Lucene search
+L
RedhatcveMost viewed

214733 matches found

RedhatCVE
RedhatCVE
•added 2020/12/01 9:00 a.m.•51 views

CVE-2020-15257

A flaw was found in containerd. Access controls for the shim's API socket verified that a connecting process had an effective UID of 0, but otherwise did not restrict access to the abstract Unix domain socket. This could allow malicious containers running in the same network namespace as the shim...

8.8CVSS5.6AI score0.03236EPSS
SaveExploits4References3
RedhatCVE
RedhatCVE
•added 2020/11/30 7:29 p.m.•51 views

CVE-2020-27218

In Eclipse Jetty version 9.4.0.RC0 to 9.4.34.v20201102, 10.0.0.alpha0 to 10.0.0.beta2, and 11.0.0.alpha0 to 11.0.0.beta2, if GZIP request body inflation is enabled and requests from different clients are multiplexed onto a single connection, and if an attacker can send a request with a body that ...

5.8CVSS2.1AI score0.08277EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2020/11/24 7:54 p.m.•51 views

CVE-2020-27771

In RestoreMSCWarning of /coders/pdf.c there are several areas where calls to GetPixelIndex could result in values outside the range of representable for the unsigned char type. The patch casts the return value of GetPixelIndex to ssizet type to avoid this bug. This undefined behavior could be...

4.3CVSS1.6AI score0.01175EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2020/11/24 7:23 p.m.•51 views

CVE-2020-27753

There are several memory leaks in the MIFF coder in /coders/miff.c due to improper image depth values, which can be triggered by a specially crafted input file. These leaks could potentially lead to an impact to application availability or cause a denial of service. It was originally reported tha...

5.5CVSS2.8AI score0.00862EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2020/11/24 6:52 p.m.•51 views

CVE-2020-13584

An exploitable use-after-free vulnerability exists in WebKitGTK browser version 2.30.1 x64. A specially crafted HTML web page can cause a use-after-free condition, resulting in a remote code execution. The victim needs to visit a malicious web site to trigger this vulnerability...

8.8CVSS4.7AI score0.04938EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2020/11/18 1:09 a.m.•51 views

CVE-2020-26965

Some websites have a feature "Show Password" where clicking a button will change a password field into a textbook field, revealing the typed password. If, when using a software keyboard that remembers user input, a user typed their password and used that feature, the type of the password field wa...

6.5CVSS1.8AI score0.01262EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2020/11/04 2:29 p.m.•51 views

CVE-2020-25673

A vulnerability was found in Linux kernel where non-blocking socket in llcpsockconnect leads to leak and eventually hanging-up the system...

5.5CVSS6.2AI score0.00468EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2020/11/04 9:59 a.m.•51 views

CVE-2020-25651

A flaw was found in the SPICE file transfer protocol. File data from the host system can partially or fully end up in the client connection of an unauthorized local user in the VM system. Active file transfers from other users could also be interrupted, resulting in a denial of service. The highe...

6.4CVSS2.5AI score0.00299EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2020/11/03 12:01 p.m.•51 views

CVE-2020-27616

An out-of-bounds access flaw was found in the ati-vga emulator of the QEMU. This flaw occurs when the source and destination x y display parameters in ati2dblt have invalid values. This flaw allows a guest user or process to crash the QEMU process, resulting in a denial of service...

6.5CVSS4.1AI score0.02528EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2020/09/30 4:17 p.m.•51 views

CVE-2019-20922

A flaw was found in nodejs-handlebars, where affected versions of handlebars are vulnerable to a denial of service. The package's parser may be forced into an endless loop while processing specially-crafted templates. This flaw allows attackers to exhaust system resources, leading to a denial of...

7.8CVSS4.3AI score0.03793EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2020/09/25 5:03 a.m.•51 views

CVE-2020-25285

A flaw was found in the Linux kernels sysctl handling code for hugepages management. When multiple root level processes would write to modify the /proc/sys/vm/nrhugepages file it could create a race on internal variables leading to a system crash or memory corruption. Mitigation Mitigation for th...

6.4CVSS6.9AI score0.00272EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2020/09/24 10:17 a.m.•51 views

CVE-2020-24750

A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.6. The interaction between serialization gadgets and typing is mishandled. The highest threat from this vulnerability is to data confidentiality and system availability. Mitigation The following conditions are needed for an...

8.1CVSS2.9AI score0.07327EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2020/09/07 5:49 p.m.•51 views

CVE-2019-8720

A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved memory handling addresses the multiple memory corruption issues. Mitigation Red Hat has investigated whether possible mitigation exists fo...

8.8CVSS2.5AI score0.01556EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2020/09/07 2:49 p.m.•51 views

CVE-2020-14335

A flaw was found in Red Hat Satellite, which allows a privileged attacker to read OMAPI secrets through the ISC DHCP of Smart-Proxy. This flaw allows an attacker to gain control of DHCP records from the network. The highest threat from this vulnerability is to system availability. Mitigation...

5.8CVSS1.5AI score0.00249EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2020/09/07 1:20 p.m.•51 views

CVE-2019-8814

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. Processing maliciously crafted web content may lead to arbitrary...

9.3CVSS2.4AI score0.02542EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2020/09/07 9:49 a.m.•51 views

CVE-2020-3885

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. A file URL may be incorrectly processed...

4.3CVSS1.6AI score0.01707EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2020/08/24 5:04 a.m.•51 views

CVE-2020-15811

A flaw was found in squid. Due to incorrect data validation, an HTTP Request Splitting attack against HTTP and HTTPS traffic is possible leading to cache poisoning. The highest threat from this vulnerability is to data confidentiality and integrity. Mitigation Disable the relaxed HTTP parser in...

6.5CVSS3AI score0.04235EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2020/08/19 1:38 p.m.•51 views

CVE-2020-16307

A null pointer dereference vulnerability in devices/vector/gdevtxtw.c and psi/zbfont.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted postscript file. This is fixed in v9.51. Mitigation Mitigation for this issue is either not available or...

5.5CVSS1.6AI score0.01775EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2020/07/31 1:44 p.m.•51 views

CVE-2020-16135

A flaw was found in libssh. A NULL pointer dereference in tftpserver.c if sshbuffernew returns NULL. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicabili...

4.3CVSS1AI score0.04105EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2020/07/23 4:37 p.m.•51 views

CVE-2020-0305

A use-after-free flaw was found in the way the Linux kernel's filesystem subsystem handled a race condition in the chrdevopen function. This flaw allows a privileged local user to starve the resources, causing a denial of service or potentially escalating their privileges. The highest threat from...

4.4CVSS2AI score0.0017EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2020/07/16 5:07 p.m.•51 views

CVE-2019-20908

A flaw was found in how the ACPI table loading through the EFI variable and the related efivarssdt boot option was handled when the Linux kernel was locked down. This flaw allows a root privileged local user to circumvent the kernel lockdown restrictions. The highest threat from this vulnerabilit...

6.9CVSS2.4AI score0.00514EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
•added 2020/07/15 9:39 a.m.•51 views

CVE-2020-14621

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: JAXP. Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple...

5CVSS2.4AI score0.0435EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2020/07/15 9:38 a.m.•51 views

CVE-2020-14562

Vulnerability in the Java SE product of Oracle Java SE component: ImageIO. Supported versions that are affected are Java SE: 11.0.7 and 14.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of...

5CVSS2.8AI score0.05166EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2020/07/07 2:21 p.m.•51 views

CVE-2020-15566

An issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a host OS crash because of incorrect error handling in event-channel port allocation. The allocation of an event-channel port may fail for multiple reasons: 1 port is already in use, 2 the memory allocation failed, or...

4.7CVSS0.1AI score0.00409EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2020/07/02 12:20 p.m.•51 views

CVE-2020-10748

A flaw was found in Keycloak's data filter, where it allowed the processing of data URLs in some circumstances. This flaw allows an attacker to conduct cross-site scripting or further attacks...

4.3CVSS2.7AI score0.00931EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2020/06/24 9:50 p.m.•51 views

CVE-2020-14305

An out-of-bounds memory write flaw was found in how the Linux kernel’s Voice Over IP H.323 connection tracking functionality handled connections on ipv6 port 1720. This flaw allows an unauthenticated remote user to crash the system, causing a denial of service. The highest threat from this...

8.3CVSS7.6AI score0.05152EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2020/06/23 8:26 a.m.•51 views

CVE-2020-14416

A use-after-free flaw was found in slcanwritewakeup in drivers/net/can/slcan.c in the serial CAN module slcan. A race condition occurs when communicating with can using slcan between the write scheduling the transmit and closing flushing out any pending queues the SLCAN channel. This flaw allows ...

4.7CVSS5.7AI score0.00309EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2020/06/19 11:56 a.m.•51 views

CVE-2020-14195

A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.5. FasterXML jackson-databind mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Mitigation Th...

6.8CVSS2.8AI score0.04549EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2020/06/10 10:24 a.m.•51 views

CVE-2020-10766

A logic bug flaw was found in the Linux kernel’s implementation of SSBD. A bug in the logic handling allows an attacker with a local account to disable SSBD protection during a context switch when additional speculative execution mitigations are in place. This issue was introduced when the per...

2.1CVSS6AI score0.00467EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2020/06/09 8:55 p.m.•51 views

CVE-2020-9633

A use-after-free flaw was found in the Adobe Flash Player. This flaw an attacker to perform arbitrary code execution when the Flash player is used to play a specially crafted SWF file. The highest threat from this vulnerability is to confidentiality, integrity and system availability...

10CVSS3.6AI score0.0756EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2020/06/06 2:25 a.m.•51 views

CVE-2020-10543

Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow. Mitigation To mitigate this flaw, developers should not allow untrusted regular expressions to be compiled by the Perl regular expression compiler...

6.4CVSS8.7AI score0.11334EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2020/05/28 3:51 a.m.•51 views

CVE-2019-15924

A flaw was found in the way the fm10k driver in the Linux kernel reacted to memory-related errors during driver initialization. This flaw allows a local attacker to cause a denial of service and crash the system. Mitigation To mitigate this issue, prevent module fm10k from being loaded. Please se...

5.5CVSS3.6AI score0.00524EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2020/05/19 5:55 p.m.•51 views

CVE-2020-12663

A flaw was found in unbound in versions prior to 1.10.1. An infinite loop can be created when malformed DNS answers are received from upstream servers. The highest threat from this vulnerability is to system availability...

5CVSS1.9AI score0.03588EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2020/04/30 8:10 p.m.•51 views

CVE-2020-2760

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.7.29 and prior and 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

5.5CVSS2.7AI score0.03014EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2020/04/09 11:03 a.m.•51 views

CVE-2020-11653

An issue was discovered in Varnish Cache before 6.0.6 LTS, 6.1.x and 6.2.x before 6.2.3, and 6.3.x before 6.3.2. It occurs when communication with a TLS termination proxy uses PROXY version 2. There can be an assertion failure and daemon restart, which causes a performance loss. Mitigation An use...

7.5CVSS2.5AI score0.02159EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2020/04/09 1:21 a.m.•51 views

CVE-2018-7740

The resvmaprelease function in mm/hugetlb.c in the Linux kernel, through 4.15.7, allows local users to cause a denial of service BUG via a crafted application that makes mmap system calls and has a large pgoff argument to the remapfilepages system call...

5.5CVSS4.4AI score0.00583EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2020/04/08 10:01 p.m.•51 views

CVE-2020-8428

A flaw was found in the Linux kernel. The maycreateinsticky in fs/namei.c function has a possible use-after-free which can allow a local user to cause a denial of service OOPS or possibly obtain sensitive information from kernel memory. The highest threat from this vulnerability is to system...

7.1CVSS2.5AI score0.0068EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2020/04/08 9:06 p.m.•51 views

CVE-2018-12698

demangletemplate in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excessive memory consumption aka OOM during the "Create an array for saving the template argument values" XNEWVEC call. This can occur during execution of objdump...

7.5CVSS6AI score0.06606EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2020/04/07 11:11 p.m.•51 views

CVE-2019-10196

A flaw was found in http-proxy-agent, prior to version 2.1.0. It was discovered http-proxy-agent passes an auth option to the Buffer constructor without proper sanitization. This could result in a Denial of Service through the usage of all available CPU resources and data exposure through an...

9.8CVSS3.5AI score0.01392EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2020/04/07 7:05 a.m.•51 views

CVE-2020-1760

A flaw was found in the Ceph Object Gateway, where it supports request sent by an anonymous user in Amazon S3. This flaw could lead to potential XSS attacks due to the lack of proper neutralization of untrusted input. Mitigation Mitigation provided by DigitalOcean: Mitigation relies on the HAProx...

6.1CVSS0.7AI score0.01557EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2020/04/07 4:56 a.m.•51 views

CVE-2019-10082

A read-after-free vulnerability was discovered in Apache httpd, in modhttp2. A specially crafted http/2 client session could cause the server to read memory that was previously freed during connection shutdown, potentially leading to a crash. Mitigation This flaw is only exploitable if Apache htt...

9.1CVSS0.8AI score0.16549EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2020/04/05 10:54 a.m.•51 views

CVE-2018-3693

An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of instructions past bounds check. The flaw relies on the presence of a precisely-defined instruction sequence in the privileged code and the fact that memory writes occur to an...

5.9CVSS3.1AI score0.08625EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2020/04/05 5:17 a.m.•51 views

CVE-2019-11049

In PHP versions 7.3.x below 7.3.13 and 7.4.0 on Windows, when supplying custom headers to mail function, due to mistake introduced in commit 78f4b4a2dcf92ddbccea1bb95f8390a18ac3342e, if the header is supplied in lowercase, this can result in double-freeing certain memory locations...

9.8CVSS3.3AI score0.04218EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2020/04/05 5:03 a.m.•51 views

CVE-2019-11041

When PHP EXIF extension is parsing EXIF information from an image, e.g. via exifreaddata function, in PHP versions 7.1.x below 7.1.31, 7.2.x below 7.2.21 and 7.3.x below 7.3.8 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information...

7.1CVSS3.1AI score0.0442EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2020/04/04 11:05 a.m.•51 views

CVE-2020-1711

An out-of-bounds heap buffer access flaw was found in the way the iSCSI Block driver in QEMU handled a response coming from an iSCSI server while checking the status of a Logical Address Block LBA in an iscsicoblockstatus routine. A remote user could use this flaw to crash the QEMU process,...

7.7CVSS2.6AI score0.04018EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2020/04/02 9:00 a.m.•51 views

CVE-2020-2604

A flaw was found in the serialization component of OpenJDK handled serialization filter. A process-wide filter could have been modified by setting jdk.serialFilter system property at runtime, possibly leading to a bypass of the intended filter during deserialization...

8.1CVSS2.1AI score0.04881EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
•added 2020/04/02 8:57 a.m.•51 views

CVE-2019-3846

A flaw was found in the Linux kernel's Marvell wifi chip driver. A heap overflow in mwifiexupdatebssdescwithie function in marvell/mwifiex/scan.c allows remote attackers to cause a denial of servicesystem crash or execute arbitrary code. Mitigation This flaw requires a system with marvell wifi...

8.8CVSS3.7AI score0.05649EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2020/04/01 12:32 a.m.•51 views

CVE-2019-11254

The Kubernetes API Server component in versions 1.1-1.14, and versions prior to 1.15.10, 1.16.7 and 1.17.3 allows an authorized user who sends malicious YAML payloads to cause the kube-apiserver to consume excessive CPU cycles while parsing YAML. Mitigation Prevent unauthenticated or unauthorized...

6.5CVSS4.8AI score0.03072EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2020/03/31 8:39 a.m.•51 views

CVE-2020-10531

An issue was discovered in International Components for Unicode ICU for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend function in common/unistr.cpp...

8.8CVSS3.8AI score0.02669EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2020/03/30 8:01 p.m.•51 views

CVE-2020-10698

A flaw was found in Ansible Tower when running jobs. This flaw allows an attacker to access the stdout of the executed jobs which are run from other organizations. Some sensible data can be disclosed. However, critical data should not be disclosed, as it should be protected by the nolog flag when...

3.3CVSS0.7AI score0.00271EPSS
SaveExploits0References3
Total number of security vulnerabilities5000