Lucene search
+L
RedhatcveMost viewed

214729 matches found

RedhatCVE
RedhatCVE
•added 2023/08/28 3:49 p.m.•49 views

CVE-2022-38060

A privilege escalation vulnerability exists in the sudo functionality of OpenStack Kolla. A misconfiguration in /etc/sudoers within a container can lead to increased privileges. Mitigation /etc/sudoers within the container should use the securepath option to prevent the PATH environment variable...

7.8CVSS7.1AI score0.00213EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2023/08/23 9:21 p.m.•49 views

CVE-2022-47010

A memory leak flaw was found in binutils in the prfunctiontype function. This flaw allows an attacker to use a set of steps to trigger a memory leak and perform a denial of service, resulting in a loss of the system's availability...

5.5CVSS5.5AI score0.00405EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2023/08/23 9:21 p.m.•49 views

CVE-2022-47008

A memory leak was found in binutils in the maketempdir and maketempname functions. This flaw allows an attacker to use a set of steps to trigger a memory leak and perform a denial of service, resulting in a loss of the system's availability...

5.5CVSS5.5AI score0.00402EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2023/08/11 6:19 a.m.•49 views

CVE-2023-39418

A vulnerability was found in PostgreSQL with the use of the MERGE command, which fails to test new rows against row security policies defined for UPDATE and SELECT. If UPDATE and SELECT policies forbid some rows that INSERT policies do not forbid, a user could store such rows...

3.1CVSS6.2AI score0.01077EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2023/07/25 8:50 a.m.•49 views

CVE-2023-3610

A use-after-free vulnerability was found in the netfilter: nftables component in the Linux kernel due to a missing error handling in the abort path of NFTMSGNEWRULE. This flaw allows a local attacker with CAPNETADMIN access capability to cause a local privilege escalation problem. Mitigation In...

7.8CVSS7.5AI score0.00254EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2023/07/05 6:50 p.m.•49 views

CVE-2023-3269

A vulnerability exists in the memory management subsystem of the Linux kernel. The lock handling for accessing and updating virtual memory areas VMAs is incorrect, leading to use-after-free problems. This issue can be successfully exploited to execute arbitrary kernel code, escalate containers, a...

7.8CVSS7AI score0.01304EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2023/06/26 6:17 p.m.•49 views

CVE-2023-29404

A flaw was found in golang. The go command may execute arbitrary code at build time when using cgo. This can occur when running "go get" on a malicious module, or when running any other command which builds untrusted code. This can be triggered by linker flags, specified via a "cgo LDFLAGS"...

7.5CVSS9.4AI score0.01837EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
•added 2023/06/19 3:14 p.m.•49 views

CVE-2023-33203

A race condition vulnerability was found in the Linux kernel's Qualcomm EMAC Gigabit Ethernet Controller when the user physically removes the device before cleanup in the emacremove function. This flaw can eventually result in a use-after-free issue, possibly leading to a system crash or other...

6.4CVSS6.8AI score0.00347EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2023/05/22 8:46 a.m.•49 views

CVE-2023-32254

A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2TREEDISCONNECT commands. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this...

8.1CVSS6.9AI score0.02913EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2023/05/11 4:52 p.m.•49 views

CVE-2022-36944

A flaw was found in Scala's LazyList that permits code execution during deserialization. This issue could allow an attacker to craft a LazyList containing a malicious Function0 call to execute arbitrary code on a server that deserializes untrusted data. Mitigation Users of Scala's LazyList should...

8.1CVSS9.3AI score0.10623EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2023/05/08 6:21 p.m.•49 views

CVE-2022-24434

A flaw was found in the Node.js dicer module. The affected versions of the Node.js dicer module are vulnerable to a denial of service. By sending a specially-crafted form to the server, a remote attacker can crash the node.js service. Mitigation Mitigation for this issue is either not available o...

7.5CVSS7.2AI score0.03425EPSS
SaveExploits2References4
RedhatCVE
RedhatCVE
•added 2023/04/04 9:43 p.m.•49 views

CVE-2023-1260

An authentication bypass vulnerability was discovered in kube-apiserver. This issue could allow a remote, authenticated attacker who has been given permissions "update, patch" the "pods/ephemeralcontainers" subresource beyond what the default is. They would then need to create a new pod or patch...

8CVSS7.6AI score0.01569EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2023/03/26 3:39 p.m.•49 views

CVE-2023-1281

A use-after-free vulnerability was found in the traffic control index filter tcindex in the Linux kernel. The imperfect hash area can be updated while packets are traversing. This issue could allow a local attacker to cause a use-after-free problem, leading to privilege escalation. Mitigation Thi...

7.8CVSS7AI score0.00304EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2023/03/01 8:29 p.m.•49 views

CVE-2023-25173

A flaw was found in containerd, where supplementary groups are not set up properly inside a container. If an attacker has direct access to a container and manipulates their supplementary group access, they may be able to use supplementary group access to bypass primary group restrictions in some...

7.3CVSS7.7AI score0.00542EPSS
SaveExploits1References8
RedhatCVE
RedhatCVE
•added 2023/02/16 9:32 a.m.•49 views

CVE-2023-25744

The Mozilla Foundation Security Advisory describes this flaw as: Mozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort...

8.8CVSS2.8AI score0.00673EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2023/02/08 6:56 p.m.•49 views

CVE-2023-23455

A denial of service flaw was found in atmtcenqueue in net/sched/schatm.c in the Linux kernel. This issue may allow a local attacker to cause a denial of service due to type confusion. Non-negative numbers could indicate a TCACTSHOT condition rather than valid classification results. Mitigation Th...

4.2CVSS6.1AI score0.00272EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2023/01/12 6:37 a.m.•49 views

CVE-2023-0229

A flaw was found in github.com/openshift/apiserver-library-go, used in OpenShift 4.12 and 4.11, that contains an issue that can allow low-privileged users to set the seccomp profile for pods they control to "unconfined." By default, the seccomp profile used in the restricted-v2 Security Context...

6.3CVSS6.1AI score0.00647EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2023/01/04 4:03 p.m.•49 views

CVE-2022-3643

A possible reset/abort/crash flaw was found in the Linux kernel’s XEN driver when sending certain kinds of packets. This flaw allows a local user to crash the system...

5.5CVSS3AI score0.00485EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2022/12/29 4:04 a.m.•49 views

CVE-2022-40716

A flaw was found in the HashiCorp Consul package. In the affected versions of this package, a specially crafted CSR sent directly to Consul’s internal server agent RPC endpoint can include multiple SAN URI values with additional service names...

6.5CVSS2.5AI score0.01082EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2022/12/14 11:35 a.m.•49 views

CVE-2022-23515

A Cross-site scripting vulnerability was found in rubygem loofah. While neutralizing certain data URIs, loofah is susceptible to Cross-site scripting attacks...

6.1CVSS1.8AI score0.00828EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2022/12/08 4:40 a.m.•49 views

CVE-2022-3630

A memory leak flaw was found in the Linux kernel IPSec functionality. This issue could allow a local user to crash the system...

5.5CVSS1.9AI score0.00253EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2022/12/05 5:01 p.m.•49 views

CVE-2022-46366

Apache Tapestry 3.x allows deserialization of untrusted data, leading to remote code execution. This issue is similar to but distinct from CVE-2020-17531, which applies the the also unsupported 4.x version line. NOTE: This vulnerability only affects Apache Tapestry version line 3.x, which is no...

9.8CVSS9.7AI score0.09996EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2022/12/05 9:31 a.m.•49 views

CVE-2022-4285

An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may result in a denial of service. This issue is the result of an incomplete fix for CVE-2020-16599...

5.5CVSS3.7AI score0.01055EPSS
SaveExploits2References5
RedhatCVE
RedhatCVE
•added 2022/11/29 9:56 p.m.•49 views

CVE-2022-45932

A SQL injection issue was discovered in the AAA package of OpenDaylight. The aaa-idm-store-h2/src/main/java/org/opendaylight/aaa/datastore/h2/RoleStore.java deleteRole function is affected when the API interface /auth/v1/roles/ is used. This may allow a malicious user to execute arbitrary sql...

6.8CVSS3.4AI score0.00616EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2022/11/18 12:56 p.m.•49 views

CVE-2022-3595

A vulnerability was found in Linux Kernel. It has been rated as problematic. Affected by this issue is the function sessfreebuffer of the file fs/cifs/sess.c of the component CIFS Handler. The manipulation leads to double free. It is recommended to apply a patch to fix this issue. The identifier ...

5.5CVSS1.5AI score0.00292EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2022/11/17 1:57 p.m.•49 views

CVE-2022-41877

An out-of-bounds read vulnerability was discovered in FreeRDP due to improper input length validation in the drive channel. A malicious server can trick a FreeRDP based client to read out-of-bound data and send it back to the server. Mitigation Do not use the drive redirection channel - command...

3.7CVSS5.6AI score0.00787EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2022/11/14 3:56 a.m.•49 views

CVE-2022-39353

A flaw was found in the xmldom package. The xmldom parses XML that is not well-formed because it contains multiple top-level elements, adding all root nodes to the childNodes collection of the Document without reporting errors or throwing. This breaks the assumption that there is only a single ro...

9.8CVSS3.7AI score0.03398EPSS
SaveExploits2References4
RedhatCVE
RedhatCVE
•added 2022/11/03 9:27 p.m.•49 views

CVE-2022-32287

A relative path traversal vulnerability in a FileUtil class used by the PEAR management component of Apache UIMA allows an attacker to create files outside the designated target directory using carefully crafted ZIP entry names. This issue affects Apache UIMA Apache UIMA version 3.3.0 and prior...

7.5CVSS2.1AI score0.01673EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2022/10/29 12:16 a.m.•49 views

CVE-2022-3500

A vulnerability was found in keylime. This issue occurs due to improperly handled exceptions. A rogue agent could potentially create errors on the verifier that stopped attestation attempts for that host, leaving it in an attested state but not verified...

5.1CVSS3.7AI score0.00261EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2022/10/20 6:47 a.m.•49 views

CVE-2022-43404

A sandbox bypass vulnerability was found in several Jenkins plugins. This could allow an authenticated attacker to execute arbitrary code within the Jenkins JVM controller. Exploitation could be achieved by crafting untrusted libraries or pipelines, compromising the integrity, availability, and...

9.9CVSS4.5AI score0.01188EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2022/09/09 5:42 p.m.•49 views

CVE-2022-3101

A flaw was found in tripleo-ansible. Due to an insecure default configuration, the permissions of a sensitive file are not sufficiently restricted. This flaw allows a local attacker to use brute force to explore the relevant directory and discover the file, leading to information disclosure of...

7.3CVSS2.2AI score0.00202EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2022/09/02 5:57 p.m.•49 views

CVE-2022-36055

An out-of-memory panic vulnerability exists in the strvals package, which can lead to a denial of service. Applications that use functions from the strvals package in the Helm SDK can cause panic and denial of service...

6.5CVSS2.4AI score0.01047EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2022/08/30 4:10 p.m.•49 views

CVE-2022-37451

Exim before 4.96 has an invalid free in pamconverse in auths/callpam.c because storefree is not used after storemalloc...

7.5CVSS1.2AI score0.03263EPSS
SaveExploits2References3
RedhatCVE
RedhatCVE
•added 2022/08/17 12:08 a.m.•49 views

CVE-2022-2869

A flaw was found in libtiff's tiffcrop tool that has a uint32t underflow, which leads to an out-of-bounds read and write in the extractContigSamples8bits routine. This flaw allows an attacker who supplies a crafted file to tiffcrop to trick a user into opening the crafted file with tiffcrop,...

5.5CVSS3.4AI score0.00317EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2022/07/18 8:43 a.m.•49 views

CVE-2022-2458

An XML external entity injectionXXE vulnerability was found in Business Central. This flaw allows an attacker to interfere with an application's processing of XML data. This attack occurs when XML input containing a reference to an external entity is processed by a weakly configured XML parser. T...

8.2CVSS2.8AI score0.00775EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2022/07/11 6:44 p.m.•49 views

CVE-2021-39714

In ionbufferkmapget of ion.c, there is a possible use-after-free due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

7.8CVSS7.2AI score0.00229EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2022/06/27 4:05 a.m.•49 views

CVE-2022-2211

A vulnerability was found in libguestfs. This issue occurs while calculating the greatest possible number of matching keys in the getkeys function. This flaw leads to a denial of service, either by mistake or malicious actor...

6.5CVSS3.6AI score0.0094EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2022/06/13 5:07 p.m.•49 views

CVE-2021-38578

A flaw was found in edk2. A integer underflow in the SmmEntryPoint function leads to a write into the SMM region allowing a local attacker with administration privileges on the system to execute code within the SMM privileged context. The highest threat from this vulnerability is to data...

9.8CVSS8.8AI score0.01019EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2022/06/08 4:09 p.m.•49 views

CVE-2022-32545

A vulnerability was found in ImageMagick. When crafted or untrusted input is processed, it causes issues outside the range of values of type 'unsigned char' at coders/psd.c. This issue leads to a negative impact on application availability or other problems related to undefined behavior...

7.8CVSS3.3AI score0.014EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2022/06/07 8:25 a.m.•49 views

CVE-2022-1785

A flaw was found in vim. The vulnerability occurs due to Illegal memory access and leads to an out-of-bounds write vulnerability in the excmds function. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution. Mitigation Untrusted vim scripts with -s...

7.8CVSS6AI score0.00494EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2022/06/07 2:30 a.m.•49 views

CVE-2022-30786

A vulnerability was found in NTFS-3G. Incorrect validation of NTFS metadata can result in a heap-based buffer overflow when processing a crafted NTFS image file or partition...

7.8CVSS7.7AI score0.00447EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2022/05/31 6:22 a.m.•50 views

CVE-2022-31651

A heap-based buffer overflow vulnerability exists in the inlsxaiffstartwrite.environment of the Sound Exchange sox library. A specially-crafted file can lead to a float point exception. This flaw allows an attacker to provide a malicious file to trigger this vulnerability...

6.2CVSS3.4AI score0.0116EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2022/05/21 12:25 a.m.•49 views

CVE-2018-19120

The HTML thumbnailer plugin in KDE Applications before 18.12.0 allows attackers to trigger outbound TCP connections to arbitrary IP addresses, leading to disclosure of the source IP address...

7.5CVSS2.6AI score0.01455EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2022/05/21 12:25 a.m.•49 views

CVE-2019-1010268

Ladon since 0.6.1 since ebef0aae48af78c159b6fce81bc6f5e7e0ddb059 is affected by: XML External Entity XXE. The impact is: Information Disclosure, reading files and reaching internal network endpoints. The component is: SOAP request handlers. For instance:...

9.8CVSS2.2AI score0.05877EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2022/05/21 12:19 a.m.•49 views

CVE-2018-20431

GNU Libextractor through 1.8 has a NULL Pointer Dereference vulnerability in the function processmetadata in plugins/ole2extractor.c...

6.5CVSS3.2AI score0.02236EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2022/05/21 12:07 a.m.•49 views

CVE-2020-9281

A cross-site scripting XSS vulnerability in the HTML Data Processor for CKEditor 4.0 before 4.14 allows remote attackers to inject arbitrary web script through a crafted "protected" comment with the ckeprotected syntax...

6.1CVSS3.6AI score0.04308EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2022/05/20 11:56 p.m.•49 views

CVE-2022-0303

No description is available for this CVE...

1.3AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2022/05/20 11:55 p.m.•49 views

CVE-2017-2921

An exploitable memory corruption vulnerability exists in the Websocket protocol implementation of Cesanta Mongoose 6.8. A specially crafted websocket packet can cause an integer overflow, leading to a heap buffer overflow and resulting in denial of service and potential remote code execution. An...

9.8CVSS4.2AI score0.31045EPSS
SaveExploits13References1
RedhatCVE
RedhatCVE
•added 2022/05/20 11:50 p.m.•49 views

CVE-2017-2893

An exploitable NULL pointer dereference vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. An MQTT SUBSCRIBE packet can cause a NULL pointer dereference leading to server crash and denial of service. An attacker needs to send a specially crafted MQTT packet ove...

9.8CVSS4.1AI score0.31045EPSS
SaveExploits13References1
RedhatCVE
RedhatCVE
•added 2022/05/20 11:50 p.m.•49 views

CVE-2021-30506

Incorrect security UI in Web App Installs in Google Chrome on Android prior to 90.0.4430.212 allowed an attacker who convinced a user to install a web application to inject scripts or HTML into a privileged page via a crafted HTML page...

8.8CVSS2.8AI score0.00831EPSS
SaveExploits0References1
Total number of security vulnerabilities5000