Lucene search
+L
UbuntucveMost viewed

76052 matches found

UbuntuCve
UbuntuCve
added 2023/01/23 4:15 p.m.60 views

CVE-2022-38725

An integer overflow in the RFC3164 parser in One Identity syslog-ng 3.0 through 3.37 allows remote attackers to cause a Denial of Service via crafted syslog input that is mishandled by the tcp or network function. syslog-ng Premium Edition 7.0.30 and syslog-ng Store Box 6.10.0 are also affected...

7.5CVSS7.2AI score0.02403EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2023/01/20 7:15 p.m.60 views

CVE-2022-47015

MariaDB Server before 10.3.34 thru 10.9.3 is vulnerable to Denial of Service. It is possible for function spiderdbmbase::printwarnings to dereference a null pointer...

6.5CVSS6.8AI score0.01486EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2022/12/13 3:15 p.m.60 views

CVE-2022-45685

A stack overflow in Jettison before v1.5.2 allows attackers to cause a Denial of Service DoS via crafted JSON data...

7.5CVSS7.1AI score0.01395EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
added 2022/10/26 7:15 p.m.60 views

CVE-2022-3670

A vulnerability was found in Axiomatic Bento4. It has been classified as critical. Affected is the function WriteSample of the component mp42hevc. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and m...

7.8CVSS6.9AI score0.00705EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
added 2022/10/17 12:15 p.m.60 views

CVE-2022-3542

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

6.4AI score
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2022/10/02 5:15 a.m.60 views

CVE-2022-42003

In FasterXML jackson-databind before versions 2.13.4.1 and 2.12.17.1, resource exhaustion can occur because of a lack of a check in primitive value deserializers to avoid deep wrapper array nesting, when the UNWRAPSINGLEVALUEARRAYS feature is enabled...

7.5CVSS6.8AI score0.02766EPSS
SaveExploits2References5
UbuntuCve
UbuntuCve
added 2022/09/28 11:15 p.m.60 views

CVE-2022-31628

In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress "quines" gzip files, resulting in an infinite loop...

5.5CVSS6.8AI score0.00591EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
added 2022/09/13 2:15 p.m.60 views

CVE-2022-2990

An incorrect handling of the supplementary groups in the Buildah container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able t...

7.1CVSS7AI score0.00338EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
added 2022/08/31 4:15 p.m.60 views

CVE-2022-1319

A flaw was found in Undertow. For an AJP 400 response, EAP 7 is improperly sending two response packets, and those packets have the reuse flag set even though JBoss EAP closes the connection. A failure occurs when the connection is reused after a 400 by CPING since it reads in the second...

7.5CVSS6.8AI score0.01264EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2022/08/16 9:15 p.m.60 views

CVE-2022-35109

SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via drawstroke at /gfxpoly/stroke.c...

5.5CVSS6.1AI score0.00296EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
added 2022/08/01 1:15 p.m.60 views

CVE-2022-26308

Pandora FMS v7.0NG.760 and below allows an improper access control in Configuration Credential store where a user with the role of Operator Write could create, delete, view existing keys which are outside the intended role...

5.4CVSS6.1AI score0.00391EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2022/04/27 2:15 a.m.60 views

CVE-2021-41041

In Eclipse Openj9 before version 0.32.0, Java 8 & 11 fail to throw the exception captured during bytecode verification when verification is triggered by a MethodHandle invocation, allowing unverified methods to be invoked using MethodHandles...

5.3CVSS6.4AI score0.01014EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2022/04/25 3:15 p.m.60 views

CVE-2022-29078

The ejs aka Embedded JavaScript templates package 3.1.6 for Node.js allows server-side template injection in settingsview optionsoutputFunctionName. This is parsed as an internal option, and overwrites the outputFunctionName option with an arbitrary OS command which is executed upon template...

9.8CVSS6.9AI score0.32808EPSS
SaveExploits7References3
UbuntuCve
UbuntuCve
added 2022/04/21 5:15 p.m.60 views

CVE-2022-24867

GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. When you pass the config to the javascript, some entries are filtered out. The variable ldappass is not filtered and when you look at the source code of the...

7.8CVSS7.1AI score0.01288EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2022/04/14 9:15 p.m.60 views

CVE-2022-22968

In Spring Framework versions 5.3.0 - 5.3.18, 5.2.0 - 5.2.20, and older unsupported versions, the patterns for disallowedFields on a DataBinder are case sensitive which means a field is not effectively protected unless it is listed with both upper and lower case for the first character of the fiel...

5.3CVSS6.8AI score0.05666EPSS
SaveExploits2References2
UbuntuCve
UbuntuCve
added 2022/03/21 8:36 a.m.60 views

CVE-2022-23125

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the copyapplfile function. When parsing the len element, the process does not properly validate...

9.8CVSS7.8AI score0.04354EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2022/03/16 5:15 p.m.60 views

CVE-2022-24729

CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. CKEditor4 prior to version 4.18.0 contains a vulnerability in the dialog plugin. The vulnerability allows abuse of a dialog input validator regular expression, which can cause a significant performance drop resulting in a brows...

7.5CVSS6.8AI score0.02487EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2022/03/08 6:00 p.m.60 views

CVE-2022-0001

Non-transparent sharing of branch predictor selectors between contexts in some IntelR Processors may allow an authorized user to potentially enable information disclosure via local access...

6.5CVSS6.8AI score0.00508EPSS
SaveExploits0References10
UbuntuCve
UbuntuCve
added 2022/03/03 3:15 p.m.60 views

CVE-2022-22706

Arm Mali GPU Kernel Driver allows a non-privileged user to achieve write access to read-only memory pages. This affects Midgard r26p0 through r31p0, Bifrost r0p0 through r35p0, and Valhall r19p0 through r35p0...

7.8CVSS7.3AI score0.01095EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
added 2022/02/16 8:15 p.m.60 views

CVE-2022-25258

An issue was discovered in drivers/usb/gadget/composite.c in the Linux kernel before 5.16.10. The USB Gadget subsystem lacks certain validation of interface OS descriptor requests ones with a large array index and ones associated with NULL function pointer retrieval. Memory corruption might occur...

4.9CVSS6.8AI score0.00927EPSS
SaveExploits0References8
UbuntuCve
UbuntuCve
added 2022/02/15 4:15 p.m.60 views

CVE-2021-44960

In SVGPP SVG++ library 1.3.0, the XMLDocument::getRoot function in the renderDocument function handled the XMLDocument object improperly, returning a null pointer in advance at the second if, resulting in a null pointer reference behind the renderDocument function...

6.5CVSS6.9AI score0.01179EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
added 2022/02/09 11:15 p.m.60 views

CVE-2021-0175

Improper Validation of Specified Index, Position, or Offset in Input in firmware for some IntelR PROSet/Wireless Wi-Fi in multiple operating systems and some KillerTM Wi-Fi in Windows 10 and 11 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

6.5CVSS6.3AI score0.00515EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2022/01/31 12:00 a.m.60 views

CVE-2021-44142

The Samba vfsfruit module uses extended file attributes EA, xattr to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver." Samba versions prior to 4.13.17, 4.14.12 and 4.15.5 with vfsfruit configured allow out-of-bounds heap read and wri...

9CVSS7.1AI score0.73864EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
added 2022/01/10 2:12 p.m.60 views

CVE-2022-22817

PIL.ImageMath.eval in Pillow before 9.0.0 allows evaluation of arbitrary expressions, such as ones that use the Python exec method. A lambda expression could also be used...

9.8CVSS6.6AI score0.03427EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2022/01/10 2:12 p.m.60 views

CVE-2022-22824

defineAttribute in xmlparse.c in Expat aka libexpat before 2.4.3 has an integer overflow...

9.8CVSS7AI score0.03404EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2021/11/15 9:15 p.m.60 views

CVE-2021-42385

A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function...

7.2CVSS7.3AI score0.02579EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2021/11/03 1:15 a.m.60 views

CVE-2021-38496

During operations on MessageTasks, a task may have been removed while it was still scheduled, resulting in memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird 78.15, Thunderbird 91.2, Firefox ESR 91.2, Firefox ESR 78.15, and Firefox 93...

8.8CVSS7.2AI score0.01593EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2021/10/02 12:15 a.m.60 views

CVE-2021-41864

preallocelemsandfreelist in kernel/bpf/stackmap.c in the Linux kernel before 5.14.12 allows unprivileged users to trigger an eBPF multiplication integer overflow with a resultant out-of-bounds write...

7.8CVSS6.8AI score0.00409EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
added 2021/09/03 2:15 p.m.60 views

CVE-2021-39191

modauthopenidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. In versions prior to 2.4.9.4, the 3rd-party init SSO functionality of modauthopenidc was reported to ...

6.1CVSS6.7AI score0.0175EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
added 2021/08/26 12:00 a.m.60 views

CVE-2021-3634

A flaw has been found in libssh in versions prior to 0.9.6. The SSH protocol keeps track of two shared secrets during the lifetime of the session. One of them is called secrethash and the other sessionid. Initially, both of them are the same, but after key re-exchange, previous sessionid is kept...

6.5CVSS6.5AI score0.04683EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2021/07/27 12:00 a.m.60 views

CVE-2021-30663

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 14.5.1 and iPadOS 14.5.1, tvOS 14.6, iOS 12.5.3, Safari 14.1.1, macOS Big Sur 11.3.1. Processing maliciously crafted web content may lead to arbitrary code execution...

8.8CVSS7.3AI score0.03493EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2021/07/21 3:15 p.m.60 views

CVE-2021-2388

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Hotspot. Supported versions that are affected are Java SE: 8u291, 11.0.11, 16.0.1; Oracle GraalVM Enterprise Edition: 20.3.2 and 21.1.0. Difficult to exploit vulnerability allows unauthenticated...

7.5CVSS6.8AI score0.04008EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2021/07/16 6:15 p.m.60 views

CVE-2021-32749

fail2ban is a daemon to ban hosts that cause multiple authentication errors. In versions 0.9.7 and prior, 0.10.0 through 0.10.6, and 0.11.0 through 0.11.2, there is a vulnerability that leads to possible remote code execution in the mailing action mail-whois. Command mail from mailutils package...

8.1CVSS7.2AI score0.03621EPSS
SaveExploits1References7
UbuntuCve
UbuntuCve
added 2021/06/10 11:15 p.m.60 views

CVE-2020-23319

There is an Assertion in 'flags CBCSTACKADJUSTSHIFT = CBCSTACKADJUSTBASE || CBCSTACKADJUSTBASE - flags CBCSTACKADJUSTSHIFT stackdepth' in parseremitcbcbackwardbranch in JerryScript 2.2.0...

7.5CVSS7.1AI score0.01083EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
added 2021/05/20 1:15 p.m.60 views

CVE-2021-3426

There's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to convince another local or adjacent user to start a pydoc server could access the server and use it to disclose sensitive information belonging to the other user that they would not normally be able to...

5.7CVSS6.8AI score0.01878EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve
added 2021/04/06 7:15 p.m.60 views

CVE-2021-28688

The fix for XSA-365 includes initialization of pointers such that subsequent cleanup code wouldn't use uninitialized or stale values. This initialization went too far and may under certain conditions also overwrite pointers which are in need of cleaning up. The lack of cleanup would result in...

6.5CVSS6.8AI score0.00332EPSS
SaveExploits0References8
UbuntuCve
UbuntuCve
added 2021/03/15 12:00 a.m.60 views

CVE-2021-3428

A flaw was found in the Linux kernel. A denial of service problem is identified if an extent tree is corrupted in a crafted ext4 filesystem in fs/ext4/extents.c in ext4escacheextent. Fabricating an integer overflow, A local attacker with a special user privilege may cause a system crash problem...

5.5CVSS6.7AI score0.00301EPSS
SaveExploits0References10
UbuntuCve
UbuntuCve
added 2021/02/22 2:15 a.m.60 views

CVE-2021-26120

Smarty before 3.1.39 allows code injection via an unexpected function name after a function name= substring...

9.8CVSS6.6AI score0.82316EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
added 2021/02/05 2:15 p.m.60 views

CVE-2021-26708

A local privilege escalation was discovered in the Linux kernel before 5.10.13. Multiple race conditions in the AFVSOCK implementation are caused by wrong locking in net/vmwvsock/afvsock.c. The race conditions were implicitly introduced in the commits that added VSOCK multi-transport support...

7CVSS6.8AI score0.01589EPSS
SaveExploits2References7
UbuntuCve
UbuntuCve
added 2020/10/02 7:15 p.m.60 views

CVE-2020-26541

The Linux kernel through 5.8.13 does not properly enforce the Secure Boot Forbidden Signature Database aka dbx protection mechanism. This affects certs/blacklist.c and certs/systemkeyring.c...

6.9CVSS6.8AI score0.00528EPSS
SaveExploits1References10
UbuntuCve
UbuntuCve
added 2020/09/10 2:15 a.m.60 views

CVE-2020-25220

The Linux kernel 4.9.x before 4.9.233, 4.14.x before 4.14.194, and 4.19.x before 4.19.140 has a use-after-free because skcd-norefcnt was not considered during a backport of a CVE-2020-14356 patch. This is related to the cgroups feature...

7.8CVSS6.8AI score0.00449EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve
added 2020/07/13 1:15 p.m.60 views

CVE-2019-20907

In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open, because procpax lacks header validation...

7.5CVSS6.8AI score0.06253EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
added 2020/05/05 5:15 a.m.60 views

CVE-2020-12654

An issue was found in Linux kernel before 5.5.4. mwifiexretwmmgetstatus in drivers/net/wireless/marvell/mwifiex/wmm.c allows a remote AP to trigger a heap-based buffer overflow because of an incorrect memcpy, aka CID-3a9b153c5591...

7.1CVSS6.9AI score0.01218EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve
added 2020/04/06 1:15 a.m.60 views

CVE-2020-11565

An issue was discovered in the Linux kernel through 5.6.2. mpolparsestr in mm/mempolicy.c has a stack-based out-of-bounds write because an empty nodelist is mishandled during mount option parsing, aka CID-aa9f7d5172fa. NOTE: Someone in the security community disagrees that this is a vulnerability...

6CVSS6.8AI score0.00517EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
added 2020/02/06 1:15 a.m.60 views

CVE-2020-8648

There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the nttyreceivebufcommon function in drivers/tty/ntty.c...

7.1CVSS6.8AI score0.00661EPSS
SaveExploits1References7
UbuntuCve
UbuntuCve
added 2020/02/04 5:15 p.m.60 views

CVE-2020-7221

mysqlinstalldb in MariaDB 10.4.7 through 10.4.11 allows privilege escalation from the mysql user account to root because chown and chmod are performed unsafely, as demonstrated by a symlink attack on a chmod 04755 of authpamtooldir/authpamtool. NOTE: this does not affect the Oracle MySQL product,...

7.8CVSS7AI score0.0067EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
added 2020/01/09 9:15 p.m.60 views

CVE-2019-20372

NGINX before 1.17.7, with certain errorpage configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to read unauthorized web pages in environments where NGINX is being fronted by a load balancer...

5.3CVSS6.8AI score0.14961EPSS
SaveExploits3References7
UbuntuCve
UbuntuCve
added 2019/12/25 4:15 a.m.60 views

CVE-2019-19965

In the Linux kernel through 5.4.6, there is a NULL pointer dereference in drivers/scsi/libsas/sasdiscover.c because of mishandling of port disconnection during discovery, related to a PHY down race condition, aka CID-f70267f379b5...

4.7CVSS6.7AI score0.00654EPSS
SaveExploits1References9
UbuntuCve
UbuntuCve
added 2019/12/12 3:15 a.m.60 views

CVE-2017-18640

The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564...

7.5CVSS6.8AI score0.26723EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
added 2019/11/12 8:15 p.m.60 views

CVE-2010-3438

libpoe-component-irc-perl before v6.32 does not remove carriage returns and line feeds. This can be used to execute arbitrary IRC commands by passing an argument such as "some text\rQUIT" to the 'privmsg' handler, which would cause the client to disconnect from the server...

9.8CVSS7.5AI score0.01652EPSS
SaveExploits0References1
Total number of security vulnerabilities5000