Lucene search
+L
RedhatcveMost viewed

211083 matches found

RedhatCVE
RedhatCVE
•added 2020/09/07 4:49 p.m.•55 views

CVE-2019-8823

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. Processing maliciously crafted web content may lead to arbitrary...

8.8CVSS2.4AI score0.0192EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2020/09/07 4:49 p.m.•55 views

CVE-2019-8819

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. Processing maliciously crafted web content may lead to arbitrary...

8.8CVSS2.4AI score0.0192EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2020/09/07 10:19 a.m.•55 views

CVE-2020-3901

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Processing maliciously crafted web content may lead to arbitrar...

6.8CVSS2.2AI score0.01893EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2020/09/03 10:19 p.m.•55 views

CVE-2020-14384

A flaw was found in jbossweb. The fix for CVE-2020-13935 was incomplete in JBossWeb, leaving it vulnerable to a denial of service attack when sending multiple requests with invalid payload length in a WebSocket frame. The highest threat from this vulnerability is to system availability. Mitigatio...

7.5CVSS7.5AI score0.86608EPSS
SaveExploits2References3
RedhatCVE
RedhatCVE
•added 2020/08/24 1:4 p.m.•55 views

CVE-2020-14364

An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU. This issue occurs while processing USB packets from a guest when USBDevice 'setuplen' exceeds its 'databuf4096' in the dotokenin, dotokenout routines. This flaw allows a guest user to crash the QEMU process,...

5CVSS2.6AI score0.05447EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2020/07/28 11:38 a.m.•55 views

CVE-2020-14331

A flaw was found in the Linux kernel’s implementation of the invert video code on VGA consoles when a local attacker attempts to resize the console, calling an ioctl VTRESIZE, which causes an out-of-bounds write to occur. This flaw allows a local user with access to the VGA console to crash the...

7.2CVSS1.7AI score0.00563EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2020/06/06 1:56 a.m.•55 views

CVE-2020-10878

Perl before 5.30.3 has an integer overflow related to mishandling of a "PLregkindOPn == NOTHING" situation. A crafted regular expression could lead to malformed bytecode with a possibility of instruction injection. Mitigation To mitigate this flaw, developers should not allow untrusted regular...

7.5CVSS4.3AI score0.04879EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2020/05/12 10:35 a.m.•55 views

CVE-2020-10706

A flaw was found in OpenShift Container Platform where OAuth tokens are not encrypted when the encryption of data at rest is enabled. This flaw allows an attacker with access to a backup to obtain OAuth tokens and then use them to log into the cluster as any user who logged into the cluster via t...

4.6CVSS2.7AI score0.00128EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2020/04/23 6:0 p.m.•55 views

CVE-2020-10716

A flaw was found in Red Hat Satellite's Job Invocation, where the "User Input" entry was not properly restricted to the view. This flaw allows a malicious Satellite user to scan through the Job Invocation, with the ability to search for passwords and other sensitive data...

4CVSS1.4AI score0.00768EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2020/04/14 10:33 p.m.•55 views

CVE-2020-2781

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: JSSE. Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to...

5CVSS1.1AI score0.04948EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2020/04/09 12:44 p.m.•55 views

CVE-2019-11248

The debugging endpoint /debug/pprof is exposed over the unauthenticated Kubelet healthz port. The go pprof endpoint is exposed over the Kubelet's healthz port. This debugging endpoint can potentially leak sensitive information such as internal Kubelet memory addresses and configuration, or for...

8.2CVSS2.1AI score0.7506EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2020/04/08 5:28 a.m.•55 views

CVE-2019-9791

The type inference system allows the compilation of functions that can cause type confusions between arbitrary objects when compiled through the IonMonkey just-in-time JIT compiler and when the constructor function is entered through on-stack replacement OSR. This allows for possible arbitrary...

9.8CVSS2.8AI score0.19762EPSS
SaveExploits6References3
RedhatCVE
RedhatCVE
•added 2020/04/07 5:14 p.m.•55 views

CVE-2019-14892

A flaw was discovered in jackson-databind in versions before 2.9.10, 2.8.11.5 and 2.6.7.3, where it would permit polymorphic deserialization of a malicious object using commons-configuration 1 and 2 JNDI classes. An attacker could use this flaw to execute arbitrary code...

9.8CVSS5.8AI score0.05622EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2020/04/07 5:3 p.m.•55 views

CVE-2019-9792

The IonMonkey just-in-time JIT compiler can leak an internal JSOPTIMIZEDOUT magic value to the running script during a bailout. This magic value can then be used by JavaScript to achieve memory corruption, which results in a potentially exploitable crash. This vulnerability affects Thunderbird...

9.8CVSS1.9AI score0.13197EPSS
SaveExploits5References3
RedhatCVE
RedhatCVE
•added 2020/04/07 11:33 a.m.•55 views

CVE-2019-11760

A flaw was discovered in Mozilla Firefox and Thunderbird where a fixed-stack buffer overflow could occur during WebRTC signalling. The vulnerability could lead to an exploitable crash or leak data...

8.8CVSS2.3AI score0.01371EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2020/04/04 5:27 p.m.•55 views

CVE-2019-14615

An information disclosure flaw was found in the Linux kernel. The i915 graphics driver lacks control of flow for data structures which may allow a local, authenticated user to disclose information when using ioctl commands with an attached i915 device. The highest threat from this vulnerability i...

5.5CVSS0.3AI score0.01447EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2020/04/04 5:27 p.m.•55 views

CVE-2019-13224

A use-after-free in onignewdeluxe in regext.c in Oniguruma 6.9.2 allows attackers to potentially cause information disclosure, denial of service, or possibly code execution by providing a crafted regular expression. The attacker provides a pair of a regex pattern and a string, with a multi-byte...

9.8CVSS5.5AI score0.04047EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2020/03/28 8:0 p.m.•55 views

CVE-2019-11044

A flaw was discovered in the link function in PHP. When compiled on Windows, it does not correctly handle paths containing NULL bytes. An attacker could abuse this flaw to bypass application checks on file paths...

7.5CVSS1.7AI score0.05363EPSS
SaveExploits4References3
RedhatCVE
RedhatCVE
•added 2020/03/01 7:36 p.m.•55 views

CVE-2019-2999

Vulnerability in the Java SE product of Oracle Java SE component: Javadoc. Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful...

4.7CVSS2.8AI score0.0267EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2020/02/06 7:14 p.m.•55 views

CVE-2020-7595

xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation...

7.5CVSS2.3AI score0.07836EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2020/01/16 8:9 a.m.•55 views

CVE-2020-7039

A heap buffer overflow issue was found in the SLiRP networking implementation of the QEMU emulator. This flaw occurs in the tcpemu routine while emulating IRC and other protocols. An attacker could use this flaw to crash the QEMU process on the host, resulting in a denial of service or potential...

6.8CVSS2AI score0.03566EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2020/01/09 7:9 p.m.•55 views

CVE-2020-5311

An out-of-bounds write flaw was discovered in python-pillow in the way SGI RLE images are decoded. An application that uses python-pillow to decode untrusted images may be vulnerable to this flaw, which can allow an attacker to crash the application or potentially execute code on the system...

9.8CVSS4.5AI score0.04212EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2020/01/05 9:56 a.m.•55 views

CVE-2019-19062

A flaw was found in the Linux kernel. The cryptoreport function mishandles resource cleanup on error. A local attacker able to induce the error conditions could use this flaw to crash the system. The highest threat from this vulnerability is to system availability. Mitigation In order to mitigate...

4.7CVSS0.8AI score0.00633EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2020/01/02 3:28 p.m.•55 views

CVE-2018-1305

Security constraints defined by annotations of Servlets in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC1 to 8.0.49 and 7.0.0 to 7.0.84 were only applied once a Servlet had been loaded. Because security constraints defined in this way apply to the URL pattern and any URLs below that...

6.5CVSS3AI score0.14472EPSS
SaveExploits2References2
RedhatCVE
RedhatCVE
•added 2019/12/10 4:48 p.m.•55 views

CVE-2019-19532

An out-of-bounds write flaw was found in the Linux kernel’s HID drivers. An attacker, able to plug in a malicious USB device, can crash the system or read and write to memory with an incorrect address. Mitigation Mitigation for this issue is either not available or the currently available options...

6.8CVSS1.5AI score0.00504EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2019/10/28 10:4 p.m.•55 views

CVE-2019-16746

A flaw in the Linux kernel's WiFi beacon validation code was discovered. The code does not check the length of the variable length elements in the beacon head potentially leading to a buffer overflow. System availability, as well as data confidentiality and integrity, can be impacted by this...

9.8CVSS3.7AI score0.12651EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2019/10/19 6:58 p.m.•55 views

CVE-2019-2422

Vulnerability in the Java SE component of Oracle Java SE subcomponent: Libraries. Supported versions that are affected are Java SE: 7u201, 8u192 and 11.0.1; Java SE Embedded: 8u191. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to...

3.1CVSS2.5AI score0.03374EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2019/10/12 1:30 a.m.•55 views

CVE-2017-16994

The walkhugetlbrange function in 'mm/pagewalk.c' file in the Linux kernel from v4.0-rc1 through v4.15-rc1 mishandles holes in hugetlb ranges. This allows local users to obtain sensitive information from uninitialized kernel memory via crafted use of the mincore system call...

5.5CVSS3AI score0.02084EPSS
SaveExploits8References1
RedhatCVE
RedhatCVE
•added 2019/09/30 7:52 p.m.•55 views

CVE-2019-10212

A flaw was found in the Undertow DEBUG log for io.undertow.request.security. If enabled, an attacker could abuse this flaw to obtain the user’s credentials from the log files. Mitigation Use Elytron instead of legacy Security subsystem...

9.8CVSS2.6AI score0.01876EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2019/09/10 2:21 p.m.•55 views

CVE-2019-15926

An issue was discovered in the Linux kernel before 5.2.3. Out of bounds access exists in the functions ath6klwmipstreamtimeouteventrx and ath6klwmicaceventrx in the file drivers/net/wireless/ath/ath6kl/wmi.c...

9.4CVSS2.7AI score0.05189EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2019/01/08 9:20 p.m.•55 views

CVE-2019-0545

An information disclosure vulnerability exists in .NET Framework and .NET Core which allows bypassing Cross-origin Resource Sharing CORS configurations, aka ".NET Framework Information Disclosure Vulnerability." This affects Microsoft .NET Framework 2.0, Microsoft .NET Framework 3.0, Microsoft .N...

7.5CVSS1.4AI score0.09611EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2018/07/16 11:20 p.m.•55 views

CVE-2018-14042

In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip...

6.1CVSS1.6AI score0.04009EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2018/06/07 5:50 a.m.•55 views

CVE-2016-1000338

In Bouncy Castle JCE Provider version 1.55 and earlier the DSA does not fully validate ASN.1 encoding of signature on verification. It is possible to inject extra elements in the sequence making up the signature and still have it validate, which in some cases may allow the introduction of...

7.5CVSS4.5AI score0.0186EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2018/01/29 3:20 p.m.•55 views

CVE-2018-1000027

The Squid Software Foundation Squid HTTP Caching Proxy version prior to version 4.0.23 contains a NULL Pointer Dereference vulnerability in HTTP Response X-Forwarded-For header processing that can result in Denial of Service to all clients of the proxy. This attack appear to be exploitable via...

7.5CVSS1.7AI score0.12912EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2018/01/26 5:49 p.m.•55 views

CVE-2017-1000505

In Jenkins Script Security Plugin version 1.36 and earlier, users with the ability to configure sandboxed Groovy scripts are able to use a type coercion feature in Groovy to create new File objects from strings. This allowed reading arbitrary files on the Jenkins master file system. Such a type...

6.5CVSS2.6AI score0.00994EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2018/01/22 10:59 p.m.•55 views

CVE-2017-15191

In Wireshark 2.4.0 to 2.4.1, 2.2.0 to 2.2.9, and 2.0.0 to 2.0.15, the DMP dissector could crash. This was addressed in epan/dissectors/packet-dmp.c by validating a string length...

7.5CVSS1.8AI score0.02697EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2017/12/12 4:20 p.m.•55 views

CVE-2017-15896

Node.js was affected by OpenSSL vulnerability CVE-2017-3737 in regards to the use of SSLread due to TLS handshake failure. The result was that an active network attacker could send application data to Node.js using the TLS or HTTP2 modules in a way that bypassed TLS authentication and encryption...

9.1CVSS2.4AI score0.78675EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2017/11/30 7:49 a.m.•55 views

CVE-2017-1000405

A flaw was found in the patches used to fix the 'dirtycow' vulnerability CVE-2016-5195. An attacker, able to run local code, can exploit a race condition in transparent huge pages to modify usually read-only huge pages. Mitigation Disabling the use of zero page: It is possible to prevent the zero...

7.2CVSS7.5AI score0.83524EPSS
SaveExploits100References1
RedhatCVE
RedhatCVE
•added 2017/11/22 12:19 p.m.•55 views

CVE-2017-16644

The hdpvrprobe function in drivers/media/usb/hdpvr/hdpvr-core.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service improper error handling and system crash or possibly have unspecified other impact via a crafted USB device...

7.2CVSS6.3AI score0.00399EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2017/11/10 6:50 p.m.•55 views

CVE-2017-16642

In PHP before 5.6.32, 7.x before 7.0.25, and 7.1.x before 7.1.11, an error in the date extension's timelibmeridian handling of 'front of' and 'back of' directives could be used by attackers able to supply date strings to leak information from the interpreter, related to ext/date/lib/parsedate.c...

7.5CVSS2.5AI score0.26373EPSS
SaveExploits3References1
RedhatCVE
RedhatCVE
•added 2017/08/11 8:18 a.m.•55 views

CVE-2017-1000111

A race condition issue was found in the way the raw packet socket implementation in the Linux kernel networking subsystem handled synchronization. A local user able to open a raw packet socket requires the CAPNETRAW capability could use this to waste resources in the kernel's ring buffer or...

7.8CVSS0.9AI score0.00374EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2017/06/19 4:18 p.m.•55 views

CVE-2017-1000365

The Linux Kernel imposes a size restriction on the arguments and environmental strings passed through RLIMITSTACK/RLIMITINFINITY, but does not take the argument and environment pointers into account, which allows attackers to bypass this limitation...

7.8CVSS5.5AI score0.00899EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2017/05/19 8:26 a.m.•55 views

CVE-2017-9050

libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictAddString function in dict.c. This vulnerability causes programs that use libxml2, such as PHP, to crash. This vulnerability exists because of an incomplete fix for CVE-2016-1839...

7.5CVSS1.8AI score0.07347EPSS
SaveExploits4References1
RedhatCVE
RedhatCVE
•added 2017/04/27 9:48 a.m.•55 views

CVE-2017-1000353

Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an unauthenticated remote code execution. An unauthenticated remote code execution vulnerability allowed attackers to transfer a serialized Java SignedObject object to the Jenkins CLI, that would be deserialized...

9.8CVSS3.3AI score0.99679EPSS
SaveExploits37References2
RedhatCVE
RedhatCVE
•added 2016/12/20 8:17 a.m.•55 views

CVE-2016-10010

sshd in OpenSSH before 7.4, when privilege separation is not used, creates forwarded Unix-domain sockets as root, which might allow local users to gain privileges via unspecified vectors, related to serverloop.c...

7.5CVSS6AI score0.0424EPSS
SaveExploits3References2
RedhatCVE
RedhatCVE
•added 2016/12/09 8:47 a.m.•55 views

CVE-2016-9576

It was found that the blkrqmapuseriov function in the Linux kernel's block device implementation did not properly restrict the type of iterator, which could allow a local attacker to read or write to arbitrary kernel memory locations or cause a denial of service use-after-free by leveraging write...

7.8CVSS4.6AI score0.00437EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2016/11/23 5:19 p.m.•55 views

CVE-2016-9448

The TIFFFetchNormalTag function in LibTiff 4.0.6 allows remote attackers to cause a denial of service NULL pointer dereference and crash by setting the tags TIFFSETGETC16ASCII or TIFFSETGETC32ASCII to values that access 0-byte arrays. NOTE: this vulnerability exists because of an incomplete fix f...

7.5CVSS5.3AI score0.06471EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2016/10/10 8:17 a.m.•55 views

CVE-2016-5425

It was discovered that the Tomcat packages installed configuration file /usr/lib/tmpfiles.d/tomcat.conf writeable to the tomcat group. A member of the group or a malicious web application deployed on Tomcat could use this flaw to escalate their privileges...

7.8CVSS1.7AI score0.03782EPSS
SaveExploits8References2
RedhatCVE
RedhatCVE
•added 2016/08/18 9:3 p.m.•55 views

CVE-2016-6828

A use-after-free vulnerability was found in tcpxmitretransmitqueue and other tcp functions. This condition could allow an attacker to send an incorrect selective acknowledgment to existing connections, possibly resetting a connection...

5.5CVSS3.1AI score0.01181EPSS
SaveExploits5References1
RedhatCVE
RedhatCVE
•added 2016/07/18 2:49 p.m.•55 views

CVE-2016-1000104

A security Bypass vulnerability exists in the FcgidPassHeader Proxy in modfcgid through 2016-07-07...

8.8CVSS1.6AI score0.55724EPSS
SaveExploits0References1
Total number of security vulnerabilities5000