Lucene search
+L
OsvMost viewed

1001673 matches found

OSV
OSV
added 2020/12/31 9:15 a.m.69 views

UBUNTU-CVE-2020-35906

An issue was discovered in the futures-task crate before 0.3.6 for Rust. futurestask::waker may cause a use-after-free in a non-static type situation...

7.8CVSS7.1AI score0.00493EPSS
SaveExploits1References4
OSV
OSV
added 2020/12/04 4:47 p.m.69 views

GHSA-4FJV-PMHG-3RFG Multiple cryptographic issues in Python oic

Impact Client implementations using this library Issues 1 The IdToken signature algorithm was not checked automatically, but only if the expected algorithm was passed in as a kwarg. 2 JWA none algorithm was allowed in all flows. 3 oic.consumer.Consumer.parseauthz returns an unverified IdToken. Th...

7.6CVSS6.4AI score0.00822EPSS
SaveExploits0References7
OSV
OSV
added 2020/11/23 7:48 p.m.69 views

GHSA-94VP-RMQV-5875 Twig Sandbox Escape by authenticated users with access to editing CMS templates when safemode is enabled.

Impact An authenticated backend user with the cms.managepages, cms.managelayouts, or cms.managepartials permissions who would normally not be permitted to provide PHP code to be executed by the CMS due to cms.enableSafeMode being enabled is able to write specific Twig code to escape the Twig...

5.2CVSS6.1AI score0.0029EPSS
SaveExploits0References4
OSV
OSV
added 2020/08/31 12:0 a.m.69 views

DSA-4757-1 apache2 - security update

Bulletin has no description...

9.8CVSS7.8AI score0.90039EPSS
SaveExploits4
OSV
OSV
added 2020/07/07 4:34 p.m.69 views

GHSA-XQ5J-GW7F-JGJ8 CSRF Vulnerability in rails-ujs

There is a vulnerability in rails-ujs that allows attackers to send CSRF tokens to wrong domains. Versions Affected: rails = 5.2.4.3, rails = 6.0.3.1 Impact ------ This is a regression of CVE-2015-1840. In the scenario where an attacker might be able to control the href attribute of an anchor tag...

6.5CVSS7.6AI score0.01485EPSS
SaveExploits1References6
OSV
OSV
added 2020/06/15 7:36 p.m.69 views

GHSA-MM9X-G8PC-W292 Denial of Service in Netty

The ZlibDecoders in Netty 4.1.x before 4.1.46 allow for unbounded memory allocation while decoding a ZlibEncoded byte stream. An attacker could send a large ZlibEncoded byte stream to the Netty server, forcing the server to allocate all of its free memory to a single decoder...

7.5CVSS7.5AI score0.09438EPSS
SaveExploits0References46
OSV
OSV
added 2020/05/06 12:0 a.m.69 views

DSA-4680-1 tomcat9 - security update

Bulletin has no description...

9.8CVSS7.9AI score0.9927EPSS
SaveExploits49
OSV
OSV
added 2020/04/14 3:27 p.m.69 views

GHSA-8H56-V53H-5HHJ Remote Code Execution - JavaEL Injection (low privileged accounts) in Nexus Repository Manager

Sonatype Nexus Repository before 3.21.2 allows Remote Code Execution...

8.8CVSS7.2AI score0.25219EPSS
SaveExploits3References5
OSV
OSV
added 2020/01/24 9:26 p.m.69 views

GHSA-6GC6-M364-85WW Log injection in SimpleSAMLphp

Background SimpleSAMLphp has a logging functionality that allows system administrators to keep track of the activity, errors, and statistics. Additionally, it allows users to report errors, shall they happen. An error report contains a report identifier, which is logged once submitted. Descriptio...

4.4CVSS5.4AI score0.00653EPSS
SaveExploits0References3
OSV
OSV
added 2020/01/12 12:0 a.m.69 views

DLA-2065-1 apache-log4j1.2 - security update

Bulletin has no description...

9.8CVSS8.8AI score0.6906EPSS
SaveExploits3
OSV
OSV
added 2019/09/24 12:0 a.m.69 views

DLA-1930-1 linux - security update

Bulletin has no description...

10CVSS7.5AI score0.05189EPSS
SaveExploits13
OSV
OSV
added 2018/10/18 6:5 p.m.69 views

GHSA-XX65-CC7G-9PFP Moderate severity vulnerability that affects org.springframework.boot:spring-boot

Spring Boot supports an embedded launch script that can be used to easily run the application as a systemd or init.d linux service. The script included with Spring Boot 1.5.9 and earlier and 2.0.0.M1 through 2.0.0.M7 is susceptible to a symlink attack which allows the "runuser" to overwrite and...

5.9CVSS5.6AI score0.01235EPSS
SaveExploits0References3
OSV
OSV
added 2018/10/17 8:28 p.m.69 views

GHSA-3RMV-2PG5-XVQJ Spring Framework has Improperly Implemented Security Check for Standard

Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.16 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user or attacker can craft a message to...

9.8CVSS9.4AI score0.57632EPSS
SaveExploits0References18
OSV
OSV
added 2018/09/16 12:0 a.m.69 views

DSA-4273-2 intel-microcode - security update

Bulletin has no description...

5.6CVSS6.3AI score0.60631EPSS
SaveExploits3
OSV
OSV
added 2017/11/20 3:29 p.m.69 views

CVE-2017-16544

In the addmatch function in libbb/lineedit.c in BusyBox through 1.27.2, the tab autocomplete feature of the shell, used to get a list of filenames in a directory, does not sanitize filenames and results in executing any escape sequence in the terminal. This could potentially result in code...

8.8CVSS2.7AI score
SaveExploits0References20
OSV
OSV
added 2017/10/06 10:29 p.m.69 views

DEBIAN-CVE-2015-1828

The Ruby http gem before 0.7.3 does not verify hostnames in SSL connections, which might allow remote attackers to obtain sensitive information via a man-in-the-middle-attack...

5.9CVSS6.6AI score0.01521EPSS
SaveExploits0References1
OSV
OSV
added 2017/03/21 6:59 a.m.69 views

DEBIAN-CVE-2017-7200

An SSRF issue was discovered in OpenStack Glance before Newton. The 'copyfrom' feature in the Image Service API v1 allowed an attacker to perform masked network port scans. With v1, it is possible to create images with a URL such as 'http://localhost:22'. This could then allow an attacker to...

5.8CVSS5.7AI score0.02034EPSS
SaveExploits0References1
OSV
OSV
added 2017/01/18 5:59 p.m.69 views

DEBIAN-CVE-2016-2233

Stack-based buffer overflow in the inboundcapls function in common/inbound.c in HexChat 2.10.2 allows remote IRC servers to cause a denial of service crash via a large number of options in a CAP LS message...

7.5CVSS7.2AI score0.34894EPSS
SaveExploits5References1
OSV
OSV
added 2013/09/27 12:0 a.m.69 views

DSA-2766-1 linux-2.6 - several

Bulletin has no description...

6.9CVSS7AI score0.04707EPSS
SaveExploits8
OSV
OSV
added 2012/02/28 12:0 a.m.69 views

DSA-2420-1 openjdk-6 - several

Bulletin has no description...

10CVSS8.8AI score0.98113EPSS
SaveExploits20
OSV
OSV
added 2009/11/25 12:0 a.m.69 views

DSA-1940-1 php5 - multiple issues

Bulletin has no description...

7.5CVSS8.1AI score0.12041EPSS
SaveExploits9
OSV
OSV
added 2007/06/16 12:0 a.m.69 views

DSA-1304 kernel-source-2.6.8 - several

Bulletin has no description...

9.4CVSS6.6AI score0.13529EPSS
SaveExploits6
OSV
OSV
added 2026/07/25 7:23 p.m.68 views

MINI-FMJC-P3VQ-2WQ3

Bulletin has no description...

5.8AI score
SaveExploits0
OSV
OSV
added 2026/05/27 9:33 p.m.68 views

GHSA-C2P3-7M5P-CV8X Symfony hardened the parser when handling untrusted input

Description Symfony\Component\Yaml\Parser is the entry point for parsing YAML strings into PHP values via Yaml::parse. When the parser is exposed to attacker-controlled input, deeply nested mappings or sequences cause both the block-level Parser::parseBlock and inline Inline::parseSequence /...

6.9CVSS5.8AI score0.0074EPSS
SaveExploits0References6
OSV
OSV
added 2026/05/22 6:10 a.m.68 views

BELL-CVE-2026-43501

Bulletin has no description...

9.8CVSS5.7AI score0.00595EPSS
SaveExploits0References1
OSV
OSV
added 2026/05/18 8:56 a.m.68 views

BIT-TOMCAT-2020-1935

In Apache Tomcat 9.0.0 to 9.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99 the HTTP header parsing code used an approach to end-of-line parsing that allowed some invalid HTTP headers to be parsed as valid. This led to a possibility of HTTP Request Smuggling if Tomcat was located behind a reverse proxy...

5.8CVSS7AI score0.09386EPSS
SaveExploits0References20
OSV
OSV
added 2026/05/16 11:58 a.m.68 views

CLSA-2026-1778932682 python3: Fix of CVE-2024-4032

CVE-2024-4032: update ipaddress module to reflect latest IANA Special-Purpose Address Registries...

7.5CVSS5.8AI score0.01079EPSS
SaveExploits0References1
OSV
OSV
added 2026/05/14 8:26 p.m.68 views

GHSA-H2CW-7QW9-56XR Open WebUI: Sharing models for others to use (read permission) also exposes model details (system prompt leakage)

Summary When setting model permissions so that a group has read access to it, intending for other users to use it, those users also can read the model's system prompt. However users may consider their system prompt confidential, so we consider this a security issue. Compare...

4.3CVSS5.8AI score0.0022EPSS
SaveExploits1References4
OSV
OSV
added 2026/05/10 4:32 a.m.68 views

CGA-9C4W-JW9P-27MQ

Bulletin has no description...

5.3CVSS5.7AI score0.00198EPSS
SaveExploits0
OSV
OSV
added 2026/05/06 11:49 p.m.68 views

GHSA-69XW-7HCM-H432 hono/jsx has Unvalidated JSX Tag Names that May Allow HTML Injection

Summary Improper handling of JSX element tag names in hono/jsx allowed unvalidated tag names to be directly inserted into the generated HTML output. When untrusted input is used as a tag name via the programmatic jsx or createElement APIs during server-side rendering, specially crafted values may...

4.7CVSS5.7AI score0.0014EPSS
SaveExploits0References3
OSV
OSV
added 2026/05/06 12:16 p.m.68 views

UBUNTU-CVE-2026-43247

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Fix SError of kernel panic when closed SError of kernel panic rarely happened while testing fluster. The root cause was to enter suspend mode because timeout of autosuspend delay happened. 48.834439...

5.5CVSS5.8AI score0.00121EPSS
SaveExploits0References3
OSV
OSV
added 2025/12/03 2:35 p.m.68 views

BIT-ACTIVEMQ-2023-46604 Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

The Java OpenWire protocol marshaller is vulnerable to Remote Code Execution. This vulnerability may allow a remote attacker with network access to either a Java-based OpenWire broker or client to run arbitrary shell commands by manipulating serialized class types in the OpenWire protocol to caus...

10CVSS8.1AI score0.99723EPSS
SaveExploits31References9
OSV
OSV
added 2025/10/14 9:29 a.m.68 views

BIT-PYTHON-2024-5642 Buffer overread when using an empty list with SSLContext.set_npn_protocols()

CPython 3.9 and earlier doesn't disallow configuring an empty list "" for SSLContext.setnpnprotocols which is an invalid value for the underlying OpenSSL API. This results in a buffer over-read when NPN is used see CVE-2024-5535 for OpenSSL. This vulnerability is of low severity due to NPN being...

6.5CVSS7.3AI score0.00744EPSS
SaveExploits1References9
OSV
OSV
added 2025/09/11 10:51 a.m.68 views

CGA-8R6F-5R83-VGP3

Bulletin has no description...

5CVSS7AI score0.02075EPSS
SaveExploits0
OSV
OSV
added 2025/05/07 5:56 a.m.68 views

BIT-VAULT-2025-3879 Vault’s Azure Authentication Method bound_location Restriction Could be Bypassed on Login

Vault Community, Vault Enterprise “Vault” Azure Auth method did not correctly validate the claims in the Azure-issued token, resulting in the potential bypass of the boundlocations parameter on login. Fixed in Vault Community Edition 1.19.1 and Vault Enterprise 1.19.1, 1.18.7, 1.17.14, 1.16.18...

8.8CVSS6.5AI score0.0042EPSS
SaveExploits0References2
OSV
OSV
added 2025/05/02 5:20 p.m.68 views

CGA-7WV2-485P-JVRC

Bulletin has no description...

10CVSS6.8AI score0.01667EPSS
SaveExploits1
OSV
OSV
added 2025/05/02 6:18 a.m.68 views

BIT-MOODLE-2024-34003 moodle: authenticated LFI risk in some misconfigured shared hosting environments via modified mod_workshop backup

In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user with both access to restore workshop modules and direct access to the web server outside of the Moodle webroot could execute a local file include...

5.9CVSS6AI score0.00354EPSS
SaveExploits0References2
OSV
OSV
added 2025/05/02 5:46 a.m.68 views

BIT-DRUPAL-2025-31674 Drupal core - Moderately critical - Gadget Chain - SA-CORE-2025-003

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Drupal core allows Object Injection.This issue affects Drupal core: from 8.0.0 before 10.3.13, from 10.4.0 before 10.4.3, from 11.0.0 before 11.0.12, from 11.1.0 before 11.1.3...

7.5CVSS7.5AI score0.0055EPSS
SaveExploits0References2
OSV
OSV
added 2025/04/29 4:26 p.m.68 views

CGA-47XV-JQ34-598V

Bulletin has no description...

6.9CVSS6.7AI score0.00173EPSS
SaveExploits0
OSV
OSV
added 2025/04/29 4:26 p.m.68 views

CGA-3M43-38G5-6PP9

Bulletin has no description...

6.9CVSS6.7AI score0.00173EPSS
SaveExploits0
OSV
OSV
added 2025/04/14 11:34 a.m.68 views

BIT-PYTHON-2024-8088 Infinite loop when iterating over zip archive entry names from zipfile.Path

There is a HIGH severity vulnerability affecting the CPython "zipfile" module affecting "zipfile.Path". Note that the more common API "zipfile.ZipFile" class is unaffected. When iterating over names of entries in a zip archive for example, methods of "zipfile.Path" like "namelist", "iterdir", etc...

8.7CVSS6.6AI score0.01275EPSS
SaveExploits0References23
OSV
OSV
added 2025/04/07 7:9 p.m.68 views

GHSA-F7F6-9JQ7-3RQJ estree-util-value-to-estree allows prototype pollution in generated ESTree

Impact When generating an ESTree from a value with a property named proto, valueToEstree would generate an object that specifies a prototype instead. Example: js import generate from 'astring' import valueToEstree from 'estree-util-value-to-estree' const estree = valueToEstree 'proto': const code...

6.9CVSS6.6AI score0.00421EPSS
SaveExploits0References4
OSV
OSV
added 2025/04/07 4:54 p.m.68 views

GHSA-QP8J-P87F-C8CC LNbits Lightning Network Payment System Vulnerable to Server-Side Request Forgery via LNURL Authentication Callback

Server-Side Request Forgery via LNURL Authentication Callback in LNbits Lightning Network Payment System Disclaimer This vulnerability was detected using XBOW, a system that autonomously finds and exploits potential security vulnerabilities. The finding has been thoroughly reviewed and validated ...

9.3CVSS7AI score0.00633EPSS
SaveExploits2References4
OSV
OSV
added 2025/04/04 2:19 p.m.68 views

GHSA-428Q-Q3VV-3FQ3 GraphQL grant on a property might be cached with different objects

Original message: I found an issue with security grants on on properties in the GraphQL ItemNormalizer: If you use something like ApiPropertysecurity: 'isgranted"PROPERTYREAD", object, property' on a member of an entity, the grant gets cached and is only evaluated once, even if the object in...

7.5CVSS7.1AI score0.00573EPSS
SaveExploits0References8
OSV
OSV
added 2025/04/03 2:7 p.m.68 views

BIT-DOLIBARR-2024-5315 Multiple vulnerabilities in DOLIBARR's ERP CMS

Vulnerabilities in Dolibarr ERP - CRM that affect version 9.0.1 and allow SQL injection. These vulnerabilities could allow a remote attacker to send a specially crafted SQL query to the system and retrieve all the information stored in the database through the parameters viewstatut in...

9.1CVSS9.6AI score0.34522EPSS
SaveExploits0References2
OSV
OSV
added 2025/03/28 9:30 p.m.68 views

GHSA-9RHG-254W-FH9X Redoc Prototype Pollution via `Module.mergeObjects` Component

A prototype pollution in the component Module.mergeObjects redoc/bundles/redoc.lib.js:2 of redoc = 2.2.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

8.7CVSS6.9AI score0.00515EPSS
SaveExploits1References4
OSV
OSV
added 2025/03/20 12:32 p.m.68 views

GHSA-CJ47-QJ6G-X7R4 vLLM allows Remote Code Execution by Pickle Deserialization via AsyncEngineRPCServer() RPC server entrypoints

vllm-project vllm version 0.6.0 contains a vulnerability in the AsyncEngineRPCServer RPC server entrypoints. The core functionality runserverloop calls the function makehandlercoro, which directly uses cloudpickle.loads on received messages without any sanitization. This can result in remote code...

9.8CVSS8.1AI score0.01356EPSS
SaveExploits1References4
OSV
OSV
added 2024/12/02 6:34 p.m.68 views

GHSA-8W3P-GF85-QCCH Ibexa Admin UI vulnerable to Cross-site Scripting in a field that is used in the Content name pattern

Impact The Content name pattern is used to build Content names from one or more fields. An XSS vulnerability has been found in this mechanism. Content edit permission is required to exploit it. After the fix, any existing injected XSS will not run. Patches - See "Patched versions. -...

5.3CVSS5.5AI score0.00511EPSS
SaveExploits0References6
OSV
OSV
added 2024/11/26 4:36 p.m.68 views

GHSA-V7VM-RHMG-8J2R Password Policy Bypass Vulnerability in Fides Webserver User Accept Invite API

Summary The user invite acceptance API endpoint lacks server-side password policy enforcement, allowing users to set arbitrarily weak passwords by bypassing client-side validation. While the UI enforces password complexity requirements, direct API calls can circumvent these checks, enabling the...

5.7CVSS6.3AI score0.00537EPSS
SaveExploits0References4
OSV
OSV
added 2024/11/20 7:10 a.m.68 views

BIT-HARBOR-2022-31671 Harbor fails to validate the user permissions when reading and updating job execution logs through the P2P preheat execution logs

Harbor fails to validate user permissions when reading and updating job execution logs through the P2P preheat execution logs. By sending a request that attempts to read/update P2P preheat execution logs and specifying different job IDs, malicious authenticated users could read all the job logs...

7.4CVSS7.2AI score0.00513EPSS
SaveExploits0References3
Total number of security vulnerabilities5000