSS6.8AI score0.00355EPSS
Exploits1
Debian CVE
Debian CVE
added 2024/05/22 6:19 a.m.65 views

CVE-2021-47436

In the Linux kernel, the following vulnerability has been resolved: usb: musb: dsps: Fix the probe error path Commit 7c75bde329d7 "usb: musb: musbdsps: requestirq after initializing musb" has inverted the calls to dspssetupoptionalvbusirq and dspscreatemusbpdev without updating correctly the erro...

5.5CVSS6.5AI score0.00226EPSS
Exploits0
Debian CVE
Debian CVE
added 2024/05/17 11:40 a.m.65 views

CVE-2024-27405

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs It is observed sometimes when tethering is used over NCM with Windows 11 as host, at some instances, the gadgetgiveback has one byte appended at the end of a prop...

7.5CVSS7.3AI score0.01287EPSS
Exploits0
Debian CVE
Debian CVE
added 2024/05/09 4:46 p.m.65 views

CVE-2024-32624

HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5Trefmemsetnull in H5Tref.c called from H5Tconvref in H5Tconv.c, resulting in the corruption of the instruction pointer...

7.4CVSS8AI score0.00632EPSS
Exploits0
Debian CVE
Debian CVE
added 2024/05/01 12:49 p.m.65 views

CVE-2024-4059

Out of bounds read in V8 API in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to leak cross-site data via a crafted HTML page. Chromium security severity: High...

6.5CVSS6.6AI score0.009EPSS
Exploits1
Debian CVE
Debian CVE
added 2024/04/28 1:1 p.m.65 views

CVE-2022-48661

In the Linux kernel, the following vulnerability has been resolved: gpio: mockup: Fix potential resource leakage when register a chip If creation of software node fails, the locally allocated string array is left unfreed. Free it on error path...

5.5CVSS5.4AI score0.00223EPSS
Exploits0
Debian CVE
Debian CVE
added 2024/04/25 6:27 a.m.65 views

CVE-2023-6237

Issue summary: Checking excessively long invalid RSA public keys may take a long time. Impact summary: Applications that use the function EVPPKEYpubliccheck to check RSA public keys may experience long delays. Where the key that is being checked has been obtained from an untrusted source this may...

5.9CVSS7AI score0.02303EPSS
Exploits0
Debian CVE
Debian CVE
added 2024/04/17 10:27 a.m.65 views

CVE-2024-26909

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: pmicglinkaltmode: fix drm bridge use-after-free A recent DRM series purporting to simplify support for "transparent bridges" and handling of probe deferrals ironically exposed a use-after-free issue on pmicglinkaltmode...

5.5CVSS6.6AI score0.00236EPSS
Exploits0
Debian CVE
Debian CVE
added 2024/04/17 10:10 a.m.65 views

CVE-2024-26841

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Update cpusiblingmap when disabling nonboot CPUs Update cpusiblingmap when disabling nonboot CPUs by defining & calling clearcpusiblingmap, otherwise we get such errors on SMT systems: jump label: negative count!...

5.5CVSS3.9AI score0.00222EPSS
Exploits0
Debian CVE
Debian CVE
added 2024/04/02 10:0 p.m.65 views

CVE-2024-3203

A vulnerability, which was classified as critical, was found in c-blosc2 up to 2.13.2. Affected is the function ndlz8decompress of the file /src/c-blosc2/plugins/codecs/ndlz/ndlz8x8.c. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit...

9.8CVSS7.3AI score0.01348EPSS
Exploits1
Debian CVE
Debian CVE
added 2024/03/13 2:1 p.m.65 views

CVE-2023-52608

In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Check mailbox/SMT channel for consistency On reception of a completion interrupt the shared memory area is accessed to retrieve the message header at first and then, if the message sequence number identifies a...

4.7CVSS7AI score0.00174EPSS
Exploits0
Debian CVE
Debian CVE
added 2024/02/11 11:0 p.m.65 views

CVE-2024-1433

A vulnerability, which was classified as problematic, was found in KDE Plasma Workspace up to 5.93.0. This affects the function EventPluginsManager::enabledPlugins of the file components/calendar/eventpluginsmanager.cpp of the component Theme File Handler. The manipulation of the argument pluginI...

3.7CVSS3.9AI score0.00782EPSS
Exploits0
Debian CVE
Debian CVE
added 2024/02/06 11:15 p.m.65 views

CVE-2024-1284

Use after free in Mojo in Google Chrome prior to 121.0.6167.160 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

9.8CVSS9.8AI score0.01122EPSS
Exploits0
Debian CVE
Debian CVE
added 2024/02/05 8:45 p.m.65 views

CVE-2023-50782

A flaw was found in the python-cryptography package. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data...

7.5CVSS5.9AI score0.01118EPSS
Exploits0
Debian CVE
Debian CVE
added 2024/01/12 1:57 p.m.65 views

CVE-2023-2030

Removed by vendor...

5.3CVSS6AI score0.00384EPSS
Exploits0
Debian CVE
Debian CVE
added 2024/01/03 5:1 p.m.65 views

CVE-2023-6004

A flaw was found in libssh. By utilizing the ProxyCommand or ProxyJump feature, users can exploit unchecked hostname syntax on the client. This issue may allow an attacker to inject malicious code into the command of the features mentioned through the hostname parameter...

4.8CVSS6.5AI score0.00449EPSS
Exploits0
Debian CVE
Debian CVE
added 2023/12/19 1:38 p.m.65 views

CVE-2023-6868

In some instances, the user-agent would allow push requests which lacked a valid VAPID even though the push manager subscription defined one. This could allow empty messages to be sent from unauthorized parties. This bug only affects Firefox on Android. This vulnerability affects Firefox 121...

4.3CVSS6.9AI score0.00493EPSS
Exploits0
Debian CVE
Debian CVE
added 2023/12/12 9:54 p.m.65 views

CVE-2023-5379

A flaw was found in Undertow. When an AJP request is sent that exceeds the max-header-size attribute in ajp-listener, JBoss EAP is marked in an error state by modcluster in httpd, causing JBoss EAP to close the TCP connection without returning an AJP response. This happens because modproxycluster...

7.5CVSS7.3AI score0.01016EPSS
Exploits0
Debian CVE
Debian CVE
added 2023/12/11 12:0 a.m.65 views

CVE-2023-49355

decToString in decNumber/decNumber.c in jq 88f01a7 has a one-byte out-of-bounds write via the " -1.2e-1111111111" input. NOTE: this is not the same as CVE-2023-50246. The CVE-2023-50246 71c2ab5 reference mentions -10E-1000010001, which is not in normalized scientific notation...

7.5CVSS6.1AI score0.0117EPSS
Exploits1
Debian CVE
Debian CVE
added 2023/11/29 12:2 p.m.65 views

CVE-2023-6347

Use after free in Mojo in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS9.4AI score0.01057EPSS
Exploits0
Debian CVE
Debian CVE
added 2023/10/31 3:23 p.m.65 views

CVE-2023-46250

pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions 3.7.0 through 3.16.4 can craft a PDF which leads to an infinite loop. This infinite loop blocks the current process and can utilize a single core of the CPU by 100%. It does not affec...

5.5CVSS5.3AI score0.00243EPSS
Exploits0
Debian CVE
Debian CVE
added 2023/10/17 9:3 p.m.65 views

CVE-2023-22091

Removed by vendor...

4.8CVSS5.4AI score0.00365EPSS
Exploits0
Debian CVE
Debian CVE
added 2023/10/17 9:2 p.m.65 views

CVE-2023-22067

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: CORBA. Supported versions that are affected are Oracle Java SE: 8u381, 8u381-perf; Oracle GraalVM Enterprise Edition: 20.3.11 and 21.3.7. Easily exploitable vulnerability allows...

5.3CVSS4.6AI score0.00888EPSS
Exploits0
Debian CVE
Debian CVE
added 2023/10/16 8:56 p.m.65 views

CVE-2023-42459

Fast DDS is a C++ implementation of the DDS Data Distribution Service standard of the OMG Object Management Group. In affected versions specific DATA submessages can be sent to a discovery locator which may trigger a free error. This can remotely crash any Fast-DDS process. The call to free could...

8.6CVSS7.7AI score0.00826EPSS
Exploits1
Debian CVE
Debian CVE
added 2023/10/16 6:13 p.m.65 views

CVE-2023-45683

Removed by vendor...

7.1CVSS6.3AI score0.00434EPSS
Exploits0
Debian CVE
Debian CVE
added 2023/09/25 3:20 p.m.65 views

CVE-2023-3550

Mediawiki v1.40.0 does not validate namespaces used in XML files. Therefore, if the instance administrator allows XML file uploads, a remote attacker with a low-privileged user account can use this exploit to become an administrator by sending a malicious link to the instance administrator...

9CVSS7AI score0.01151EPSS
Exploits1
Debian CVE
Debian CVE
added 2023/08/14 3:27 p.m.65 views

CVE-2023-4322

Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0...

9.8CVSS7.3AI score0.00926EPSS
Exploits1
Debian CVE
Debian CVE
added 2023/08/07 12:0 a.m.65 views

CVE-2022-48579

UnRAR before 6.2.3 allows extraction of files outside of the destination folder via symlink chains...

7.5CVSS7.5AI score0.00722EPSS
Exploits0
Debian CVE
Debian CVE
added 2023/07/21 8:25 p.m.65 views

CVE-2022-43607

An out-of-bounds write vulnerability exists in the MOL2 format attribute and value functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability...

8.1CVSS8.1AI score0.00782EPSS
Exploits1
Debian CVE
Debian CVE
added 2023/06/14 12:0 a.m.65 views

CVE-2023-34867

Removed by vendor...

7.5CVSS7.5AI score0.00732EPSS
Exploits1
Debian CVE
Debian CVE
added 2023/05/09 12:0 a.m.65 views

CVE-2023-2156

A flaw was found in the networking subsystem of the Linux kernel within the handling of the RPL protocol. This issue results from the lack of proper handling of user-supplied data, which can lead to an assertion failure. This may allow an unauthenticated remote attacker to create a denial of...

7.5CVSS6.5AI score0.06127EPSS
Exploits0
Debian CVE
Debian CVE
added 2023/05/02 11:47 p.m.65 views

CVE-2023-2459

Inappropriate implementation in Prompts in Google Chrome prior to 113.0.5672.63 allowed a remote attacker to bypass permission restrictions via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS7.3AI score0.00968EPSS
Exploits0
Debian CVE
Debian CVE
added 2023/04/01 4:44 a.m.65 views

CVE-2023-0187

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler, where an out-of-bounds read can lead to denial of service...

6.1CVSS5.8AI score0.00226EPSS
Exploits0
Debian CVE
Debian CVE
added 2023/03/29 12:0 a.m.65 views

CVE-2023-0664

A flaw was found in the QEMU Guest Agent service for Windows. A local unprivileged user may be able to manipulate the QEMU Guest Agent's Windows installer via repair custom actions to elevate their privileges on the system...

7.8CVSS6.5AI score0.00306EPSS
Exploits0
Debian CVE
Debian CVE
added 2023/03/24 12:0 a.m.65 views

CVE-2021-43312

A heap-based buffer overflow was discovered in upx, during the variable 'bucket' points to an inaccessible address. The issue is being triggered in the function PackLinuxElf64::invertptdynamic at plxelf.cpp:5239...

7.5CVSS7.5AI score0.00817EPSS
Exploits1
Debian CVE
Debian CVE
added 2023/03/03 12:0 a.m.65 views

CVE-2023-26604

systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in which the "systemctl status" command may be executed. Specifically, systemd does not set LESSSECURE to 1, and thus other programs may be launched from the less...

7.8CVSS6.7AI score0.01051EPSS
Exploits4
Debian CVE
Debian CVE
added 2023/03/02 1:19 a.m.65 views

CVE-2023-0193

NVIDIA CUDA Toolkit SDK contains a vulnerability in cuobjdump, where a local user running the tool against a malicious binary may cause an out-of-bounds read, which may result in a limited denial of service and limited information disclosure...

4.4CVSS4.4AI score0.00213EPSS
Exploits0
Debian CVE
Debian CVE
added 2023/03/01 12:0 a.m.65 views

CVE-2023-23003

In the Linux kernel before 5.16, tools/perf/util/expr.c lacks a check for the hashmapnew return value...

4CVSS6.4AI score0.00267EPSS
Exploits0
Debian CVE
Debian CVE
added 2023/02/20 5:31 p.m.65 views

CVE-2019-25104

A vulnerability has been found in rtcwcoop 1.0.2 and classified as problematic. Affected by this vulnerability is the function AICastScriptLoad of the file code/game/aicastscript.c of the component Team Command Handler. The manipulation leads to denial of service. The identifier of the patch is...

7.5CVSS4.4AI score0.01186EPSS
Exploits1
Debian CVE
Debian CVE
added 2023/02/20 12:0 a.m.65 views

CVE-2022-48337

GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file, because lib-src/etags.c uses the system C library function in its implementation of the etags program. For example, a victim may use the "etags -u " command suggested in the eta...

9.8CVSS8.8AI score0.01603EPSS
Exploits0
Debian CVE
Debian CVE
added 2023/02/17 12:25 p.m.65 views

CVE-2023-23586

Due to a vulnerability in the iouring subsystem, it is possible to leak kernel memory information to the user process. timensinstall calls currentissinglethreaded to determine if the current process is single-threaded, but this call does not consider iouring's ioworker threads, thus it is possibl...

5.5CVSS5.6AI score0.0027EPSS
Exploits0
Debian CVE
Debian CVE
added 2023/02/09 12:0 a.m.65 views

CVE-2023-22797

An open redirect vulnerability is fixed in Rails 7.0.4.1 with the new protection against open redirects from calling redirectto with untrusted user input. In prior versions the developer was fully responsible for only providing trusted input. However the check introduced could allow an attacker t...

6.1CVSS5.6AI score0.00595EPSS
Exploits0
Total number of security vulnerabilities5000