Lucene search
+L
RedhatcveMost viewed

210449 matches found

RedhatCVE
RedhatCVE
•added 2019/07/23 7:0 a.m.•46 views

CVE-2019-12979

ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the SyncImageSettings function in MagickCore/image.c. This is related to AcquireImage in magick/image.c...

7.8CVSS3.3AI score0.02357EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2019/07/12 3:21 a.m.•46 views

CVE-2019-10198

An authentication bypass vulnerability was discovered in Foreman. Previously, commit tasks were searched through findresource, which performed authorization checks. After the change to Foreman, an unauthenticated user can view the details of a task through the web UI or API, if they can discover ...

6.5CVSS2.3AI score0.01599EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2019/07/02 7:52 a.m.•46 views

CVE-2019-13147

In Audio File Library aka audiofile 0.3.6, there exists one NULL pointer dereference bug in ulaw2linearbuf in G711.cpp in libmodules.a that allows an attacker to cause a denial of service via a crafted file...

6.5CVSS4.1AI score0.02951EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2019/06/26 11:22 a.m.•46 views

CVE-2019-11040

When PHP EXIF extension is parsing EXIF information from an image, e.g. via exifreaddata function, in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information...

9.1CVSS3.1AI score0.04068EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2019/05/03 10:22 a.m.•46 views

CVE-2019-10241

In Eclipse Jetty version 9.2.26 and older, 9.3.25 and older, and 9.4.15 and older, the server is vulnerable to XSS conditions if a remote client USES a specially formatted URL against the DefaultServlet or ResourceHandler that is configured for showing a Listing of directory contents...

6.1CVSS4AI score0.09591EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2019/03/28 9:50 p.m.•46 views

CVE-2019-1002101

A flaw was found in Kubernetes via the mishandling of symlinks when copying files from a running container. An attacker could exploit this by convincing a user to use kubectl cp or oc cp with a malicious container, allowing for arbitrary files to be overwritten on the host machine...

6.4CVSS2.4AI score0.13164EPSS
SaveExploits2References4
RedhatCVE
RedhatCVE
•added 2019/03/27 2:58 p.m.•46 views

CVE-2019-0199

A flaw was found in Apache Tomcat, where the HTTP/2 implementation accepted streams with excessive numbers of SETTINGS frames and also permitted clients to keep streams open, which enables them to cause server-side threads to block. This flaw eventually leads to a denial of service attack...

7.5CVSS4.1AI score0.72855EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2019/03/14 6:51 p.m.•46 views

CVE-2019-9641

An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exifprocessIFDinTIFF...

9.8CVSS2.9AI score0.09395EPSS
SaveExploits2References3
RedhatCVE
RedhatCVE
•added 2019/02/28 10:49 a.m.•46 views

CVE-2019-9169

In the GNU C Library aka glibc or libc6 through 2.29, proceednextnode in posix/regexec.c has a heap-based buffer over-read via an attempted case-insensitive regular-expression match...

9.8CVSS3.3AI score0.04731EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2018/10/07 3:50 p.m.•46 views

CVE-2018-17962

An integer overflow issue was found in the AMD PC-Net II NIC emulation in QEMU. It could occur while receiving packets, if the size value was greater than INTMAX. Such overflow would lead to stack buffer overflow issue. A user inside guest could use this flaw to crash the QEMU process resulting i...

7.5CVSS2.9AI score0.04503EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2018/10/05 7:49 p.m.•46 views

CVE-2018-17966

ImageMagick 7.0.7-28 has a memory leak vulnerability in WritePDBImage in coders/pdb.c...

6.5CVSS3.1AI score0.01714EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2018/09/06 4:49 a.m.•46 views

CVE-2018-16542

It was discovered that ghostscript did not properly handle certain stack overflow error conditions. An attacker could possibly exploit this to bypass the -dSAFER protection and crash ghostscript or, possibly, execute arbitrary code in the ghostscript context via a specially crafted PostScript...

9.3CVSS1.9AI score0.92499EPSS
SaveExploits4References2
RedhatCVE
RedhatCVE
•added 2018/08/30 6:48 a.m.•46 views

CVE-2018-16062

An out-of-bounds read was discovered in elfutils in the way it reads DWARF address ranges information. Function dwarfgetaranges in dwarfgetaranges.c does not properly check whether it reads beyond the limits of the ELF section. An attacker could use this flaw to cause a denial of service via a...

5.5CVSS3AI score0.01729EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2018/08/22 2:19 a.m.•46 views

CVE-2018-14567

libxml2 2.9.8, if --with-lzma is used, allows remote attackers to cause a denial of service infinite loop via a crafted XML file that triggers LZMAMEMLIMITERROR, as demonstrated by xmllint, a different vulnerability than CVE-2015-8035 and CVE-2018-9251...

6.5CVSS5.5AI score0.043EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
•added 2018/07/04 5:48 a.m.•46 views

CVE-2018-12910

An out-of-bounds read has been discovered in libsoup when getting cookies from a URI with empty hostname. An attacker may use this flaw to cause a crash in the application...

9.8CVSS0.7AI score0.04188EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2018/07/02 10:33 p.m.•46 views

CVE-2018-12536

In Eclipse Jetty Server, all 9.x versions, on webapps deployed using default Error Handling, when an intentionally bad query arrives that doesn't match a dynamic url-pattern, and is eventually handled by the DefaultServlet's static file serving, the bad characters can trigger a...

5.3CVSS6.9AI score0.04328EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2018/06/19 9:48 a.m.•46 views

CVE-2018-12537

In Eclipse Vert.x version 3.0 to 3.5.1, the HttpServer response headers and HttpClient request headers do not filter carriage return and line feed characters from the header value. This allow unfiltered values to inject a new header in the client request or server response...

5.3CVSS2.3AI score0.02482EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2018/05/30 7:19 p.m.•46 views

CVE-2018-1260

Spring Security OAuth, versions 2.3 prior to 2.3.3, 2.2 prior to 2.2.2, 2.1 prior to 2.1.2, 2.0 prior to 2.0.15 and older unsupported versions contains a remote code execution vulnerability. A malicious user or attacker can craft an authorization request to the authorization endpoint that can lea...

9.8CVSS5.9AI score0.08247EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
•added 2018/05/07 2:19 p.m.•46 views

CVE-2018-1313

In Apache Derby 10.3.1.4 to 10.14.1.0, a specially-crafted network packet can be used to request the Derby Network Server to boot a database whose location and contents are under the user's control. If the Derby Network Server is not running with a Java Security Manager policy file, the attack is...

7.5CVSS1.8AI score0.04504EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2018/05/02 10:29 a.m.•46 views

CVE-2018-10547

An issue was discovered in ext/phar/pharobject.c in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. There is Reflected XSS on the PHAR 403 and 404 error pages via request data of a request for a .phar file. NOTE: this vulnerability exists because of an...

6.1CVSS2.9AI score0.79949EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2018/04/17 4:20 a.m.•46 views

CVE-2018-0737

OpenSSL RSA key generation was found to be vulnerable to cache side-channel attacks. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could recover parts of the private key...

5.9CVSS4.5AI score0.12046EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2018/04/11 6:49 p.m.•46 views

CVE-2017-15137

The OpenShift image import whitelist failed to enforce restrictions correctly when running commands such as "oc tag", for example. This could allow a user with access to OpenShift to run images from registries that should not be allowed...

5.3CVSS2.7AI score0.00991EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2018/03/27 1:19 a.m.•46 views

CVE-2018-1093

The Linux kernel is vulnerable to an out-of-bounds read in ext4/balloc.c:ext4validblockbitmap function. An attacker could trick a legitimate user or a privileged attacker could exploit this by mounting a crafted ext4 image to cause a crash...

7.1CVSS3.5AI score0.01968EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2018/03/13 6:19 a.m.•46 views

CVE-2018-1323

The IIS/ISAPI specific code in the Apache Tomcat JK ISAPI Connector 1.2.0 to 1.2.42 that normalised the requested path before matching it to the URI-worker map did not handle some edge cases correctly. If only a sub-set of the URLs supported by Tomcat were exposed via IIS, then it was possible fo...

7.5CVSS2.6AI score0.47036EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2018/03/07 8:52 a.m.•46 views

CVE-2018-6058

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-11215. Reason: This candidate is a reservation duplicate of CVE-2017-11215. Notes: All CVE users should reference CVE-2017-11215 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

10CVSS9.1AI score0.06076EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2018/02/06 8:19 p.m.•46 views

CVE-2018-4877

A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to a dangling pointer in the Primetime SDK related to media player's quality of service functionality. A successful attack can lead to arbitrary code execution...

10CVSS5.3AI score0.89532EPSS
SaveExploits19References2
RedhatCVE
RedhatCVE
•added 2017/11/29 12:50 p.m.•46 views

CVE-2017-17045

An issue was discovered in Xen through 4.9.x allowing HVM guest OS users to gain privileges on the host OS, obtain sensitive information, or cause a denial of service BUG and host OS crash by leveraging the mishandling of Populate on Demand PoD Physical-to-Machine P2M errors...

8.8CVSS4.8AI score0.00427EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2017/11/08 10:22 a.m.•46 views

CVE-2017-16528

The sound/core/seqdevice.c in the Linux kernel, before 4.13.4, allows local users to cause a denial of service sndrawmididevseqfree use-after-free and system crash or possibly have unspecified other impact via a crafted USB device...

7.2CVSS7.1AI score0.00365EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2017/10/03 9:49 a.m.•46 views

CVE-2017-14955

CheckMK before 1.2.8p26 mishandles certain errors within the failed-login save feature because of a race condition, which allows remote attackers to obtain sensitive user information by reading a GUI crash report...

6.5CVSS4.2AI score0.12134EPSS
SaveExploits5References2
RedhatCVE
RedhatCVE
•added 2017/09/06 8:23 a.m.•46 views

CVE-2017-5120

Inappropriate use of www mismatch redirects in browser navigation in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote attacker to potentially downgrade HTTPS requests to HTTP via a crafted HTML page. In other words, Chrome could...

6.5CVSS1.2AI score0.01127EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2017/07/18 8:19 p.m.•46 views

CVE-2017-10090

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Libraries. Supported versions that are affected are Java SE: 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protoco...

9.6CVSS1.8AI score0.02555EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2017/07/14 10:59 a.m.•46 views

CVE-2017-1000095

The jenkins-plugin-script-security improperly whitelisted "DefaultGroovyMethods.putAtObject, String, Object" and "DefaultGroovyMethods.getAtObject, String" which allows attackers to bypass many restrictions and potentially trigger builds or access data they should not have access to. Exploitation...

8.8CVSS6AI score0.00818EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2017/07/07 2:52 p.m.•46 views

CVE-2017-10922

The grant-table feature in Xen through 4.8.x mishandles MMIO region grant references, which allows guest OS users to cause a denial of service loss of grant trackability, aka XSA-224 bug 3. Mitigation Running only HVM guests will avoid this vulnerability...

10CVSS5.3AI score0.02549EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2017/06/16 12:51 p.m.•46 views

CVE-2017-7376

Buffer overflow in libxml2 allows remote attackers to execute arbitrary code by leveraging an incorrect limit for port values when handling redirects...

10CVSS7.3AI score0.23286EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2017/05/19 7:20 a.m.•46 views

CVE-2017-7504

HTTPServerILServlet.java in JMS over HTTP Invocation Layer of the JbossMQ implementation, which is enabled by default in Red Hat Jboss Application Server = Jboss 4.X does not restrict the classes for which it performs deserialization, which allows remote attackers to execute arbitrary code via...

9.8CVSS9.5AI score0.29323EPSS
SaveExploits5References1
RedhatCVE
RedhatCVE
•added 2016/11/18 3:48 p.m.•46 views

CVE-2016-9063

An integer overflow during the parsing of XML using the Expat library. This vulnerability affects Firefox 50...

9.8CVSS5AI score0.05472EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2016/07/25 1:48 p.m.•46 views

CVE-2016-6294

The localeacceptfromhttp function in ext/intl/locale/localemethods.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 does not properly restrict calls to the ICU ulocacceptLanguageFromHTTP function, which allows remote attackers to cause a denial of service out-of-bounds read or...

9.8CVSS7AI score0.05956EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2016/06/29 12:18 p.m.•46 views

CVE-2016-5768

A double free flaw was found in the mberegreplacecallback function of php which is used to perform regex search. This flaw could possibly cause a PHP application to crash...

9.8CVSS0.6AI score0.0963EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/06/11 2:59 p.m.•45 views

CVE-2026-41003

An attacker able to influence values in RelyingPartyRegistration may be able to run arbitrary code on HTML forms generated by Spring Security filters. Affected versions: Spring Security 5.7.0 through 5.7.23; 5.8.0 through 5.8.25; 6.3.0 through 6.3.16; 6.4.0 through 6.4.16; 6.5.0 through 6.5.10;...

7.6CVSS5.8AI score0.00204EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/02/15 7:10 a.m.•45 views

CVE-2026-2144

The Magic Login Mail or QR Code plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.05. This is due to the plugin storing the magic login QR code image with a predictable, static filename QRCode.png in the publicly accessible WordPress uploads...

8.1CVSS5.7AI score0.00466EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/11 4:4 a.m.•45 views

CVE-2025-3711

The LCD KVM over IP Switch CL5708IM has a Stack-based Buffer Overflow vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to execute arbitrary code on the device...

9.8CVSS8.4AI score0.0152EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2025/04/10 7:51 p.m.•45 views

CVE-2025-26644

Automated recognition mechanism with inadequate detection or handling of adversarial input perturbations in Windows Hello allows an unauthorized attacker to perform spoofing locally...

5.1CVSS6.6AI score0.00525EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/04/06 3:16 a.m.•45 views

CVE-2025-3205

A vulnerability, which was classified as critical, was found in CodeAstro Student Grading System 1.0. This affects an unknown part of the file studentsubject.php. The manipulation of the argument studentId leads to sql injection. It is possible to initiate the attack remotely. The exploit has bee...

8.8CVSS7.4AI score0.00429EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/04/02 1:28 a.m.•45 views

CVE-2024-54804

Netgear WNR854T 1.5.2 North America is vulnerable to Command Injection. An attacker can send a specially crafted request to post.cgi, updating the nvram parameter wanhostname and forcing a reboot. This will result in command injection...

9.8CVSS7.3AI score0.01619EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/03/14 7:0 p.m.•45 views

CVE-2025-2219

A vulnerability was found in LoveCards LoveCardsV2 up to 2.3.2 and classified as critical. This issue affects some unknown processing of the file /api/upload/image. The manipulation of the argument file leads to unrestricted upload. The attack may be initiated remotely. The exploit has been...

9.8CVSS6.7AI score0.00651EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/03/05 1:22 a.m.•45 views

CVE-2025-25948

Incorrect access control in the component /rest/staffResource/create of Serosoft Solutions Pvt Ltd Academia Student Information System SIS EagleR v1.0.118 allows create and modify user accounts, including an Administrator account...

9.1CVSS6.5AI score0.06862EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/02/05 10:32 a.m.•45 views

CVE-2024-12792

A vulnerability classified as critical was found in Codezips E-Commerce Site 1.0. Affected by this vulnerability is an unknown functionality of the file newadmin.php. The manipulation of the argument email leads to sql injection. The attack can be launched remotely. The exploit has been disclosed...

9.8CVSS7.3AI score0.00636EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/02/05 8:8 a.m.•45 views

CVE-2024-29019

ESPHome is a system to control microcontrollers remotely through Home Automation systems. API endpoints in dashboard component of ESPHome version 2023.12.9 command line installation are vulnerable to Cross-Site Request Forgery CSRF allowing remote attackers to carry out attacks against a logged...

8.1CVSS6.8AI score0.00676EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2024/09/04 7:12 p.m.•45 views

CVE-2024-8391

A flaw was found in the gRPC server in Eclipse Vert.x, which does not limit the maximum length of the message payload. This may lead to excessive memory consumption in a server or a client, causing a denial of service. Mitigation Mitigation for this issue is either not available or the currently...

7.5CVSS7.3AI score0.0058EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2024/08/19 12:45 p.m.•45 views

CVE-2024-43855

A denial of service vulnerability exists in the Linux kernel. A deadlock condition occurs when mddev is being suspended while some of the flush bio is in progress, leading to a loss of availability. Mitigation Mitigation for this issue is either not available or the currently available options...

4.4CVSS5.9AI score0.00209EPSS
SaveExploits0References4
Total number of security vulnerabilities5000