Lucene search
+L
OsvMost viewed

997913 matches found

OSV
OSV
added 2017/03/21 6:59 a.m.65 views

DEBIAN-CVE-2017-7200

An SSRF issue was discovered in OpenStack Glance before Newton. The 'copyfrom' feature in the Image Service API v1 allowed an attacker to perform masked network port scans. With v1, it is possible to create images with a URL such as 'http://localhost:22'. This could then allow an attacker to...

5.8CVSS5.7AI score0.02034EPSS
SaveExploits0References1
OSV
OSV
added 2016/02/16 12:0 a.m.65 views

DSA-3481-1 glibc - security update

Bulletin has no description...

9.8CVSS7.8AI score0.89557EPSS
SaveExploits17
OSV
OSV
added 2014/06/05 12:0 a.m.65 views

DSA-2950-1 openssl - security update

Bulletin has no description...

7.4CVSS7.2AI score0.99977EPSS
SaveExploits13
OSV
OSV
added 2009/05/06 12:0 a.m.65 views

DSA-1793-1 kdegraphics - multiple vulnerabilities

Bulletin has no description...

10CVSS7.7AI score0.07347EPSS
SaveExploits1
OSV
OSV
added 2007/07/22 12:0 a.m.65 views

DSA-1337-1 xulrunner

Bulletin has no description...

9.3CVSS9.6AI score0.04618EPSS
SaveExploits3
OSV
OSV
added 2006/07/23 12:0 a.m.65 views

DSA-1120 mozilla-firefox - several vulnerabilities

Bulletin has no description...

9.3CVSS6.8AI score0.07251EPSS
SaveExploits0
OSV
OSV
added 2026/08/06 5:36 p.m.64 views

CVE-2026-68480 x86/bugs: Make Safe-RET robust against interrupt injection

In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Make Safe-RET robust against interrupt injection An attacker injecting interrupts while the Safe-RET mitigation executes on machines affected by SRSO can neutralize the safe return sequence, potentially leading to data...

5.4AI score
SaveExploits0References12
OSV
OSV
added 2026/06/05 12:53 a.m.64 views

MAL-2026-5235 Malicious code in awaitly-analyze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3f926748b1e107755cfd17cb9151edc730b0228b6e857735a6794f8c1e71c65 No concrete indicators of installer-side harm were identified in this package version. No lifecycle hooks fetching remote payloads, no credential-pat...

6.2AI score
SaveExploits0References12
OSV
OSV
added 2026/05/19 3:39 p.m.64 views

GHSA-2V5F-5R6W-P67R MCP Registry: OCI validator skips ownership check on upstream rate limits

OCI ownership validation fails open on upstream rate limits, allowing attacker to claim arbitrary public OCI images under their own namespace Severity: Low re-scored post-triage; see Maintainer triage note below Affected: modelcontextprotocol/registry main branch at commit fe0cb3b current HEAD as...

3.5CVSS6AI score0.00206EPSS
SaveExploits0References3
OSV
OSV
added 2026/05/13 11:31 p.m.64 views

CGA-9GM5-V5F4-465P

Bulletin has no description...

5.3CVSS5.7AI score0.00301EPSS
SaveExploits0
OSV
OSV
added 2026/04/16 9:23 p.m.64 views

GHSA-QQVM-66Q4-VF5C Flowise: SSRF Protection Bypass via Direct node-fetch / axios Usage (Patch Enforcement Failure)

Summary Flowise introduced SSRF protections through a centralized HTTP security wrapper httpSecurity.ts that implements deny-list validation and IP pinning logic. However, multiple tool implementations directly import and invoke raw HTTP clients node-fetch, axiosInstead of using the secured...

5.3CVSS5.9AI score0.00396EPSS
SaveExploits1References3
OSV
OSV
added 2026/02/09 7:15 p.m.64 views

UBUNTU-CVE-2026-24684

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, the RDPSND async playback thread can process queued PDUs after the channel is closed and internal state is freed, leading to a use after free in rdpsndtreatwave. This vulnerability is fixed in 3.22.0...

8.7CVSS5.8AI score0.00534EPSS
SaveExploits0References5
OSV
OSV
added 2025/10/07 12:31 a.m.64 views

GHSA-PFXJ-GVQG-MJ44 Liferay Profile Widget does not prevent vCard extension spoofing

The Profile Widget in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, 7.4 GA through update 92, and older unsupported versions uses a user’s name in the “Content-Disposition” header, which allows...

4.8CVSS6.4AI score0.00218EPSS
SaveExploits0References3
OSV
OSV
added 2025/04/09 11:59 a.m.64 views

CVE-2025-31672 Apache POI: parsing OOXML based files (xlsx, docx, etc.), poi-ooxml could read unexpected data if underlying zip has duplicate zip entry names

Improper Input Validation vulnerability in Apache POI. The issue affects the parsing of OOXML format files like xlsx, docx and pptx. These file formats are basically zip files and it is possible for malicious users to add zip entries with duplicate names including the path in the zip. In this cas...

5.3CVSS7AI score
SaveExploits0References7
OSV
OSV
added 2025/02/25 5:49 p.m.64 views

GHSA-HW62-58PR-7WC5 DOM Expressions has a Cross-Site Scripting (XSS) vulnerability due to improper use of string.replace

!NOTE This advisory was originally emailed to [email protected] by @nsysean. To sum it up, the use of javascript's .replace opens up to potential XSS vulnerabilities with the special replacement patterns beginning with $. Particularly, when the attributes of Meta tag from solid-meta are...

7.3CVSS6.3AI score0.00267EPSS
SaveExploits0References4
OSV
OSV
added 2025/02/20 5:15 p.m.64 views

UBUNTU-CVE-2025-26309

A memory leak has been identified in the parseSWFDEFINESCENEANDFRAMEDATA function in util/parser.c of libming v0.4.8, which allows attackers to cause a denial of service via a crafted SWF file...

6.5CVSS5.7AI score0.00377EPSS
SaveExploits1References3
OSV
OSV
added 2025/02/20 10:31 a.m.64 views

BIT-DISCOURSE-2025-22602 Stored DOM-based XSS (without CSP) via video placeholders in Discourse

Discourse is an open source platform for community discussion. In affected versions an attacker can execute arbitrary JavaScript on users' browsers by posting a malicious video placeholder html element. This issue only affects sites with CSP disabled. This problem has been patched in the latest...

6.5CVSS6.7AI score0.00355EPSS
SaveExploits0References2
OSV
OSV
added 2025/01/24 8:40 p.m.64 views

GHSA-6729-95V3-PJC2 HL7 FHIR IG Publisher potentially exposes GitHub repo user and credential information

Impact In CI contexts, the IG Publisher CLI uses git commands to determine the URL of the originating repo. If the repo was cloned, or otherwise set to use a repo that uses a username and credential based URL, the entire URL will be included in the built Implementation Guide, exposing username an...

4.2CVSS4.7AI score0.00176EPSS
SaveExploits0References5
OSV
OSV
added 2024/12/05 5:31 p.m.64 views

GHSA-4GRW-M28R-Q285 rPGP Potential Resource Exhaustion when handling Untrusted Messages

During a security audit, Radically Open Security discovered two vulnerabilities which allow attackers to trigger resource exhaustion vulnerabilities in rpgp by providing crafted messages. This affects general message parsing and decryption with symmetric keys. Impact Affected rpgp versions do not...

8.7CVSS7.6AI score0.00448EPSS
SaveExploits0References3
OSV
OSV
added 2024/11/15 3:11 p.m.64 views

GHSA-GFWR-XQMJ-J27V LibreNMS has a stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/api-access.inc.php

Summary A Stored Cross-Site Scripting XSS vulnerability in the API-Access page allows authenticated users to inject arbitrary JavaScript through the "token" parameter when creating a new API token. This vulnerability can result in the execution of malicious code in the context of other users'...

7.5CVSS5.8AI score0.70747EPSS
SaveExploits1References4
OSV
OSV
added 2024/11/14 1:15 p.m.64 views

CVE-2024-10978

Incorrect privilege assignment in PostgreSQL allows a less-privileged application user to view or change different rows from those intended. An attack requires the application to use SET ROLE, SET SESSION AUTHORIZATION, or an equivalent feature. The problem arises when an application query uses...

4.2CVSS6.6AI score
SaveExploits0References4
OSV
OSV
added 2024/09/25 5:37 a.m.64 views

CGA-X2WV-7P28-8WFG

Bulletin has no description...

4.3CVSS4.8AI score0.00711EPSS
SaveExploits0
OSV
OSV
added 2024/09/21 1:21 p.m.64 views

CGA-2PRX-F32M-4R4C

Bulletin has no description...

5.5CVSS4.5AI score0.00262EPSS
SaveExploits0
OSV
OSV
added 2024/09/09 6:16 p.m.64 views

GHSA-QWGC-RR35-H4X9 External Secrets Operator vulnerable to privilege escalation

Details The external-secrets has a deployment called default-external-secrets-cert-controller, which is bound with a same-name ClusterRole. This ClusterRole has "get/list" verbs of secrets...

8.3CVSS8.7AI score0.00591EPSS
SaveExploits0References8
OSV
OSV
added 2024/09/04 8:15 p.m.64 views

UBUNTU-CVE-2024-44981

In the Linux kernel, the following vulnerability has been resolved: workqueue: Fix UBSAN 'subtraction overflow' error in shiftandmask UBSAN reports the following 'subtraction overflow' error when booting in a virtual machine on Android: | Internal error: UBSAN: integer subtraction overflow:...

5.5CVSS6.6AI score0.00193EPSS
SaveExploits0References5
OSV
OSV
added 2024/08/22 9:30 a.m.64 views

GHSA-HRF9-RM95-FPF3 Mattermost Cross-Site Request Forgery vulnerability

Mattermost versions 9.9.x = 9.9.1, 9.5.x = 9.5.7, 9.10.x = 9.10.0, 9.8.x = 9.8.2 fail to sanitize user inputs in the frontend that are used for redirection which allows for a one-click client-side path traversal that is leading to CSRF in User Management page of the system console...

5.1CVSS6.3AI score0.00201EPSS
SaveExploits0References3
OSV
OSV
added 2024/08/01 3:32 p.m.64 views

GHSA-CMC8-222C-VQP9 Mattermost failed to properly validate that the channel that comes from the sync message is a shared channel

Mattermost versions 9.9.x = 9.9.0, 9.5.x = 9.5.6, 9.7.x = 9.7.5 and 9.8.x = 9.8.1 fail to properly validate that the channel that comes from the sync message is a shared channel, when shared channels are enabled, which allows a malicious remote to add users to arbitrary teams and channels...

9.3CVSS7.3AI score0.00341EPSS
SaveExploits0References4
OSV
OSV
added 2024/07/31 3:21 p.m.64 views

GHSA-WF3X-JCCF-5G5G XWiki Platform vulnerable to Cross-site Scripting through attachment filename in uploader

Impact When uploading an attachment with a malicious filename, malicious JavaScript code could be executed. This requires a social engineering attack to get the victim into uploading a file with a malicious name. The malicious code is solely executed during the upload and affects only the user...

8.7CVSS5.4AI score0.15804EPSS
SaveExploits1References10
OSV
OSV
added 2024/07/22 12:30 p.m.64 views

GHSA-Q9W2-H4CW-8GHP Apache RocketMQ Vulnerable to Unauthorized Exposure of Sensitive Data

For RocketMQ versions 5.2.0 and below, under certain conditions, there is a risk of exposure of sensitive Information to an unauthorized actor even if RocketMQ is enabled with authentication and authorization functions. An attacker, possessing regular user privileges or listed in the IP whitelist...

6CVSS7AI score0.0089EPSS
SaveExploits0References5
OSV
OSV
added 2024/06/17 10:30 p.m.64 views

GHSA-6GR4-52W6-VMQX rke's credentials are stored in the RKE1 Cluster state ConfigMap

Impact When RKE provisions a cluster, it stores the cluster state in a configmap called full-cluster-state inside the kube-system namespace of the cluster itself. This cluster state object contains information used to set up the K8s cluster, which may include the following sensitive data: -...

9.9CVSS9.1AI score0.0066EPSS
SaveExploits0References6
OSV
OSV
added 2024/06/15 12:0 a.m.64 views

OPENSUSE-SU-2024:10438-1 freetype2-devel-2.7-1.1 on GA media

These are all security issues fixed in the freetype2-devel-2.7-1.1 package on the GA media of openSUSE Tumbleweed...

10CVSS7.4AI score0.08541EPSS
SaveExploits27References55
OSV
OSV
added 2024/06/04 5:53 p.m.64 views

GHSA-632P-P495-25M5 Directus is soft-locked by providing a string value to random string util

Describe the Bug Providing a non-numeric length value to the random string generation utility will create a memory issue breaking the capability to generate random strings platform wide. This creates a denial of service situation where logged in sessions can no longer be refreshed as sessions...

7.5CVSS5.9AI score0.0062EPSS
SaveExploits1References4
OSV
OSV
added 2024/05/28 8:20 p.m.64 views

GHSA-J6CV-98JX-MRWR Mocodo vulnerable to SQL injection in `/web/generate.php`

Mocodo Mocodo Online 4.2.6 and below does not properly sanitize the sqlcase input field in /web/generate.php, allowing remote attackers to execute arbitrary SQL commands and potentially command injection, leading to remote code execution RCE under certain conditions...

9.8CVSS10AI score0.02744EPSS
SaveExploits1References5
OSV
OSV
added 2024/05/22 12:0 a.m.64 views

ALSA-2024:3271 Important: bind and dhcp security update

The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server is operating correctly. The Dynamic Hos...

7.5CVSS8.3AI score0.99995EPSS
SaveExploits1References8
OSV
OSV
added 2024/05/21 9:30 p.m.64 views

GHSA-JQFF-8G2V-642H NASA AIT-Core vulnerable to remote code execution

An issue in the Pickle Python library of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary commands...

9.8CVSS7.3AI score0.00546EPSS
SaveExploits2References3
OSV
OSV
added 2024/05/07 10:33 p.m.64 views

GO-2024-2824 Malformed DNS message can cause infinite loop in net

A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop...

5.9CVSS6.4AI score0.01001EPSS
SaveExploits0References3
OSV
OSV
added 2024/05/07 3:30 p.m.64 views

GHSA-299Q-3P96-5898 Apache Superset Incorrect Authorization vulnerability

An authenticated user could potentially access metadata for a datasource they are not authorized to view by submitting a targeted REST API request. This issue affects Apache Superset before 3.1.2. Users are recommended to upgrade to version 3.1.2 or above, which fixes the issue...

4.3CVSS4.3AI score0.00699EPSS
SaveExploits0References3
OSV
OSV
added 2024/05/01 8:29 a.m.64 views

GHSA-4JRX-5W4H-3GPM Navidrome Parameter Tampering vulnerability

Summary Parameter tampering is a vulnerability where an attacker has the ability to manipulate parameter values in the HTTP requests. Details The attacker is able to change the parameter values in the body and successfully impersonate another user. In this case, the attacker created a playlist,...

4.2CVSS4.2AI score0.00413EPSS
SaveExploits1References3
OSV
OSV
added 2024/04/30 12:30 a.m.64 views

GHSA-6362-GV4M-53WW Calico privilege escalation vulnerability

In vulnerable versions of Calico v3.27.2 and below, Calico Enterprise v3.19.0-1, v3.18.1, v3.17.3 and below, and Calico Cloud v19.2.0 and below, an attacker who has local access to the Kubernetes node, can escalate their privileges by exploiting a vulnerability in the Calico CNI install binary. T...

8.6CVSS6.8AI score0.0022EPSS
SaveExploits0References8
OSV
OSV
added 2024/04/24 5:4 p.m.64 views

GHSA-287F-46J7-J4WH Umbraco Workflow's Backoffice users can execute arbitrary SQL

Impact Backoffice users can execute arbitrary SQL. Explanation of the vulnerability A Backoffice user can modify requests to a particular API endpoint to include SQL which will be executed by the server. Affected versions All versions Patches Workflow 10.3.9, 12.2.6, 13.0.6, Plumber 10.1.2...

5.5CVSS6AI score0.00407EPSS
SaveExploits0References2
OSV
OSV
added 2024/04/03 10:49 a.m.64 views

BIT-ARGO-CD-2024-29893 Uncontrolled Resource Consumption vulnerability in ArgoCD's repo server

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. All versions of ArgoCD starting from v2.4 have a bug where the ArgoCD repo-server component is vulnerable to a Denial-of-Service attack vector. Specifically, it's possible to crash the repo server component through an out o...

6.5CVSS6.4AI score0.00972EPSS
SaveExploits0References5
OSV
OSV
added 2024/04/02 12:30 a.m.64 views

GHSA-22V7-V3MJ-PM8R Centreon updateDirectory SQL Injection Remote Code Execution Vulnerability

Centreon updateDirectory SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the updateDirectory...

8.8CVSS9.2AI score0.72319EPSS
SaveExploits0References5
OSV
OSV
added 2024/03/31 6:17 p.m.64 views

BIT-ESPOCRM-2024-24818

EspoCRM is an Open Source Customer Relationship Management software. An attacker can inject arbitrary IP or domain in "Password Change" page and redirect victim to malicious page that could lead to credential stealing or another attack. This vulnerability is fixed in 8.1.2...

5.9CVSS5.6AI score0.00615EPSS
SaveExploits1References2
OSV
OSV
added 2024/03/21 10:10 p.m.64 views

CVE-2024-28863 node-tar vulnerable to denial of service while parsing a tar file due to lack of folders count validation

node-tar is a Tar for Node.js. node-tar prior to version 6.2.1 has no limit on the number of sub-folders created in the folder creation process. An attacker who generates a large number of sub-folders can consume memory on the system running node-tar and even crash the Node.js client within few...

6.5CVSS6.1AI score
SaveExploits0References5
OSV
OSV
added 2024/03/06 11:4 a.m.64 views

BIT-PARSE-2020-5251 Information disclosure in parse-server

In parser-server before version 4.1.0, you can fetch all the users objects, by using regex in the NoSQL query. Using the NoSQL, you can use a regex on sessionToken and find valid accounts this way...

7.7CVSS6.1AI score0.00849EPSS
SaveExploits0References3
OSV
OSV
added 2024/03/06 11:3 a.m.64 views

BIT-PRESTASHOP-2023-39526 PrestaShopSQL manager vulnerability (potential RCE)

PrestaShop is an open source e-commerce web application. Versions prior to 1.7.8.10, 8.0.5, and 8.1.1 are vulnerable to remote code execution through SQL injection and arbitrary file write in the back office. Versions 1.7.8.10, 8.0.5, and 8.1.1 contain a patch. There are no known workarounds...

10AI score
SaveExploits0References3
OSV
OSV
added 2024/03/06 11:1 a.m.64 views

BIT-MATTERMOST-2023-2515

Mattermost fails to restrict a user with permissions to edit other users and to create personal access tokens from elevating their privileges to system admin...

8.8CVSS6.3AI score0.00469EPSS
SaveExploits0References2
OSV
OSV
added 2024/03/06 11:1 a.m.64 views

BIT-PARSE-2022-39313 Parse Server crashes when receiving file download request with invalid byte range

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Versions prior to 4.10.17, and prior to 5.2.8 on the 5.x branch, crash when a file download request is received with an invalid byte range, resulting in a Denial of Service. This issue has been...

7.5CVSS7.3AI score0.00708EPSS
SaveExploits0References2
OSV
OSV
added 2024/03/06 11:0 a.m.64 views

BIT-DISCOURSE-2023-23620 Discourse restricted tag routes leak topic information

Discourse is an open-source discussion platform. Prior to version 3.0.1 on the stable branch and 3.1.0.beta2 on the beta and tests-passed branches, the contents of latest/top routes for restricted tags can be accessed by unauthorized users. This issue is patched in version 3.0.1 on the stable...

5.3CVSS5.4AI score0.00669EPSS
SaveExploits0References4
OSV
OSV
added 2024/03/06 10:57 a.m.64 views

BIT-AIRFLOW-2022-40604 Format String Vulnerability

In Apache Airflow 2.3.0 through 2.3.4, part of a url was unnecessarily formatted, allowing for possible information extraction...

7.5CVSS7.3AI score0.01632EPSS
SaveExploits0References3
Total number of security vulnerabilities5000