Lucene search
+L
RedhatcveMost viewed

211083 matches found

RedhatCVE
RedhatCVE
•added 2021/09/17 6:35 p.m.•60 views

CVE-2020-21532

In transfig's fig2dev 3.2.7b it is possible for an attacker to create a specially crafted file that causes a buffer overflow due to accepting an invalid value. This leads to a denial of service, impacting availability of the program...

5.5CVSS4.8AI score0.01078EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2021/09/06 6:4 p.m.•60 views

CVE-2021-39263

The ntfs3g package is susceptible to a heap overflow on crafted input. When processing an NTFS image, proper bounds checking was not enforced leading to this software flaw. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

7.8CVSS2.2AI score0.00456EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2021/08/22 1:30 p.m.•60 views

CVE-2020-2162

Jenkins 2.227 and earlier, LTS 2.204.5 and earlier does not set Content-Security-Policy headers for files uploaded as file parameters to a build, resulting in a stored XSS vulnerability...

5.4CVSS2.1AI score0.01159EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2021/08/18 7:5 a.m.•60 views

CVE-2021-3716

A flaw was found in nbdkit due to to improperly caching plaintext state across the STARTTLS encryption boundary. A MitM attacker could use this flaw to inject a plaintext NBDOPTSTRUCTUREDREPLY before proxying everything else a client sends to the server, potentially leading the client to terminat...

3.5CVSS0.9AI score0.00582EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2021/08/12 10:51 a.m.•60 views

CVE-2021-22939

A flaw was found in Node.js. If the Node.js HTTPS API is used incorrectly and "undefined" is passed for the "rejectUnauthorized" parameter, no error is returned, and the connections to servers with an expired certificate are accepted. The highest threat from this vulnerability is to integrity...

5.3CVSS1.4AI score0.1473EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2021/08/10 10:56 p.m.•60 views

CVE-2021-34485

.NET Core and Visual Studio Information Disclosure Vulnerability...

5.5CVSS1.4AI score0.01455EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2021/08/10 9:51 p.m.•60 views

CVE-2021-2390

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.7.34 and prior and 8.0.25 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server...

7.1CVSS2AI score0.04267EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2021/08/09 12:20 p.m.•60 views

CVE-2021-36770

A flaw was found in perl-Encode, where the Perl5 Encode module loaded modules within the current directory. This flaw allows an attacker with write access to the current directory of a Perl5 process to inject arbitrary Perl code when this module is loaded, which can be used for a local privilege...

7.8CVSS1.7AI score0.01397EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2021/08/02 8:49 a.m.•60 views

CVE-2020-19716

There's a flaw in exiv2. An attacker able to submit a crafted file to an application linked with exiv2 could trigger excessive resource consumption or a null pointer dereference, leading to an impact to application availability...

6.5CVSS2.5AI score0.0114EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2021/07/11 7:51 a.m.•60 views

CVE-2016-6816

It was discovered that the code that parsed the HTTP request line permitted invalid characters. This could be exploited, in conjunction with a proxy that also permitted the invalid characters but with a different interpretation, to inject data into the HTTP response. By manipulating the HTTP...

7.1CVSS1.6AI score0.39633EPSS
SaveExploits6References2
RedhatCVE
RedhatCVE
•added 2021/07/07 9:53 p.m.•60 views

CVE-2021-31810

Ruby's Net::FTP module trusted the IP address included in the FTP server's response to the PASV command. A malicious FTP server could use this to make Ruby applications using the Net::FTP module to connect to arbitrary hosts and use this to perform port scanning or information extraction from...

5.8CVSS1.1AI score0.0305EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2021/06/28 6:33 p.m.•60 views

CVE-2021-32718

RabbitMQ is a multi-protocol messaging broker. In rabbitmq-server prior to version 3.8.17, a new user being added via management UI could lead to the user's bane being rendered in a confirmation message without proper...

5.4CVSS3.7AI score0.01432EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2021/06/08 7:43 p.m.•60 views

CVE-2020-24511

Microcode misconfiguration in some Intel processors may cause EIBRS mitigation CVE-2017-5715 to be incomplete. As a consequence, this issue may allow an authenticated user to potentially enable information disclosure via local access...

6.5CVSS4.6AI score0.74207EPSS
SaveExploits10References3
RedhatCVE
RedhatCVE
•added 2021/02/18 5:4 p.m.•60 views

CVE-2021-23840

Calls to EVPCipherUpdate, EVPEncryptUpdate and EVPDecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissible length for an integer on the platform. In such cases the return value from the function call will be 1 indicating succes...

7.5CVSS8AI score0.50732EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2021/02/04 6:23 p.m.•60 views

CVE-2021-21702

A NULL pointer dereference issue is in the SOAP extension of PHP. More specifically, the flaw occurs in the SoapClient when parsing a WSDL document due to improper checking of a child node name. A malicious or compromised server replies with a crafted WSDL document, leading to a denial of service...

7.5CVSS2.6AI score0.03179EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2020/08/18 7:29 p.m.•60 views

CVE-2020-8911

A flaw was found in the AWS S3 Crypto SDK that allows users to encrypt files stored in S3 buckets with AES-CBC, without computing a MAC on the data. This allows for a padding oracle, enabling attackers with both write access to the target S3 bucket and the ability to observe the result of valid...

2.1CVSS4.3AI score0.00351EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2020/07/15 9:39 a.m.•60 views

CVE-2020-14578

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Libraries. Supported versions that are affected are Java SE: 7u261 and 8u251; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols ...

4.3CVSS2.9AI score0.04044EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2020/04/09 10:6 a.m.•60 views

CVE-2018-12207

A flaw was found in the way Intel CPUs handle inconsistency between, virtual to physical memory address translations in CPU's local cache and system software's Paging structure entries. A privileged guest user may use this flaw to induce a hardware Machine Check Error on the host processor,...

6.5CVSS0.4AI score0.00915EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2020/04/04 11:14 p.m.•60 views

CVE-2019-12818

An issue was discovered in the Linux kernel before 4.20.15. The nfcllcpbuildtlv function in net/nfc/llcpcommands.c may return NULL. If the caller does not check for this, it will trigger a NULL pointer dereference. This will cause denial of service. This affects nfcllcpbuildgb in net/nfc/llcpcore...

7.5CVSS3.4AI score0.05482EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2020/04/04 5:25 p.m.•60 views

CVE-2019-9020

An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. Invalid input to the function xmlrpcdecode can lead to an invalid memory access heap out of bounds read or read after free. This is related to xmlelemparsebuf in...

9.8CVSS1.8AI score0.10059EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2020/04/02 8:13 p.m.•60 views

CVE-2020-2574

Vulnerability in the MySQL Client product of Oracle MySQL component: C API. Supported versions that are affected are 5.6.46 and prior, 5.7.28 and prior and 8.0.18 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise...

5.9CVSS2AI score0.03485EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2020/04/01 2:8 p.m.•60 views

CVE-2020-8608

An out-of-bounds heap buffer access flaw was found in the SLiRP networking implementation of the QEMU emulator. This flaw occurs in tcpemu routine while emulating IRC and other protocols due to unsafe usage of the snprintf3 function. A user or process could use this flaw to crash the QEMU process...

6.8CVSS2AI score0.02486EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2020/03/18 7:37 a.m.•60 views

CVE-2019-11190

A flaw in the loadelfbinary function in the Linux kernel allows a local attacker to leak the base address of .text and stack sections for setuid binaries and bypass ASLR because installexeccreds is called too late in this function...

4.7CVSS3.8AI score0.00481EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2020/02/02 2:38 p.m.•60 views

CVE-2019-15031

A flaw in the Linux kernel on the PowerPC platform, was found where a local user can read vector registers of other user processes during a hardware interrupt. An attacker must start a transaction when the FPU operation begins or there is no leakage. Vector registers will become corrupted with...

4.4CVSS2AI score0.00555EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2020/01/09 7:38 p.m.•60 views

CVE-2019-16254

Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows HTTP Response Splitting. If a program using WEBrick inserts untrusted input into the response header, an attacker can exploit it to insert a newline character to split a header, and inject malicious content to deceive clients...

5.3CVSS0.6AI score0.05556EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2019/12/23 5:38 p.m.•60 views

CVE-2019-19767

A use-after-free flaw was found in the Linux kernel’s ext4 file system functionality when the user mount ext4 partition, with the usage of an additional debug parameter is defining an extra inode size. If this parameter has a non zero value, this flaw allows a local user to crash the system when...

5.5CVSS6.3AI score0.02081EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2019/12/13 9:38 p.m.•60 views

CVE-2019-19534

An information-leak flaw was found in the Linux kernel's pcan USB driver. When a device using this driver connects to the system, the stack information is leaked to the CAN bus, a controller area network for automobiles. The highest threat with this vulnerability is breach of data confidentiality...

4.6CVSS0.1AI score0.00512EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2019/12/13 9:38 p.m.•60 views

CVE-2019-19533

An information leak flaw was found in the Linux kernel's USB digital video device driver. An attacker with a malicious USB device presenting itself as a 'Technotrend/Hauppauge USB DEC' device is able to issue commands to this specific device and leak kernel internal memory information. The highes...

2.4CVSS0.9AI score0.0046EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2019/11/21 12:37 p.m.•60 views

CVE-2019-19056

A flaw was found in the way the mwifiex PCIE driver in the Linux kernel handled resource cleanup on a DMA mapping error. This flaw allows an attacker able to trigger the DMA mapping error to crash the system. Mitigation In order to mitigate this issue it is possible to prevent the affected code...

4.7CVSS1.3AI score0.00387EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2019/11/02 9:33 p.m.•60 views

CVE-2017-18232

The Serial Attached SCSI SAS implementation in the Linux kernel mishandles a mutex within libsas. This allows local users to cause a denial of service deadlock by triggering certain error-handling code...

5.5CVSS4.5AI score0.00409EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2019/10/10 3:19 p.m.•60 views

CVE-2018-1312

In Apache httpd 2.2.0 to 2.4.29, when generating an HTTP Digest authentication challenge, the nonce sent to prevent reply attacks was not correctly generated using a pseudo-random seed. In a cluster of servers using a common Digest authentication configuration, HTTP requests could be replayed...

9.8CVSS1.9AI score0.15885EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2019/10/10 3:43 a.m.•60 views

CVE-2017-11770

.NET Core 1.0, 1.1, and 2.0 allow an unauthenticated attacker to remotely cause a denial of service attack against a .NET Core web application by improperly parsing certificate data. A denial of service vulnerability exists when .NET Core improperly handles parsing certificate data, aka ".NET COR...

7.5CVSS5.5AI score0.05423EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2019/10/09 4:21 a.m.•60 views

CVE-2016-8655

A race condition issue leading to a use-after-free flaw was found in the way the raw packet sockets implementation in the Linux kernel networking subsystem handled synchronization while creating the TPACKETV3 ring buffer. A local user able to open a raw packet socket requires the CAPNETRAW...

7.8CVSS1.6AI score0.11127EPSS
SaveExploits17References1
RedhatCVE
RedhatCVE
•added 2019/09/09 9:21 a.m.•60 views

CVE-2019-16056

An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4. The email module wrongly parses email addresses that contain multiple @ characters. An application that uses the email module and implements some kind of checks on the From/To header...

7.5CVSS3.1AI score0.05366EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2018/06/27 8:49 a.m.•60 views

CVE-2018-1000500

Busybox contains a Missing SSL certificate validation vulnerability in The "busybox wget" applet that can result in arbitrary code execution. This attack appear to be exploitable via Simply download any file over HTTPS using "busybox wget https://compromised-domain.com/important-file"...

8.1CVSS2.8AI score0.02462EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2018/03/26 4:49 a.m.•60 views

CVE-2018-1283

It has been discovered that the modsession module of Apache HTTP Server httpd, through version 2.4.29, has an improper input validation flaw in the way it handles HTTP session headers in some configurations. A remote attacker may influence their content by using a "Session" header...

5.3CVSS2.1AI score0.09919EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2017/06/30 4:48 a.m.•60 views

CVE-2017-3143

A flaw was found in the way BIND handled TSIG authentication for dynamic updates. A remote attacker able to communicate with an authoritative BIND server could use this flaw to manipulate the contents of a zone, by forging a valid TSIG or SIG0 signature for a dynamic update request. Mitigation Th...

7.5CVSS0.7AI score0.18299EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2017/06/19 4:19 p.m.•60 views

CVE-2017-1000370

The offset2lib patch as used in the Linux Kernel contains a vulnerability that allows a PIE binary to be execve'ed with 1GB of arguments or environmental strings then the stack occupies the address 0x80000000 and the PIE binary is mapped above 0x40000000 nullifying the protection of the offset2li...

7.8CVSS5.8AI score0.02732EPSS
SaveExploits9References2
RedhatCVE
RedhatCVE
•added 2026/06/09 4:55 p.m.•59 views

CVE-2026-46320

A flaw was found in the Linux kernel's tap driver. This vulnerability occurs in the tapgetuserxdp function, where allocated memory pages are not properly freed when processing rejected network frames. Specifically, if a frame is shorter than the expected Ethernet header length or if memory...

7.4CVSS5.4AI score0.00235EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2025/10/07 6:9 a.m.•59 views

CVE-2025-11321

A vulnerability was detected in zhuimengshaonian wisdom-education up to 1.0.4. The affected element is an unknown function of the file src/main/java/com/education/api/controller/student/WrongBookController.java. Performing manipulation of the argument subjectId results in authorization bypass. Th...

5.3CVSS6.7AI score0.00326EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 3:42 a.m.•59 views

CVE-2023-30454

An issue was discovered in ebankIT before 7. Document Object Model based XSS exists within the /Security/Transactions/Transactions.aspx endpoint. Users can supply their own JavaScript within the ctl100$ctl00MainContent$TransactionMainContent$accControl$hdnAccountsArray POST parameter that will be...

6.1CVSS5.9AI score0.00535EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/04/05 6:35 p.m.•59 views

CVE-2025-31486

Vite is a frontend tooling framework for javascript. The contents of arbitrary files can be returned to the browser. By adding ?.svg with ?.wasm?init or with sec-fetch-dest: script header, the server.fs.deny restriction was able to bypass. This bypass is only possible if the file is smaller than...

5.3CVSS7.2AI score0.40506EPSS
SaveExploits7References6
RedhatCVE
RedhatCVE
•added 2025/03/28 5:51 p.m.•59 views

CVE-2025-2825

CrushFTP versions 10.0.0 through 10.8.3 and 11.0.0 through 11.3.0 are affected by a vulnerability in the S3 authorization header processing that allows authentication bypass. Remote and unauthenticated HTTP requests to CrushFTP with known usernames can be used to impersonate a user and conduct...

9.8CVSS9.5AI score0.99278EPSS
SaveExploits66References9
RedhatCVE
RedhatCVE
•added 2025/03/27 5:50 p.m.•59 views

CVE-2024-58105

A vulnerability in the Trend Micro Apex One Security Agent Plug-in User Interface Manager could allow a local attacker to bypass existing security and execute arbitrary code on affected installations. This CVE address an addtional bypass not covered in CVE-2024-58104. Please note: an attacker mus...

7.8CVSS7.1AI score0.00155EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2024/12/19 6:53 a.m.•59 views

CVE-2024-53141

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: add missing range check in bitmapipuadt When tbIPSETATTRIPTO is not present but tbIPSETATTRCIDR exists, the values of ip and ipto are slightly swapped. Therefore, the range check for ip should be done later, but...

5.5CVSS6.7AI score0.12966EPSS
SaveExploits8References4
RedhatCVE
RedhatCVE
•added 2024/06/28 5:8 a.m.•59 views

CVE-2024-5642

A vulnerability was found in Python/CPython that does not disallow configuring an empty list "" for SSLContext.setnpnprotocols, which is an invalid value for the underlying OpenSSL API. This issue results in a buffer over-read when NPN is used. See CVE -2024-5535 for OpenSSL for more information...

2.7CVSS6.5AI score0.00744EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2024/04/08 10:51 a.m.•59 views

CVE-2024-25743

A vulnerability was found in AMD SEV-SNP, where a malicious hypervisor can potentially break confidentiality and integrity of SEV-SNP on Linux guests by injecting interrupts. An attacker can inject interrupt 0x80, which is used by Linux for legacy 32-bit system calls, and arbitrarily change the...

7.1CVSS5.9AI score0.00247EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2024/03/22 8:30 p.m.•59 views

CVE-2024-22029

A flaw was found in the Tomcat package of OpenSUSE and derived distributions. This issue occurs due to incorrect permissions and a race condition in the %post section of the Tomcat RPM package, resulting in local privilege escalation when the Tomcat package is re-installed...

7CVSS6.5AI score0.00182EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2024/03/04 2:2 p.m.•59 views

CVE-2024-26602

A flaw was found in sysmembarrier in the Linux kernel in sched/membarrier in how a user calls it at too high of a frequency. This flaw allows a local user to saturate the machine...

4.7CVSS5.8AI score0.00318EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2024/01/18 3:19 p.m.•59 views

CVE-2024-0684

A flaw was found in the GNU coreutils "split" program. A heap overflow with user-controlled data of multiple hundred bytes in length could occur in the linebytessplit function, potentially leading to an application crash and denial of service. Mitigation Mitigation for this issue is either not...

5.5CVSS5.2AI score0.0049EPSS
SaveExploits0References4
Total number of security vulnerabilities5000