Lucene search
+L
RedhatcveMost viewed

211062 matches found

RedhatCVE
RedhatCVE
•added 2020/10/16 12:2 a.m.•54 views

CVE-2020-8564

A flaw was found in kubernetes. In Kubernetes, if the logging level is to at least 4, processing a malformed docker config file will result in the contents of the docker config file being leaked, which can include pull secrets or other registry credentials. This can occur with client tools like...

5.5CVSS5.8AI score0.00461EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2020/09/07 4:49 p.m.•54 views

CVE-2019-8819

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. Processing maliciously crafted web content may lead to arbitrary...

8.8CVSS2.4AI score0.0192EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2020/09/07 10:19 a.m.•54 views

CVE-2020-3901

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Processing maliciously crafted web content may lead to arbitrar...

6.8CVSS2.2AI score0.01893EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2020/07/28 11:38 a.m.•54 views

CVE-2020-14331

A flaw was found in the Linux kernel’s implementation of the invert video code on VGA consoles when a local attacker attempts to resize the console, calling an ioctl VTRESIZE, which causes an out-of-bounds write to occur. This flaw allows a local user with access to the VGA console to crash the...

7.2CVSS1.7AI score0.00563EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2020/07/15 10:7 p.m.•54 views

CVE-2020-8559

A flaw was found in the Kubernetes API server, where it allows an attacker to escalate their privileges from a compromised node. This flaw allows an attacker who can intercept requests on a compromised node, to redirect those requests, along with their credentials, to perform actions on other...

6CVSS6.9AI score0.061EPSS
SaveExploits3References4
RedhatCVE
RedhatCVE
•added 2020/07/14 6:14 p.m.•54 views

CVE-2020-1147

It was discovered that .NET Core did not properly check the source markup of XML files. A remote, unauthenticated attacker could possibly exploit this flaw to execute arbitrary code by sending specially crafted requests to an application parsing certain kinds of XML files or an ASP.NET Core...

6.8CVSS5.8AI score0.94347EPSS
SaveExploits10References3
RedhatCVE
RedhatCVE
•added 2020/07/02 9:50 a.m.•54 views

CVE-2020-10760

A use-after-free flaw was found in all samba LDAP server versions before 4.10.17, before 4.11.11, before 4.12.4 used in a AC DC configuration. A Samba LDAP user could use this flaw to crash samba...

4CVSS2.2AI score0.02659EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2020/06/19 12:25 p.m.•54 views

CVE-2020-14060

A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.5. The interaction between serialization gadgets and typing is mishandled. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Mitigation The following conditions a...

6.8CVSS3.2AI score0.08607EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2020/06/02 5:53 p.m.•54 views

CVE-2020-8167

A flaw was found in rubygem-actionview. A regression of CVE-2015-1840 causes Rails-ujs to send CSRF tokens to wrong domains. The highest threat from this vulnerability is to data integrity...

5CVSS7.7AI score0.04519EPSS
SaveExploits2References4
RedhatCVE
RedhatCVE
•added 2020/05/29 1:55 p.m.•54 views

CVE-2020-13631

A flaw was found in the virtual table implementation of SQLite. This flaw allows an attacker who can execute SQL statements to rename a virtual table to the name of one of its shadow tables, leading to potential data corruption...

2.1CVSS7.1AI score0.0062EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2020/05/06 7:40 p.m.•54 views

CVE-2020-12654

A flaw was found in the Linux kernel. The Marvell mwifiex driver allows a remote WiFi access point to trigger a heap-based memory buffer overflow due to an incorrect memcpy operation. The highest threat from this vulnerability is to data integrity and system availability. Mitigation In order to...

7.1CVSS7.4AI score0.01218EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2020/04/23 6:0 p.m.•54 views

CVE-2020-10716

A flaw was found in Red Hat Satellite's Job Invocation, where the "User Input" entry was not properly restricted to the view. This flaw allows a malicious Satellite user to scan through the Job Invocation, with the ability to search for passwords and other sensitive data...

4CVSS1.4AI score0.00768EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2020/04/09 12:44 p.m.•54 views

CVE-2019-11248

The debugging endpoint /debug/pprof is exposed over the unauthenticated Kubelet healthz port. The go pprof endpoint is exposed over the Kubelet's healthz port. This debugging endpoint can potentially leak sensitive information such as internal Kubelet memory addresses and configuration, or for...

8.2CVSS2.1AI score0.7506EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2020/04/07 11:33 a.m.•54 views

CVE-2019-11760

A flaw was discovered in Mozilla Firefox and Thunderbird where a fixed-stack buffer overflow could occur during WebRTC signalling. The vulnerability could lead to an exploitable crash or leak data...

8.8CVSS2.3AI score0.01371EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2020/04/03 2:11 p.m.•54 views

CVE-2020-7065

A vulnerability was found in PHP while using the mbstrtolower function with UTF-32LE encoding, where certain invalid strings cause PHP to overwrite the stack-allocated buffer. This flaw leads to memory corruption, crashes, and potential code execution...

8.8CVSS3.3AI score0.04883EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2020/04/03 8:8 a.m.•54 views

CVE-2019-15117

An out of bounds OOB memory access flaw was found in the Linux kernel's ALSA subsystem. This could allow a local attacker to crash the system or leak kernel internal information. Mitigation Mitigation for this issue is either not available or the currently available options dont meet the Red Hat...

7.8CVSS0.8AI score0.00613EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2020/04/03 2:9 a.m.•54 views

CVE-2019-16777

Versions of the npm CLI prior to 6.13.4 are vulnerable to an Arbitrary File Overwrite. It fails to prevent existing globally-installed binaries to be overwritten by other package installations. For example, if a package was installed globally and created a serve binary, any subsequent installs of...

7.7CVSS1.7AI score0.02026EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2020/03/27 7:59 a.m.•54 views

CVE-2019-9503

If the brcmfmac driver receives a firmware event frame from a remote source, the iswlceventframe function will cause this frame to be discarded and not be processed. If the driver receives the firmware event frame from the host, the appropriate handler is called. This frame validation can be...

8.3CVSS1.8AI score0.03251EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2020/03/11 9:40 a.m.•54 views

CVE-2020-5258

In affected versions of dojo NPM package, the deepCopy method is vulnerable to Prototype Pollution. Prototype Pollution refers to the ability to inject properties into existing JavaScript language construct prototypes, such as objects. An attacker manipulates these attributes to overwrite, or...

7.7CVSS3.1AI score0.0399EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2020/03/10 3:41 p.m.•54 views

CVE-2020-10255

A Rowhammer flaw was found in latest DDR4 DRAM hardware chips. These chips implement Target Row Refresh TRR mitigation to prevent a Rowhammer flaw-induced bit corruption across memory space. An unprivileged system user may leverage this flaw and use Rowhammer attack variants to induce bit...

9.3CVSS1.9AI score0.02579EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2020/03/05 5:41 p.m.•54 views

CVE-2020-10029

A flaw was found in glibc in versions prior to 2.32. Pseudo-zero values are not validated causing a stack corruption due to a stack-based overflow. The highest threat from this vulnerability is to system availability...

5.7CVSS3.7AI score0.00758EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2020/03/05 7:33 a.m.•54 views

CVE-2018-1000024

The Squid Software Foundation Squid HTTP Caching Proxy version 3.0 to 3.5.27, 4.0 to 4.0.22 contains a Incorrect Pointer Handling vulnerability in ESI Response Processing that can result in Denial of Service for all clients using the proxy.. This attack appear to be exploitable via Remote server...

7.5CVSS1.2AI score0.07928EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2020/03/04 7:16 a.m.•54 views

CVE-2020-1749

A flaw was found in the Linux kernel's implementation of some networking protocols in IPsec, such as VXLAN and GENEVE tunnels over IPv6. When an encrypted tunnel is created between two hosts, the kernel isn't correctly routing tunneled data over the encrypted link; rather sending the data...

7.5CVSS1.9AI score0.0124EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2020/01/09 7:9 p.m.•54 views

CVE-2020-5311

An out-of-bounds write flaw was discovered in python-pillow in the way SGI RLE images are decoded. An application that uses python-pillow to decode untrusted images may be vulnerable to this flaw, which can allow an attacker to crash the application or potentially execute code on the system...

9.8CVSS4.5AI score0.04212EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2020/01/07 9:28 p.m.•54 views

CVE-2018-1120

By mmaping a FUSE-backed file onto a process's memory containing command line arguments or environment strings, an attacker can cause utilities from psutils or procps such as ps, w or any other program which makes a read call to the /proc//cmdline or /proc//environ files to block indefinitely...

5.3CVSS2.9AI score0.07291EPSS
SaveExploits5References2
RedhatCVE
RedhatCVE
•added 2019/12/10 11:51 a.m.•54 views

CVE-2019-19449

An out of bounds OOB memory access flaw was found in the Linux kernel's F2FS file system. A local attacker could use this vulnerability to crash the system or leak kernel internal information. Mitigation Red Hat has investigated whether a possible mitigation exists for this issue, and has not bee...

7.8CVSS1.6AI score0.02014EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2019/11/05 10:21 p.m.•54 views

CVE-2017-12165

It was discovered that Undertow processes http request headers with unusual whitespaces which can cause possible http request smuggling...

7.5CVSS0.9AI score0.01858EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2019/10/10 11:37 p.m.•54 views

CVE-2017-11600

The xfrmmigrate function in the net/xfrm/xfrmpolicy.c file in the Linux kernel built with CONFIGXFRMMIGRATE does not verify if the dir parameter is less than XFRMPOLICYMAX. This allows a local attacker to cause a denial of service out-of-bounds access or possibly have unspecified other impact by...

7CVSS5AI score0.00406EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2019/10/08 11:31 p.m.•54 views

CVE-2019-14813

A flaw was found in the setsystemparams procedure where it did not properly secure its privileged calls, enabling scripts to bypass -dSAFER restrictions. A specially crafted PostScript file could disable security protection and then have access to the file system, or execute arbitrary commands...

9.8CVSS1.2AI score0.92499EPSS
SaveExploits4References2
RedhatCVE
RedhatCVE
•added 2019/10/08 10:56 a.m.•54 views

CVE-2018-2798

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: AWT. Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with...

5.3CVSS2.6AI score0.078EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2019/10/08 7:31 a.m.•54 views

CVE-2019-14846

Ansible was logging at the DEBUG level which lead to a disclosure of credentials if a plugin used a library that logged credentials at the DEBUG level. This flaw does not affect Ansible modules, as those are executed in a separate process...

7.8CVSS2.6AI score0.00513EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2019/10/05 5:53 a.m.•54 views

CVE-2017-18595

A flaw was found in the allocatetracebuffer in kernel/trace/trace.c in the debug subsystem, when failure to allocate a dynamic percpu area, a resource cleanup is called. The pointer buf-buffer still holds the address and is not set to NULL, which can cause a use-after-free problem, leading to a...

7.8CVSS0.6AI score0.0035EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2019/09/10 2:22 p.m.•54 views

CVE-2019-15916

A flaw that allowed an attacker to leak kernel memory was found in the network subsystem where an attacker with permissions to create tun/tap devices can create a denial of service and panic the system...

7.8CVSS4.6AI score0.03784EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2019/08/20 8:52 a.m.•54 views

CVE-2018-20976

A flaw was found in the Linux kernel's implementation of the XFS filesystem. A key data structure sb-sfsinfo may not be de-allocated when the system is under memory pressure. This same data structure is then used at a later time during filesystem operations. This could allow a local attacker who ...

7.8CVSS2.2AI score0.00607EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2019/06/11 2:52 p.m.•54 views

CVE-2019-3875

A vulnerability was found in keycloak before 6.0.2. The X.509 authenticator supports the verification of client certificates through the CRL, where the CRL list can be obtained from the URL provided in the certificate itself CDP or through the separately configured path. The CRL are often availab...

6.5CVSS1.2AI score0.00291EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2019/02/26 11:19 a.m.•54 views

CVE-2018-20796

In the GNU C Library aka glibc or libc6 through 2.29, checkdstlimitscalcpos1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by '\227|\\1\\1|t1|\\\2537+' in grep...

7.5CVSS3.7AI score0.05757EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2019/02/07 11:50 a.m.•54 views

CVE-2019-1003011

An information exposure and denial of service vulnerability exists in Jenkins Token Macro Plugin 2.5 and earlier in src/main/java/org/jenkinsci/plugins/tokenmacro/Parser.java, src/main/java/org/jenkinsci/plugins/tokenmacro/TokenMacro.java,...

8.1CVSS4.2AI score0.02039EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2019/02/01 11:49 p.m.•54 views

CVE-2018-16487

A prototype pollution vulnerability was found in lodash 4.17.11 where the functions merge, mergeWith, and defaultsDeep can be tricked into adding or modifying properties of Object.prototype...

6.8CVSS2.5AI score0.01553EPSS
SaveExploits2References2
RedhatCVE
RedhatCVE
•added 2018/08/28 12:51 a.m.•54 views

CVE-2018-15910

It was discovered that the type of the LockDistillerParams parameter is not properly verified. An attacker could possibly exploit this to bypass the -dSAFER protection and crash ghostscript or, possibly, execute arbitrary code in the ghostscript context via a specially crafted PostScript document...

7.8CVSS1.8AI score0.03037EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2017/10/16 9:49 a.m.•55 views

CVE-2017-13082

A new exploitation technique called key reinstallation attacks KRACK affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit this attack to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by reinstalling a previously used pairwise key PTK-TK by...

8.1CVSS3.4AI score0.04575EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2017/10/13 7:19 a.m.•54 views

CVE-2017-5123

The waitid implementation in upstream kernels did not restrict the target destination to copy information results. This can allow local users to write to otherwise protected kernel memory, which can lead to privilege escalation...

8.8CVSS7.1AI score0.03714EPSS
SaveExploits12References1
RedhatCVE
RedhatCVE
•added 2017/07/04 10:48 a.m.•54 views

CVE-2017-10788

The DBD::mysql module through 4.043 for Perl allows remote attackers to cause a denial of service use-after-free and application crash or possibly have unspecified other impact by triggering 1 certain error responses from a MySQL server or 2 a loss of a network connection to a MySQL server. The...

9.8CVSS6.1AI score0.04629EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2017/04/11 8:48 a.m.•54 views

CVE-2017-7616

Incorrect error handling in the setmempolicy and mbind compat syscalls in 'mm/mempolicy.c' in the Linux kernel allows local users to obtain sensitive information from uninitialized stack data by triggering failure of a certain bitmap operation...

5.5CVSS3AI score0.00413EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2017/04/05 8:17 a.m.•54 views

CVE-2017-2671

A race condition leading to a NULL pointer dereference was found in the Linux kernel's Link Layer Control implementation. A local attacker with access to ping sockets could use this flaw to crash the system...

7.8CVSS2.5AI score0.01463EPSS
SaveExploits3References1
RedhatCVE
RedhatCVE
•added 2016/11/02 11:47 a.m.•54 views

CVE-2016-9137

Use-after-free vulnerability in the CURLFile implementation in ext/curl/curlfile.c in PHP before 5.6.27 and 7.x before 7.0.12 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted serialized data that is mishandled during wakeup processing...

9.8CVSS6.9AI score0.05363EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2016/10/18 8:17 p.m.•54 views

CVE-2016-5573

It was discovered that the Hotspot component of OpenJDK did not properly check received Java Debug Wire Protocol JDWP packets. An attacker could possibly use this flaw to send debugging commands to a Java program running with debugging enabled if they could make victim's browser send HTTP request...

8.3CVSS0.4AI score0.03255EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2016/07/18 2:49 p.m.•54 views

CVE-2016-1000104

A security Bypass vulnerability exists in the FcgidPassHeader Proxy in modfcgid through 2016-07-07...

8.8CVSS1.6AI score0.55724EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2015/10/30 10:23 a.m.•54 views

CVE-2008-4109

A certain Debian patch for OpenSSH before 4.3p2-9etch3 on etch; before 4.6p1-1 on sid and lenny; and on other distributions such as SUSE uses functions that are not async-signal-safe in the signal handler for login timeouts, which allows remote attackers to cause a denial of service connection sl...

9.3CVSS8.1AI score0.44963EPSS
SaveExploits7References2
RedhatCVE
RedhatCVE
•added 2026/07/20 3:22 p.m.•53 views

CVE-2026-64113

A flaw was found in the Linux kernel's ixgbevf network driver. This vulnerability, a use-after-free, occurs when the driver attempts to process network packets for a specific multicast workaround. An attacker could potentially exploit this by sending specially crafted network traffic, which may...

9.8CVSS5.7AI score0.005EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2026/01/09 11:19 a.m.•53 views

CVE-2021-22388

There is an Integer Overflow Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause certain codes to be executed...

9.8CVSS6.8AI score0.00787EPSS
SaveExploits0References1
Total number of security vulnerabilities5000