Lucene search
+L
RedhatcveMost viewed

214849 matches found

RedhatCVE
RedhatCVE
•added 2019/11/07 9:45 p.m.•54 views

CVE-2018-7584

In PHP through 5.6.33, 7.0.x before 7.0.28, 7.1.x through 7.1.14, and 7.2.x through 7.2.2, there is a stack-based buffer under-read while parsing an HTTP response in the phpstreamurlwraphttpex function in ext/standard/httpfopenwrapper.c. This subsequently results in copying a large string...

9.8CVSS1AI score0.87348EPSS
SaveExploits4References1
RedhatCVE
RedhatCVE
•added 2019/10/27 12:25 p.m.•54 views

CVE-2019-11085

A flaw was found in the Linux kernel's implementation of GVT-g which allowed an attacker with access to a 'passed through' Intel i915 graphics card to possibly access resources allocated to other virtual machines, crash the host, or possibly corrupt memory leading to privilege escalation...

8.8CVSS3.3AI score0.00475EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2019/10/20 12:07 p.m.•54 views

CVE-2018-13405

A vulnerability was found in the fs/inode.c:inodeinitowner function logic of the LInux kernel that allows local users to create files with an unintended group ownership and with group execution and SGID permission bits set, in a scenario where a directory is SGID and belongs to a certain group an...

7.8CVSS3AI score0.0101EPSS
SaveExploits3References2
RedhatCVE
RedhatCVE
•added 2019/10/13 7:44 p.m.•54 views

CVE-2018-14632

An out of bounds write can occur when patching an Openshift object using the 'oc patch' functionality in OpenShift Container Platform 3.x. An attacker can use this flaw to cause a denial of service attack on the Openshift master API service which provides cluster management...

7.7CVSS2.8AI score0.01952EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2019/10/10 11:49 p.m.•54 views

CVE-2017-7518

A flaw was found in the way the Linux KVM module processed the trap flagTF bit in EFLAGS during emulation of the syscall instruction, which leads to a debug exceptionDB being raised in the guest stack. A user/process inside a guest could use this flaw to potentially escalate their privileges insi...

7.8CVSS1.7AI score0.00672EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2019/08/06 7:22 a.m.•54 views

CVE-2019-1010319

WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is: Unexpected control flow, crashes, and segfaults. The component is: ParseWave64HeaderConfig wave64.c:211. The attack vector is: Maliciously crafted .wav file. The fixed version is: After commit...

5.5CVSS4.4AI score0.01503EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2019/08/01 8:23 a.m.•54 views

CVE-2015-9289

A vulnerability was found in the Linux kernel’s CX24116 tv-card driver, where an out of bounds read occurs when checking userspace params in drivers/media/dvb-frontends/cx24116.c. An attacker could use this flaw to leak kernel private information to userspace...

5.5CVSS6.7AI score0.00416EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2019/02/06 8:20 a.m.•54 views

CVE-2019-3823

An out-of-bounds read flaw was found in the way curl handled certain SMTP responses. A remote attacker could use this flaw to crash curl. Mitigation Do not use SMTP authentication with curl...

7.5CVSS0.9AI score0.04286EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2018/12/27 9:49 p.m.•54 views

CVE-2018-20482

GNU Tar through 1.30, when --sparse is used, mishandles file shrinkage during read access, which allows local users to cause a denial of service infinite read loop in sparsedumpregion in sparse.c by modifying a file that is supposed to be archived by a different user's process e.g., a system back...

5.5CVSS3.7AI score0.00526EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2018/12/21 10:50 a.m.•54 views

CVE-2018-18245

Nagios Core 4.4.2 has XSS via the alert summary reports of plugin results, as demonstrated by a SCRIPT element delivered by a modified checkload plugin to NRPE...

5.4CVSS2.3AI score0.02552EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2018/11/07 12:49 a.m.•54 views

CVE-2018-16843

nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessive memory consumption. This issue affects nginx compiled with the ngxhttpv2module not compiled by default if the 'http2' option of the 'listen' directive is used in a configuratio...

7.8CVSS4.5AI score0.47057EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2018/10/31 7:21 a.m.•54 views

CVE-2018-16842

Curl versions 7.14.1 through 7.61.1 are vulnerable to a heap-based buffer over-read in the toolmsgs.c:voutf function that may result in information exposure and denial of service...

9.1CVSS4.3AI score0.02099EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2018/10/05 9:49 p.m.•54 views

CVE-2018-17456

An option injection flaw has been discovered in git when it recursively clones a repository with sub-modules. A remote attacker may configure a malicious repository and trick a user into recursively cloning it, thus executing arbitrary commands on the victim's machine...

9.8CVSS5AI score0.97356EPSS
SaveExploits12References2
RedhatCVE
RedhatCVE
•added 2018/08/23 5:54 a.m.•54 views

CVE-2018-15494

In Dojo Toolkit before 1.14, there is unescaped string injection in dojox/Grid/DataGrid...

9.8CVSS1.9AI score0.0254EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
•added 2018/08/21 7:18 a.m.•54 views

CVE-2016-4975

It was found that Apache was vulnerable to a HTTP response splitting attack for sites which use moduserdir. An attacker could use this flaw to inject CRLF characters into the HTTP header and could possibly gain access to secure data...

6.1CVSS1.4AI score0.19798EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2018/06/27 8:19 a.m.•54 views

CVE-2018-1000517

BusyBox project BusyBox wget version prior to commit 8e2174e9bd836e53c8b9c6e00d1bc6e2a718686e contains a Buffer Overflow vulnerability in Busybox wget that can result in heap buffer overflow. This attack appear to be exploitable via network connectivity. This vulnerability appears to have been...

9.8CVSS5.5AI score0.32919EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2018/05/18 5:20 a.m.•54 views

CVE-2018-1123

Due to incorrect accounting when decoding and escaping Unicode data in procfs, ps is vulnerable to overflowing an mmaped region when formatting the process list for display. Since ps maps a guard page at the end of the buffer, impact is limited to a crash...

7.5CVSS2.3AI score0.09081EPSS
SaveExploits5References2
RedhatCVE
RedhatCVE
•added 2018/04/25 9:18 a.m.•54 views

CVE-2018-10323

The xfsbmapextentstobtree function in fs/xfs/libxfs/xfsbmap.c in the Linux kernel can cause a NULL pointer dereference in xfsbmapiwrite function. An attacker could trick a legitimate user or a privileged attacker could exploit this by mounting a crafted xfs filesystem image to cause a kernel pani...

5.5CVSS4.1AI score0.00553EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2018/04/09 8:20 p.m.•54 views

CVE-2018-1275

Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.16 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user or attacker can craft a message to...

9.8CVSS5.5AI score0.77476EPSS
SaveExploits5References1
RedhatCVE
RedhatCVE
•added 2017/11/07 12:20 p.m.•54 views

CVE-2017-15286

SQLite 3.20.1 has a NULL pointer dereference in tableColumnList in shell.c because it fails to consider certain cases where sqlite3steppStmt==SQLITEROW is false and a data structure is never initialized...

7.5CVSS2.5AI score0.02902EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2017/10/02 1:28 p.m.•54 views

CVE-2017-14496

An integer underflow flaw leading to a buffer over-read was found in dnsmasq in the EDNS0 code. An attacker could send crafted DNS packets to dnsmasq which would cause it to crash. This issue only affected configurations using one of the options: add-mac, add-cpe-id, or add-subnet...

7.8CVSS4.2AI score0.66347EPSS
SaveExploits5References2
RedhatCVE
RedhatCVE
•added 2017/09/13 11:48 a.m.•54 views

CVE-2017-12154

Linux kernel built with the KVM visualization support CONFIGKVM, with nested visualization nVMX feature enabled nested=1, is vulnerable to a crash due to disabled external interrupts. As L2 guest could access r/w hardware CR8 register of the hostL0. In a nested visualization setup, L2 guest user...

7.1CVSS1.2AI score0.00512EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2017/08/23 7:48 p.m.•54 views

CVE-2017-12967

The getsym function in tekhex.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service stack-based buffer over-read and application crash via a malformed tekhex binary...

6.5CVSS6.7AI score0.03101EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2017/06/02 7:20 a.m.•54 views

CVE-2017-9349

In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the DICOM dissector has an infinite loop. This was addressed in epan/dissectors/packet-dcm.c by validating a length value...

7.8CVSS2AI score0.02942EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2017/04/20 6:20 a.m.•54 views

CVE-2017-5432

A use-after-free vulnerability occurs during certain text input selection resulting in a potentially exploitable crash. This vulnerability affects Thunderbird 52.1, Firefox ESR 45.9, Firefox ESR 52.1, and Firefox 53...

7.5CVSS3.6AI score0.03139EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2017/04/20 6:19 a.m.•54 views

CVE-2017-5443

An out-of-bounds write vulnerability while decoding improperly formed BinHex format archives. This vulnerability affects Thunderbird 52.1, Firefox ESR 45.9, Firefox ESR 52.1, and Firefox 53...

9.8CVSS2.5AI score0.03083EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2017/04/20 6:19 a.m.•54 views

CVE-2017-5445

A vulnerability while parsing "application/http-index-format" format content where uninitialized values are used to create an array. This could allow the reading of uninitialized memory into the arrays affected. This vulnerability affects Thunderbird 52.1, Firefox ESR 45.9, Firefox ESR 52.1, and...

7.5CVSS4.2AI score0.02664EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2016/12/15 8:23 p.m.•54 views

CVE-2016-5829

A heap-based buffer overflow vulnerability was found in the Linux kernel's hiddev driver. This flaw could allow a local attacker to corrupt kernel memory, possible privilege escalation or crashing the system...

7.8CVSS2.9AI score0.00458EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2016/12/15 8:19 p.m.•54 views

CVE-2016-4569

A vulnerability was found in Linux kernel. There is an information leak in file "sound/core/timer.c" of the latest mainline Linux kernel, the stack object “tread” has a total size of 32 bytes. It contains a 8-bytes padding, which is not initialized but sent to user via copytouser, resulting a...

2.1CVSS2.7AI score0.00835EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2016/12/14 2:47 p.m.•54 views

CVE-2016-9936

The unserialize implementation in ext/standard/var.c in PHP 7.x before 7.0.14 allows remote attackers to cause a denial of service use-after-free or possibly have unspecified other impact via crafted serialized data. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-6834...

9.8CVSS6.8AI score0.46801EPSS
SaveExploits7References1
RedhatCVE
RedhatCVE
•added 2016/11/24 6:47 a.m.•54 views

CVE-2016-8648

It was found that the Karaf container used by Red Hat JBoss Fuse 6.x, and Red Hat JBoss A-MQ 6.x, deserializes objects passed to MBeans via JMX operations. An attacker could use this flaw to execute remote code on the server as the user running the Java Virtual Machine if the target MBean contain...

7.2CVSS1.1AI score0.02004EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2016/10/27 7:47 p.m.•54 views

CVE-2016-7032

It was discovered that the sudo noexec restriction could have been bypassed if application run via sudo executed system or popen C library functions with a user supplied argument. A local user permitted to run such application via sudo with noexec restriction could use this flaw to execute...

7CVSS4.4AI score0.00337EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2016/08/22 8:48 p.m.•54 views

CVE-2016-4473

/ext/phar/pharobject.c in PHP 7.0.7 and 5.6.x allows remote attackers to execute arbitrary code. NOTE: Introduced as part of an incomplete fix to CVE-2015-6833...

9.8CVSS7AI score0.07753EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2016/07/25 2:19 p.m.•54 views

CVE-2016-6295

ext/snmp/snmp.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 improperly interacts with the unserialize implementation and garbage collection, which allows remote attackers to cause a denial of service use-after-free and application crash or possibly have unspecified other impac...

9.8CVSS7.2AI score0.0926EPSS
SaveExploits6References1
RedhatCVE
RedhatCVE
•added 2016/05/03 3:49 p.m.•54 views

CVE-2016-3714

It was discovered that ImageMagick did not properly sanitize certain input before passing it to the delegate functionality. A remote attacker could create a specially crafted image that, when processed by an application using ImageMagick or an unsuspecting user using the ImageMagick utilities,...

10CVSS7AI score0.97485EPSS
SaveExploits13References1
RedhatCVE
RedhatCVE
•added 2026/03/04 1:57 a.m.•53 views

CVE-2025-32313

In UsageEvents of UsageEvents.java, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

8.4CVSS6.1AI score0.0008EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/02/24 11:02 p.m.•53 views

CVE-2026-3028

A vulnerability was determined in erzhongxmu JEEWMS up to 3.7. This vulnerability affects the function doAdd of the file src/main/java/com/jeecg/demo/controller/JeecgListDemoController.java. This manipulation of the argument Name causes cross site scripting. The attack may be initiated remotely...

6.1CVSS3.9AI score0.00502EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/02/04 3:15 a.m.•53 views

CVE-2025-61649

Vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files src/Services/CheckUserUserInfoCardService.Php. This issue affects CheckUser: from 7cedd58781d261f110651b6af4f41d2d11ae7309...

4.8CVSS5.3AI score0.00332EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/04 1:04 a.m.•53 views

CVE-2025-64125

A vulnerability in Nuvation Energy nCloud VPN Service allowed Network Boundary Bridging.This issue affected the nCloud VPN Service and was fixed on 2025-12-1 December, 2025. End users do not have to take any action to mitigate the issue...

9.4CVSS6.8AI score0.00254EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/11 12:03 a.m.•53 views

CVE-2025-61813

ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Restriction of XML External Entity Reference 'XXE' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files on the server. Exploitation o...

8.6CVSS6.6AI score0.00549EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/06 5:54 p.m.•53 views

CVE-2020-36876

ReQuest Serious Play F3 Media Server versions 7.0.3.4968 Pro, 7.0.2.4954, 6.5.2.4954, 6.4.2.4681, 6.3.2.4203, and 2.0.1.823 allows unauthenticated attackers to disclose the webserver's Python debug log file containing system information, credentials, paths, processes and command arguments running...

8.7CVSS6.8AI score0.00374EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/07/10 7:24 a.m.•53 views

CVE-2025-41667

A low privileged remote attacker with file access can replace a critical file used by the arp-preinit script to get read, write and execute access to any file on the device...

8.8CVSS7.4AI score0.00518EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/07/02 5:24 p.m.•53 views

CVE-2025-46702

Mattermost versions 10.5.x = 10.5.5, 9.11.x = 9.11.15, 10.8.x = 10.8.0, 10.7.x = 10.7.2, 10.6.x = 10.6.5 fail to properly enforce channel member management permissions when adding participants to playbook runs. This allows authenticated users with member-level permissions to bypass system admin...

5.4CVSS7.2AI score0.00201EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 4:23 a.m.•53 views

CVE-2023-43338

Cesanta mjs v2.20.0 was discovered to contain a function pointer hijacking vulnerability via the function mjsgetptr. This vulnerability allows attackers to execute arbitrary code via a crafted input...

9.8CVSS8.2AI score0.00987EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2025/05/22 10:21 p.m.•53 views

CVE-2022-20162

In asn1p256int of crypto/asn1.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

4.9CVSS4.5AI score0.00139EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 10:26 a.m.•53 views

CVE-2019-1388

An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user privileges, aka 'Windows Certificate Dialog Elevation of Privilege Vulnerability'...

7.8CVSS7AI score0.08589EPSS
SaveExploits7References1
RedhatCVE
RedhatCVE
•added 2025/04/17 2:19 a.m.•53 views

CVE-2025-33028

In WinZip through 29.0, there is a Mark-of-the-Web Bypass Vulnerability because of an incomplete fix for CVE-2024-8811. This vulnerability allows attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of WinZip. User interaction is required to exploit this...

7.8CVSS7.8AI score0.00514EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/04/09 11:38 a.m.•53 views

CVE-2024-43046

There may be information disclosure during memory re-allocation in TZ Secure OS...

5.5CVSS6.5AI score0.00112EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2024/08/09 10:47 a.m.•53 views

CVE-2024-42256

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix server re-repick on subrequest retry When a subrequest is marked for needing retry, netfs will call cifspreparewrite which will make cifs repick the server for the op before renegotiating credits; it then calls...

5.5CVSS7.4AI score0.00688EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2024/07/17 9:24 a.m.•53 views

CVE-2024-21147

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Hotspot. Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0....

7.4CVSS6.9AI score0.01136EPSS
SaveExploits0References3
Total number of security vulnerabilities5000