Lucene search
+L
UbuntucveMost viewed

76335 matches found

UbuntuCve
UbuntuCve
•added 2013/03/15 8:55 p.m.•53 views

CVE-2012-6543

The l2tpip6getname function in net/l2tp/l2tpip6.c in the Linux kernel before 3.6 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel stack memory via a crafted application...

1.9CVSS5.9AI score0.00361EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2013/02/01 12:00 a.m.•53 views

CVE-2013-0441

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.240 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors relat...

10CVSS7.2AI score0.08087EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2012/08/13 11:55 p.m.•53 views

CVE-2012-2330

The Update method in src/nodehttpparser.cc in Node.js before 0.6.17 and 0.7 before 0.7.8 does not properly check the length of a string, which allows remote attackers to obtain sensitive information request header contents and possibly spoof HTTP headers via a zero length string...

6.4CVSS5.9AI score0.02595EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
•added 2012/05/04 12:00 a.m.•53 views

CVE-2012-2311

sapi/cgi/cgimain.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script aka php-cgi, does not properly handle query strings that contain a %3D sequence but no = equals sign character, which allows remote attackers to execute arbitrary code by placing command-line options i...

7.5CVSS7.6AI score0.69559EPSS
SaveExploits5References5
UbuntuCve
UbuntuCve
•added 2012/03/21 12:00 a.m.•53 views

CVE-2012-1458

The Microsoft CHM file parser in ClamAV 0.96.4 and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via a crafted reset interval in the LZXC header of a CHM file. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the...

4.3CVSS5.9AI score0.73671EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2011/12/25 1:55 a.m.•53 views

CVE-2011-4862

Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications aka krb5-appl 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long encryption key, as...

10CVSS6.7AI score0.94983EPSS
SaveExploits21References1
UbuntuCve
UbuntuCve
•added 2011/11/18 12:00 a.m.•53 views

CVE-2011-4132

The cleanupjournaltail function in the Journaling Block Device JBD functionality in the Linux kernel 2.6 allows local users to cause a denial of service assertion error and kernel oops via an ext3 or ext4 image with an "invalid log first block value."...

2.1CVSS7.1AI score0.0049EPSS
SaveExploits2References18
UbuntuCve
UbuntuCve
•added 2011/11/16 12:00 a.m.•53 views

CVE-2011-3389

The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HT...

4.3CVSS6.8AI score0.73327EPSS
SaveExploits4References3
UbuntuCve
UbuntuCve
•added 2011/08/03 12:55 a.m.•53 views

CVE-2011-2787

Google Chrome before 13.0.782.107 does not properly address re-entrancy issues associated with the GPU lock, which allows remote attackers to cause a denial of service application crash via unspecified vectors...

4.3CVSS5.9AI score0.01141EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2011/06/24 12:00 a.m.•53 views

CVE-2011-2484

The adddellistener function in kernel/taskstats.c in the Linux kernel 2.6.39.1 and earlier does not prevent multiple registrations of exit handlers, which allows local users to cause a denial of service memory and CPU consumption, and bypass the OOM Killer, via a crafted application...

4.9CVSS7.1AI score0.00388EPSS
SaveExploits1References14
UbuntuCve
UbuntuCve
•added 2010/05/28 12:00 a.m.•53 views

CVE-2010-1938

Off-by-one error in the opiereadrec function in readrec.c in libopie in OPIE 2.4.1-test1 and earlier, as used on FreeBSD 6.4 through 8.1-PRERELEASE and other platforms, allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a long username, as...

9.3CVSS7.5AI score0.219EPSS
SaveExploits5References5
UbuntuCve
UbuntuCve
•added 2010/05/19 12:00 a.m.•53 views

CVE-2010-1447

The Safe aka Safe.pm module 2.26, and certain earlier versions, for Perl, as used in PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2, allows context-dependent attackers to bypass intended 1...

8.5CVSS6.1AI score0.02797EPSS
SaveExploits2References3
UbuntuCve
UbuntuCve
•added 2010/05/07 12:00 a.m.•53 views

CVE-2010-1866

The dechunk filter in PHP 5.3 through 5.3.2, when decoding an HTTP chunked encoding stream, allows context-dependent attackers to cause a denial of service crash and possibly trigger memory corruption via a negative chunk size, which bypasses a signed comparison, related to an integer overflow in...

9.8CVSS7.2AI score0.06723EPSS
SaveExploits2References4
UbuntuCve
UbuntuCve
•added 2010/04/12 12:00 a.m.•53 views

CVE-2010-0741

The virtionetbadfeatures function in hw/virtio-net.c in the virtio-net driver in the Linux kernel before 2.6.26, when used on a guest OS in conjunction with qemu-kvm 0.11.0 or KVM 83, allows remote attackers to cause a denial of service guest OS crash, and an associated qemu-kvm process exit by...

7.8CVSS6AI score0.03518EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2010/04/01 10:30 p.m.•53 views

CVE-2010-1234

Unspecified vulnerability in Google Chrome before 4.1.249.1036 allows remote attackers to truncate the URL shown in the HTTP Basic Authentication dialog via unknown vectors...

7.5CVSS5.9AI score0.0115EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
•added 2010/02/22 1:00 p.m.•53 views

CVE-2010-0188

Unspecified vulnerability in Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows attackers to cause a denial of service application crash or possibly execute arbitrary code via unknown vectors...

9.3CVSS7.5AI score0.88246EPSS
SaveExploits15References2
UbuntuCve
UbuntuCve
•added 2010/02/18 6:00 p.m.•53 views

CVE-2010-0663

The ParamTraits::Read function in common/commonparamtraits.cc in Google Chrome before 4.0.249.78 does not initialize the memory locations that will hold bitmap data, which might allow remote attackers to obtain potentially sensitive information from process memory by providing insufficient data,...

5CVSS5.9AI score0.01006EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2009/11/30 5:30 p.m.•53 views

CVE-2009-4028

The vioverifycallback function in viosslfactories.c in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41, when OpenSSL is used, accepts a value of zero for the depth of X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary SSL-based MySQL servers via a crafted certificat...

6.8CVSS7AI score0.01766EPSS
SaveExploits2References1
UbuntuCve
UbuntuCve
•added 2009/11/05 4:30 p.m.•53 views

CVE-2009-3866

The Java Web Start Installer in Sun Java SE in JDK and JRE 6 before Update 17 does not properly use security model permissions when removing installer extensions, which allows remote attackers to execute arbitrary code by modifying a certain JNLP file to have a URL field that points to an...

9.3CVSS6.2AI score0.06182EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
•added 2009/09/08 12:00 a.m.•53 views

CVE-2009-2703

libpurple/protocols/irc/msgs.c in the IRC protocol plugin in libpurple in Pidgin before 2.6.2 allows remote IRC servers to cause a denial of service NULL pointer dereference and application crash via a TOPIC message that lacks a topic string...

5CVSS5.9AI score0.0192EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
•added 2009/08/11 12:00 a.m.•53 views

CVE-2009-2414

Stack consumption vulnerability in libxml2 2.5.10, 2.6.16, 2.6.26, 2.6.27, and 2.6.32, and libxml 1.8.17, allows context-dependent attackers to cause a denial of service application crash via a large depth of element declarations in a DTD, related to a function recursion, as demonstrated by the...

4.3CVSS6.7AI score0.03147EPSS
SaveExploits2References2
UbuntuCve
UbuntuCve
•added 2009/03/26 2:30 p.m.•53 views

CVE-2009-1151

Static code injection vulnerability in setup.php in phpMyAdmin 2.11.x before 2.11.9.5 and 3.x before 3.1.3.1 allows remote attackers to inject arbitrary PHP code into a configuration file via the save action...

9.8CVSS7.3AI score0.96565EPSS
SaveExploits17References2
UbuntuCve
UbuntuCve
•added 2008/12/10 12:30 a.m.•53 views

CVE-2008-5305

Eval injection vulnerability in TWiki before 4.2.4 allows remote attackers to execute arbitrary Perl code via the %SEARCH% variable...

10CVSS6.2AI score0.0464EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
•added 2008/10/31 12:00 a.m.•53 views

CVE-2008-4811

The expandquotedtext function in libs/SmartyCompiler.class.php in Smarty 2.6.20 r2797 and earlier allows remote attackers to execute arbitrary PHP code via vectors related to templates and a \ backslash before a dollar-sign character...

7.5CVSS6AI score0.01644EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2008/10/20 5:59 p.m.•53 views

CVE-2008-4609

The TCP implementation in 1 Linux, 2 platforms based on BSD Unix, 3 Microsoft Windows, 4 Cisco products, and probably other operating systems allows remote attackers to cause a denial of service connection queue exhaustion via multiple vectors that manipulate information in the TCP state table, a...

7.1CVSS7.2AI score0.32123EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
•added 2008/07/09 11:41 p.m.•53 views

CVE-2008-3107

Unspecified vulnerability in the Virtual Machine in Sun Java Runtime Environment JRE in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.218 allows context-dependent attackers to gain privileges via an untrusted 1 application or 2 applet, as...

10CVSS5.9AI score0.03644EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2008/07/09 12:41 a.m.•53 views

CVE-2008-2812

The Linux kernel before 2.6.25.10 does not properly perform tty operations, which allows local users to cause a denial of service system crash or possibly gain privileges via vectors involving NULL pointer dereference of function pointers in 1 hamradio/6pack.c, 2 hamradio/mkiss.c, 3...

7.8CVSS7.1AI score0.00426EPSS
SaveExploits2References2
UbuntuCve
UbuntuCve
•added 2007/08/30 10:17 p.m.•53 views

CVE-2007-4601

A regression error in tcp-wrappers 7.6.dbs-10 and 7.6.dbs-11 might allow remote attackers to bypass intended access restrictions when a service uses libwrap but does not specify server connection information...

5CVSS5.9AI score0.02233EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2006/11/21 11:07 p.m.•53 views

CVE-2006-6017

WordPress before 2.0.5 does not properly store a profile containing a string representation of a serialized object, which allows remote authenticated users to cause a denial of service application crash via a string that represents a 1 malformed or 2 large serialized object, because the object...

6.5CVSS5.9AI score0.02281EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2006/09/06 12:04 a.m.•53 views

CVE-2006-4095

BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of service crash via certain SIG queries, which cause an assertion failure when multiple RRsets are returned...

7.5CVSS6.8AI score0.11756EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
•added 2024/06/24 9:15 p.m.•52 views

CVE-2023-45196

Adminer and AdminerEvo allow an unauthenticated remote attacker to cause a denial of service by connecting to an attacker-controlled service that responds with HTTP redirects. The denial of service is subject to PHP configuration limits. Adminer is no longer supported, but this issue was fixed in...

7.5CVSS5.9AI score0.00582EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2024/05/15 6:15 p.m.•52 views

CVE-2024-25743

In the Linux kernel through 6.9, an untrusted hypervisor can inject virtual interrupts 0 and 14 at any point in time and can trigger the SIGFPE signal handler in userspace applications. This affects AMD SEV-SNP and AMD SEV-ES...

7.1CVSS6.7AI score0.00247EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2024/05/07 5:15 p.m.•52 views

CVE-2024-27982

The team has identified a critical vulnerability in the http server of the most recent version of Node, where malformed headers can lead to HTTP request smuggling. Specifically, if a space is placed before a content-length header, it is not interpreted correctly, enabling attackers to smuggle in ...

6.5CVSS6.9AI score0.01155EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2024/05/03 6:15 a.m.•52 views

CVE-2024-4439

WordPress Core is vulnerable to Stored Cross-Site Scripting via user display names in the Avatar block in various versions up to 6.5.2 due to insufficient output escaping on the display name. This makes it possible for authenticated attackers, with contributor-level access and above, to inject...

7.2CVSS7.2AI score0.70822EPSS
SaveExploits4References7
UbuntuCve
UbuntuCve
•added 2024/04/28 1:15 p.m.•52 views

CVE-2022-48659

In the Linux kernel, the following vulnerability has been resolved: mm/slub: fix to return errno if kmalloc fails In createuniqueid, kmalloc, GFPKERNEL can fail due to out-of-memory, if it fails, return errno correctly rather than triggering panic via BUGON; kernel BUG at mm/slub.c:5893! Internal...

5.5CVSS6.1AI score0.00241EPSS
SaveExploits0References11
UbuntuCve
UbuntuCve
•added 2024/04/17 11:15 a.m.•52 views

CVE-2024-26872

In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: Do not register event handler until srpt device is fully setup Upon rare occasions, KASAN reports a use-after-free Write in srptrefreshport. This seems to be because an event handler is registered before the srpt devic...

7.8CVSS5.8AI score0.00238EPSS
SaveExploits0References24
UbuntuCve
UbuntuCve
•added 2024/04/11 9:15 p.m.•52 views

CVE-2024-28458

Null Pointer Dereference vulnerability in swfdump in swftools 0.9.2 allows attackers to crash the appliation via the function compileSWFActionCode in action/actioncompiler.c...

7.5CVSS5.9AI score0.00707EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
•added 2024/03/26 12:00 a.m.•52 views

CVE-2024-42950

Notes Author| Note ---|--- jdstrand | webkit receives limited support. For details, see https://wiki.ubuntu.com/SecurityTeam/FAQwebkit webkit in Ubuntu uses the JavaScriptCore JSC engine, not V8 mdeslaur | It is no longer possible to build new webkit2gtk versions on focal and earlier. Marking as...

7.2AI score0.00553EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
•added 2024/03/06 7:15 a.m.•52 views

CVE-2023-52603

In the Linux kernel, the following vulnerability has been resolved: UBSAN: array-index-out-of-bounds in dtSplitRoot Syzkaller reported the following issue: oop0: detected capacity change from 0 to 32768 UBSAN: array-index-out-of-bounds in fs/jfs/jfsdtree.c:1971:9 index -2 is out of range for type...

7.8CVSS5.9AI score0.00289EPSS
SaveExploits0References19
UbuntuCve
UbuntuCve
•added 2024/02/20 1:15 p.m.•52 views

CVE-2023-52433

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftsetrbtree: skip sync GC for new elements in this transaction New elements in this transaction might expired before such transaction ends. Skip sync GC for such elements otherwise commit path might walk over an alrea...

7.8CVSS5.9AI score0.0025EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2024/02/12 3:15 a.m.•52 views

CVE-2023-52429

dmtablecreate in drivers/md/dm-table.c in the Linux kernel through 6.7.4 can attempt to in alloctargets allocate more than INTMAX bytes, and crash, because of a missing check for struct dmioctl.targetcount...

5.5CVSS6.1AI score0.00249EPSS
SaveExploits0References13
UbuntuCve
UbuntuCve
•added 2024/01/30 4:15 p.m.•52 views

CVE-2024-1019

ModSecurity / libModSecurity 3.0.0 to 3.0.11 is affected by a WAF bypass for path-based payloads submitted via specially crafted request URLs. ModSecurity v3 decodes percent-encoded characters present in request URLs before it separates the URL path component from the optional query string...

8.6CVSS7.2AI score0.00688EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2024/01/29 11:15 a.m.•52 views

CVE-2023-46838

Transmit requests in Xen's virtual network protocol can consist of multiple parts. While not really useful, except for the initial part any of them may be of zero length, i.e. carry no data at all. Besides a certain initial portion of the to be transferred data, these parts are directly translate...

7.5CVSS6.7AI score0.01177EPSS
SaveExploits0References16
UbuntuCve
UbuntuCve
•added 2024/01/23 12:00 a.m.•52 views

CVE-2024-23850

In btrfsgetrootref in fs/btrfs/disk-io.c in the Linux kernel through 6.7.1, there can be an assertion failure and crash because a subvolume can be read out too soon after its root item is inserted upon subvolume creation...

5.5CVSS6.2AI score0.00308EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve
•added 2024/01/16 4:15 p.m.•52 views

CVE-2023-45232

EDK2's Network Package is susceptible to an infinite loop vulnerability when parsing unknown options in the Destination Options header of IPv6. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Availability...

7.5CVSS7AI score0.02101EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
•added 2023/12/19 12:15 a.m.•52 views

CVE-2023-6918

A flaw was found in the libssh implements abstract layer for message digest MD operations implemented by different supported crypto backends. The return values from these were not properly checked, which could cause low-memory situations failures, NULL dereferences, crashes, or usage of the...

5.3CVSS6.7AI score0.01409EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
•added 2023/12/09 11:15 p.m.•52 views

CVE-2023-50431

secattestinfo in drivers/accel/habanalabs/common/habanalabsioctl.c in the Linux kernel through 6.6.5 allows an information leak to user space because info-pad0 is not initialized...

5.5CVSS6.4AI score0.003EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
•added 2023/11/29 8:15 p.m.•52 views

CVE-2023-48949

An issue in the boxadd function in openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS after running a SELECT statement...

7.5CVSS7.1AI score0.0083EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
•added 2023/10/25 12:00 a.m.•52 views

CVE-2023-5717

A heap out-of-bounds write vulnerability in the Linux kernel's Linux Kernel Performance Events perf component can be exploited to achieve local privilege escalation. If perfreadgroup is called while an event's siblinglist is smaller than its child's siblinglist, it can increment or write to memor...

7.8CVSS6.5AI score0.00849EPSS
SaveExploits0References25
UbuntuCve
UbuntuCve
•added 2023/10/23 12:00 a.m.•52 views

CVE-2023-5388

NSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack could potentially allow an attacker to recover the private data. This vulnerability affects Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9...

6.5CVSS6.8AI score0.00822EPSS
SaveExploits0References7
Total number of security vulnerabilities5000