Lucene search
+L
RedhatcveMost viewed

214879 matches found

RedhatCVE
RedhatCVE
•added 2021/09/24 11:10 a.m.•75 views

CVE-2021-21239

A verification flaw was found in python-pysaml2, where it did not ensure that a signed SAML document was correctly signed. The default CryptoBackendXmlSec1 backend uses the xmlsec1 binary to verify the signature of signed SAML documents, but by default xmlsec1 accepts any type of key found within...

6.5CVSS1.1AI score0.01271EPSS
SaveExploits3References3
RedhatCVE
RedhatCVE
•added 2021/08/18 4:32 p.m.•75 views

CVE-2021-31556

An issue was discovered in the Oauth extension for MediaWiki through 1.35.2. MWOAuthConsumerSubmitControl.php does not ensure that the length of an RSA key will fit in a MySQL blob...

9.8CVSS3.7AI score0.01615EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2021/08/05 11:20 a.m.•75 views

CVE-2021-32804

The npm package "tar" aka node-tar has an arbitrary File Creation/Overwrite vulnerability due to insufficient absolute path sanitization. node-tar aims to prevent extraction of absolute file paths by turning absolute paths into relative paths when the preservePaths flag is not set to true. This i...

8.2CVSS2.3AI score0.15133EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2021/07/16 9:25 p.m.•75 views

CVE-2021-3652

A flaw was found in 389-ds-base. If an asterisk is imported as password hashes, either accidentally or maliciously, then instead of being inactive, any password will successfully match during authentication. This flaw allows an attacker to successfully authenticate as a user whose password was...

6.5CVSS3.5AI score0.01486EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2021/07/06 7:16 p.m.•75 views

CVE-2021-32740

A resource-consumption vulnerability was found in rubygem addressable, where its URI template implementation could allow an attacker's crafted template to consume resources, resulting in a denial of service. The highest threat from this vulnerability is to system availability. Mitigation Create...

7.5CVSS2.5AI score0.02199EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2021/06/28 6:46 p.m.•75 views

CVE-2021-3624

There is a flaw in dcraw. An attacker who is able to convince a victim to open a crafted file with dcraw could trigger an unsigned integer wraparound, leading to out-of-bounds write. The greatest impact from this flaw is to system availability, data integrity, and data confidentiality...

9.3CVSS4.3AI score0.0089EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2021/06/25 6:33 p.m.•75 views

CVE-2021-27021

A flaw was discovered in puppet. An escalation of privileges which allows the user to delete tables via an SQL query is possible in Puppet DB. The highest threat from this vulnerability is to system availability and integrity...

8.9CVSS3.2AI score0.01262EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2021/06/22 4:29 p.m.•75 views

CVE-2021-29060

A Regular Expression Denial of Service ReDOS vulnerability was found in Color-String, which occurs when the application is provided and checks a crafted invalid HWB string. The highest threat from this vulnerability is to system availability...

5.3CVSS3.5AI score0.03134EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2021/06/11 5:12 p.m.•75 views

CVE-2021-28169

For Eclipse Jetty versions = 9.4.40, = 10.0.2, = 11.0.2, it is possible for requests to the ConcatServlet with a doubly encoded path to access protected resources within the WEB-INF directory. For example a request to /concat?/%2557EB-INF/web.xml can retrieve the web.xml file. This can reveal...

5.3CVSS3.6AI score0.7848EPSS
SaveExploits2References3
RedhatCVE
RedhatCVE
•added 2021/06/08 6:52 a.m.•75 views

CVE-2021-3575

A heap-based buffer overflow was found in OpenJPEG. This flaw allows an attacker to execute arbitrary code with the permissions of the application compiled against OpenJPEG...

7.8CVSS4.3AI score0.01536EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2021/06/08 3:49 a.m.•75 views

CVE-2020-13950

A flaw was found In Apache httpd. The modproxy has a NULL pointer dereference. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

7.5CVSS1.8AI score0.4937EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2020/12/17 8:48 p.m.•75 views

CVE-2020-29652

A null pointer dereference vulnerability was found in golang. When using the library's ssh server without specifying an option for GSSAPIWithMICConfig, it is possible for an attacker to craft an ssh client connection using the gssapi-with-mic authentication method and cause the server to panic...

7.5CVSS7.4AI score0.03267EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2020/04/08 9:22 p.m.•75 views

CVE-2012-6708

jQuery before 1.9.0 is vulnerable to Cross-site Scripting XSS attacks. The jQuerystrInput function does not differentiate selectors from HTML in a reliable fashion. In vulnerable versions, jQuery determined whether the input was HTML by looking for the '' character anywhere in the string, giving...

6.8CVSS2.6AI score0.08632EPSS
SaveExploits6References2
RedhatCVE
RedhatCVE
•added 2020/03/06 4:40 p.m.•75 views

CVE-2019-15126

An issue was discovered on Broadcom Wi-Fi client devices. Specifically timed and handcrafted traffic can cause internal errors related to state transitions in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a...

8.8CVSS2.4AI score0.07255EPSS
SaveExploits9References3
RedhatCVE
RedhatCVE
•added 2019/12/11 12:21 p.m.•75 views

CVE-2019-19339

It was found that the Red Hat Enterprise Linux 8 kpatch update did not include the complete fix for CVE-2018-12207. A flaw was found in the way Intel CPUs handle inconsistency between, virtual to physical memory address translations in CPU's local cache and system software's Paging structure...

6.5CVSS0.3AI score0.00915EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2019/10/09 11:45 a.m.•75 views

CVE-2017-9798

A use-after-free flaw was found in the way httpd handled invalid and previously unregistered HTTP methods specified in the Limit directive used in an .htaccess file. A remote attacker could possibly use this flaw to disclose portions of the server memory, or cause httpd child process to crash...

7.5CVSS0.1AI score0.94999EPSS
SaveExploits9References2
RedhatCVE
RedhatCVE
•added 2019/04/02 11:19 a.m.•75 views

CVE-2019-0220

A vulnerability was found in Apache HTTP Server 2.4.0 to 2.4.38. When the path component of a request URL contains multiple consecutive slashes '/', directives such as LocationMatch and RewriteRule must account for duplicates in regular expressions while other aspects of the servers processing wi...

5.3CVSS1AI score0.18006EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2016/11/02 8:47 a.m.•75 views

CVE-2016-8622

The URL percent-encoding decode function in libcurl before 7.51.0 is called curleasyunescape. Internally, even if this function would be made to allocate a unscape destination buffer larger than 2GB, it would return that new length in a signed 32 bit integer variable, thus the length would get...

9.8CVSS1.7AI score0.0467EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/12/17 12:55 a.m.•74 views

CVE-2025-67722

FreePBX is an open-source web-based graphical user interface GUI that manages Asterisk. Prior to versions 16.0.45 and 17.0.24 of the FreePBX framework, an authenticated local privilege escalation exists in the deprecated FreePBX startup script amportal. In the deprecated amportal utility, the...

8.4CVSS6.8AI score0.00128EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/11/18 12:11 a.m.•74 views

CVE-2025-63918

PDFPatcher executable does not validate user-supplied file paths, allowing directory traversal attacks allowing attackers to upload arbitrary files to arbitrary locations...

6.2CVSS7.2AI score0.00399EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/09/17 3:48 a.m.•74 views

CVE-2025-10423

A vulnerability was found in newbee-mall 1.0. Impacted is the function mallKaptcha of the file /common/mall/kaptcha. The manipulation results in guessable captcha. The attack can be executed remotely. A high complexity level is associated with this attack. The exploitability is considered...

6.3CVSS6.3AI score0.00452EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 4:29 a.m.•74 views

CVE-2019-14221

1CRM On-Premise Software 8.5.7 allows XSS via a payload that is mishandled during a Run Report operation...

5.4CVSS5.7AI score0.01709EPSS
SaveExploits5References1
RedhatCVE
RedhatCVE
•added 2024/04/17 1:02 p.m.•74 views

CVE-2024-2419

A flaw was found in Keycloak's redirecturi validation logic. This issue may allow a bypass of otherwise explicitly allowed hosts. A successful attack may lead to the theft of an access token, making it possible for the attacker to impersonate other users. It is very similar to CVE-2023-6291...

7.1CVSS6.7AI score0.0095EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2024/04/09 6:33 p.m.•74 views

CVE-2024-24576

A command injection flaw was found in Rust, exclusive to Windows environments. When invoking batch files on Windows using the Command API, Rust explicitly uses cmd.exe which has complicated parsing rules for arguments. If an attacker can control part of the command arguments of the batch file, th...

10CVSS7.9AI score0.20342EPSS
SaveExploits10References5
RedhatCVE
RedhatCVE
•added 2024/01/16 11:57 a.m.•74 views

CVE-2024-0553

A vulnerability was found in GnuTLS. The response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from the response times of ciphertexts with correct PKCS1 v1.5 padding. This issue may allow a remote attacker to perform a timing side-channel attack in the RSA-PSK key exchange,...

7.5CVSS6.8AI score0.01614EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2023/06/23 5:47 a.m.•74 views

CVE-2023-26115

A flaw was found in the Node.js word-wrap module, where it is vulnerable to a denial of service caused by a Regular expression denial of service ReDoS issue in the result variable. By sending a specially crafted regex input, a remote attacker can cause a denial of service...

7.5CVSS6.6AI score0.01709EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2023/05/29 5:40 a.m.•74 views

CVE-2023-34152

A vulnerability was found in ImageMagick. This issue can allow remote code execution in OpenBlob with --enable-pipes configured...

9.4CVSS7.9AI score0.08011EPSS
SaveExploits3References3
RedhatCVE
RedhatCVE
•added 2023/04/05 1:13 p.m.•74 views

CVE-2023-28841

A flaw was found in Moby due to missing encrypted sensitive data within the overlay network driver. This issue could allow a remote attacker to obtain sensitive information by sending a specially crafted request and use this information to launch further attacks against the affected system...

6.8CVSS6.3AI score0.00691EPSS
SaveExploits1References7
RedhatCVE
RedhatCVE
•added 2022/08/19 5:14 a.m.•74 views

CVE-2022-34170

In Jenkins 2.320 through 2.355 both inclusive and LTS 2.332.1 through LTS 2.332.3 both inclusive the help icon does not escape the feature name that is part of its tooltip, effectively undoing the fix for SECURITY-1955, resulting in a cross-site scripting XSS vulnerability exploitable by attacker...

6.1CVSS1.4AI score0.01438EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2022/05/07 2:06 p.m.•74 views

CVE-2016-2124

A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this flaw to retrieve the plaintext password sent over the wire even if Kerberos authentication was required. Mitigation Ensure the following global smb.conf parameters are set to their default values as show...

6.8CVSS7.5AI score0.01766EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2022/05/07 2:04 p.m.•74 views

CVE-2021-3629

A flaw was found in Undertow. A potential security issue in flow control handling by the browser over http/2 may potentially cause overhead or a denial of service in the server. The highest threat from this vulnerability is availability...

5.9CVSS1.9AI score0.01328EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2022/04/25 11:52 a.m.•74 views

CVE-2022-29582

A use-after-free flaw was found in the Linux kernel’s iouring interface subsystem in the way a user triggers a race condition between timeout flush and removal. This flaw allows a local user to crash or escalate their privileges on the system...

7CVSS4.2AI score0.00773EPSS
SaveExploits3References4
RedhatCVE
RedhatCVE
•added 2022/03/22 8:10 a.m.•74 views

CVE-2022-1043

A flaw was found in the Linux kernel’s iouring implementation. This flaw allows an attacker with a local account to corrupt system memory, crash the system or escalate privileges...

8.8CVSS4.2AI score0.03865EPSS
SaveExploits4References5
RedhatCVE
RedhatCVE
•added 2022/02/22 4:46 a.m.•74 views

CVE-2021-44570

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority for the following reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-3200 Reason: This candidate is a duplicate of CVE-2021-3200. Notes: All CVE users should reference CVE-2021-3200 instead of this candidate. Al...

4.3CVSS6.7AI score0.01313EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2022/01/25 5:35 p.m.•74 views

CVE-2022-0318

A flaw was found in vim. The vulnerability occurs due to reading beyond the end of a line in the utfheadoff function, which can lead to a heap buffer overflow. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution. Mitigation Untrusted vim scripts wi...

9.8CVSS4.5AI score0.0203EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2021/12/22 5:20 a.m.•74 views

CVE-2021-4154

A use-after-free flaw was found in cgroup1parseparam in kernel/cgroup/cgroup-v1.c in the Linux kernel's cgroup v1 parser. A local attacker with a user privilege could cause a privilege escalation by exploiting the fsconfig syscall parameter leading to a container breakout and a denial of service ...

8.8CVSS2.4AI score0.01206EPSS
SaveExploits2References4
RedhatCVE
RedhatCVE
•added 2021/11/03 5:42 p.m.•74 views

CVE-2021-41174

A cross-site scripting XSS vulnerability in grafana allows an attacker to execute arbitrary JavaScript code in the browser of a victim user. An attacker may send a link referencing a page where the victim is unauthenticated and contains the login button and including interpolation binding...

6.9CVSS6.3AI score0.85404EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2021/09/06 6:04 p.m.•74 views

CVE-2021-39257

The ntfs3g package is susceptible to a heap overflow on crafted input. When processing an NTFS image, proper bounds checking was not enforced leading to this software flaw. The highest threat from this vulnerability is system availability...

5.5CVSS1.3AI score0.00396EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2021/09/06 5:22 p.m.•74 views

CVE-2021-39251

The ntfs3g package is susceptible to an input validation attack. When processing a crafted NTFS image there is an improper check. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

7.8CVSS2.7AI score0.00416EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2021/08/04 6:23 p.m.•74 views

CVE-2021-22147

Elasticsearch before 7.14.0 did not apply document and field level security to searchable snapshots. This could lead to an authenticated user gaining access to information that they are unauthorized to view...

6.5CVSS2.5AI score0.01037EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2021/08/03 4:44 p.m.•74 views

CVE-2021-3679

A lack of CPU resources in the Linux kernel tracing module functionality was found in the way users use the trace ring buffer in specific way. Only privileged local users with CAPSYSADMIN capability could use this flaw to starve the resources causing denial of service. Mitigation Mitigation for...

5.5CVSS2.2AI score0.00751EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2021/07/06 5:20 p.m.•74 views

CVE-2021-36086

The CIL compiler in SELinux 3.2 has a use-after-free in cilresetclasspermission called from cilresetclasspermsset and cilresetclasspermslist...

3.3CVSS5.2AI score0.00597EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2021/06/24 7:57 a.m.•74 views

CVE-2021-23159

A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function lsxreadwbuf in formatsi.c file. The vulnerability is exploitable with a crafted file, that could cause an application to crash...

5.5CVSS2.9AI score0.00481EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2021/06/10 6:23 p.m.•74 views

CVE-2017-12621

An XML External Entity XXE Injection vulnerability was found in Commons Jelly library. If a custom doctype entity is declared with a SYSTEM entity with a URL and that entity is used in the body of the Jelly file, the parser will attempt to connect to provided URL...

9.8CVSS4AI score0.07027EPSS
SaveExploits3References2
RedhatCVE
RedhatCVE
•added 2021/05/24 5:06 p.m.•74 views

CVE-2021-23386

Remote memory exposure vulnerability was found in nodejs dns-packet library. The buffers created with allocUnsafe are not always filled before forming the network packets and an attacker can use this vulnerability to potentially get access to internal application memory over non encrypted network...

7.7CVSS4.7AI score0.01425EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2021/05/19 12:26 a.m.•74 views

CVE-2020-26140

A vulnerability was found in Linux kernel. Where the WiFi implementations accept plaintext frames in a protected WiFi network. An adversary can abuse this to inject arbitrary data frames independent of the network configuration. Mitigation Mitigation for this issue is either not available or the...

6.5CVSS1.7AI score0.02923EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2021/05/13 6:48 a.m.•74 views

CVE-2020-26139

Frames used for authentication and key management between the AP and connected clients. Some clients may take these redirected frames masquerading as control mechanisms from the AP. Mitigation Mitigation for this issue is either not available or the currently available options does not meet the R...

5.3CVSS1.6AI score0.06487EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2021/02/07 3:15 p.m.•74 views

CVE-2017-5664

A vulnerability was discovered in the error page mechanism in Tomcat's DefaultServlet implementation. A crafted HTTP request could cause undesired side effects, possibly including the removal or replacement of the custom error page. Mitigation If it is necessary to have the DefaultServlet propert...

7.5CVSS0.4AI score0.16567EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2020/12/01 12:31 p.m.•74 views

CVE-2020-28974

An out-of-bounds OOB SLAB memory access flaw was found in the Linux kernel's fbcon driver module. A bounds check failure allows a local attacker with special user privileges to gain access to out-of-bounds memory, leading to a system crash or leaking of internal kernel information. The highest...

6.1CVSS6.4AI score0.00517EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2020/05/12 2:40 p.m.•74 views

CVE-2020-12770

A vulnerability was found in sgwrite in drivers/scsi/sg.c in the SCSI generic sg driver subsystem. This flaw allows an attacker with local access and special user or root privileges to cause a denial of service if the allocated list is not cleaned with an invalid Sgfd sfp pointer at the time of...

4.6CVSS1.5AI score0.00586EPSS
SaveExploits0References3
Total number of security vulnerabilities5000