Lucene search
+L
UbuntucveMost viewed

76052 matches found

UbuntuCve
UbuntuCve
•added 2017/11/30 6:29 p.m.•67 views

CVE-2017-14868

Restlet Framework before 2.3.11, when using SimpleXMLProvider, allows remote attackers to access arbitrary files via an XXE attack in a REST API HTTP request. This affects use of the Jax-rs extension...

7.5CVSS7.2AI score0.02518EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2017/04/24 12:00 a.m.•67 views

CVE-2017-3511

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: JCE. Supported versions that are affected are Java SE: 7u131 and 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13. Difficult to exploit vulnerability allows unauthenticated attacker with logon to th...

7.7CVSS7.1AI score0.00759EPSS
SaveExploits2References4
UbuntuCve
UbuntuCve
•added 2017/03/07 5:00 p.m.•67 views

CVE-2017-2636

Race condition in drivers/tty/nhdlc.c in the Linux kernel through 4.10.1 allows local users to gain privileges or cause a denial of service double free by setting the HDLC line discipline...

7CVSS6.9AI score0.01021EPSS
SaveExploits2References10
UbuntuCve
UbuntuCve
•added 2017/02/23 12:00 a.m.•67 views

CVE-2017-6074

The dccprcvstateprocess function in net/dccp/input.c in the Linux kernel through 4.9.11 mishandles DCCPPKTREQUEST packet data structures in the LISTEN state, which allows local users to obtain root privileges or cause a denial of service double free via an application that makes an IPV6RECVPKTINF...

7.8CVSS6.9AI score0.0596EPSS
SaveExploits13References11
UbuntuCve
UbuntuCve
•added 2017/01/15 2:59 a.m.•67 views

CVE-2017-5487

wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php in the REST API implementation in WordPress 4.7 before 4.7.1 does not properly restrict listings of post authors, which allows remote attackers to obtain sensitive information via a wp-json/wp/v2/users request...

5.3CVSS6.9AI score0.87299EPSS
SaveExploits8References8
UbuntuCve
UbuntuCve
•added 2016/12/28 12:00 a.m.•67 views

CVE-2016-9793

The socksetsockopt function in net/core/sock.c in the Linux kernel before 4.8.14 mishandles negative values of sksndbuf and skrcvbuf, which allows local users to cause a denial of service memory corruption and system crash or possibly have unspecified other impact by leveraging the CAPNETADMIN...

7.8CVSS6.7AI score0.01566EPSS
SaveExploits8References11
UbuntuCve
UbuntuCve
•added 2015/06/09 12:00 a.m.•67 views

CVE-2015-1158

The addjob function in scheduler/ipp.c in cupsd in CUPS before 2.0.3 performs incorrect free operations for multiple-value job-originating-host-name attributes, which allows remote attackers to trigger data corruption for reference-counted strings via a crafted 1 IPPCREATEJOB or 2 IPPPRINTJOB...

10CVSS7.2AI score0.29913EPSS
SaveExploits8References3
UbuntuCve
UbuntuCve
•added 2014/11/29 12:00 a.m.•67 views

CVE-2014-8884

Stack-based buffer overflow in the ttusbdecfedvbsdiseqcsendmastercmd function in drivers/media/usb/ttusb-dec/ttusbdecfe.c in the Linux kernel before 3.17.4 allows local users to cause a denial of service system crash or possibly gain privileges via a large message length in an ioctl call...

6.1CVSS7AI score0.00638EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2014/10/16 12:55 a.m.•67 views

CVE-2014-3704

The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not properly construct prepared statements, which allows remote attackers to conduct SQL injection attacks via an array containing crafted keys...

7.5CVSS7AI score0.99974EPSS
SaveExploits23References4
UbuntuCve
UbuntuCve
•added 2013/11/13 3:55 p.m.•67 views

CVE-2013-6780

Cross-site scripting XSS vulnerability in uploader.swf in the Uploader component in Yahoo! YUI 2.5.0 through 2.9.0 allows remote attackers to inject arbitrary web script or HTML via the allowedDomain parameter...

4.3CVSS6AI score0.02417EPSS
SaveExploits2References2
UbuntuCve
UbuntuCve
•added 2012/10/26 12:00 a.m.•67 views

CVE-2012-4196

Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird before 16.0.2, Thunderbird ESR 10.x before 10.0.10, and SeaMonkey before 2.13.2 allow remote attackers to bypass the Same Origin Policy and read the Location object via a prototype property-injection attack that defeats...

6.4CVSS7.2AI score0.03287EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
•added 2012/05/11 10:15 a.m.•67 views

CVE-2012-2329

Buffer overflow in the apacherequestheaders function in sapi/cgi/cgimain.c in PHP 5.4.x before 5.4.3 allows remote attackers to cause a denial of service application crash via a long string in the header of an HTTP request...

5CVSS5.9AI score0.62649EPSS
SaveExploits6References5
UbuntuCve
UbuntuCve
•added 2009/08/14 3:16 p.m.•67 views

CVE-2009-2768

The loadflatsharedlibrary function in fs/binfmtflat.c in the flat subsystem in the Linux kernel before 2.6.31-rc6 allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact by executing a shared flat binary, which triggers a...

7.8CVSS7AI score0.00405EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
•added 2009/04/22 12:00 a.m.•67 views

CVE-2009-1309

Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey do not properly implement the Same Origin Policy for 1 XMLHttpRequest, involving a mismatch for a document's principal, and 2 XPCNativeWrapper.toString, involving an incorrect proto scope, which allows remote attackers to conduct cross-site...

4.3CVSS7.2AI score0.01351EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2008/12/23 12:00 a.m.•67 views

CVE-2008-5557

Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilterhtmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during Unicode conversion,...

10CVSS7.3AI score0.07371EPSS
SaveExploits2References3
UbuntuCve
UbuntuCve
•added 2005/04/12 4:00 a.m.•67 views

CVE-2004-0790

Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service reset TCP connections via spoofed ICMP error messages, aka the "blind connection-reset attack." NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks;...

5CVSS6AI score0.80101EPSS
SaveExploits13References1
UbuntuCve
UbuntuCve
•added 2024/11/11 8:15 p.m.•66 views

CVE-2024-51489

Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing does not adequately validate CSRF tokens when users send messages to one another. This vulnerability could be exploited to forge CSRF attacks, allowing an attacker to send messag...

5.4CVSS5.8AI score0.00279EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
•added 2024/03/10 12:00 a.m.•66 views

CVE-2024-28757

libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers created via XMLExternalEntityParserCreate...

7.5CVSS6.7AI score0.02006EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
•added 2024/02/22 12:00 a.m.•66 views

CVE-2024-26592

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix UAF issue in ksmbdtcpnewconnection The race is between the handling of a new TCP connection and its disconnection. It leads to UAF on struct tcptransport in ksmbdtcpnewconnection function...

9.8CVSS6.3AI score0.00973EPSS
SaveExploits0References19
UbuntuCve
UbuntuCve
•added 2024/01/17 4:15 p.m.•66 views

CVE-2024-0646

An out-of-bounds memory write flaw was found in the Linux kernel’s Transport Layer Security functionality in how a user calls a function splice with a ktls socket as the destination. This flaw allows a local user to crash or potentially escalate their privileges on the system...

7.8CVSS6.8AI score0.00308EPSS
SaveExploits0References16
UbuntuCve
UbuntuCve
•added 2023/12/21 8:15 p.m.•66 views

CVE-2023-6546

A race condition was found in the GSM 0710 tty multiplexor in the Linux kernel. This issue occurs when two threads execute the GSMIOCSETCONF ioctl on the same tty file descriptor with the gsm line discipline enabled, and can lead to a use-after-free problem on a struct gsmdlci while restarting th...

7CVSS6.7AI score0.00767EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2023/11/01 5:15 p.m.•66 views

CVE-2023-5178

A use-after-free vulnerability was found in drivers/nvme/target/tcp.c in nvmettcpfreecrypto due to a logical bug in the NVMe/TCP subsystem in the Linux kernel. This issue may allow a malicious user to cause a use-after-free and double-free problem, which may permit remote code execution or lead t...

8.8CVSS6.7AI score0.09141EPSS
SaveExploits2References22
UbuntuCve
UbuntuCve
•added 2023/10/05 9:15 p.m.•66 views

CVE-2023-39323

Line directives "//line" can be used to bypass the restrictions on "//go:cgo" directives, allowing blocked linker and compiler flags to be passed during compilation. This can result in unexpected execution of arbitrary code when running "go build". The line directive requires the absolute path of...

8.1CVSS7AI score0.01762EPSS
SaveExploits0References10
UbuntuCve
UbuntuCve
•added 2023/09/28 12:00 a.m.•66 views

CVE-2023-5171

During Ion compilation, a Garbage Collection could have resulted in a use-after-free condition, allowing an attacker to write two NUL bytes, and cause a potentially exploitable crash. This vulnerability affects Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3...

6.5CVSS6.7AI score0.0102EPSS
SaveExploits0References10
UbuntuCve
UbuntuCve
•added 2023/09/06 2:15 p.m.•66 views

CVE-2023-4206

A use-after-free vulnerability in the Linux kernel's net/sched: clsroute component can be exploited to achieve local privilege escalation. When route4change is called on an existing filter, the whole tcfresult struct is always copied into the new instance of the filter. This causes a problem when...

7.8CVSS6.7AI score0.00565EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2023/08/22 7:16 p.m.•66 views

CVE-2020-21699

The web server Tengine 2.2.2 developed in the Nginx version from 0.5.6 thru 1.13.2 is vulnerable to an integer overflow vulnerability in the nginx range filter module, resulting in the leakage of potentially sensitive information triggered by specially crafted requests...

7.5CVSS7.1AI score0.00803EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2023/05/17 6:00 a.m.•66 views

CVE-2023-28322

An information disclosure vulnerability exists in curl v8.1.0 when doing HTTPS transfers, libcurl might erroneously use the read callback CURLOPTREADFUNCTION to ask for data to send, even when the CURLOPTPOSTFIELDS option has been set, if the same handle previously wasused to issue a PUT request...

5.3CVSS6.6AI score0.02211EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
•added 2023/04/24 3:15 p.m.•66 views

CVE-2023-2251

Uncaught Exception in GitHub repository eemeli/yaml prior to 2.0.0-5...

7.5CVSS7.1AI score0.01093EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
•added 2023/04/05 6:15 p.m.•66 views

CVE-2023-28852

GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to versions 9.5.13 and 10.0.7, a user with dashboard administration rights may hack the dashboard form to store malicious code that will be executed when other users will use the related dashboard. Versio...

4.8CVSS5.9AI score0.00538EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2023/02/16 7:15 a.m.•66 views

CVE-2023-0568

In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, core path resolution function allocate buffer one byte too small. When resolving paths with lengths close to system MAXPATHLEN setting, this may lead to the byte after the allocated buffer being overwritten with NUL value,...

8.1CVSS6.9AI score0.01242EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
•added 2023/01/17 8:15 p.m.•66 views

CVE-2022-37436

Prior to Apache HTTP Server 2.4.55, a malicious backend can cause the response headers to be truncated early, resulting in some headers being incorporated into the response body. If the later headers have any security purpose, they will not be interpreted by the client...

5.3CVSS6.7AI score0.57941EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
•added 2023/01/10 12:00 a.m.•66 views

CVE-2023-22320

OpenAM Web Policy Agent OpenAM Consortium Edition provided by OpenAM Consortium parses URLs improperly, leading to a path traversal vulnerabilityCWE-22. Furthermore, a crafted URL may be evaluated incorrectly...

7.5CVSS7AI score0.00722EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2022/12/15 7:15 p.m.•66 views

CVE-2022-42863

A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may lead to arbitrary code execution...

8.8CVSS7.4AI score0.01119EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2022/12/13 7:15 p.m.•66 views

CVE-2022-41089

.NET Framework Remote Code Execution Vulnerability...

7.8CVSS7.2AI score0.0113EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2022/11/01 10:15 p.m.•66 views

CVE-2022-3814

A vulnerability classified as problematic was found in Axiomatic Bento4. This vulnerability affects unknown code of the component mp4decrypt. The manipulation leads to memory leak. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier o...

6.5CVSS5.8AI score0.00793EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
•added 2022/09/30 12:00 a.m.•66 views

CVE-2022-41845

An issue was discovered in Bento4 1.6.0-639. There ie excessive memory consumption in the function AP4Array::EnsureCapacity in Core/Ap4Array.h...

5.5CVSS6.1AI score0.00342EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
•added 2022/08/26 4:15 p.m.•66 views

CVE-2021-3669

A flaw was found in the Linux kernel. Measuring usage of the shared memory does not scale with large shared memory segment counts which could lead to resource exhaustion and DoS...

5.5CVSS6.7AI score0.00293EPSS
SaveExploits0References17
UbuntuCve
UbuntuCve
•added 2022/07/27 8:15 p.m.•66 views

CVE-2022-36946

nfqnlmangle in net/netfilter/nfnetlinkqueue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a denial of service panic because, in the case of an nfqueue verdict with a one-byte nftapayload attribute, an skbpull can encounter a negative skb-len...

7.5CVSS6.8AI score0.07156EPSS
SaveExploits1References23
UbuntuCve
UbuntuCve
•added 2022/06/15 9:15 p.m.•66 views

CVE-2022-21166

Incomplete cleanup in specific special register write operations for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

5.5CVSS6.8AI score0.05778EPSS
SaveExploits0References12
UbuntuCve
UbuntuCve
•added 2022/06/02 2:15 p.m.•66 views

CVE-2022-1786

A use-after-free flaw was found in the Linux kernel’s iouring subsystem in the way a user sets up a ring with IORINGSETUPIOPOLL with more than one task completing submissions on this ring. This flaw allows a local user to crash or escalate their privileges on the system...

7.8CVSS6.7AI score0.01014EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2022/04/03 9:15 p.m.•66 views

CVE-2022-28391

BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors...

8.8CVSS7.3AI score0.03492EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
•added 2022/04/03 9:15 p.m.•66 views

CVE-2022-28389

mcbausbstartxmit in drivers/net/can/usb/mcbausb.c in the Linux kernel through 5.17.1 has a double free...

5.5CVSS6.8AI score0.00324EPSS
SaveExploits0References8
UbuntuCve
UbuntuCve
•added 2022/02/09 11:15 p.m.•66 views

CVE-2021-0176

Improper input validation in firmware for some IntelR PROSet/Wireless Wi-Fi in multiple operating systems and some KillerTM Wi-Fi in Windows 10 and 11 may allow a privileged user to potentially enable denial of service via local access...

4.4CVSS5.9AI score0.00266EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2021/11/15 9:15 p.m.•66 views

CVE-2021-42377

An attacker-controlled pointer free in Busybox's hush applet leads to denial of service and possible code execution when processing a crafted shell command, due to the shell mishandling the &&& string. This may be used for remote code execution under rare conditions of filtered command input...

9.8CVSS7.5AI score0.03379EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2021/05/11 6:00 p.m.•66 views

CVE-2020-24587

The 802.11 standard that underpins Wi-Fi Protected Access WPA, WPA2, and WPA3 and Wired Equivalent Privacy WEP doesn't require that all fragments of a frame are encrypted under the same key. An adversary can abuse this to decrypt selected fragments when another device sends fragmented frames and...

2.6CVSS7AI score0.02592EPSS
SaveExploits2References9
UbuntuCve
UbuntuCve
•added 2021/03/18 10:00 p.m.•66 views

CVE-2020-27170

An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c performs undesirable out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory, aka CID-f232326f6966. This...

4.7CVSS7AI score0.00565EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2020/08/14 2:15 p.m.•66 views

CVE-2020-12648

A cross-site scripting XSS vulnerability in TinyMCE 5.2.1 and earlier allows remote attackers to inject arbitrary web script when configured in classic editing mode...

6.1CVSS6.4AI score0.01811EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2019/10/24 12:00 a.m.•66 views

CVE-2019-11043

In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space reserved for FCGI protocol data, thus opening the possibility of remote code execution...

9.8CVSS7.2AI score0.9947EPSS
SaveExploits56References5
UbuntuCve
UbuntuCve
•added 2019/07/05 12:00 a.m.•66 views

CVE-2019-10639

The Linux kernel 4.x starting from 4.1 and 5.x before 5.0.8 allows Information Exposure partial kernel address disclosure, leading to a KASLR bypass. Specifically, it is possible to extract the KASLR kernel image offset using the IP ID values the kernel produces for connection-less protocols e.g....

7.5CVSS6.8AI score0.03252EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2019/04/15 12:00 a.m.•66 views

CVE-2019-11236

In the urllib3 library through 1.24.1 for Python, CRLF injection is possible if the attacker controls the request parameter...

6.1CVSS6.8AI score0.02073EPSS
SaveExploits1References3
Total number of security vulnerabilities5000