Lucene search
+L
UbuntucveMost viewed

76052 matches found

UbuntuCve
UbuntuCve
•added 2019/04/10 3:29 p.m.•48 views

CVE-2019-0199

The HTTP/2 implementation in Apache Tomcat 9.0.0.M1 to 9.0.14 and 8.5.0 to 8.5.37 accepted streams with excessive numbers of SETTINGS frames and also permitted clients to keep streams open without reading/writing request/response data. By keeping streams open for requests that utilised the Servle...

7.5CVSS6.8AI score0.72855EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2019/04/01 2:29 p.m.•48 views

CVE-2019-1002101

The kubectl cp command allows copying files between containers and the user machine. To copy files from a container, Kubernetes creates a tar inside the container, copies it over the network, and kubectl unpacks it on the user’s machine. If the tar binary in the container is malicious, it could r...

6.4CVSS6.8AI score0.13164EPSS
SaveExploits2References2
UbuntuCve
UbuntuCve
•added 2019/03/25 6:29 p.m.•48 views

CVE-2018-16838

A flaw was found in sssd Group Policy Objects implementation. When the GPO is not readable by SSSD due to a too strict permission settings on the server side, SSSD will allow all authenticated users to login instead of denying access...

5.5CVSS6.4AI score0.01102EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2019/03/20 12:00 a.m.•48 views

CVE-2019-9791

The type inference system allows the compilation of functions that can cause type confusions between arbitrary objects when compiled through the IonMonkey just-in-time JIT compiler and when the constructor function is entered through on-stack replacement OSR. This allows for possible arbitrary...

9.8CVSS7.2AI score0.19762EPSS
SaveExploits6References7
UbuntuCve
UbuntuCve
•added 2019/02/21 12:00 a.m.•48 views

CVE-2018-20783

In PHP before 5.6.39, 7.x before 7.0.33, 7.1.x before 7.1.25, and 7.2.x before 7.2.13, a buffer over-read in PHAR reading functions may allow an attacker to read allocated or unallocated memory past the actual data when trying to parse a .phar file. This is related to pharparsepharfile in...

7.5CVSS7AI score0.0566EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
•added 2019/01/14 8:29 a.m.•48 views

CVE-2019-6256

A Denial of Service issue was discovered in the LIVE555 Streaming Media libraries as used in Live555 Media Server 0.93. It can cause an RTSPServer crash in handleHTTPCmdTunnelingPOST, when RTSP-over-HTTP tunneling is supported, via x-sessioncookie HTTP headers in a GET request and a POST request...

9.8CVSS7.2AI score0.02414EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
•added 2019/01/09 12:00 a.m.•48 views

CVE-2019-5747

An issue was discovered in BusyBox through 1.30.0. An out of bounds read in udhcp components consumed by the DHCP client, server, and/or relay might allow a remote attacker to leak sensitive information from the stack by sending a crafted DHCP message. This is related to assurance of a 4-byte...

7.5CVSS7.1AI score0.04651EPSS
SaveExploits2References2
UbuntuCve
UbuntuCve
•added 2018/12/31 12:00 a.m.•48 views

CVE-2018-25012

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE24...

9.1CVSS7.3AI score0.02051EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2018/12/12 12:00 a.m.•48 views

CVE-2018-20103

An issue was discovered in dns.c in HAProxy through 1.8.14. In the case of a compressed pointer, a crafted packet can trigger infinite recursion by making the pointer point to itself, or create a long chain of valid pointers resulting in stack exhaustion...

7.5CVSS6.7AI score0.06593EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2018/12/06 12:00 a.m.•48 views

CVE-2018-9568

In skclonelock of sock.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID:...

7.8CVSS7AI score0.00755EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2018/11/14 8:29 p.m.•48 views

CVE-2018-17960

CKEditor 4.x before 4.11.0 allows user-assisted XSS involving a source-mode paste...

6.1CVSS6.7AI score0.01954EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
•added 2018/10/31 10:29 p.m.•48 views

CVE-2018-14651

It was found that the fix for CVE-2018-10927, CVE-2018-10928, CVE-2018-10929, CVE-2018-10930, and CVE-2018-10926 was incomplete. A remote, authenticated attacker could use one of these flaws to execute arbitrary code, create arbitrary files, or cause denial of service on glusterfs server nodes vi...

8.8CVSS7AI score0.03225EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2018/10/16 12:00 a.m.•48 views

CVE-2018-3149

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: JNDI. Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181; JRockit: R28.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with...

8.3CVSS6.8AI score0.07156EPSS
SaveExploits2References4
UbuntuCve
UbuntuCve
•added 2018/07/20 12:29 a.m.•48 views

CVE-2017-18343

The debug handler in Symfony before v2.7.33, 2.8.x before v2.8.26, 3.x before v3.2.13, and 3.3.x before v3.3.6 has XSS via an array key during exception pretty printing in ExceptionHandler.php, as demonstrated by a /debugbar/open?op=get URI. NOTE: the vendor's position is that this is not a...

6.1CVSS6.3AI score0.06107EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
•added 2018/07/18 1:29 p.m.•48 views

CVE-2018-10871

389-ds-base before versions 1.3.8.5, 1.4.0.12 is vulnerable to a Cleartext Storage of Sensitive Information. By default, when the Replica and/or retroChangeLog plugins are enabled, 389-ds-base stores passwords in plaintext format in their respective changelog files. An attacker with sufficiently...

7.2CVSS6.7AI score0.01005EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2018/07/17 2:29 p.m.•48 views

CVE-2018-14345

An issue was discovered in SDDM through 0.17.0. If configured with ReuseSession=true, the password is not checked for users with an already existing session. Any user with access to the system D-Bus can therefore unlock any graphical session. This is related to daemon/Display.cpp and...

7.5CVSS6.8AI score0.01019EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2018/06/13 12:00 a.m.•48 views

CVE-2018-0495

Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding during the signing process in the gcryeccecdsasign function in cipher/ecc-ecdsa.c, aka the Return Of the Hidden Number Problem or ROHNP. T...

4.7CVSS6.5AI score0.00887EPSS
SaveExploits1References10
UbuntuCve
UbuntuCve
•added 2018/06/08 6:29 p.m.•48 views

CVE-2018-4204

An issue was discovered in certain Apple products. iOS before 11.4 is affected. iOS before 11.3.1 is affected. Safari before 11.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. The issue involves the "WebKit"...

8.8CVSS7.5AI score0.03181EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
•added 2018/05/18 4:29 p.m.•48 views

CVE-2017-18269

An SSE2-optimized memmove implementation for i386 in sysdeps/i386/i686/multiarch/memcpy-sse2-unaligned.S in the GNU C Library aka glibc or libc6 2.21 through 2.27 does not correctly perform the overlapping memory check if the source memory range spans the middle of the address space, resulting in...

9.8CVSS6.9AI score0.04701EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2018/05/10 12:00 a.m.•48 views

CVE-2018-1130

Linux kernel before version 4.16-rc7 is vulnerable to a null pointer dereference in dccpwritexmit function in net/dccp/output.c in that allows a local user to cause a denial of service by a number of certain crafted system calls...

5.5CVSS6.8AI score0.00495EPSS
SaveExploits0References12
UbuntuCve
UbuntuCve
•added 2018/04/24 7:29 p.m.•48 views

CVE-2017-12103

An exploitable integer overflow exists in the way that the Blender open-source 3d creation suite v2.78c converts text rendered as a font into a curve. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context ...

8.8CVSS7.7AI score0.01836EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
•added 2018/04/11 1:29 p.m.•48 views

CVE-2018-1275

Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.16 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user or attacker can craft a message to...

9.8CVSS7.5AI score0.57632EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2018/03/16 5:29 p.m.•48 views

CVE-2014-4613

Cross-site request forgery CSRF vulnerability in the administration panel in Piwigo before 2.6.2 allows remote attackers to hijack the authentication of administrators for requests that add users via a pwg.users.add action in a request to ws.php...

6.5CVSS6.7AI score0.03161EPSS
SaveExploits2References2
UbuntuCve
UbuntuCve
•added 2018/03/01 5:29 a.m.•48 views

CVE-2017-18207

The Waveread.readfmtchunk function in Lib/wave.py in Python through 3.6.4 does not ensure a nonzero channel value, which allows attackers to cause a denial of service divide-by-zero and exception via a crafted wav format audio file. NOTE: the vendor disputes this issue because Python applications...

6.5CVSS6.8AI score0.01323EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2018/03/01 12:00 a.m.•48 views

CVE-2018-5732

Failure to properly bounds-check a buffer used for processing DHCP options allows a malicious server or an entity masquerading as a server to cause a buffer overflow and resulting crash in dhclient by sending a response containing a specially constructed options section. Affects ISC DHCP versions...

7.5CVSS7.3AI score0.0496EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2018/02/12 10:29 p.m.•48 views

CVE-2017-17723

In Exiv2 0.26, there is a heap-based buffer over-read in the Exiv2::Image::byteSwap4 function in image.cpp. Remote attackers can exploit this vulnerability to disclose memory data or cause a denial of service via a crafted TIFF file...

8.1CVSS7.2AI score0.018EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
•added 2018/02/02 2:29 p.m.•48 views

CVE-2017-14178

In snapd 2.27 through 2.29.2 the 'snap logs' command could be made to call journalctl without match arguments and therefore allow unprivileged, unauthenticated users to bypass systemd-journald's access restrictions...

7.5CVSS7.1AI score0.01757EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2018/01/30 8:29 p.m.•48 views

CVE-2011-2902

zxpdf in xpdf before 3.02-19 as packaged in Debian unstable and 3.02-12+squeeze1 as packaged in Debian squeeze deletes temporary files insecurely, which allows remote attackers to delete arbitrary files via a crafted .pdf.gz file name...

6.4CVSS6.2AI score0.01395EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2018/01/17 12:00 a.m.•48 views

CVE-2018-2579

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Libraries. Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Difficult to exploit vulnerability allows unauthenticated...

4.3CVSS6.7AI score0.04078EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2018/01/03 12:00 a.m.•48 views

CVE-2017-18017

The tcpmssmanglepacket function in net/netfilter/xtTCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service use-after-free and memory corruption or possibly have unspecified other impact by leveraging the presence of xtTCPMSS in an...

10CVSS6.8AI score0.52841EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2017/12/16 2:29 a.m.•48 views

CVE-2017-10904

Qt for Android prior to 5.9.0 allows remote attackers to execute arbitrary OS commands via unspecified vectors...

9.8CVSS7.4AI score0.01958EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2017/12/06 12:00 a.m.•48 views

CVE-2017-17448

net/netfilter/nfnetlinkcthelper.c in the Linux kernel through 4.14.4 does not require the CAPNETADMIN capability for new, get, and del operations, which allows local users to bypass intended access restrictions because the nfnlcthelperlist data structure is shared across all net namespaces...

7.8CVSS6.8AI score0.00372EPSS
SaveExploits0References11
UbuntuCve
UbuntuCve
•added 2017/12/04 8:29 a.m.•48 views

CVE-2017-17121

The Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29.1, allows remote attackers to cause a denial of service memory access violation or possibly have unspecified other impact via a COFF binary in which a relocation refers to a location after the end of the...

7.8CVSS7AI score0.01702EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
•added 2017/11/30 12:00 a.m.•48 views

CVE-2017-1000405

The Linux Kernel versions 2.6.38 through 4.14 have a problematic use of pmdmkdirty in the touchpmd function inside the THP implementation. touchpmd can be reached by getuserpages. In such case, the pmd will become dirty. This scenario breaks the new canfollowwritepmd's logic - pmd can become dirt...

7CVSS6.5AI score0.02841EPSS
SaveExploits10References13
UbuntuCve
UbuntuCve
•added 2017/11/21 12:00 a.m.•48 views

CVE-2017-14746

Use-after-free vulnerability in Samba 4.x before 4.7.3 allows remote attackers to execute arbitrary code via a crafted SMB1 request...

9.8CVSS7.2AI score0.09876EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2017/11/10 2:29 a.m.•48 views

CVE-2017-12783

The ReadDataFloat function in ebmlnumber.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service assert fault via a crafted mkv file...

6.5CVSS6.7AI score0.02415EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
•added 2017/11/07 12:00 a.m.•48 views

CVE-2017-16645

The imspcugetcdcuniondesc function in drivers/input/misc/ims-pcu.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service imspcuparsecdcdata out-of-bounds read and system crash or possibly have unspecified other impact via a crafted USB device...

7.2CVSS6.8AI score0.00404EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2017/10/22 12:00 a.m.•48 views

CVE-2017-15804

The glob function in glob.c in the GNU C Library aka glibc or libc6 before 2.27 contains a buffer overflow during unescaping of user names with the operator...

9.8CVSS7.1AI score0.02801EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2017/10/19 12:00 a.m.•48 views

CVE-2017-10347

Vulnerability in the Java SE, JRockit component of Oracle Java SE subcomponent: Serialization. Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple...

5.3CVSS6.8AI score0.03114EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2017/10/19 12:00 a.m.•48 views

CVE-2017-10356

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Security. Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Easily exploitable vulnerability allows unauthenticated attacker wit...

6.2CVSS6.7AI score0.00754EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2017/10/19 12:00 a.m.•48 views

CVE-2017-10355

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Networking. Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Easily exploitable vulnerability allows unauthenticated attacker...

5.3CVSS6.7AI score0.16181EPSS
SaveExploits2References6
UbuntuCve
UbuntuCve
•added 2017/10/18 12:00 a.m.•48 views

CVE-2017-10155

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Pluggable Auth. Supported versions that are affected are 5.6.37 and earlier and 5.7.19 and earlier. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to...

7.5CVSS7AI score0.04291EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2017/10/14 11:29 p.m.•48 views

CVE-2017-12629

Remote code execution occurs in Apache Solr before 7.1 with Apache Lucene before 7.1 by exploiting XXE in conjunction with use of a Config API add-listener command to reach the RunExecutableListener class. Elasticsearch, although it uses Lucene, is NOT vulnerable to this. Note that the XML extern...

9.8CVSS7.6AI score0.91896EPSS
SaveExploits12References4
UbuntuCve
UbuntuCve
•added 2017/10/11 12:00 a.m.•48 views

CVE-2017-12192

The keyctlreadkey function in security/keys/keyctl.c in the Key Management subcomponent in the Linux kernel before 4.13.5 does not properly consider that a key may be possessed but negatively instantiated, which allows local users to cause a denial of service OOPS and system crash via a crafted...

5.5CVSS6.7AI score0.00449EPSS
SaveExploits0References8
UbuntuCve
UbuntuCve
•added 2017/09/26 6:29 p.m.•48 views

CVE-2017-14749

JerryScript 1.0 allows remote attackers to cause a denial of service jmemheapallocblockinternal heap memory corruption or possibly execute arbitrary code via a crafted .js file, because unrecognized \ characters cause incorrect 0x00 characters in bytecode.literal data...

7.8CVSS7.2AI score0.02068EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
•added 2017/09/23 8:29 p.m.•48 views

CVE-2017-14719

Before version 4.8.2, WordPress was vulnerable to a directory traversal attack during unzip operations in the ZipArchive and PclZip components...

7.5CVSS7.1AI score0.13885EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
•added 2017/09/19 1:29 p.m.•48 views

CVE-2017-12615

When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled e.g. via setting the readonly initialisation parameter of the Default to false it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it containe...

8.1CVSS7.3AI score0.99607EPSS
SaveExploits20References3
UbuntuCve
UbuntuCve
•added 2017/08/31 3:29 p.m.•48 views

CVE-2017-14055

In libavformat/mvdec.c in FFmpeg 3.3.3, a DoS in mvreadheader due to lack of an EOF End of File check might cause huge CPU and memory consumption. When a crafted MV file, which claims a large "nbframes" field in the header but does not contain sufficient backing data, is provided, the loop over t...

7.1CVSS6.9AI score0.01822EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2017/08/28 12:00 a.m.•48 views

CVE-2017-3735

While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. This bug has been present since 2006 and is present in all versions of OpenSSL before 1.0.2m and 1.1.0g...

5.3CVSS6.5AI score0.17699EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2017/08/23 5:29 p.m.•48 views

CVE-2017-13147

In GraphicsMagick 1.3.26, an allocation failure vulnerability was found in the function ReadMNGImage in coders/png.c when a small MNG file has a MEND chunk with a large length value...

8.8CVSS6.8AI score0.01537EPSS
SaveExploits0References4
Total number of security vulnerabilities5000