Lucene search
+L
RedhatcveMost viewed

214858 matches found

RedhatCVE
RedhatCVE
•added 2019/12/28 10:13 p.m.•54 views

CVE-2019-19058

A flaw was found in the Linux kernel. The Intel Wireless WiFi MVM Firmware driver mishandles resource cleanup during device coredump. An attacker able to trigger the device coredump and system-wide out of memory conditions at the same time could use this flaw to crash the system. The highest thre...

4.7CVSS0.3AI score0.00373EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2019/12/18 6:06 p.m.•54 views

CVE-2019-19816

A flaw was found in the implementation of the BTRFS file system code in the Linux kernel. An attacker, who is able to mount a crafted BTRFS filesystem and perform common filesystem operations, can possibly cause an out-of-bounds write to memory. This could lead to memory corruption or privilege...

9.3CVSS7.5AI score0.03293EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2019/12/04 12:48 a.m.•54 views

CVE-2019-17005

The plain text serializer used a fixed-size array for the number of elements it could process; however it was possible to overflow the static-sized array leading to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird 68.3, Firefox ESR 68.3, and Firefox 71...

8.8CVSS2.2AI score0.01907EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2019/11/21 11:07 a.m.•54 views

CVE-2019-19045

A flaw was found in the Linux kernel. The Mellanox Technologies Innova driver mishandles resource cleanup on error. An attacker, able to trigger error could use this flaw to crash the system. The highest threat from this vulnerability is to system availability. Mitigation In order to mitigate thi...

4.9CVSS0.9AI score0.00556EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2019/11/20 5:37 p.m.•54 views

CVE-2019-19126

A vulnerability was discovered in glibc where the LDPREFERMAP32BITEXEC environment variable is not ignored when running binaries with the setuid flag on x8664 architectures. This allows an attacker to force system to utilize only half of the memory making the system think the software is 32-bit...

3.3CVSS2AI score0.00409EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2019/11/08 4:20 a.m.•54 views

CVE-2017-3511

An untrusted library search path flaw was found in the JCE component of OpenJDK. A local attacker could possibly use this flaw to cause a Java application using JCE to load an attacker-controlled library and hence escalate their privileges...

7.7CVSS1.6AI score0.00759EPSS
SaveExploits2References2
RedhatCVE
RedhatCVE
•added 2019/11/07 9:45 p.m.•54 views

CVE-2018-7584

In PHP through 5.6.33, 7.0.x before 7.0.28, 7.1.x through 7.1.14, and 7.2.x through 7.2.2, there is a stack-based buffer under-read while parsing an HTTP response in the phpstreamurlwraphttpex function in ext/standard/httpfopenwrapper.c. This subsequently results in copying a large string...

9.8CVSS1AI score0.87348EPSS
SaveExploits4References1
RedhatCVE
RedhatCVE
•added 2019/10/27 12:25 p.m.•54 views

CVE-2019-11085

A flaw was found in the Linux kernel's implementation of GVT-g which allowed an attacker with access to a 'passed through' Intel i915 graphics card to possibly access resources allocated to other virtual machines, crash the host, or possibly corrupt memory leading to privilege escalation...

8.8CVSS3.3AI score0.00475EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2019/10/20 12:07 p.m.•54 views

CVE-2018-13405

A vulnerability was found in the fs/inode.c:inodeinitowner function logic of the LInux kernel that allows local users to create files with an unintended group ownership and with group execution and SGID permission bits set, in a scenario where a directory is SGID and belongs to a certain group an...

7.8CVSS3AI score0.0101EPSS
SaveExploits3References2
RedhatCVE
RedhatCVE
•added 2019/10/13 7:44 p.m.•54 views

CVE-2018-14632

An out of bounds write can occur when patching an Openshift object using the 'oc patch' functionality in OpenShift Container Platform 3.x. An attacker can use this flaw to cause a denial of service attack on the Openshift master API service which provides cluster management...

7.7CVSS2.8AI score0.01952EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2019/10/10 11:49 p.m.•54 views

CVE-2017-7518

A flaw was found in the way the Linux KVM module processed the trap flagTF bit in EFLAGS during emulation of the syscall instruction, which leads to a debug exceptionDB being raised in the guest stack. A user/process inside a guest could use this flaw to potentially escalate their privileges insi...

7.8CVSS1.7AI score0.00672EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2019/08/06 7:22 a.m.•54 views

CVE-2019-1010319

WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is: Unexpected control flow, crashes, and segfaults. The component is: ParseWave64HeaderConfig wave64.c:211. The attack vector is: Maliciously crafted .wav file. The fixed version is: After commit...

5.5CVSS4.4AI score0.01503EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2019/08/01 8:23 a.m.•54 views

CVE-2015-9289

A vulnerability was found in the Linux kernel’s CX24116 tv-card driver, where an out of bounds read occurs when checking userspace params in drivers/media/dvb-frontends/cx24116.c. An attacker could use this flaw to leak kernel private information to userspace...

5.5CVSS6.7AI score0.00416EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2019/02/06 8:20 a.m.•54 views

CVE-2019-3823

An out-of-bounds read flaw was found in the way curl handled certain SMTP responses. A remote attacker could use this flaw to crash curl. Mitigation Do not use SMTP authentication with curl...

7.5CVSS0.9AI score0.04286EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2018/12/27 9:49 p.m.•54 views

CVE-2018-20482

GNU Tar through 1.30, when --sparse is used, mishandles file shrinkage during read access, which allows local users to cause a denial of service infinite read loop in sparsedumpregion in sparse.c by modifying a file that is supposed to be archived by a different user's process e.g., a system back...

5.5CVSS3.7AI score0.00526EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2018/12/21 10:50 a.m.•54 views

CVE-2018-18245

Nagios Core 4.4.2 has XSS via the alert summary reports of plugin results, as demonstrated by a SCRIPT element delivered by a modified checkload plugin to NRPE...

5.4CVSS2.3AI score0.02552EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2018/11/07 12:49 a.m.•54 views

CVE-2018-16843

nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessive memory consumption. This issue affects nginx compiled with the ngxhttpv2module not compiled by default if the 'http2' option of the 'listen' directive is used in a configuratio...

7.8CVSS4.5AI score0.47057EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2018/10/31 7:21 a.m.•54 views

CVE-2018-16842

Curl versions 7.14.1 through 7.61.1 are vulnerable to a heap-based buffer over-read in the toolmsgs.c:voutf function that may result in information exposure and denial of service...

9.1CVSS4.3AI score0.02099EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2018/10/05 9:49 p.m.•54 views

CVE-2018-17456

An option injection flaw has been discovered in git when it recursively clones a repository with sub-modules. A remote attacker may configure a malicious repository and trick a user into recursively cloning it, thus executing arbitrary commands on the victim's machine...

9.8CVSS5AI score0.97356EPSS
SaveExploits12References2
RedhatCVE
RedhatCVE
•added 2018/08/23 5:54 a.m.•54 views

CVE-2018-15494

In Dojo Toolkit before 1.14, there is unescaped string injection in dojox/Grid/DataGrid...

9.8CVSS1.9AI score0.0254EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
•added 2018/08/21 7:18 a.m.•54 views

CVE-2016-4975

It was found that Apache was vulnerable to a HTTP response splitting attack for sites which use moduserdir. An attacker could use this flaw to inject CRLF characters into the HTTP header and could possibly gain access to secure data...

6.1CVSS1.4AI score0.19798EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2018/06/27 8:19 a.m.•54 views

CVE-2018-1000517

BusyBox project BusyBox wget version prior to commit 8e2174e9bd836e53c8b9c6e00d1bc6e2a718686e contains a Buffer Overflow vulnerability in Busybox wget that can result in heap buffer overflow. This attack appear to be exploitable via network connectivity. This vulnerability appears to have been...

9.8CVSS5.5AI score0.32919EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2018/05/18 5:20 a.m.•54 views

CVE-2018-1123

Due to incorrect accounting when decoding and escaping Unicode data in procfs, ps is vulnerable to overflowing an mmaped region when formatting the process list for display. Since ps maps a guard page at the end of the buffer, impact is limited to a crash...

7.5CVSS2.3AI score0.09081EPSS
SaveExploits5References2
RedhatCVE
RedhatCVE
•added 2018/04/25 9:18 a.m.•54 views

CVE-2018-10323

The xfsbmapextentstobtree function in fs/xfs/libxfs/xfsbmap.c in the Linux kernel can cause a NULL pointer dereference in xfsbmapiwrite function. An attacker could trick a legitimate user or a privileged attacker could exploit this by mounting a crafted xfs filesystem image to cause a kernel pani...

5.5CVSS4.1AI score0.00553EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2018/04/09 8:20 p.m.•54 views

CVE-2018-1275

Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.16 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user or attacker can craft a message to...

9.8CVSS5.5AI score0.77476EPSS
SaveExploits5References1
RedhatCVE
RedhatCVE
•added 2017/11/07 12:20 p.m.•54 views

CVE-2017-15286

SQLite 3.20.1 has a NULL pointer dereference in tableColumnList in shell.c because it fails to consider certain cases where sqlite3steppStmt==SQLITEROW is false and a data structure is never initialized...

7.5CVSS2.5AI score0.02902EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2017/10/02 1:28 p.m.•54 views

CVE-2017-14496

An integer underflow flaw leading to a buffer over-read was found in dnsmasq in the EDNS0 code. An attacker could send crafted DNS packets to dnsmasq which would cause it to crash. This issue only affected configurations using one of the options: add-mac, add-cpe-id, or add-subnet...

7.8CVSS4.2AI score0.66347EPSS
SaveExploits5References2
RedhatCVE
RedhatCVE
•added 2017/09/13 11:48 a.m.•54 views

CVE-2017-12154

Linux kernel built with the KVM visualization support CONFIGKVM, with nested visualization nVMX feature enabled nested=1, is vulnerable to a crash due to disabled external interrupts. As L2 guest could access r/w hardware CR8 register of the hostL0. In a nested visualization setup, L2 guest user...

7.1CVSS1.2AI score0.00512EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2017/08/23 7:48 p.m.•54 views

CVE-2017-12967

The getsym function in tekhex.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service stack-based buffer over-read and application crash via a malformed tekhex binary...

6.5CVSS6.7AI score0.03101EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2017/06/02 7:20 a.m.•54 views

CVE-2017-9349

In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the DICOM dissector has an infinite loop. This was addressed in epan/dissectors/packet-dcm.c by validating a length value...

7.8CVSS2AI score0.02942EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2017/04/20 6:20 a.m.•54 views

CVE-2017-5432

A use-after-free vulnerability occurs during certain text input selection resulting in a potentially exploitable crash. This vulnerability affects Thunderbird 52.1, Firefox ESR 45.9, Firefox ESR 52.1, and Firefox 53...

7.5CVSS3.6AI score0.03139EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2017/04/20 6:19 a.m.•54 views

CVE-2017-5443

An out-of-bounds write vulnerability while decoding improperly formed BinHex format archives. This vulnerability affects Thunderbird 52.1, Firefox ESR 45.9, Firefox ESR 52.1, and Firefox 53...

9.8CVSS2.5AI score0.03083EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2017/04/20 6:19 a.m.•54 views

CVE-2017-5445

A vulnerability while parsing "application/http-index-format" format content where uninitialized values are used to create an array. This could allow the reading of uninitialized memory into the arrays affected. This vulnerability affects Thunderbird 52.1, Firefox ESR 45.9, Firefox ESR 52.1, and...

7.5CVSS4.2AI score0.02664EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2016/12/15 8:23 p.m.•54 views

CVE-2016-5829

A heap-based buffer overflow vulnerability was found in the Linux kernel's hiddev driver. This flaw could allow a local attacker to corrupt kernel memory, possible privilege escalation or crashing the system...

7.8CVSS2.9AI score0.00458EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2016/12/15 8:19 p.m.•54 views

CVE-2016-4569

A vulnerability was found in Linux kernel. There is an information leak in file "sound/core/timer.c" of the latest mainline Linux kernel, the stack object “tread” has a total size of 32 bytes. It contains a 8-bytes padding, which is not initialized but sent to user via copytouser, resulting a...

2.1CVSS2.7AI score0.00835EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2016/12/14 2:47 p.m.•54 views

CVE-2016-9936

The unserialize implementation in ext/standard/var.c in PHP 7.x before 7.0.14 allows remote attackers to cause a denial of service use-after-free or possibly have unspecified other impact via crafted serialized data. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-6834...

9.8CVSS6.8AI score0.46801EPSS
SaveExploits7References1
RedhatCVE
RedhatCVE
•added 2016/11/24 6:47 a.m.•54 views

CVE-2016-8648

It was found that the Karaf container used by Red Hat JBoss Fuse 6.x, and Red Hat JBoss A-MQ 6.x, deserializes objects passed to MBeans via JMX operations. An attacker could use this flaw to execute remote code on the server as the user running the Java Virtual Machine if the target MBean contain...

7.2CVSS1.1AI score0.02004EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2016/10/27 7:47 p.m.•54 views

CVE-2016-7032

It was discovered that the sudo noexec restriction could have been bypassed if application run via sudo executed system or popen C library functions with a user supplied argument. A local user permitted to run such application via sudo with noexec restriction could use this flaw to execute...

7CVSS4.4AI score0.00337EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2016/08/22 8:48 p.m.•54 views

CVE-2016-4473

/ext/phar/pharobject.c in PHP 7.0.7 and 5.6.x allows remote attackers to execute arbitrary code. NOTE: Introduced as part of an incomplete fix to CVE-2015-6833...

9.8CVSS7AI score0.07753EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2016/07/25 2:19 p.m.•54 views

CVE-2016-6295

ext/snmp/snmp.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 improperly interacts with the unserialize implementation and garbage collection, which allows remote attackers to cause a denial of service use-after-free and application crash or possibly have unspecified other impac...

9.8CVSS7.2AI score0.0926EPSS
SaveExploits6References1
RedhatCVE
RedhatCVE
•added 2016/05/03 3:49 p.m.•54 views

CVE-2016-3714

It was discovered that ImageMagick did not properly sanitize certain input before passing it to the delegate functionality. A remote attacker could create a specially crafted image that, when processed by an application using ImageMagick or an unsuspecting user using the ImageMagick utilities,...

10CVSS7AI score0.97485EPSS
SaveExploits13References1
RedhatCVE
RedhatCVE
•added 2026/06/11 2:59 p.m.•53 views

CVE-2026-41003

An attacker able to influence values in RelyingPartyRegistration may be able to run arbitrary code on HTML forms generated by Spring Security filters. Affected versions: Spring Security 5.7.0 through 5.7.23; 5.8.0 through 5.8.25; 6.3.0 through 6.3.16; 6.4.0 through 6.4.16; 6.5.0 through 6.5.10;...

7.6CVSS5.8AI score0.00253EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/03/04 1:57 a.m.•53 views

CVE-2025-32313

In UsageEvents of UsageEvents.java, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

8.4CVSS6.1AI score0.0008EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/02/24 11:02 p.m.•53 views

CVE-2026-3028

A vulnerability was determined in erzhongxmu JEEWMS up to 3.7. This vulnerability affects the function doAdd of the file src/main/java/com/jeecg/demo/controller/JeecgListDemoController.java. This manipulation of the argument Name causes cross site scripting. The attack may be initiated remotely...

6.1CVSS3.9AI score0.00502EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/02/04 3:15 a.m.•53 views

CVE-2025-61649

Vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files src/Services/CheckUserUserInfoCardService.Php. This issue affects CheckUser: from 7cedd58781d261f110651b6af4f41d2d11ae7309...

4.8CVSS5.3AI score0.00332EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/04 1:04 a.m.•53 views

CVE-2025-64125

A vulnerability in Nuvation Energy nCloud VPN Service allowed Network Boundary Bridging.This issue affected the nCloud VPN Service and was fixed on 2025-12-1 December, 2025. End users do not have to take any action to mitigate the issue...

9.4CVSS6.8AI score0.00254EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/11 12:03 a.m.•53 views

CVE-2025-61813

ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Restriction of XML External Entity Reference 'XXE' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files on the server. Exploitation o...

8.6CVSS6.6AI score0.00549EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/06 5:54 p.m.•53 views

CVE-2020-36876

ReQuest Serious Play F3 Media Server versions 7.0.3.4968 Pro, 7.0.2.4954, 6.5.2.4954, 6.4.2.4681, 6.3.2.4203, and 2.0.1.823 allows unauthenticated attackers to disclose the webserver's Python debug log file containing system information, credentials, paths, processes and command arguments running...

8.7CVSS6.8AI score0.00374EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/07/10 7:24 a.m.•53 views

CVE-2025-41667

A low privileged remote attacker with file access can replace a critical file used by the arp-preinit script to get read, write and execute access to any file on the device...

8.8CVSS7.4AI score0.00518EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/07/02 5:24 p.m.•53 views

CVE-2025-46702

Mattermost versions 10.5.x = 10.5.5, 9.11.x = 9.11.15, 10.8.x = 10.8.0, 10.7.x = 10.7.2, 10.6.x = 10.6.5 fail to properly enforce channel member management permissions when adding participants to playbook runs. This allows authenticated users with member-level permissions to bypass system admin...

5.4CVSS7.2AI score0.00201EPSS
SaveExploits0References1
Total number of security vulnerabilities5000