Lucene search
+L
RedhatcveMost viewed

214700 matches found

RedhatCVE
RedhatCVE
added 2019/10/11 9:46 a.m.50 views

CVE-2018-5131

Under certain circumstances the "fetch" API can return transient local copies of resources that were sent with a "no-store" or "no-cache" cache header instead of downloading a copy from the network as it should. This can result in previously stored, locally cached data of a website being accessib...

6.1CVSS2.6AI score0.02293EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2019/10/10 9:31 a.m.50 views

CVE-2018-2634

The JGSS component of OpenJDK ignores the value of the javax.security.auth.useSubjectCredsOnly property when using HTTP/SPNEGO authentication and always uses global credentials. It was discovered that this could cause global credentials to be unexpectedly used by an untrusted Java application...

6.8CVSS2AI score0.04532EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2019/10/10 5:29 a.m.50 views

CVE-2019-10906

A flaw was found in Jinja. Python string formatting could allow an attacker to escape the sandbox. The highest threat from this vulnerability is to data confidentiality and integrity and system availability. Mitigation If you cannot upgrade python-Jinja2, you can override the issafeattribute meth...

9CVSS3.1AI score0.03633EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
added 2019/10/10 4:54 a.m.50 views

CVE-2016-6302

An integer underflow flaw leading to a buffer over-read was found in the way OpenSSL parsed TLS session tickets. A remote attacker could use this flaw to crash a TLS server using OpenSSL if it used SHA-512 as HMAC for session tickets...

5CVSS3.4AI score0.27806EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2019/10/08 3:55 a.m.50 views

CVE-2017-12616

When using a VirtualDirContext with Apache Tomcat 7.0.0 to 7.0.80 it was possible to bypass security constraints and/or view the source code of JSPs for resources served by the VirtualDirContext using a specially crafted request...

7.5CVSS2.4AI score0.70118EPSS
SaveExploits4References2
RedhatCVE
RedhatCVE
added 2019/08/29 9:28 a.m.50 views

CVE-2019-15538

A flaw was found in the XFS file system in the Linux kernel. An acquired ILOCK was not freed/unlock when the call to xfsqmvopchownreserve fails and the lock is still held and can lead to denial to access for that device. This is primarily a local denial of service but could result in a remote...

7.8CVSS1.3AI score0.03916EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2019/08/08 6:52 p.m.50 views

CVE-2019-10208

A flaw was discovered in postgresql where arbitrary SQL statements can be executed given a suitable SECURITY DEFINER function. An attacker, with EXECUTE permission on the function, can execute arbitrary SQL as the owner of the function. Mitigation If your use case requires SECURITY DEFINER...

8.8CVSS2.7AI score0.02188EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2019/06/26 11:21 a.m.50 views

CVE-2019-11039

Function iconvmimedecodeheaders in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 may perform out-of-buffer read due to integer overflow when parsing MIME headers. This may lead to information disclosure or crash...

9.1CVSS2.1AI score0.0313EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
added 2019/06/14 8:52 a.m.50 views

CVE-2019-5018

An exploitable use after free vulnerability exists in the window function functionality of Sqlite3 3.26.0. A specially crafted SQL command can cause a use after free vulnerability, potentially resulting in remote code execution. An attacker can send a malicious SQL command to trigger this...

8.1CVSS4.6AI score0.06683EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
added 2018/12/20 7:50 a.m.50 views

CVE-2018-20023

LibVNC before 8b06f835e259652b0ff026898014fc7297ade858 contains CWE-665: Improper Initialization vulnerability in VNC Repeater client code that allows attacker to read stack memory and can be abuse for information disclosure. Combined with another vulnerability, it can be used to leak stack memor...

7.5CVSS4AI score0.02495EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2018/12/18 10:22 a.m.50 views

CVE-2018-20097

There is a SEGV in Exiv2::Internal::TiffParserWorker::findPrimaryGroups of tiffimageint.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack...

6.5CVSS3.4AI score0.02287EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2018/09/07 6:19 p.m.50 views

CVE-2018-16646

In Poppler 0.68.0, the Parser::getObj function in Parser.cc may cause infinite recursion via a crafted file. A remote attacker can leverage this for a DoS attack...

6.5CVSS5.2AI score0.02882EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2018/07/20 5:18 a.m.50 views

CVE-2018-1333

By specially crafting HTTP/2 requests, workers would be allocated 60 seconds longer than necessary, leading to worker exhaustion and a denial of service. Fixed in Apache HTTP Server 2.4.34 Affected 2.4.18-2.4.30,2.4.33...

7.5CVSS2.9AI score0.17098EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2018/06/07 9:48 p.m.50 views

CVE-2018-11813

libjpeg 9c has a large loop because readpixel in rdtarga.c mishandles EOF...

7.5CVSS1.6AI score0.03188EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2018/05/07 2:19 p.m.50 views

CVE-2018-1313

In Apache Derby 10.3.1.4 to 10.14.1.0, a specially-crafted network packet can be used to request the Derby Network Server to boot a database whose location and contents are under the user's control. If the Derby Network Server is not running with a Java Security Manager policy file, the attack is...

7.5CVSS1.8AI score0.04618EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2018/03/14 7:49 a.m.50 views

CVE-2018-1000122

A buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling code that allows an attacker to cause a denial of service or information leakage...

9.1CVSS3.4AI score0.09039EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2018/03/07 8:52 a.m.50 views

CVE-2018-6058

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-11215. Reason: This candidate is a reservation duplicate of CVE-2017-11215. Notes: All CVE users should reference CVE-2017-11215 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

10CVSS9.1AI score0.06076EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2017/11/29 12:50 p.m.50 views

CVE-2017-17045

An issue was discovered in Xen through 4.9.x allowing HVM guest OS users to gain privileges on the host OS, obtain sensitive information, or cause a denial of service BUG and host OS crash by leveraging the mishandling of Populate on Demand PoD Physical-to-Machine P2M errors...

8.8CVSS4.8AI score0.00427EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2017/08/30 7:48 a.m.50 views

CVE-2017-13672

An out-of-bounds read access issue was found in the VGA display emulator built into the Quick emulator QEMU. It could occur while reading VGA memory to update graphics display. A privileged user/process inside guest could use this flaw to crash the QEMU process on the host resulting in denial of...

5.5CVSS2.4AI score0.00953EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2017/07/14 10:59 a.m.50 views

CVE-2017-1000095

The jenkins-plugin-script-security improperly whitelisted "DefaultGroovyMethods.putAtObject, String, Object" and "DefaultGroovyMethods.getAtObject, String" which allows attackers to bypass many restrictions and potentially trigger builds or access data they should not have access to. Exploitation...

8.8CVSS6AI score0.00818EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2017/05/19 7:20 a.m.50 views

CVE-2017-7504

HTTPServerILServlet.java in JMS over HTTP Invocation Layer of the JbossMQ implementation, which is enabled by default in Red Hat Jboss Application Server = Jboss 4.X does not restrict the classes for which it performs deserialization, which allows remote attackers to execute arbitrary code via...

9.8CVSS9.5AI score0.41019EPSS
SaveExploits5References1
RedhatCVE
RedhatCVE
added 2017/05/11 2:51 p.m.50 views

CVE-2017-7486

It was found that the pgusermappings view could disclose information about user mappings to a foreign database to non-administrative database users. A database user with USAGE privilege for this mapping could, when querying the view, obtain user mapping data, such as the username and password use...

7.5CVSS3.2AI score0.06331EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2017/04/18 10:25 p.m.50 views

CVE-2017-3544

A newline injection flaw was discovered in the SMTP client implementation in the Networking component in OpenJDK. A remote attacker could possibly use this flaw to manipulate SMTP connections established by a Java application...

4.3CVSS1.5AI score0.01691EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2017/02/14 2:48 p.m.50 views

CVE-2017-5986

It was reported that with Linux kernel, earlier than version v4.10-rc8, an application may trigger a BUGON in sctpwaitforsndbuf if the socket tx buffer is full, a thread is waiting on it to queue more data, and meanwhile another thread peels off the association being used by the first thread...

7.1CVSS4.1AI score0.01162EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2016/12/19 9:17 a.m.50 views

CVE-2016-10003

Incorrect HTTP Request header comparison in Squid HTTP Proxy 3.5.0.1 through 3.5.22, and 4.0.1 through 4.0.16 results in Collapsed Forwarding feature mistakenly identifying some private responses as being suitable for delivery to multiple clients...

7.5CVSS0.7AI score0.04772EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2016/11/18 3:48 p.m.50 views

CVE-2016-9063

An integer overflow during the parsing of XML using the Expat library. This vulnerability affects Firefox 50...

9.8CVSS5AI score0.05472EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2016/07/25 1:48 p.m.50 views

CVE-2016-6294

The localeacceptfromhttp function in ext/intl/locale/localemethods.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 does not properly restrict calls to the ICU ulocacceptLanguageFromHTTP function, which allows remote attackers to cause a denial of service out-of-bounds read or...

9.8CVSS7AI score0.05956EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2016/07/18 2:19 p.m.50 views

CVE-2016-4449

XML external entity XXE vulnerability in the xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.4, when not in validating mode, allows context-dependent attackers to read arbitrary files or cause a denial of service resource consumption via unspecified vectors...

7.1CVSS7AI score0.01661EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/06/07 12:43 a.m.49 views

CVE-2026-46401

HAX CMS helps manage microsite universe with PHP or NodeJs backends. Versions prior to 26.0.0 suffer from an improper session termination vulnerability where authentication tokens remain valid after user logout. This allows attackers who obtain valid tokens to maintain persistent access to...

5.3CVSS5.5AI score0.00498EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/02/04 3:15 a.m.49 views

CVE-2025-61654

Vulnerability in Wikimedia Foundation Thanks. This vulnerability is associated with program files includes/ThanksQueryHelper.Php. This issue affects Thanks: from before 1.43.4, 1.44.1...

5.2AI score0.00322EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/16 12:24 a.m.49 views

CVE-2025-67076

Directory traversal vulnerability in Omnispace Agora Project before 25.10 allowing unauthenticated attackers to read files on the system via the misc controller and the ExternalGetFile action. Only files with an extension can be read...

7.5CVSS6.9AI score0.00892EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/05 9:34 p.m.49 views

CVE-2024-58278

perl2exe = V30.10C contains an arbitrary code execution vulnerability that allows local authenticated attackers to execute malicious scripts. Attackers can control the 0th argument of packed executables to execute another executable, allowing them to bypass restrictions and gain unauthorized acce...

8.5CVSS7.8AI score0.00188EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/11/11 3:47 a.m.49 views

CVE-2025-12927

A security vulnerability has been detected in DedeBIZ up to 6.3.2. The impacted element is an unknown function of the file /admin/archivesadd.php. Such manipulation of the argument flags leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and may b...

7.2CVSS5.1AI score0.003EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/09/17 4:52 p.m.49 views

CVE-2025-58046

Dataease is an open-source data visualization and analysis platform. In versions up to and including 2.10.12, the Impala data source is vulnerable to remote code execution due to insufficient filtering in the getJdbc method of the io.dataease.datasource.type.Impala class. Attackers can construct...

9.8CVSS8.4AI score0.01396EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/07/11 3:42 p.m.49 views

CVE-2025-53673

Jenkins Sensedia Api Platform tools Plugin 1.0 stores the Sensedia API Manager integration token unencrypted in its global configuration file on the Jenkins controller, where it can be viewed by users with access to the Jenkins controller file system...

6.5CVSS7AI score0.00207EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/03 11:08 a.m.49 views

CVE-2025-4162

A vulnerability classified as critical was found in PCMan FTP Server up to 2.0.7. This vulnerability affects unknown code of the component ASCII Command Handler. The manipulation leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may b...

9.8CVSS7.4AI score0.00707EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/04/29 12:13 a.m.49 views

CVE-2025-46657

Karaz Karazal through 2025-04-14 allows reflected XSS via the lang parameter to the default URI...

7.2CVSS5.9AI score0.00325EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
added 2025/04/11 8:28 p.m.49 views

CVE-2025-30658

A Missing Release of Memory after Effective Lifetime vulnerability in the Anti-Virus processing of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service DoS. On all SRX platforms with Anti-Virus enabled, if a server sends specific...

8.7CVSS6.8AI score0.00417EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/04/10 9:05 p.m.49 views

CVE-2025-30304

Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.5AI score0.00243EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/04/10 8:05 p.m.49 views

CVE-2025-27735

Insufficient verification of data authenticity in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to bypass a security feature locally...

6CVSS6.7AI score0.00403EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/04/10 7:39 p.m.49 views

CVE-2025-26672

Buffer over-read in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to disclose information over a network...

6.5CVSS6.4AI score0.01785EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/04/05 3:32 p.m.49 views

CVE-2025-29987

Dell PowerProtect Data Domain with Data Domain Operating System DD OS versions prior to 8.3.0.15 contain an Insufficient Granularity of Access Control vulnerability. An authenticated user from a trusted remote client could exploit this vulnerability to execute arbitrary commands with root...

8.8CVSS7.9AI score0.00525EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/04/02 1:28 a.m.49 views

CVE-2024-54804

Netgear WNR854T 1.5.2 North America is vulnerable to Command Injection. An attacker can send a specially crafted request to post.cgi, updating the nvram parameter wanhostname and forcing a reboot. This will result in command injection...

9.8CVSS7.3AI score0.0166EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/03/30 1:06 a.m.49 views

CVE-2025-28093

ShopXO v6.4.0 is vulnerable to Server-Side Request Forgery SSRF in Email Settings...

6.3CVSS7.2AI score0.00277EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/03/05 1:22 a.m.49 views

CVE-2025-25948

Incorrect access control in the component /rest/staffResource/create of Serosoft Solutions Pvt Ltd Academia Student Information System SIS EagleR v1.0.118 allows create and modify user accounts, including an Administrator account...

9.1CVSS6.5AI score0.06862EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2024/12/28 2:59 a.m.49 views

CVE-2024-56644

In the Linux kernel, the following vulnerability has been resolved: net/ipv6: release expired exception dst cached in socket Dst objects get leaked in ip6negativeadvice when this function is executed for an expired IPv6 route located in the exception table. There are several conditions that must ...

4.7CVSS6.8AI score0.00694EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2024/10/29 4:55 p.m.49 views

CVE-2024-7207

A flaw was found in Envoy. It is possible to modify or manipulate headers from external clients when pass-through routes are used for the ingress gateway. This issue could allow a malicious user to forge what is logged by Envoy as a requested path and cause the Envoy proxy to make requests to...

7.4CVSS6.6AI score0.00636EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
added 2024/09/07 12:10 a.m.49 views

CVE-2024-34156

A flaw was found in the encoding/gob package of the Golang standard library. Calling Decoder.Decoding, a message that contains deeply nested structures, can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635. Mitigation Mitigation for this issue is either not available o...

7.5CVSS7.4AI score0.01696EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
added 2024/07/16 11:25 p.m.49 views

CVE-2022-48801

In the Linux kernel, the following vulnerability has been resolved: iio: buffer: Fix file related error handling in IIOBUFFERGETFDIOCTL If we fail to copy the just created file descriptor to userland, we try to clean up by putting back 'fd' and freeing 'ib'. The code uses putunusedfd for the form...

4.4CVSS7.1AI score0.00286EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2024/06/20 11:27 a.m.49 views

CVE-2021-47613

In the Linux kernel, the following vulnerability has been resolved: i2c: virtio: fix completion handling The driver currently assumes that the notify callback is only received when the device is done with all the queued buffers. However, this is not true, since the notify callback could be called...

4.7CVSS7.5AI score0.00214EPSS
SaveExploits0References4
Total number of security vulnerabilities5000