Lucene search
+L
RedhatcveMost viewed

214880 matches found

RedhatCVE
RedhatCVE
•added 2021/08/24 10:14 p.m.•69 views

CVE-2021-32779

An authorization bypass vulnerability was found in envoyproxy/envoy. When a URI path-based authorization policy is specified, envoy incorrectly evaluates the HTTP request which contains a URI fragment. This flaw allows an attacker to bypass the authorization policy and access downstream services...

8.6CVSS2.4AI score0.00948EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2021/08/17 7:10 p.m.•69 views

CVE-2021-38593

Qt 5.x before 5.15.6 and 6.x through 6.1.2 has an out-of-bounds write in QOutlineMapper::convertPath called from QRasterPaintEngine::fill and QPaintEngineEx::stroke...

7.5CVSS1.9AI score0.03002EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2021/08/10 9:21 p.m.•69 views

CVE-2021-38198

A flaw was found in the Linux kernel, where it incorrectly computes the access permissions of a shadow page. This issue leads to a missing guest protection page fault. Mitigation Do not disable hardware-assisted paging also known as nested paging and Second Level Address Translation on your hosts...

6.4CVSS1.6AI score0.00469EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2021/08/02 8:49 a.m.•69 views

CVE-2020-19715

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority for the following reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-13110 Reason: This candidate is a duplicate of CVE-2019-13110. Notes: All CVE users should reference CVE-2019-13110 instead of this candidate...

6.5CVSS6.1AI score0.01925EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2021/07/28 1:53 p.m.•69 views

CVE-2021-30758

A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14.7, Safari 14.1.2, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7. Processing maliciously crafted web content may lead to arbitrary code execution...

8.8CVSS2.2AI score0.01664EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2021/07/27 12:55 p.m.•69 views

CVE-2021-3667

An improper locking issue was found in the virStoragePoolLookupByTargetPath API of libvirt. It occurs in the storagePoolLookupByTargetPath function where a locked virStoragePoolObj object is not properly released on ACL permission failure. Clients connecting to the read-write socket with limited...

6.5CVSS2.3AI score0.01366EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2021/07/15 12:51 a.m.•69 views

CVE-2021-25740

A flaw was found in Kubernetes. This issue enables users to send network traffic to locations they would otherwise not have access to via a confused deputy attack...

3.5CVSS4.4AI score0.01952EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2021/07/06 8:45 p.m.•69 views

CVE-2021-3637

A flaw was found in keycloak-model-infinispan where the authenticationSessions map in RootAuthenticationSessionEntity grows boundlessly. This issue leads to a denial of service...

7.5CVSS4.3AI score0.01129EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2021/07/06 3:18 p.m.•69 views

CVE-2021-3571

A flaw was found in the ptp4l program of the linuxptp package. When ptp4l is operating on a little-endian architecture as a PTP transparent clock, a remote attacker could send a crafted one-step sync message to cause an information leak or crash. The highest threat from this vulnerability is to...

7.1CVSS0.5AI score0.01895EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2021/06/27 1:54 p.m.•69 views

CVE-2019-11091

Uncacheable memory on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access...

5.6CVSS5.3AI score0.00612EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2021/06/18 5:29 p.m.•69 views

CVE-2021-32575

A flaw was found in Nomad. The bridge networking mode in HashiCorp Nomad and Nomad Enterprise allows ARP spoofing from other bridged tasks on the same node...

6.5CVSS1.3AI score0.00512EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2021/06/14 2:14 p.m.•69 views

CVE-2021-31811

In Apache PDFBox, a carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions...

5.5CVSS3.9AI score0.03445EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2021/04/20 3:00 p.m.•69 views

CVE-2021-29155

A vulnerability was discovered in retrieveptrlimit in kernel/bpf/verifier.c in the Linux kernel mechanism to mitigate speculatively out-of-bounds loads Spectre mitigation. In this flaw a local, special user privileged CAPSYSADMIN BPF program running on affected systems may bypass the protection,...

5.5CVSS2.8AI score0.01071EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2021/03/22 8:28 p.m.•69 views

CVE-2021-28964

A race condition flaw was found in getoldroot in fs/btrfs/ctree.c in the Linux kernel in btrfs file-system. This flaw allows a local attacker with a special user privilege to cause a denial of service due to not locking an extent buffer before a cloning operation. The highest threat from this...

4.7CVSS6.1AI score0.00267EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2021/02/18 3:34 p.m.•69 views

CVE-2020-12362

A flaw was found in the Linux kernel. An integer overflow in the firmware for some IntelR Graphics Drivers may allow a privileged user to potentially enable an escalation of privilege via local access. The highest threat from this vulnerability is to data confidentiality and integrity as well as...

7.8CVSS3.8AI score0.00359EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2021/01/13 12:46 p.m.•69 views

CVE-2020-28374

A flaw was found in the Linux kernel’s implementation of the Linux SCSI target host, where an authenticated attacker could write to any block on the exported SCSI device backing store. This flaw allows an authenticated attacker to send LIO block requests to the Linux system to overwrite data on t...

8.1CVSS1.6AI score0.06309EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2020/10/13 8:15 p.m.•69 views

CVE-2020-15250

In JUnit4 from version 4.7 and before 4.13.1, the test rule TemporaryFolder contains a local information disclosure vulnerability. On Unix like systems, the system's temporary directory is shared between all users on that system. Because of this, when files and directories are written into this...

5.5CVSS1.5AI score0.01695EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2020/09/07 2:21 p.m.•69 views

CVE-2019-20916

A flaw was found in the pip package installer for Python when downloading or installing a remote package via a specified URL. Improper validation of the "Content-Disposition" HTTP response header makes a path traversal attack possible, leading to an arbitrary file overwrite. This flaw allows an...

8CVSS5.4AI score0.03028EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2020/06/29 9:20 a.m.•69 views

CVE-2020-1066

An elevation of privilege vulnerability exists in .NET Framework which could allow an attacker to elevate their privilege level.To exploit the vulnerability, an attacker would first have to access the local machine, and then run a malicious program.The update addresses the vulnerability by...

4.6CVSS5.4AI score0.02501EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2020/04/15 7:33 a.m.•69 views

CVE-2020-10709

A security flaw was found in Ansible Tower when requesting an OAuth2 token with an OAuth2 application. Ansible Tower uses the token to provide authentication. This flaw allows an attacker to obtain a refresh token that does not expire. The original token granted to the user still has access to...

7.1CVSS2.9AI score0.00272EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2020/04/07 11:02 p.m.•69 views

CVE-2019-9637

An issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to the way rename across filesystems is implemented, it is possible that file being renamed is briefly available with wrong permissions while the rename is ongoing, thus enabling unauthorized users to...

7.5CVSS2.9AI score0.07347EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2020/04/04 5:27 p.m.•69 views

CVE-2018-20676

A flaw was found in Bootstrap, where it is vulnerable to Cross-site scripting, caused by improper validation of user-supplied input by the tooltip data-viewport attribute. This flaw allows a remote attacker to execute a script in a victim's Web browser within the security context of the hosting W...

6.1CVSS6.1AI score0.03835EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2020/04/02 2:08 p.m.•69 views

CVE-2019-9946

Cloud Native Computing Foundation CNCF CNI Container Networking Interface 0.7.4 has a network firewall misconfiguration which affects Kubernetes. The CNI 'portmap' plugin, used to setup HostPorts for CNI, inserts rules at the front of the iptables nat chains; which take precedence over the KUBE-...

7.5CVSS0.2AI score0.03246EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2020/01/07 9:41 a.m.•69 views

CVE-2019-6974

A use-after-free vulnerability was found in the way the Linux kernel's KVM hypervisor implements its device control API. While creating a device via kvmioctlcreatedevice, the device holds a reference to a VM object, later this reference is transferred to the caller's file descriptor table. If suc...

8.1CVSS1.8AI score0.16523EPSS
SaveExploits3References2
RedhatCVE
RedhatCVE
•added 2019/12/26 10:17 a.m.•69 views

CVE-2019-11047

When PHP EXIF extension is parsing EXIF information from an image, e.g. via exifreaddata function, in PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure o...

6.5CVSS3.1AI score0.07473EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2019/12/10 8:48 p.m.•69 views

CVE-2019-19377

A flaw was found in the Linux kernel's implementation of the BTRFS file system. A local attacker, with the ability to mount a file system, can create a use-after-free memory fault after the file system has been unmounted. This may lead to memory corruption or privilege escalation. Mitigation As t...

7.8CVSS0.5AI score0.034EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2019/11/13 7:07 a.m.•69 views

CVE-2019-18683

A flaw was found in the Linux kernel. Multiple race conditions were found in the vivid driver leading to privilege escalation and in at least one case a use-after-free condition. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

7.8CVSS2.2AI score0.00985EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
•added 2019/10/08 10:15 a.m.•69 views

CVE-2017-13077

A new exploitation technique called key reinstallation attacks KRACKs affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit this attack to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by reinstalling a previously used pairwise key PTK-TK during a...

8.1CVSS2AI score0.04575EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2018/06/15 6:20 p.m.•69 views

CVE-2018-12437

LibTomCrypt through 1.18.1 allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host...

5.5CVSS2.4AI score0.00887EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
•added 2017/12/14 2:19 a.m.•69 views

CVE-2017-17448

The net/netfilter/nfnetlinkcthelper.c function in the Linux kernel through 4.14.4 does not require the CAPNETADMIN capability for new, get, and del operations. This allows local users to bypass intended access restrictions because the nfnlcthelperlist data structure is shared across all net...

7.8CVSS4.2AI score0.00372EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2017/05/19 2:48 p.m.•69 views

CVE-2017-9077

The tcpv6synrecvsock function in net/ipv6/tcpipv6.c in the Linux kernel mishandles inheritance, which allows local users to cause a denial of service or possibly have unspecified other impact via crafted system calls, a related issue to CVE-2017-8890. An unprivileged local user could use this fla...

7.8CVSS3.8AI score0.01422EPSS
SaveExploits6References1
RedhatCVE
RedhatCVE
•added 2026/01/09 9:30 a.m.•68 views

CVE-2023-29425

Cross-Site Request Forgery CSRF vulnerability in plainware.Com ShiftController Employee Shift Scheduling plugin = 4.9.23 versions...

8.8CVSS7.1AI score0.00264EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/11 12:03 a.m.•68 views

CVE-2025-67502

Taguette is an open source qualitative research tool. In versions 1.5.1 and below, attackers can craft malicious URLs that redirect users to arbitrary external websites after authentication. The application accepts a user-controlled next parameter and uses it directly in HTTP redirects without an...

6.1CVSS6.5AI score0.00262EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/10/07 6:09 a.m.•68 views

CVE-2025-11321

A vulnerability was detected in zhuimengshaonian wisdom-education up to 1.0.4. The affected element is an unknown function of the file src/main/java/com/education/api/controller/student/WrongBookController.java. Performing manipulation of the argument subjectId results in authorization bypass. Th...

5.3CVSS6.7AI score0.00354EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 4:19 p.m.•68 views

CVE-2020-14008

Zoho ManageEngine Applications Manager 14710 and before allows an authenticated admin user to upload a vulnerable jar in a specific location, which leads to remote code execution...

7.2CVSS7.3AI score0.37525EPSS
SaveExploits4
RedhatCVE
RedhatCVE
•added 2025/04/05 3:31 p.m.•68 views

CVE-2025-22457

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.7R1.4, and Ivanti ZTA Gateways before version 22.8R2.2 allows a remote unauthenticated attacker to achieve remote code execution...

9.8CVSS8.4AI score0.99981EPSS
SaveExploits9References1
RedhatCVE
RedhatCVE
•added 2025/02/06 2:53 a.m.•68 views

CVE-2025-23436

Cross-Site Request Forgery CSRF vulnerability in capa Wp-Scribd-List wp-scribd-list allows Stored XSS.This issue affects Wp-Scribd-List: from n/a through = 1.2...

7.1CVSS7.2AI score0.00203EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2024/05/21 5:10 p.m.•68 views

CVE-2024-5148

A flaw was found in the gnome-remote-desktop package. The gnome-remote-desktop system daemon performs inadequate validation of session agents using D-Bus methods related to transitioning a client connection from the login screen to the user session. As a result, the system RDP TLS certificate and...

7.5CVSS7.3AI score0.00569EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2024/03/27 8:32 a.m.•68 views

CVE-2024-2955

A flaw was found in the T.38 dissector of Wireshark. This issue occurs when decoding malformed packets from a pcap file or from the network, causing a use-after-free problem, resulting in a denial of service...

6.5CVSS7.4AI score0.01403EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2024/02/09 2:59 a.m.•68 views

CVE-2023-4639

A flaw was found in Undertow, which incorrectly parses cookies with certain value-delimiting characters in incoming requests. This issue could allow an attacker to construct a cookie value to exfiltrate HttpOnly cookie values or spoof arbitrary additional cookie values, leading to unauthorized da...

7.4CVSS6.5AI score0.01093EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2023/12/18 10:58 p.m.•68 views

CVE-2023-6004

A flaw was found in libssh. By utilizing the ProxyCommand or ProxyJump feature, users can exploit unchecked hostname syntax on the client. This issue may allow an attacker to inject malicious code into the command of the features mentioned through the hostname parameter. Mitigation Mitigation for...

4.8CVSS5.9AI score0.00449EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2023/10/27 9:56 a.m.•68 views

CVE-2023-5824

A flaw was found in Squid. The limits applied for validation of HTTP response headers are applied before caching. However, Squid may grow a cached HTTP response header beyond the configured maximum size, causing a stall or crash of the worker process when a large header is retrieved from the disk...

7.5CVSS7.3AI score0.05186EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2023/09/13 6:54 a.m.•68 views

CVE-2023-39320

A flaw was found in Golang. The go.mod toolchain directive, introduced in Go 1.21, could be leveraged to execute scripts and binaries relative to the root of the module when the "go" command was executed within the module. This applies to modules downloaded using the "go" command from the module...

8.8CVSS7.2AI score0.01757EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
•added 2023/08/10 10:19 a.m.•68 views

CVE-2023-32003

A vulnerability was found in NodeJS. This security issue occurs as fs.mkdtemp and fs.mkdtempSync can be used to bypass the permission model check using a path traversal attack. This flaw arises from a missing check in the fs.mkdtemp API, and the impact is a malicious actor could create an arbitra...

5.3CVSS7AI score0.0117EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2023/07/30 12:18 p.m.•68 views

CVE-2023-4004

A use-after-free flaw was found in the Linux kernel's netfilter in the way a user triggers the nftpipaporemove function with the element, without a NFTSETEXTKEYEND. This issue could allow a local user to crash the system or potentially escalate their privileges on the system. Mitigation This flaw...

7.8CVSS7.6AI score0.00917EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2023/07/19 4:06 p.m.•68 views

CVE-2023-21400

A double-free vulnerability was found in the iouring subsystem in the Linux kernel. This issue may allow a malicious local user to crash the kernel or elevate their privileges on the system...

7CVSS6.5AI score0.00261EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2023/06/29 5:17 p.m.•68 views

CVE-2023-3338

A null pointer dereference flaw was found in the Linux kernel's DECnet networking protocol. This issue could allow a remote user to crash the system...

6.5CVSS6.3AI score0.08025EPSS
SaveExploits3References3
RedhatCVE
RedhatCVE
•added 2023/04/30 7:21 a.m.•68 views

CVE-2023-2430

A vulnerability was found due to a missing lock for the IOPOLL in iocqringeventoverflow in iouring.c in the Linux kernel. This flaw allows a local attacker with user privileges to trigger a denial of service. Mitigation Mitigation for this issue is either not available or the currently available...

6.6CVSS5.9AI score0.00154EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2023/03/21 4:14 p.m.•68 views

CVE-2023-0462

An arbitrary code execution flaw was found in Foreman. This issue may allow an admin user to execute arbitrary code on the underlying operating system by setting global parameters with a YAML payload...

9.1CVSS7.8AI score0.00961EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2023/03/21 1:13 p.m.•68 views

CVE-2023-27534

A path traversal vulnerability exists in curl 8.0.0 SFTP implementation causes the tilde character to be wrongly replaced when used as a prefix in the first path element, in addition to its intended use as the first element to indicate a path relative to the user's home directory. Attackers can...

3.7CVSS9.3AI score0.02195EPSS
SaveExploits1References4
Total number of security vulnerabilities5000