Lucene search
+L
RedhatcveMost viewed

210839 matches found

RedhatCVE
RedhatCVE
•added 2021/11/19 5:24 p.m.•74 views

CVE-2021-43976

A denial of service flaw was found in mwifiexusbrecv in drivers/net/wireless/marvell/mwifiex/usb.c in the usb subsystem of the Linux kernel. This is due to a missing clean-up for a malfunctioning usb device with an unknown recvtype. Mitigation Mitigation for this issue is either not available or...

4.6CVSS6.3AI score0.00643EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2021/09/06 6:4 p.m.•74 views

CVE-2021-39258

The ntfs3g package is susceptible to a heap overflow on crafted input. When processing an NTFS image, proper bounds checking was not enforced leading to this software flaw. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

7.8CVSS2.2AI score0.00421EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2021/09/06 6:4 p.m.•74 views

CVE-2021-39260

The ntfs3g package is susceptible to a heap overflow on crafted input. When processing an NTFS image, proper bounds checking was not enforced leading to this software flaw. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

7.8CVSS2.2AI score0.00418EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2021/08/26 8:25 a.m.•74 views

CVE-2021-3739

A NULL pointer dereference flaw was found in the btrfsrmdevice function in fs/btrfs/volumes.c in the Linux Kernel, where triggering the bug requires ‘CAPSYSADMIN’. This flaw allows a local attacker to crash the system or leak kernel internal information. The highest threat from this vulnerability...

7.1CVSS0.3AI score0.00616EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2021/08/22 1:15 p.m.•74 views

CVE-2019-16335

A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariDataSource. This is a different vulnerability than CVE-2019-14540. Mitigation This vulnerability relies on com.zaxxer.hikari.HikariDataSource being present in the...

9.8CVSS0.6AI score0.10763EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2021/08/11 4:20 a.m.•74 views

CVE-2021-29988

Firefox incorrectly treated an inline list-item element as a block element, resulting in an out of bounds read or memory corruption, and a potentially exploitable crash. This vulnerability affects Thunderbird 78.13, Thunderbird 91, Firefox ESR 78.13, and Firefox 91...

8.8CVSS3AI score0.01386EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2021/08/09 8:19 p.m.•74 views

CVE-2021-38185

A flaw was found in cpio. An integer overflow that triggers an out-of-bounds heap write can allow an attacker to execute arbitrary code via a crafted pattern file. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

7.8CVSS6.9AI score0.04131EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2021/08/05 11:20 a.m.•74 views

CVE-2021-32803

The npm package "tar" aka node-tar has an arbitrary File Creation/Overwrite vulnerability via insufficient symlink protection. node-tar aims to guarantee that any file whose location would be modified by a symbolic link is not extracted. This is, in part, achieved by ensuring that extracted...

8.2CVSS3.3AI score0.07795EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2021/07/28 1:53 p.m.•74 views

CVE-2021-30666

A flaw was found in the webkitgtk package. Affected versions of this package are vulnerable to a buffer overflow caused by improper bounds checking by the WebKit component. By persuading a victim to visit a specially crafted Web site, a remote attacker could overflow a buffer and execute arbitrar...

8.8CVSS7.6AI score0.02998EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2021/07/28 9:2 a.m.•74 views

CVE-2021-3659

A NULL pointer dereference flaw was found in the Linux kernel’s IEEE 802.15.4 wireless networking subsystem in the way the user closes the LR-WPAN connection. This flaw allows a local user to crash the system. The highest threat from this vulnerability is to system availability. Mitigation To...

5.5CVSS5.7AI score0.00266EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2021/07/23 11:49 a.m.•74 views

CVE-2021-35043

A flaw was found in AnitSamy, where it allows a Cross-site Scripting attack XSS via HTML attributes when using the HTML output serializer XHTML is not affected. This issue was demonstrated by a javascript: URL with : as the replacement for the : character. The highest threat from this vulnerabili...

8.8CVSS1.3AI score0.01513EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2021/07/20 6:54 p.m.•74 views

CVE-2017-5715

An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of instructions a commonly used performance optimization. There are three primary variants of the issue which differ in the way the speculative execution can be exploited. Variant...

5.6CVSS2.7AI score0.92621EPSS
SaveExploits14References2
RedhatCVE
RedhatCVE
•added 2021/07/20 11:44 a.m.•74 views

CVE-2021-3654

A vulnerability was found in CPython which is used by openstack-nova's console proxy, noVNC. By crafting a malicious URL, noVNC could be made to redirect to any desired URL. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat...

6.1CVSS1.1AI score0.26792EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2021/07/16 9:25 p.m.•74 views

CVE-2021-3652

A flaw was found in 389-ds-base. If an asterisk is imported as password hashes, either accidentally or maliciously, then instead of being inactive, any password will successfully match during authentication. This flaw allows an attacker to successfully authenticate as a user whose password was...

6.5CVSS3.5AI score0.01463EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2021/07/14 6:22 p.m.•74 views

CVE-2021-34552

A flaw was found in python-pillow. This flaw allows an attacker to pass controlled parameters directly into a convert function, triggering a buffer overflow in the "convert" or "ImagingConvertTransparent" functions in Convert.c. The highest threat to this vulnerability is to system availability. ...

9.8CVSS1.5AI score0.03162EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2021/06/28 9:16 p.m.•74 views

CVE-2021-22119

Spring Security versions 5.5.x prior to 5.5.1, 5.4.x prior to 5.4.7, 5.3.x prior to 5.3.10 and 5.2.x prior to 5.2.11 are susceptible to a Denial-of-Service DoS attack via the initiation of the Authorization Request in an OAuth 2.0 Client Web and WebFlux application. A malicious user or attacker c...

7.5CVSS2.8AI score0.06001EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2021/06/22 4:29 p.m.•74 views

CVE-2021-29060

A Regular Expression Denial of Service ReDOS vulnerability was found in Color-String, which occurs when the application is provided and checks a crafted invalid HWB string. The highest threat from this vulnerability is to system availability...

5.3CVSS3.5AI score0.03134EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2021/06/08 6:52 a.m.•74 views

CVE-2021-3575

A heap-based buffer overflow was found in OpenJPEG. This flaw allows an attacker to execute arbitrary code with the permissions of the application compiled against OpenJPEG...

7.8CVSS4.3AI score0.01536EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2021/06/04 6:43 p.m.•74 views

CVE-2021-32923

A flaw was found in the HashiCorp Vault and Vault Enterprise. The vault could allow a remote attacker to bypass security restrictions caused by a renewal logic flaw when a token lease or dynamic secret lease was renewed inside the last second of its maximum TTL. By sending a specially crafted...

7.4CVSS2.1AI score0.01376EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2021/05/19 12:27 a.m.•74 views

CVE-2021-32027

A flaw was found in postgresql. While modifying certain SQL array values, missing bounds checks let authenticated database users write arbitrary bytes to a wide area of server memory. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availabilit...

8.8CVSS1.9AI score0.0199EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2020/11/01 9:54 p.m.•74 views

CVE-2019-11477

An integer overflow flaw was found in the way the Linux kernel's networking subsystem processed TCP Selective Acknowledgment SACK segments. While processing SACK segments, the Linux kernel's socket buffer SKB data structure becomes fragmented. Each fragment is about TCP maximum segment size MSS...

7.8CVSS1.1AI score0.98745EPSS
SaveExploits4References4
RedhatCVE
RedhatCVE
•added 2020/09/09 4:51 p.m.•74 views

CVE-2020-1968

A flaw was found in openssl in versions 1.0.2 to 1.0.2w. A Raccoon attack exploits a flaw in the TLS specification which can lead to an attacker being able to compute the pre-master secret in connections which have used a Diffie-Hellman DH based ciphersuite. In such a case this would result in th...

5.9CVSS4.9AI score0.04764EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2020/07/06 2:51 p.m.•74 views

CVE-2020-12062

The scp client in OpenSSH 8.2 incorrectly sends duplicate responses to the server upon a utimes system call failure, which allows a malicious unprivileged user on the remote server to overwrite arbitrary files in the client's download directory by creating a crafted subdirectory anywhere on the...

5CVSS7.9AI score0.02178EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2020/06/02 5:21 p.m.•74 views

CVE-2020-8165

A flaw was found in rubygem-activesupport. An untrusted user input can be written to the cache store using the raw: true parameter which can lead to the result being evaluated as a marshaled object instead of plain text. The threat from this vulnerability is to data confidentiality and integrity ...

7.5CVSS1.4AI score0.45732EPSS
SaveExploits5References4
RedhatCVE
RedhatCVE
•added 2020/05/05 1:40 p.m.•74 views

CVE-2020-10732

A flaw was found in the Linux kernel’s implementation of Userspace core dumps. This flaw allows an attacker with a local account to crash a trivial program and exfiltrate private kernel data. Mitigation Possible mitigation would be to disable core dumps system-wide by setting: hard core 0 In the...

3.6CVSS5.9AI score0.00617EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2020/04/02 8:10 a.m.•74 views

CVE-2018-12699

finishstab in stabs.c in GNU Binutils 2.30 allows attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact, as demonstrated by an out-of-bounds write of 8 bytes. This can occur during execution of objdump...

9.8CVSS7.8AI score0.04505EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2020/03/29 1:58 a.m.•74 views

CVE-2017-18342

In PyYAML before 5.1, the yaml.load API could execute arbitrary code if used with untrusted data. The load function has been deprecated in version 5.1 and the 'UnsafeLoader' has been introduced for backward compatibility with the function...

9.8CVSS9.5AI score0.0561EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2019/10/07 6:36 a.m.•74 views

CVE-2019-16370

The PGP signing plugin in Gradle before 6.0 relies on the SHA-1 algorithm, which might allow an attacker to replace an artifact with a different one that has the same SHA-1 message digest, a related issue to CVE-2005-4900...

5.9CVSS3.1AI score0.01025EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2016/11/02 8:47 a.m.•74 views

CVE-2016-8622

The URL percent-encoding decode function in libcurl before 7.51.0 is called curleasyunescape. Internally, even if this function would be made to allocate a unscape destination buffer larger than 2GB, it would return that new length in a signed 32 bit integer variable, thus the length would get...

9.8CVSS1.7AI score0.0467EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/02/05 9:55 p.m.•73 views

CVE-2022-24881

Ballcat Codegen provides the function of online editing code to generate templates. In versions prior to 1.0.0.beta.2, attackers can implement remote code execution through malicious code injection of the template engine. This happens because Velocity and freemarker templates are introduced but...

9.8CVSS5.5AI score0.02995EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2024/05/14 6:54 p.m.•73 views

CVE-2024-4367

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context...

7.5CVSS6.3AI score0.72648EPSS
SaveExploits16References5
RedhatCVE
RedhatCVE
•added 2024/02/14 9:32 p.m.•73 views

CVE-2024-25744

A flaw was found in the Linux kernel. A VMM can inject external interrupts on any arbitrary vector at any time, which may allow the guest OS to be manipulated from the VMM side. Mitigation This vulnerability can be mitigated by disabling 32-bit emulation by default for TDX and SEV. The user can...

5.6CVSS7.3AI score0.00278EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2024/02/02 1:11 a.m.•73 views

CVE-2024-24557

A vulnerability was found in github.com/moby/moby. The classic builder cache system in moby is vulnerable to cache poisoning if the image is built using a 'FROM scratch' in Dockerfile. This flaw allows an attacker who has knowledge of the Dockerfile to create a malicious cache that would be pulle...

6.9CVSS6.4AI score0.00258EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2023/09/13 5:24 a.m.•73 views

CVE-2023-4039

A vulnerability was found in GCC. The GCC's stack protection feature, enabled with the flag -fstack-protector, aims to detect buffer overflows in C/C++ function local variables that might allow an attacker to overwrite saved registers on the stack. If an attacker can modify saved register values,...

6.6AI score0.00758EPSS
SaveExploits1References8
RedhatCVE
RedhatCVE
•added 2023/07/01 6:23 a.m.•73 views

CVE-2023-2976

A flaw was found in Guava. The methodology for temporary directories and files can allow other local users or apps with accordant permissions to access the temp files, possibly leading to information exposure or tampering in the files created in the directory. Mitigation Temp files should be...

4.4CVSS6.7AI score0.00248EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2023/01/16 9:6 a.m.•73 views

CVE-2023-22945

In the GrowthExperiments extension for MediaWiki through 1.39, the growthmanagementorlist API allows blocked users blocked in ApiManageMentorList to enroll as mentors or edit any of their mentorship-related properties...

5.5CVSS5.3AI score0.00523EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2022/10/20 6:47 a.m.•73 views

CVE-2022-43402

A sandbox bypass vulnerability was found in several Jenkins plugins. This could allow an authenticated attacker to execute arbitrary code within the Jenkins JVM controller. Exploitation could be achieved by crafting untrusted libraries or pipelines, compromising the integrity, availability, and...

9.9CVSS4.5AI score0.01208EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2022/09/28 1:49 p.m.•73 views

CVE-2022-35256

A vulnerability was found in NodeJS due to improper validation of HTTP requests. The llhttp parser in the HTTP module in Node.js does not correctly handle header fields that are not terminated with CLRF. This issue may result in HTTP Request Smuggling. This flaw allows a remote attacker to send a...

6.5CVSS3.2AI score0.02587EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2022/08/25 1:40 p.m.•73 views

CVE-2022-2989

An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to...

3.6CVSS2.1AI score0.00307EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2022/06/07 2:29 a.m.•73 views

CVE-2022-29162

A flaw was found in runc, where runc exec --cap executed processes with non-empty inheritable Linux process capabilities. This issue creates an atypical Linux environment and enables programs with inheritable file capabilities to elevate those capabilities to the permitted set during execve2...

7.8CVSS6.3AI score0.00393EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2022/04/25 11:52 a.m.•73 views

CVE-2022-29582

A use-after-free flaw was found in the Linux kernel’s iouring interface subsystem in the way a user triggers a race condition between timeout flush and removal. This flaw allows a local user to crash or escalate their privileges on the system...

7CVSS4.2AI score0.00773EPSS
SaveExploits3References4
RedhatCVE
RedhatCVE
•added 2022/04/11 5:32 a.m.•73 views

CVE-2022-22628

A use-after-free issue was found in WebKitGTK and WPE WebKit. This flaw allows a remote attacker to process maliciously crafted web content, leading to arbitrary code execution...

8.8CVSS4.5AI score0.01105EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2022/03/31 8:48 p.m.•73 views

CVE-2022-24050

MariaDB CONNECT Storage Engine Use-After-Free Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL...

7.8CVSS3.1AI score0.00644EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2022/03/16 10:21 a.m.•73 views

CVE-2022-27223

In drivers/usb/gadget/udc/udc-xilinx.c in the Linux kernel before 5.16.12, the endpoint index is not validated and might be manipulated by the host for out-of-array access...

8.8CVSS2AI score0.02151EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2022/03/14 11:58 a.m.•73 views

CVE-2022-0860

Improper Authorization in GitHub repository cobbler/cobbler prior to 3.3.2...

9.1CVSS2.8AI score0.02256EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2022/02/17 6:50 a.m.•73 views

CVE-2022-25265

A vulnerability was found in the Linux kernel when certain binary files have the exec-all attribute with gcc. This issue can cause the execution of bytes located in the non-executable regions of a file. Mitigation Mitigation for this issue is either not available or the currently available option...

7.8CVSS2.4AI score0.01054EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2022/01/24 7:58 p.m.•73 views

CVE-2022-23304

The implementations of EAP-pwd in hostapd before 2.10 and wpasupplicant before 2.10 are vulnerable to side-channel attacks as a result of cache access patterns. The highest threat from this vulnerability is to availability, confidentiality and integrity...

9.8CVSS3.9AI score0.01903EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2022/01/12 11:22 p.m.•73 views

CVE-2021-4204

An out-of-bounds OOB memory access flaw was found in the Linux kernel's eBPF due to an Improper Input Validation. This flaw allows a local attacker with a special privilege to crash the system or leak internal information. Mitigation The default Red Hat Enterprise Linux kernel prevents unprivileg...

7.1CVSS2.3AI score0.01118EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2021/11/03 5:42 p.m.•73 views

CVE-2021-41174

A cross-site scripting XSS vulnerability in grafana allows an attacker to execute arbitrary JavaScript code in the browser of a victim user. An attacker may send a link referencing a page where the victim is unauthenticated and contains the login button and including interpolation binding...

6.9CVSS6.3AI score0.84607EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2021/10/13 8:25 a.m.•73 views

CVE-2021-20321

A race condition accessing file object in the Linux kernel OverlayFS subsystem was found in the way users do rename in specific way with OverlayFS. A local user could use this flaw to crash the system. Mitigation Mitigation for this issue is either not available or the currently available options...

5.5CVSS0.4AI score0.00216EPSS
SaveExploits0References4
Total number of security vulnerabilities5000