Lucene search
+L
RedhatcveMost viewed

214845 matches found

RedhatCVE
RedhatCVE
•added 2021/08/26 1:32 p.m.•51 views

CVE-2021-3634

A flaw has been found in libssh. The SSH protocol keeps track of two shared secrets during the lifetime of the session. One of them is called secrethash and the other sessionid. Initially, both of them are the same, but after key re-exchange, previous sessionid is kept and used as an input to new...

6.5CVSS1.7AI score0.04683EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2021/08/24 2:41 p.m.•51 views

CVE-2021-39360

In GNOME libzapojit through 0.0.3, zpj-skydrive.c does not enable TLS certificate verification on the SoupSessionSync objects it creates, leaving users vulnerable to network MITM attacks. NOTE: this is similar to CVE-2016-20011...

7.5CVSS3.7AI score0.01469EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2021/08/18 8:04 p.m.•51 views

CVE-2021-25218

A flaw was found in bind. An assertion failure is triggered, resulting in termination of the named server process, if named attempts to respond over UDP with a response that is larger than the current effective interface maximum transmission unit MTU, and if response-rate limiting RRL is active...

7.5CVSS1.4AI score0.03589EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2021/08/11 4:20 a.m.•51 views

CVE-2021-29984

Instruction reordering resulted in a sequence of instructions that would cause an object to be incorrectly considered during garbage collection. This led to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird 78.13, Thunderbird 91, Firefox ESR 78.13, and...

8.8CVSS3AI score0.01386EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2021/08/10 9:50 p.m.•51 views

CVE-2021-2383

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.25 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

4.9CVSS1.8AI score0.02588EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2021/08/10 9:21 p.m.•51 views

CVE-2021-38200

A flaw was found in the Linux kernel on the powerpc architecture, where a local user can cause a denial of service and panic the system when issuing the 'perf record' command. The highest threat from this vulnerability is to system availability. Mitigation Mitigation for this issue is either not...

5.5CVSS1.5AI score0.00255EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2021/08/10 6:33 p.m.•51 views

CVE-2021-32815

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. The assertion failure is triggered when Exiv2 is used to modify the metadata of a crafted image file. An attacker could potentially exploit the vulnerability to cause a denia...

5.5CVSS2.1AI score0.01104EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2021/08/10 5:52 p.m.•51 views

CVE-2021-37621

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop was found in Exiv2 versions v0.27.4 and earlier. The infinite loop is triggered when Exiv2 is used to print the metadata of a crafted image file. An attacker...

5.5CVSS4AI score0.01104EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2021/08/10 5:20 p.m.•51 views

CVE-2021-37618

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.4 and earlier. The out-of-bounds read is triggered when Exiv2 is used to print the metadata of a crafted image file. A...

5.5CVSS4.2AI score0.00984EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2021/07/28 1:53 p.m.•51 views

CVE-2021-30734

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. Processing maliciously crafted web content may lead to arbitrary code execution...

8.8CVSS2.4AI score0.02023EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2021/07/21 9:20 a.m.•51 views

CVE-2021-22925

A flaw was found in the way curl handled telnet protocol option for sending environment variables, which could lead to sending of uninitialized data from a stack-based buffer to the server. This issue leads to potentially revealing sensitive internal information to the server using a clear-text...

5.3CVSS1.4AI score0.04929EPSS
SaveExploits2References3
RedhatCVE
RedhatCVE
•added 2021/06/15 1:47 p.m.•51 views

CVE-2021-3592

An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the bootpinput function and could occur while processing a udp packet that is smaller than the size of the 'bootpt' structure. A malicious guest could use this flaw to leak 10 byte...

3.8CVSS1.9AI score0.00326EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2021/06/08 3:14 p.m.•51 views

CVE-2019-25045

A use-after-free flaw was found in the Linux kernel’s XFRM subsystem when flushing the XFRM tunnel. This flaw allows a local user to crash the system or possibly escalate their privileges on the system. The highest threat from this vulnerability is to confidentiality, integrity, as well as system...

7.8CVSS2.5AI score0.00503EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2021/05/21 12:15 p.m.•51 views

CVE-2021-3563

A flaw was found in openstack-keystone. Only the first 72 characters of an application secret are verified allowing attackers bypass some password complexity which administrators may be counting on. The highest threat from this vulnerability is to data confidentiality and integrity...

7.4CVSS5AI score0.01746EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2021/05/12 9:57 p.m.•51 views

CVE-2021-32606

A flaw was found in the Linux kernel. A use-after-free flaw in isotpsetsockopt leads to arbitrary kernel execution by overwriting the skerrorreport pointer which can be misused in order to execute a user-controlled ROP chain to gain root privileges. The highest threat from this vulnerability is t...

7.8CVSS3.5AI score0.00431EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2021/04/27 7:31 p.m.•51 views

CVE-2021-3516

There's a flaw in libxml2's xmllint. An attacker who is able to submit a crafted file to be processed by xmllint could trigger a use-after-free. The greatest impact of this flaw is to confidentiality, integrity, and availability. Mitigation This flaw can be mitigated by not using xmllint with the...

7.8CVSS1.7AI score0.0199EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2021/04/27 8:17 a.m.•51 views

CVE-2021-3514

A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using a specially crafted query. This flaw allows an authenticated attacker to cause a denial of service. The highest threat from this vulnerability is t...

6.5CVSS2.9AI score0.012EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2021/04/06 5:47 p.m.•51 views

CVE-2021-29421

There's a flaw in the pikepdf Python library's XMP metadata parsing functionality. An attacker who is able to submit a crafted PDF file to be processed by pikepdf could trigger an XML External Entity XXE injection. The highest threat of this flaw is to confidentiality of data...

7.5CVSS3.9AI score0.01681EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2021/03/24 4:31 p.m.•51 views

CVE-2021-21348

XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to occupy a thread that consumes maximum CPU time and will never return. No user is affected, who followed the recommendation to setup...

7.8CVSS3.7AI score0.13832EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2021/03/20 9:44 p.m.•51 views

CVE-2018-5390

A flaw named SegmentSmack was found in the way the Linux kernel handled specially crafted TCP packets. A remote attacker could use this flaw to trigger time and calculation expensive calls to tcpcollapseofoqueue and tcppruneofoqueue functions by sending specially modified packets within ongoing T...

7.8CVSS1.7AI score0.7372EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2021/03/19 7:00 p.m.•51 views

CVE-2021-28831

decompressgunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huftbuild result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data...

7.5CVSS2.8AI score0.02719EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2021/03/17 1:46 p.m.•51 views

CVE-2021-28650

autoar-extractor.c in GNOME gnome-autoar before 0.3.1, as used by GNOME Shell, Nautilus, and other software, allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink in certain complex situations. NOTE: this issue exists because of an incomplet...

5.5CVSS3.9AI score0.00639EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2021/03/09 11:54 p.m.•51 views

CVE-2021-21378

An authentication bypass vulnerability was found in envoyproxy/envoy. When specifying a JSON Web Token JWT authentication filter, if allowmissing is also used, this flaw allows an attacker to craft a request with a JWT token with an incorrect issuer bypassing the filter. The highest threat from...

8.2CVSS3.5AI score0.0171EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2021/03/05 7:04 p.m.•51 views

CVE-2021-27365

A flaw was found in the Linux kernel. A heap buffer overflow in the iSCSI subsystem is triggered by setting an iSCSI string attribute to a value larger than one page and then trying to read it. The highest threat from this vulnerability is to data confidentiality and integrity as well as system...

7.8CVSS8AI score0.02097EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2021/03/05 1:44 a.m.•51 views

CVE-2021-20267

A flaw was found in openstack-neutron's default Open vSwitch firewall rules. By sending carefully crafted packets, anyone in control of a server instance connected to the virtual switch can impersonate the IPv6 addresses of other systems on the network, resulting in denial of service or in some...

7.1CVSS7.1AI score0.01023EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2021/02/04 2:55 p.m.•51 views

CVE-2021-21606

Jenkins 2.274 and earlier, LTS 2.263.1 and earlier improperly validates the format of a provided fingerprint ID when checking for its existence allowing an attacker to check for the existence of XML files with a short path...

4.3CVSS2.9AI score0.01215EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2021/02/03 8:04 p.m.•51 views

CVE-2021-20221

An out-of-bounds heap buffer access issue was found in the ARM Generic Interrupt Controller emulator of QEMU on aarch64 platform. The issue occurs because while writing an interrupt ID to the controller memory area, it is not masked to be 4 bits wide. It may lead to the said issue while updating...

6CVSS1.1AI score0.00326EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2021/01/29 6:34 p.m.•51 views

CVE-2021-3347

A flaw was found in the Linux kernel. A use-after-free memory flaw in the Fast Userspace Mutexes functionality allowing a local user to crash the system or escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as syste...

7.8CVSS4.8AI score0.01365EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2021/01/26 11:53 a.m.•51 views

CVE-2020-0466

A flaw was found in the Linux kernel. A logic error in eventpoll.c can cause a use-after-free, leading to a local escalation of privilege with no additional execution privileges. User interaction is not needed for exploitation. The highest threat from this vulnerability is to confidentiality,...

7.8CVSS2.3AI score0.00278EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2021/01/05 2:33 p.m.•51 views

CVE-2020-8287

A flaw was found in nodejs. Affected versions of Node.js allow two copies of a header field in an HTTP request. The first header field is recognized while the second is ignored leading to HTTP request smuggling. The highest threat from this vulnerability is to data confidentiality and integrity...

6.5CVSS7.1AI score0.16296EPSS
SaveExploits2References3
RedhatCVE
RedhatCVE
•added 2020/12/23 1:31 p.m.•51 views

CVE-2020-28949

A flaw was found in the ArchiveTar package. PEAR ArchiveTar could allow a local authenticated attacker to bypass security restrictions caused by a stream-wrapper attack. An attacker can overwrite arbitrary files on the system using a specially-crafted tar archive...

7.8CVSS3.2AI score0.84554EPSS
SaveExploits4References3
RedhatCVE
RedhatCVE
•added 2020/12/01 9:00 a.m.•51 views

CVE-2020-15257

A flaw was found in containerd. Access controls for the shim's API socket verified that a connecting process had an effective UID of 0, but otherwise did not restrict access to the abstract Unix domain socket. This could allow malicious containers running in the same network namespace as the shim...

8.8CVSS5.6AI score0.03236EPSS
SaveExploits4References3
RedhatCVE
RedhatCVE
•added 2020/11/30 7:29 p.m.•51 views

CVE-2020-27218

In Eclipse Jetty version 9.4.0.RC0 to 9.4.34.v20201102, 10.0.0.alpha0 to 10.0.0.beta2, and 11.0.0.alpha0 to 11.0.0.beta2, if GZIP request body inflation is enabled and requests from different clients are multiplexed onto a single connection, and if an attacker can send a request with a body that ...

5.8CVSS2.1AI score0.08277EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2020/11/24 7:54 p.m.•51 views

CVE-2020-27771

In RestoreMSCWarning of /coders/pdf.c there are several areas where calls to GetPixelIndex could result in values outside the range of representable for the unsigned char type. The patch casts the return value of GetPixelIndex to ssizet type to avoid this bug. This undefined behavior could be...

4.3CVSS1.6AI score0.01175EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2020/11/24 7:23 p.m.•51 views

CVE-2020-27753

There are several memory leaks in the MIFF coder in /coders/miff.c due to improper image depth values, which can be triggered by a specially crafted input file. These leaks could potentially lead to an impact to application availability or cause a denial of service. It was originally reported tha...

5.5CVSS2.8AI score0.00862EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2020/11/24 6:52 p.m.•51 views

CVE-2020-13584

An exploitable use-after-free vulnerability exists in WebKitGTK browser version 2.30.1 x64. A specially crafted HTML web page can cause a use-after-free condition, resulting in a remote code execution. The victim needs to visit a malicious web site to trigger this vulnerability...

8.8CVSS4.7AI score0.04938EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2020/11/18 1:09 a.m.•51 views

CVE-2020-26965

Some websites have a feature "Show Password" where clicking a button will change a password field into a textbook field, revealing the typed password. If, when using a software keyboard that remembers user input, a user typed their password and used that feature, the type of the password field wa...

6.5CVSS1.8AI score0.01262EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2020/11/13 6:14 p.m.•51 views

CVE-2020-28367

An input validation vulnerability was found in Go. If cgo is specified in a Go file, it is possible to bypass the validation of arguments to the gcc compiler. This flaw allows an attacker to create a malicious repository that can execute arbitrary code when downloaded and run via go get or go bui...

7.5CVSS8AI score0.02405EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2020/11/04 2:29 p.m.•51 views

CVE-2020-25673

A vulnerability was found in Linux kernel where non-blocking socket in llcpsockconnect leads to leak and eventually hanging-up the system...

5.5CVSS6.2AI score0.00468EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2020/11/04 9:59 a.m.•51 views

CVE-2020-25651

A flaw was found in the SPICE file transfer protocol. File data from the host system can partially or fully end up in the client connection of an unauthorized local user in the VM system. Active file transfers from other users could also be interrupted, resulting in a denial of service. The highe...

6.4CVSS2.5AI score0.00299EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2020/11/03 12:01 p.m.•51 views

CVE-2020-27616

An out-of-bounds access flaw was found in the ati-vga emulator of the QEMU. This flaw occurs when the source and destination x y display parameters in ati2dblt have invalid values. This flaw allows a guest user or process to crash the QEMU process, resulting in a denial of service...

6.5CVSS4.1AI score0.02528EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2020/09/30 4:17 p.m.•51 views

CVE-2019-20922

A flaw was found in nodejs-handlebars, where affected versions of handlebars are vulnerable to a denial of service. The package's parser may be forced into an endless loop while processing specially-crafted templates. This flaw allows attackers to exhaust system resources, leading to a denial of...

7.8CVSS4.3AI score0.03793EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2020/09/25 5:03 a.m.•51 views

CVE-2020-25285

A flaw was found in the Linux kernels sysctl handling code for hugepages management. When multiple root level processes would write to modify the /proc/sys/vm/nrhugepages file it could create a race on internal variables leading to a system crash or memory corruption. Mitigation Mitigation for th...

6.4CVSS6.9AI score0.00272EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2020/09/15 6:00 p.m.•51 views

CVE-2020-8927

A buffer overflow flaw was found in the Brotli library where an attacker could control the input length of a "one-shot" decompression request to a script that can trigger a crash. This issue can happen when copying chunks of data larger than 2 GiB. Mitigation This flaw can be mitigated by using...

6.5CVSS1.6AI score0.03217EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2020/09/07 2:49 p.m.•51 views

CVE-2020-14335

A flaw was found in Red Hat Satellite, which allows a privileged attacker to read OMAPI secrets through the ISC DHCP of Smart-Proxy. This flaw allows an attacker to gain control of DHCP records from the network. The highest threat from this vulnerability is to system availability. Mitigation...

5.8CVSS1.5AI score0.00249EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2020/09/07 1:20 p.m.•51 views

CVE-2019-8814

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. Processing maliciously crafted web content may lead to arbitrary...

9.3CVSS2.4AI score0.02542EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2020/08/24 5:04 a.m.•51 views

CVE-2020-15811

A flaw was found in squid. Due to incorrect data validation, an HTTP Request Splitting attack against HTTP and HTTPS traffic is possible leading to cache poisoning. The highest threat from this vulnerability is to data confidentiality and integrity. Mitigation Disable the relaxed HTTP parser in...

6.5CVSS3AI score0.04235EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2020/08/19 1:38 p.m.•51 views

CVE-2020-16307

A null pointer dereference vulnerability in devices/vector/gdevtxtw.c and psi/zbfont.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted postscript file. This is fixed in v9.51. Mitigation Mitigation for this issue is either not available or...

5.5CVSS1.6AI score0.01775EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2020/07/31 1:44 p.m.•51 views

CVE-2020-16135

A flaw was found in libssh. A NULL pointer dereference in tftpserver.c if sshbuffernew returns NULL. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicabili...

4.3CVSS1AI score0.04105EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2020/07/31 8:13 a.m.•51 views

CVE-2020-12401

A flaw was found in nss. Using the EM side-channel, it is possible to extract the position of zero and non-zero wNAF digits while nss-certutil tool performs scalar multiplication during the ECDSA signature generation, leaking partial information about the ECDSA nonce. Given a small number of ECDS...

1.9CVSS1.2AI score0.00323EPSS
SaveExploits0References4
Total number of security vulnerabilities5000