Lucene search
+L
RedhatcveMost viewed

214902 matches found

RedhatCVE
RedhatCVE
•added 2018/08/03 7:18 p.m.•59 views

CVE-2018-14883

An issue was discovered in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8. An Integer Overflow leads to a heap-based buffer over-read in exifthumbnailextract of exif.c...

7.5CVSS3.1AI score0.08975EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2018/07/10 3:19 p.m.•59 views

CVE-2018-10872

A flaw was found in the way the Linux kernel handled exceptions delivered after a stack switch operation via Mov SS or Pop SS instructions. During the stack switch operation, processor does not deliver interrupts and exceptions, they are delivered once the first instruction after the stack switch...

7.8CVSS3.3AI score0.18485EPSS
SaveExploits9References2
RedhatCVE
RedhatCVE
•added 2018/01/22 10:59 p.m.•59 views

CVE-2017-15191

In Wireshark 2.4.0 to 2.4.1, 2.2.0 to 2.2.9, and 2.0.0 to 2.0.15, the DMP dissector could crash. This was addressed in epan/dissectors/packet-dmp.c by validating a string length...

7.5CVSS1.8AI score0.02697EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2017/12/12 4:20 p.m.•59 views

CVE-2017-15896

Node.js was affected by OpenSSL vulnerability CVE-2017-3737 in regards to the use of SSLread due to TLS handshake failure. The result was that an active network attacker could send application data to Node.js using the TLS or HTTP2 modules in a way that bypassed TLS authentication and encryption...

9.1CVSS2.4AI score0.78675EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2017/10/16 9:50 a.m.•59 views

CVE-2017-13078

A new exploitation technique called key reinstallation attacks KRACK affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit this attack to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by reinstalling a previously used group key GTK during a 4-way...

8.1CVSS1.9AI score0.0207EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2017/08/11 8:18 a.m.•59 views

CVE-2017-1000111

A race condition issue was found in the way the raw packet socket implementation in the Linux kernel networking subsystem handled synchronization. A local user able to open a raw packet socket requires the CAPNETRAW capability could use this to waste resources in the kernel's ring buffer or...

7.8CVSS0.9AI score0.00374EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2017/07/20 12:48 p.m.•59 views

CVE-2017-10684

In ncurses 6.0, there is a stack-based buffer overflow in the fmtentry function. A crafted input will lead to a remote arbitrary code execution attack...

9.8CVSS7.5AI score0.04876EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2017/07/18 8:19 p.m.•59 views

CVE-2017-10193

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Security. Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...

3.1CVSS1.9AI score0.02224EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2017/05/17 3:09 p.m.•59 views

CVE-2017-8890

The inetcskclonelock function in net/ipv4/inetconnectionsock.c in the Linux kernel allows attackers to cause a denial of service double free or possibly have unspecified other impact by leveraging use of the accept system call. An unprivileged local user could use this flaw to induce kernel memor...

7.8CVSS4.4AI score0.01422EPSS
SaveExploits6References1
RedhatCVE
RedhatCVE
•added 2017/04/27 9:48 a.m.•59 views

CVE-2017-1000353

Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an unauthenticated remote code execution. An unauthenticated remote code execution vulnerability allowed attackers to transfer a serialized Java SignedObject object to the Jenkins CLI, that would be deserialized...

9.8CVSS3.3AI score0.99679EPSS
SaveExploits37References2
RedhatCVE
RedhatCVE
•added 2016/12/20 8:47 a.m.•59 views

CVE-2016-10012

It was found that the boundary checks in the code implementing support for pre-authentication compression could have been optimized out by certain compilers. An attacker able to compromise the privilege-separated process could possibly use this flaw for further attacks against the privileged...

7.8CVSS4.4AI score0.01281EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2016/11/02 11:47 a.m.•59 views

CVE-2016-9137

Use-after-free vulnerability in the CURLFile implementation in ext/curl/curlfile.c in PHP before 5.6.27 and 7.x before 7.0.12 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted serialized data that is mishandled during wakeup processing...

9.8CVSS6.9AI score0.05363EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2016/10/10 8:17 a.m.•59 views

CVE-2016-5425

It was discovered that the Tomcat packages installed configuration file /usr/lib/tmpfiles.d/tomcat.conf writeable to the tomcat group. A member of the group or a malicious web application deployed on Tomcat could use this flaw to escalate their privileges...

7.8CVSS1.7AI score0.03782EPSS
SaveExploits8References2
RedhatCVE
RedhatCVE
•added 2026/08/31 11:53 a.m.•58 views

CVE-2026-65918

A flaw was found in torchvision, a library for PyTorch. This vulnerability, an out-of-bounds heap read in the GIF decoder, allows a remote attacker to supply specially crafted or truncated GIF files. Successful exploitation can lead to a denial of service, causing the application to crash, or the...

7.1CVSS5.9AI score0.00445EPSS
SaveExploits1References7
RedhatCVE
RedhatCVE
•added 2026/06/30 7:49 a.m.•58 views

CVE-2026-53434

A flaw was found in Apache Tomcat. When configuring Certificate Revocation Lists CRLs for a FFM presumably a specific type of connector, the system fails to detect and act upon an error condition. This oversight could lead to unexpected behavior or a security bypass, as the intended security...

9.1CVSS5.7AI score0.00597EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2026/05/11 7:05 p.m.•58 views

CVE-2026-34032

A flaw was found in the modproxyajp module of httpd. When processing AJP Apache JServ Protocol messages, the server fails to properly check if a string is null-terminated before attempting to read it, allowing an attacker or a malformed request to cause a heap-based buffer over-read. This issue...

8.2CVSS5.8AI score0.0094EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2026/02/24 8:26 a.m.•58 views

CVE-2026-25985

A memory exhaustion vulnerability has been identified in ImageMagick when processing specially crafted SVG image files. In vulnerable versions, a maliciously crafted SVG element may trigger an excessively large internal memory allocation on the order of hundreds of gigabytes, causing the...

7.5CVSS5.2AI score0.00662EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2026/01/09 9:33 a.m.•58 views

CVE-2024-39037

MyNET up to v26.08.316 was discovered to contain an Unauthenticated SQL Injection vulnerability via the intmenu parameter...

6.5CVSS8.3AI score0.00239EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/01/09 9:31 a.m.•58 views

CVE-2023-25572

react-admin is a frontend framework for building browser applications on top of REST/GraphQL APIs. react-admin prior to versions 3.19.12 and 4.7.6, along with ra-ui-materialui prior to 3.19.12 and 4.7.6, are vulnerable to cross-site scripting. All React applications built with react-admin and usi...

5.4CVSS5.4AI score0.00694EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/01/09 8:50 a.m.•58 views

CVE-2021-31457

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.7AI score0.02778EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/07 9:19 a.m.•58 views

CVE-2024-2318

A vulnerability was found in ZKTeco ZKBio Media 2.0.0x642024-01-29-1028. It has been classified as problematic. Affected is an unknown function of the file /pro/common/download of the component Service Port 9999. The manipulation of the argument fileName with the input ../../../../zkbiomedia.sql...

7.5CVSS5AI score0.00933EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 7:37 p.m.•58 views

CVE-2021-29934

An issue was discovered in PartialReader in the uuod crate before 0.0.4 for Rust. Attackers can read the contents of uninitialized memory locations via a user-provided Read operation...

7.5CVSS6.7AI score0.009EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2024/07/17 9:23 a.m.•58 views

CVE-2024-21140

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Hotspot. Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0....

4.8CVSS5.8AI score0.0094EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2024/05/28 6:22 p.m.•58 views

CVE-2023-52424

A flaw was found in the IEEE 802.11 standard. This vulnerability possibly allows an adversary to trick a victim into connecting to an unintended or untrusted network because the SSID is not always used to derive the pairwise master key or session keys and because there is not a protected exchange...

7.4CVSS6.6AI score0.00716EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2024/05/09 2:55 p.m.•58 views

CVE-2024-3727

A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks...

8.3CVSS6.7AI score0.01279EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2024/04/03 11:45 p.m.•58 views

CVE-2024-26720

A vulnerability was found in the wbdirtylimits function in the Linux kernel memory management mm subsystem which can lead to a divide-by-zero error. This issue could lead to a potential kernel crash...

5.5CVSS6.2AI score
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2024/03/20 6:01 p.m.•58 views

CVE-2024-1394

A memory leak flaw was found in Golang in the RSA encrypting/decrypting code, which might lead to a resource exhaustion vulnerability using attacker-controlled inputs​. The memory leak happens in github.com/golang-fips/openssl/openssl/rsa.goL113. The objects leaked are pkey​ and ctx​. That functi...

7.5CVSS7.6AI score0.01533EPSS
SaveExploits0References8
RedhatCVE
RedhatCVE
•added 2024/03/13 12:12 p.m.•58 views

CVE-2024-21392

A vulnerability was found in dotnet. The YARP HTTP/2 WebSocket support in .NET Core can cause a denial of service DoS. Mitigation Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and...

7.5CVSS7.1AI score0.0309EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2024/03/06 3:33 a.m.•58 views

CVE-2024-24785

A flaw was found in Go's html/template standard library package. If errors returned from MarshalJSON methods contain user-controlled data, they may be used to break the contextual auto-escaping behavior of the html/template package, allowing subsequent actions to inject unexpected content into...

6.5CVSS7.1AI score0.00795EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
•added 2024/02/19 8:50 p.m.•58 views

CVE-2024-26308

An allocation of resources without limits or throttling vulnerability was found in Apache Commons Compress. This issue can lead to an out-of-memory error. Mitigation No mitigation is currently available for this vulnerability...

5.5CVSS6.4AI score0.00898EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2024/02/19 8:50 p.m.•58 views

CVE-2024-25710

A loop with an unreachable exit condition Infinite Loop vulnerability was found in Apache Common Compress. This issue can lead to a denial of service. Mitigation No mitigation is currently available for this vulnerability...

8.1CVSS7.8AI score0.00441EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2024/01/15 3:25 p.m.•58 views

CVE-2024-0562

A use-after-free flaw was found in the Linux Kernel. When a disk is removed, bdiunregister is called to stop further write-back and waits for associated delayed work to complete. However, wbinodewritebackend may schedule bandwidth estimation work after this has completed, which can result in the...

7.8CVSS7.3AI score0.00254EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2024/01/11 11:52 a.m.•58 views

CVE-2024-0232

A heap use-after-free issue has been identified in SQLite in the jsonParseAddNodeArray function in sqlite3.c. This flaw allows a local attacker to leverage a victim to pass specially crafted malicious input to the application, potentially causing a crash and leading to a denial of service...

4.7CVSS6.4AI score0.00381EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2023/10/23 2:01 p.m.•58 views

CVE-2023-5633

The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in the way memory objects were handled when they were being used to store a surface. When running inside a VMware guest with 3D acceleration enabled, a local, unprivileged user...

7.8CVSS6.5AI score0.00465EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2023/10/04 10:31 p.m.•58 views

CVE-2023-5408

A privilege escalation flaw was found in the node restriction admission plugin of the kubernetes api server of OpenShift. A remote attacker who modifies the node role label could steer workloads from the control plane and etcd nodes onto different worker nodes and gain broader access to the clust...

7.2CVSS7.3AI score0.01112EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2023/09/13 1:54 p.m.•58 views

CVE-2022-48566

A constant-time-defeating optimization issue was found in python. This issue occurs when sending a specially crafted request, which could allow an attacker to obtain sensitive information. Mitigation As per upstream, either make the accumulator variable result a volatile unsigned char instead of...

5.9CVSS6.3AI score0.01301EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2023/08/21 7:19 a.m.•58 views

CVE-2023-37264

Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. Starting in version 0.35.0, pipelines do not validate child UIDs, which means that a user that has access to create TaskRuns can create their own Tasks that the Pipelines controller will accept as the child...

4.3CVSS6.7AI score0.00379EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2023/08/10 10:19 a.m.•58 views

CVE-2023-32004

A vulnerability was found in NodeJS. This security issue occurs as improper handling of buffers in file system APIs, causing a traversal path to bypass when verifying file permissions. Mitigation Mitigation for this issue is either not available or the currently available options don't meet the R...

8.8CVSS9AI score0.02129EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2023/08/04 7:49 a.m.•58 views

CVE-2023-4135

A heap out-of-bounds memory read flaw was found in the virtual nvme device in QEMU. The QEMU process does not validate an offset provided by the guest before computing a host heap pointer, which is used for copying data back to the guest. Arbitrary heap memory relative to an allocated buffer can ...

6CVSS6.7AI score0.00369EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2023/07/19 5:03 a.m.•58 views

CVE-2023-2975

A vulnerability was found in OpenSSL. The AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries, which are unauthenticated as a consequence. Applications that use the AES-SIV algorithm and want to authenticate empty data entries as associated data can...

5.3CVSS6.8AI score0.00622EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2023/06/23 3:16 a.m.•58 views

CVE-2023-3128

A flaw was found in Grafana, which validates Azure AD accounts based on the email claim. On Azure AD, the profile email field is not unique across Azure AD tenants, which enables Grafana account takeover and authentication bypass when Azure AD OAuth is configured with a multi-tenant AzureAD OAuth...

9.8CVSS6.8AI score0.03995EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2023/06/20 5:14 a.m.•58 views

CVE-2023-32030

A vulnerability was found in dotnet that can cause a denial of service...

7.5CVSS6.7AI score0.0222EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2023/06/13 3:35 p.m.•58 views

CVE-2023-2801

A flaw was found in grafana. This issue occurs when sending an API call to the /ds/query or public dashboard query endpoint that has mixed queries, such as having two or more distinct data sources in one API call. As a result, the Grafana instance will crash. Currently, the only feature that uses...

7.5CVSS6.7AI score0.00745EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2023/05/04 10:21 a.m.•58 views

CVE-2023-2513

A use-after-free vulnerability was found in the Linux kernel's ext4 filesystem in the way it handled the extra inode size for extended attributes. This flaw allows a privileged local user to cause a system crash or other undefined behaviors...

6.7CVSS6.4AI score0.00242EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2023/03/21 1:13 p.m.•58 views

CVE-2023-27536

A flaw was found in the Curl package. Libcurl keeps previously used connections in a connection pool for subsequent transfers to reuse if one of them matches the setup. However, the GSS delegation setting was left out from the configuration match checks, making them match too easily, affecting...

5.9CVSS8.7AI score0.01566EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2023/03/14 7:43 p.m.•58 views

CVE-2022-45787

A flaw was found in Apache James's Mime4j TempFileStorageProvider class, where it may set improper permissions when utilizing temporary files. This flaw allows a locally authorized attacker to access information outside their intended permissions...

5.5CVSS5.4AI score0.00274EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2023/03/13 8:42 a.m.•58 views

CVE-2023-27898

A flaw was found in Jenkins. Affected versions of Jenkins do not escape the Jenkins version that a plugin depends on when rendering the error message stating its incompatibility with the current version of Jenkins in the plugin manager. This issue results in a stored Cross-site scripting XSS...

8.8CVSS5.9AI score0.0184EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2023/03/01 6:06 p.m.•58 views

CVE-2023-22995

A memory overflow flaw was found in the Linux kernel’s Dual Role SuperSpeed USB controller driver in how a user registers a new USB device, which fails. This flaw allows a local user to crash the system...

4.7CVSS7.1AI score0.00299EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2023/03/01 2:29 a.m.•58 views

CVE-2022-33891

A flaw was found in Apache Spark. This flaw allows a malicious user to impersonate another user and jeopardize the environment by executing shell commands...

8.8CVSS4.8AI score0.93076EPSS
SaveExploits12References4
RedhatCVE
RedhatCVE
•added 2023/02/22 4:59 a.m.•58 views

CVE-2022-38779

An open redirect flaw was found in Kibana. This issue can lead to a user being redirected to an arbitrary website if they use a maliciously crafted Kibana URL...

6.1CVSS6.2AI score0.00518EPSS
SaveExploits0References4
Total number of security vulnerabilities5000