Lucene search
+L
OsvMost viewed

997986 matches found

OSV
OSV
added 2021/08/05 12:0 a.m.64 views

DSA-4949-1 jetty9 - security update

Bulletin has no description...

7.8CVSS6.5AI score0.7848EPSS
SaveExploits5
OSV
OSV
added 2021/07/01 12:0 a.m.64 views

ASB-A-143230980

In queryInternal of CallLogProvider.java, there is a possible permission bypass due to improper input validation. This could lead to local information disclosure of voicemail metadata with User execution privileges needed. User interaction is not needed for exploitation...

3.3CVSS3.6AI score0.00149EPSS
SaveExploits0References1
OSV
OSV
added 2021/06/16 5:39 p.m.64 views

GHSA-9MGM-GCQ8-86WQ Improper Authentication in Apache ActiveMQ and Apache Artemis

The optional ActiveMQ LDAP login module can be configured to use anonymous access to the LDAP server. In this case, for Apache ActiveMQ Artemis prior to version 2.16.0 and Apache ActiveMQ prior to versions 5.16.1 and 5.15.14, the anonymous context is used to verify a valid users password in error...

7.5CVSS7.5AI score0.1133EPSS
SaveExploits0References41
OSV
OSV
added 2021/06/16 5:29 p.m.64 views

GHSA-H6QV-F5GF-8GCF Missing Authorization in Jenkins P4 plugin

Jenkins P4 Plugin 1.11.4 and earlier does not perform permission checks in multiple HTTP endpoints, allowing attackers with Overall/Read permission to connect to an attacker-specified Perforce server using attacker-specified username and password. Jenkins P4 Plugin 1.11.5 requires...

4.3CVSS4.7AI score0.01301EPSS
SaveExploits0References4
OSV
OSV
added 2021/05/24 4:57 p.m.64 views

GHSA-V3Q9-2P3M-7G43 Token reuse in Ory fosite

Impact When using client authentication method "privatekeyjwt" 1https://openid.net/specs/openid-connect-core-10.htmlClientAuthentication, OpenId specification says the following about assertion jti: A unique identifier for the token, which can be used to prevent reuse of the token. These tokens...

8.1CVSS8.1AI score0.00867EPSS
SaveExploits1References7
OSV
OSV
added 2021/05/18 6:27 p.m.64 views

GHSA-JR34-MFF8-PC6F SQL Injection in Cloud Native Computing Foundation Harbor

Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 allows SQL Injection via user-groups in the VMware Harbor Container Registry for the Pivotal Platform...

8.6CVSS7.5AI score0.02104EPSS
SaveExploits0References6
OSV
OSV
added 2021/05/13 10:29 p.m.64 views

GHSA-2MQ8-99Q7-55WX Code injection in keycloak

A flaw was found in keycloak. The new account console in keycloak can allow malicious code to be executed using the referrer URL. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

8.3CVSS7.4AI score0.0119EPSS
SaveExploits0References4
OSV
OSV
added 2021/05/10 6:46 p.m.64 views

GHSA-4GW3-8F77-F72C Regular expression denial of service in codemirror

This affects the package codemirror before 5.58.2; the package org.apache.marmotta.webjars:codemirror before 5.58.2. The vulnerable regular expression is located in https://github.com/codemirror/CodeMirror/blob/cdb228ac736369c685865b122b736cd0d397836c/mode/javascript/javascript.jsL129. The ReDOS...

5.3CVSS6.8AI score0.0526EPSS
SaveExploits1References14
OSV
OSV
added 2021/05/06 3:52 p.m.64 views

GHSA-8QPM-5C82-RF96 Prototype Pollution in backbone-query-parameters

Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' in backbone-query-parameters 0.4.0 allows a malicious user to inject properties into Object.prototype...

8.8CVSS8.6AI score0.01606EPSS
SaveExploits1References2
OSV
OSV
added 2021/04/13 3:25 p.m.64 views

GHSA-HH8V-JMH3-9437 Cross-site scripting in SocksJS-node

htmlfile in lib/transport/htmlfile.js in SockJS before 0.3.0 is vulnerable to Reflected XSS via the /htmlfile c aka callback parameter...

6.1CVSS5.8AI score0.01886EPSS
SaveExploits1References6
OSV
OSV
added 2021/04/13 3:22 p.m.64 views

GHSA-7MPX-VG3C-CMR4 Improper Authentication in react-adal

This affects versions of react-adal 0.5.1. It is possible for a specially crafted JWT token and request URL can cause the nonce, session and refresh values to be incorrectly validated, causing the application to treat an attacker-generated JWT token as authentic. The logical defect is caused by h...

8.2CVSS7.9AI score0.01266EPSS
SaveExploits1References4
OSV
OSV
added 2021/03/23 3:26 p.m.64 views

GHSA-G4RF-PC26-6HMR OMERO webclient does not validate URL redirects on login or switching group.

Background OMERO.web supports redirection to a given URL after performing login or switching the group context. These URLs are not validated, allowing redirection to untrusted sites. OMERO.web 5.9.0 adds URL validation before redirecting. External URLs are not considered valid, unless specified i...

5.9CVSS5.3AI score0.00826EPSS
SaveExploits0References8
OSV
OSV
added 2021/03/11 10:26 p.m.64 views

GHSA-5Q6M-3H65-W53X react-dev-utils OS Command Injection in function `getProcessForPort`

react-dev-utils prior to v11.0.4 exposes a function, getProcessForPort, where an input argument is concatenated into a command string to be executed. This function is typically used from react-scripts in Create React App projects, where the usage is safe. Only when this function is manually invok...

5.6CVSS7AI score0.03289EPSS
SaveExploits1References6
OSV
OSV
added 2021/01/01 12:0 a.m.64 views

DSA-4824-1 chromium - security update

Bulletin has no description...

9.6CVSS8.6AI score0.99595EPSS
SaveExploits52
OSV
OSV
added 2020/12/08 11:55 p.m.64 views

GHSA-HM45-MGQM-GJM4 Remote Code Execution (RCE) Exploit on Cross Site Scripting (XSS) Vulnerability

Impact A RCE exploit has been discovered in the Red Discord Bot - Dashboard Webserver: this exploit allows Discord users with specially crafted Server names and Usernames/Nicknames to inject code into the webserver front-end code. By abusing this exploit, it's possible to perform destructive...

7.7CVSS8.6AI score0.01287EPSS
SaveExploits0References7
OSV
OSV
added 2020/12/08 2:18 p.m.64 views

GHSA-49R3-2549-3633 omniauth-apple allows attacker to fake their email address during authentication

Impact This vulnerability impacts applications using the omniauth-apple strategy of OmniAuth and using the info.email field of OmniAuth's Auth Hash Schema for any kind of identification. The value of this field may be set to any value of the attacker's choice including email addresses of other...

7.7CVSS7.5AI score0.01322EPSS
SaveExploits1References6
OSV
OSV
added 2020/12/01 12:0 a.m.64 views

ASB-A-158854097

In smpkeydistribution of smpact.cc, there are possible vulnerabilities in Cross-Transport Key Derivation due to weaknesses in the Bluetooth standard. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.9CVSS5.9AI score0.07137EPSS
SaveExploits1References2
OSV
OSV
added 2020/11/09 2:21 p.m.64 views

GHSA-J977-G5VJ-J27G Cross-Site Scripting in scratch-svg-renderer

This affects the package scratch-svg-renderer before 0.2.0-prerelease.20201019174008. The loadString function does not escape SVG properly, which can be used to inject arbitrary elements into the DOM via the transformMeasurements function...

9.6CVSS9.2AI score0.06148EPSS
SaveExploits3References3
OSV
OSV
added 2020/11/03 12:26 p.m.64 views

RLSA-2020:4676 Moderate: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update

Kernel-based Virtual Machine KVM offers a full virtualization solution for Linux on numerous hardware platforms. The virt:Rocky Linux module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting wi...

8.8CVSS7.5AI score0.03994EPSS
SaveExploits2References27
OSV
OSV
added 2020/09/01 4:40 p.m.64 views

GHSA-WFW3-RGFR-6G67 XSS via Angular Expression in ag-grid

Affected versions of ag-grid are vulnerable to Cross-site Scripting XSS via Angular Expressions, if used in combination with AngularJS. Recommendation Avoid using ag-grid in combination with AngularJS until a fix is available...

6.1CVSS5.9AI score0.01185EPSS
SaveExploits1References4
OSV
OSV
added 2020/07/01 12:0 a.m.64 views

ASB-A-135368228

In i915gemexecbuffer2ioctl of i915gemexecbuffer.c, there is a possible arbitrary kernel memory write due to a missing validation of a userspace pointer. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.6AI score0.00572EPSS
SaveExploits1References2
OSV
OSV
added 2020/06/09 12:25 a.m.64 views

GHSA-2Q66-6CC3-6XM8 CSRF issue on preview pages in Bolt CMS

Impact Bolt CMS lacked CSRF protection in the preview generating endpoint. Previews are intended to be generated by the admins, developers, chief-editors, and editors, who are authorized to create content in the application. But due to lack of proper CSRF protection, unauthorized users could...

8.6CVSS5.9AI score0.01766EPSS
SaveExploits3References7
OSV
OSV
added 2020/05/27 9:9 p.m.64 views

GHSA-QFCV-5WHW-7PCW Exposure of Sensitive Information to an Unauthorized Actor in AEgir

Impact aegir publish and aegir build may leak secrets from environmental variables in the browser bundle published to npm. Patches The code has been patched, users should upgrade to = 21.10.1 Workarounds Run printenv to check your environment variables and revoke any secrets. For more information...

9.6CVSS8.4AI score0.0112EPSS
SaveExploits0References4
OSV
OSV
added 2020/04/15 9:9 p.m.64 views

GHSA-8VF3-4W62-M3PQ XSS in Keycloak

It was found in all keycloak versions before 9.0.0 that links to external applications Application Links in the admin console are not validated properly and could allow Stored XSS attacks. An authed malicious user could create URLs to trick users in other realms, and possibly conduct further...

5.4CVSS5.7AI score0.00758EPSS
SaveExploits0References2
OSV
OSV
added 2020/01/30 9:21 p.m.64 views

GHSA-H362-M8F2-5X7C Password Hashing: Do not use MD5

Impact User passwords are stored in the database using the rather outdated and cryptographically insecure MD5 hash algorithm. Furthermore, the hashes are salted using the username instead of a random salt, causing hashes for users with the same username and password to collide which is problemati...

7.7CVSS6.9AI score0.00626EPSS
SaveExploits0References3
OSV
OSV
added 2019/06/04 3:42 p.m.64 views

GHSA-XGGX-FX6W-V7CH Improper Neutralization of Wildcards or Matching Symbols

This affects Spring Data JPA in versions up to and including 2.1.6, 2.0.14 and 1.11.20. ExampleMatcher using ExampleMatcher.StringMatcher.STARTING, ExampleMatcher.StringMatcher.ENDING or ExampleMatcher.StringMatcher.CONTAINING could return more results than anticipated when a maliciously crafted...

5.3CVSS5.4AI score0.01247EPSS
SaveExploits0References2
OSV
OSV
added 2019/04/24 5:29 p.m.64 views

PYSEC-2019-225

Memcpy parameter overlap in Google Snappy library 1.1.4, as used in Google TensorFlow before 1.7.1, could result in a crash or read from other parts of process memory...

8.1CVSS2.5AI score0.00517EPSS
SaveExploits0References1
OSV
OSV
added 2019/04/02 3:47 p.m.64 views

GHSA-535V-4X9Q-446C Improper Authorization in org.apache.hbase:hbase

In all previously released Apache HBase 2.x versions 2.0.0-2.0.4, 2.1.0-2.1.3, authorization was incorrectly applied to users of the HBase REST server. Requests sent to the HBase REST server were executed with the permissions of the REST server itself, not with the permissions of the end-user. Th...

7.5CVSS7.3AI score0.03782EPSS
SaveExploits0References7
OSV
OSV
added 2018/11/30 12:0 a.m.64 views

DSA-4348-1 openssl - security update

Bulletin has no description...

7.5CVSS6.8AI score0.49268EPSS
SaveExploits4
OSV
OSV
added 2018/07/24 7:59 p.m.64 views

GHSA-PJMX-9XR3-82QR ReDoS via long UserAgent header in useragent

Affected versions of useragent are vulnerable to regular expression denial of service when an arbitrarily long User-Agent header is parsed. Proof of Concept js var useragent = require'useragent'; var badUserAgent = 'MSIE 0.0'+Array900000.join'0'+'XBLWP'; var request = 'GET / HTTP/1.1\r\nUser-Agen...

7.5CVSS7.4AI score0.01162EPSS
SaveExploits1References3
OSV
OSV
added 2017/10/24 6:33 p.m.64 views

GHSA-VM28-MRM7-FPJQ sfpagent Command Injection vulnerability

lib/sfpagent/bsig.rb in the sfpagent gem before 0.4.15 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in the module name in a JSON request...

7.5CVSS7.3AI score0.02206EPSS
SaveExploits3References7
OSV
OSV
added 2017/10/04 1:29 a.m.64 views

CVE-2017-12617

When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled e.g. via setting the readonly initialisation parameter of the Default servlet to false it was possible to upload a JSP file to the server via a specially crafted...

8.1CVSS7AI score
SaveExploits0References45
OSV
OSV
added 2016/06/21 12:0 a.m.64 views

DLA-522-1 python2.7 - security update

Bulletin has no description...

10CVSS8.1AI score0.2548EPSS
SaveExploits7
OSV
OSV
added 2013/12/13 6:55 p.m.64 views

UBUNTU-CVE-2013-7039

Stack-based buffer overflow in the MHDdigestauthcheck function in libmicrohttpd before 0.9.32, when MHDOPTIONCONNECTIONMEMORYLIMIT is set to a large value, allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a long URI in an authentication header...

5.1CVSS6.4AI score0.03277EPSS
SaveExploits0References3
OSV
OSV
added 2011/03/14 7:55 p.m.64 views

PYSEC-2011-7

Multiple SQL injection vulnerabilities in the getuserinfo method in the MySQLAuthHandler class in DAVServer/mysqlauth.py in PyWebDAV before 0.9.4.1 allow remote attackers to execute arbitrary SQL commands via the 1 user or 2 pw argument. NOTE: some of these details are obtained from third party...

7.5CVSS7.2AI score0.01811EPSS
SaveExploits0References15
OSV
OSV
added 2009/06/28 12:0 a.m.64 views

DSA-1845-1 linux-2.6 - several vulnerabilities

Bulletin has no description...

7.2CVSS6.5AI score0.00594EPSS
SaveExploits4
OSV
OSV
added 2008/05/13 12:0 a.m.64 views

DSA-1571-1 openssl - predictable random number generator

Bulletin has no description...

9.3CVSS6.9AI score0.70721EPSS
SaveExploits13
OSV
OSV
added 2008/03/28 12:0 a.m.64 views

DSA-1534-1 iceape

Bulletin has no description...

9.3CVSS9.8AI score0.06055EPSS
SaveExploits3
OSV
OSV
added 2003/06/08 12:0 a.m.64 views

DSA-311 linux-kernel-2.4.18 - several vulnerabilities

Bulletin has no description...

10CVSS5.2AI score0.72511EPSS
SaveExploits24
OSV
OSV
added 2026/07/14 3:33 a.m.63 views

MAL-2026-10528 Malicious code in @vitets/vite-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fe093d0d0fa83ab20aa57e9d9c8500e03a25ead578ff351fdc3609118cf5ecf Package is published as @vitets/vite-ts and copies the legitimate Vite project's author Evan You, README, homepage vitejs.dev, and repository...

6.6AI score
SaveExploits0References1
OSV
OSV
added 2026/06/19 9:42 p.m.63 views

GHSA-6V7P-G79W-8964 MessagePack for Python: Out-of-bounds read / crash on Unpacker reuse after a caught error

Impact If the Unpacker is used repeatedly after an error occurs, the process may crash with a SEGV. If the Unpacker is used repeatedly to unpack untrusted input from external sources, it may be vulnerable to a DoS attack. Patches v1.2.1 Workarounds Users should create a new Unpacker instead of...

7.5CVSS5.8AI score0.00279EPSS
SaveExploits0References4
OSV
OSV
added 2026/06/17 3:50 a.m.63 views

MAL-2026-10601 Malicious code in @public-for-cdao/common (npm)

The @public-for-cdao/common package is part of a dependency-confusion credential theft campaign. Its package.json declares a postinstall hook that runs node recon.js automatically during npm installation. The bundled recon.js is identical across six packages in the @public-for-cdao scope and has...

5.9AI score
SaveExploits0References3
OSV
OSV
added 2026/06/04 7:40 p.m.63 views

ROOT-APP-NPM-CVE-2020-15084 CVE-2020-15084 in @rootio/express-jwt - Patched by Root

Root has patched CVE-2020-15084 in the @rootio/express-jwt package for Root:npm. Multiple fixed versions available...

9.1CVSS5.4AI score0.0105EPSS
SaveExploits0
OSV
OSV
added 2026/05/19 3:52 p.m.63 views

GHSA-J3FJ-QPPJ-FMMC Mailpit has an incomplete fix for GHSA-6jxm: HTML check still permits SSRF to private/loopback/IMDS via missing IP-filter dialer

Summary The fix for GHSA-6jxm-fv7w-rw5j CVE-2026-23845, "Server-Side Request Forgery SSRF via HTML Check API", shipped in mailpit v1.28.3, hardened internal/htmlcheck/css.go::downloadCSSToBytes with a 5MB size cap, a text/css content-type check, login-info stripping in isValidURL, and an opt-in...

5.8CVSS5.8AI score0.00265EPSS
SaveExploits1References2
OSV
OSV
added 2026/05/11 3:56 p.m.63 views

GHSA-H64F-5H5J-JQJH Next.js has a Denial of Service in the Image Optimization API

Impact When self-hosting Next.js with the default image loader, the Image Optimization API fetches local images entirely into memory without enforcing a maximum size limit. An attacker could cause out-of-memory conditions by requesting large local assets from the /next/image endpoint that match t...

5.9CVSS5.8AI score0.00739EPSS
SaveExploits1References5
OSV
OSV
added 2026/05/08 7:3 a.m.63 views

CGA-V64G-QQW2-H8H9

Bulletin has no description...

7.5CVSS5.7AI score0.00465EPSS
SaveExploits0
OSV
OSV
added 2026/05/07 4:10 a.m.63 views

GHSA-HW58-P9XV-2MJH vm2 has a Sandbox Escape via Promise Constructor Unhandled Rejection (Process Crash DoS)

Summary A sandbox escape vulnerability in vm2 v3.10.5 allows any sandboxed code to crash the host Node.js process via a single Promise constructor that triggers an unhandled rejection propagating to the host. The fix for CVE-2026-22709 v3.10.2 only sanitized the onRejected callback in .then and...

8.6CVSS5.9AI score0.00448EPSS
SaveExploits1References5
OSV
OSV
added 2026/05/06 9:35 p.m.63 views

GHSA-XWQR-RCQG-22MR Flight vulnerable to SQL Injection via unvalidated identifiers in SimplePdo::insert / update / delete

Summary SimplePdo::insert, SimplePdo::update, and SimplePdo::delete build SQL statements by concatenating the $table argument and the keys of the $data array directly into the query, with no identifier quoting and no validation. When an application forwards user-controlled data shapes to these...

8.8CVSS6AI score0.00397EPSS
SaveExploits0References5
OSV
OSV
added 2026/05/06 12:16 p.m.63 views

UBUNTU-CVE-2026-43282

In the Linux kernel, the following vulnerability has been resolved: RDMA/ionic: Fix potential NULL pointer dereference in ionicqueryport The function ionicqueryport calls ibdevicegetnetdev without checking the return value which could lead to NULL pointer dereference, Fix it by checking the retur...

5.7CVSS5.7AI score0.00112EPSS
SaveExploits0References3
OSV
OSV
added 2026/04/21 4:44 p.m.63 views

GHSA-H6JM-F4HH-FW27 October CMS has Safe Mode Bypass via Twig Database Write Operations

A vulnerability was identified in the Twig sandbox security policy that allowed database write operations when cms.safemode is enabled. Backend users with Developer permissions could use Twig template markup to execute insert, update, and delete operations on any database table through the query...

6.6CVSS5.8AI score0.00229EPSS
SaveExploits0References3
Total number of security vulnerabilities5000