Lucene search
+L
RedhatcveMost viewed

214845 matches found

RedhatCVE
RedhatCVE
•added 2023/05/04 6:26 p.m.•53 views

CVE-2023-0458

A vulnerabilty was found in Linux Kernel, where a speculative pointer dereference problem exists in the Linux Kernel on the doprlimit function. The resource argument value is controlled and is used in pointer arithmetic for the 'rlim' variable and can be used to leak the contents. Mitigation...

4.7CVSS6AI score0.0072EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2023/04/25 2:51 p.m.•53 views

CVE-2020-10661

A flaw was found in HashiCorp Vault and Vault Enterprise. This flaw allows a remote attacker to bypass security restrictions caused by an issue when the existing nested-path policies may give access to Namespaces created after the fact. By sending a specially crafted request, an attacker can bypa...

9.1CVSS8.6AI score0.01116EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2023/03/30 1:01 p.m.•53 views

CVE-2023-26117

A flaw was found in AngularJS, where it is vulnerable to a denial of service caused by a regular expression denial of service ReDoS issue in the $resource service. By providing specially-crafted regex input, a remote attacker could cause a denial of service...

5.3CVSS7AI score0.01695EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2023/03/30 9:20 a.m.•53 views

CVE-2022-4382

A use-after-free flaw caused by a race among the superblock operations in the gadgetfs Linux driver was found. It could be triggered by yanking out a device that is running the gadgetfs side...

4.2CVSS7.1AI score0.00484EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2023/03/24 1:07 p.m.•53 views

CVE-2022-3636

A vulnerability was found in Linux Kernel. This affects the mtkppecheckskb function in the drivers/net/ethernet/mediatek/mtkppe.c file in the Ethernet Handler component. This manipulation can lead to use after free issue...

7.8CVSS7.4AI score0.00344EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2023/03/14 10:43 a.m.•53 views

CVE-2023-28327

A NULL pointer dereference flaw was found in the UNIX protocol in net/unix/diag.c In unixdiaggetexact in the Linux Kernel. The newly allocated skb does not have sk, leading to a NULL pointer. This flaw allows a local user to crash or potentially cause a denial of service. Mitigation Mitigation fo...

5.5CVSS5.7AI score0.00189EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2023/03/13 6:13 p.m.•53 views

CVE-2022-2503

A flaw was found in the Linux kernel. Dm-verity is used for extending root-of-trust to root filesystems. LoadPin builds on this property to restrict module and firmware loads to just the trusted root filesystem. Device-mapper table reloads currently allow users with root privileges to switch out...

6.9CVSS2.7AI score0.00378EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2023/03/09 12:15 a.m.•53 views

CVE-2023-1108

A flaw was found in undertow. This issue makes achieving a denial of service possible due to an unexpected handshake status updated in SslConduit, where the loop never terminates...

7.5CVSS2.4AI score0.01771EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2023/03/01 6:29 a.m.•53 views

CVE-2019-14561

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority for the following reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none...

6.6AI score
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2023/03/01 5:29 a.m.•53 views

CVE-2022-36021

A vulnerability was found in Redis. This flaw allows an authenticated to use string matching commands like SCAN or KEYS with a specially crafted pattern to trigger a denial of service attack on Redis, causing it to hang and consume 100% of CPU time...

5.5CVSS5.7AI score0.59769EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2023/02/28 6:59 p.m.•53 views

CVE-2022-1438

A flaw was found in Keycloak. Under specific circumstances, HTML entities are not sanitized during user impersonation, resulting in a Cross-site scripting XSS vulnerability...

6.4CVSS0.9AI score0.0066EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2023/02/28 5:54 a.m.•53 views

CVE-2023-0923

A flaw was found in the Kubernetes service for notebooks in RHODS, where it does not prevent pods from other namespaces and applications from making requests to the Jupyter API. This flaw can lead to file content exposure and other issues...

9.8CVSS1.9AI score0.00937EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2023/02/17 11:57 a.m.•53 views

CVE-2023-23914

A flaw was found in the Curl package, where the HSTS mechanism would be ignored by subsequent transfers when done on the same command line because the state would not be properly carried. This issue may result in limited confidentiality and integrity...

6.5CVSS7.7AI score0.00858EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2023/02/16 11:56 a.m.•53 views

CVE-2022-41966

A flaw was found in the xstream package. This flaw allows an attacker to cause a denial of service by injecting recursive collections or maps, raising a stack overflow...

7.5CVSS4.6AI score0.08759EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2023/02/14 10:59 p.m.•53 views

CVE-2022-25147

A flaw was found in the Apache Portable Runtime Utility APR-util library. This issue may allow a malicious attacker to cause an out-of-bounds write due to an integer overflow when encoding/decoding a very long string using the base64 family of functions...

6.5CVSS8.9AI score0.01417EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2023/02/07 4:26 a.m.•53 views

CVE-2023-0494

A vulnerability was found in X.Org. This issue occurs due to a dangling pointer in DeepCopyPointerClasses that can be exploited by ProcXkbSetDeviceInfo and ProcXkbGetDeviceInfo to read and write into freed memory. This can lead to local privilege elevation on systems where the X server runs...

7.8CVSS8AI score0.00899EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2023/01/30 8:05 p.m.•53 views

CVE-2022-3534

A use-after-free flaw was found in btfdumpnamedups in tools/lib/bpf/btfdump.c in libbpf in the Linux Kernel. This issue occurs because the key stored in the hash table namemap is a string address, and the string memory is allocated by realloc function. When the memory is resized by realloc later,...

8CVSS7.1AI score0.0091EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2023/01/19 12:05 p.m.•53 views

CVE-2022-46871

The Mozilla Foundation Security Advisory describes this flaw as: An out of date library libusrsctp contained vulnerabilities that could potentially be exploited...

8.8CVSS3.5AI score0.00892EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2023/01/18 8:35 a.m.•53 views

CVE-2023-21843

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Sound. Supported versions that are affected are Oracle Java SE: 8u351, 8u351-perf, 11.0.17, 17.0.5, 19.0.1; Oracle GraalVM Enterprise Edition: 20.3.8, 21.3.4 and 22.3.0. Difficult to exploi...

3.7CVSS4.4AI score0.01369EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2022/12/26 2:34 p.m.•53 views

CVE-2022-47943

An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. There is an out-of-bounds read and OOPS for SMB2WRITE, when there is a large length in the zero DataOffset case...

9.6CVSS1.9AI score0.03503EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2022/12/13 10:11 p.m.•53 views

CVE-2022-3108

An issue was discovered in the Linux kernel through 5.16-rc6. kfdparsesubtypeiolink in drivers/gpu/drm/amd/amdkfd/kfdcrat.c lacks check of the return value of kmemdup...

5.5CVSS1.9AI score0.00222EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2022/12/12 5:04 p.m.•53 views

CVE-2022-3591

Use After Free in GitHub repository vim/vim prior to 9.0.0789. Mitigation Untrusted vim scripts with -s scriptin are not recommended to run...

7.8CVSS8.6AI score0.00388EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2022/12/01 4:26 p.m.•53 views

CVE-2021-25949

A prototype pollution vulnerability was found in ‘set-getter’. This issue allows an attacker to cause a denial of service and may also lead to remote code execution...

9.8CVSS5.3AI score0.03299EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2022/11/30 2:26 p.m.•53 views

CVE-2022-4139

An incorrect TLB flush issue was found in the Linux kernel’s GPU i915 kernel driver, potentially leading to random memory corruption or data leaks. This flaw could allow a local user to crash the system or escalate their privileges on the system. Mitigation Mitigation for this issue is either not...

7CVSS7.2AI score0.00252EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2022/11/13 1:55 p.m.•53 views

CVE-2022-3977

A use-after-free flaw was found in the Linux kernel MCTP Management Component Transport Protocol functionality. This issue occurs when a user simultaneously calls DROPTAG ioctl and socket close happens, which could allow a local user to crash the system or potentially escalate their privileges on...

7.8CVSS3.4AI score0.00252EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2022/10/21 5:17 p.m.•53 views

CVE-2022-3644

A flaw exists in the collection remote for pulpansible, where tokens are stored in plaintext instead of using pulp's encrypted field. This flaw allows an attacker with sufficient privileges to read the stored tokens, resulting in the loss of confidentiality...

4.1CVSS4.9AI score0.00281EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2022/09/26 6:19 a.m.•53 views

CVE-2022-38749

A flaw was found in the snakeyaml package due to a stack-overflow in parsing YAML files. By persuading a victim to open a specially-crafted file, a remote attacker could cause the application to crash, resulting in a denial of service...

6.5CVSS4.3AI score0.02061EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2022/09/21 2:19 p.m.•53 views

CVE-2022-40960

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue that concurrent use of the URL parser with non-UTF-8 data was not thread-safe, leading to a use-after-free problem and causing a potentially exploitable crash...

7.5CVSS3.3AI score0.00947EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2022/09/13 3:13 p.m.•53 views

CVE-2022-3205

Cross site scripting in automation controller UI in Red Hat Ansible Automation Platform 1.2 and 2.0 where the project name is susceptible to XSS injection...

4.6CVSS1.3AI score0.00502EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2022/09/02 5:57 p.m.•53 views

CVE-2021-35097

Possible authentication bypass due to improper order of signature verification and hashing in the signature verification call in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdrago...

7.3CVSS2.1AI score0.00182EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2022/09/01 9:54 a.m.•53 views

CVE-2022-36059

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of Thunderbird users who use the Matrix chat protocol being vulnerable to a denial of service attack. An adversary sharing a room with a user could attack affected clients, making it not show all of a user's...

6.1CVSS4.5AI score0.0094EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2022/08/31 7:59 p.m.•53 views

CVE-2022-2663

A flaw was found in the Linux kernel in nfconntrackirc where the message handling can be confused and it incorrectly matches on the message. An attacker could exploit this vulnerability to bypass firewall when users are using unencrypted IRC with nfconntrackirc configured. Mitigation To mitigate...

5.3CVSS6.1AI score0.03194EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2022/08/25 5:44 a.m.•53 views

CVE-2021-33644

A flaw was found in libtar. This flaw allows an attacker who submits a crafted tar file with size in header struct being 0 to trigger a calling of malloc0 for a variable gnulongname, causing an out-of-bounds read...

6.8CVSS2.6AI score0.01396EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2022/08/03 8:40 a.m.•53 views

CVE-2022-36881

A flaw was found in the Git-Client Jenkins plugin. The affected versions of the Jenkins Git client Plugin do not perform SSH host key verification when connecting to Git repositories via SSH, enabling Man-in-the-middle attacks...

8.1CVSS3.2AI score0.00972EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2022/08/01 5:39 a.m.•53 views

CVE-2022-34911

An issue was discovered in MediaWiki before 1.35.7, 1.36.x and 1.37.x before 1.37.3, and 1.38.x before 1.38.1. XSS can occur in configurations that allow a JavaScript payload in a username. After account creation, when it sets the page title to "Welcome" followed by the username, the username is...

6.1CVSS1.5AI score0.01083EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2022/08/01 5:39 a.m.•53 views

CVE-2022-34526

A stack overflow flaw was found in the TIFFVGetField function of Tiffsplit. This vulnerability allows attackers to cause a denial of service DoS via a crafted TIFF file...

6.5CVSS4.6AI score0.01858EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2022/07/15 4:16 a.m.•53 views

CVE-2022-2414

A flaw was found in pki-core. Access to external entities when parsing XML documents can lead to XML external entity XXE attacks. This flaw allows a remote attacker to potentially retrieve the content of arbitrary files by sending specially crafted HTTP requests. Mitigation There is no known...

7.5CVSS5.3AI score0.85969EPSS
SaveExploits3References3
RedhatCVE
RedhatCVE
•added 2022/07/05 8:06 a.m.•53 views

CVE-2022-2286

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0. Mitigation Untrusted vim scripts with -s scriptin are not recommended to run...

7.8CVSS1.5AI score0.01375EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2022/07/01 5:56 p.m.•53 views

CVE-2022-2056

A divide-by-zero vulnerability was found in libtiff. This flaw allows an attacker to cause a denial of service via a crafted tiff file...

5.1CVSS3.8AI score0.01281EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2022/06/29 12:36 p.m.•53 views

CVE-2022-34479

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of a malicious website that creates a popup that could have resized the popup to overlay the address bar with its own content, resulting in potential user confusion or spoofing attacks...

7.5CVSS2.4AI score0.00744EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2022/06/29 12:35 p.m.•53 views

CVE-2022-2200

The Mozilla Foundation Security Advisory describes this flaw as: If an object prototype was corrupted by an attacker, they would have been able to set undesired attributes on a JavaScript object, leading to privileged code execution...

8.8CVSS2.9AI score0.23941EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2022/06/15 4:29 p.m.•53 views

CVE-2022-31051

A vulnerability was found in semantic-release. Secrets that are normally masked are accidentally disclosed if they contain characters excluded from uri encoding by encodeURI. The vulnerability is further limited to execution contexts where push access to the related repository is unavailable...

7.5CVSS2.9AI score0.0169EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2022/06/15 5:34 a.m.•53 views

CVE-2022-23823

A potential vulnerability in some AMD processors using frequency scaling may allow an authenticated attacker to execute a timing attack to potentially enable information disclosure. Mitigation For mitigations please refer to the AMD Security Bulletin at...

6.5CVSS6.2AI score0.01169EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2022/06/08 4:07 p.m.•53 views

CVE-2022-1968

A flaw was found in vim. The vulnerability occurs due to Illegal memory access and leads to a use-after-free vulnerability in the utfptr2char function. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution. Mitigation Untrusted vim scripts with -s...

7.8CVSS6.2AI score0.01413EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2022/06/07 5:19 p.m.•53 views

CVE-2022-28736

A use-after-free vulnerability was found on grub2's chainloader command. This flaw allows an attacker to gain access to restricted data or cause arbitrary code execution if they can establish control from grub's memory allocation pattern...

7.8CVSS4.5AI score0.00286EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2022/05/26 2:55 a.m.•53 views

CVE-2022-1867

No description is available for this CVE...

1.3AI score0.00857EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2022/05/25 2:32 p.m.•53 views

CVE-2022-1870

No description is available for this CVE...

1.3AI score0.00602EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2022/05/23 5:49 a.m.•53 views

CVE-2022-29181

A flaw was found in the rubygem-nokogiri package. This flaw allows malicious users to change partial contents or configurations on the system. Additionally, this vulnerability can also cause a limited denial of service in the form of interruptions in resource availability. Mitigation To avoid thi...

8.2CVSS4.1AI score0.0323EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2022/05/21 12:26 a.m.•53 views

CVE-2021-21375

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In PJSIP version 2.10 and earlier, after an initial INVITE has been sent, when two 183 responses are received, with the first on...

6.5CVSS3.2AI score0.0208EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2022/05/21 12:25 a.m.•53 views

CVE-2022-22941

An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. When configured as a Master-of-Masters, with a publisheracl, if a user configured in the publisheracl targets any minion connected to the Syndic, the Salt Master incorrectly interpreted no valid targets as valid,...

8.8CVSS3AI score0.01346EPSS
SaveExploits0References1
Total number of security vulnerabilities5000