[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fpW2SZhQmaLewMHWc2lwH1OPgVZTySFU5vEKohRsN8wk":3,"g5a-family:debian\u002Fdebian_linux":652,"g5a-ex:debian\u002Fdebian_linux@*":653},{"success":4,"data":5},true,{"product":6,"versions":124,"topVulnerabilitiesByEpss":166,"kevVulnerabilities":226,"seoMetadata":631,"meta":650},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":123},"debian","debian_linux",41,9218,106,"2025-07-15",[14,19,21,23,26,28,31,35,37,41,44,48,51,53,55,58,60,62,65,67,70,73,75,77,79,82,84,86,89,91,94,97,99,102,104,106,108,111,113,117,121],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"0.9.1",3,0,false,{"version":20,"cve_count":16,"kev_count":17,"has_kev":18},"0.9.2",{"version":22,"cve_count":16,"kev_count":17,"has_kev":18},"0.9.3",{"version":24,"cve_count":25,"kev_count":17,"has_kev":18},"0.93",2,{"version":27,"cve_count":16,"kev_count":17,"has_kev":18},"0.9.4",{"version":29,"cve_count":30,"kev_count":17,"has_kev":18},"10",1,{"version":32,"cve_count":33,"kev_count":34,"has_kev":4},"10.0",3292,47,{"version":36,"cve_count":16,"kev_count":17,"has_kev":18},"1.1",{"version":38,"cve_count":39,"kev_count":40,"has_kev":4},"11.0",1338,37,{"version":42,"cve_count":43,"kev_count":17,"has_kev":18},"1.2",4,{"version":45,"cve_count":46,"kev_count":47,"has_kev":4},"12.0",284,14,{"version":49,"cve_count":50,"kev_count":17,"has_kev":18},"1.3",5,{"version":52,"cve_count":25,"kev_count":30,"has_kev":4},"13.0",{"version":54,"cve_count":50,"kev_count":17,"has_kev":18},"1.3.1",{"version":56,"cve_count":57,"kev_count":17,"has_kev":18},"2.0",16,{"version":59,"cve_count":25,"kev_count":17,"has_kev":18},"2.0.34",{"version":61,"cve_count":30,"kev_count":17,"has_kev":18},"2.0.5",{"version":63,"cve_count":64,"kev_count":17,"has_kev":18},"2.1",27,{"version":66,"cve_count":17,"kev_count":17,"has_kev":18},"2.1.8.8.p3-1.1",{"version":68,"cve_count":69,"kev_count":17,"has_kev":18},"2.2",59,{"version":71,"cve_count":72,"kev_count":17,"has_kev":18},"2.3",10,{"version":74,"cve_count":17,"kev_count":17,"has_kev":18},"2.5.2-1",{"version":76,"cve_count":17,"kev_count":17,"has_kev":18},"2.5.3-16",{"version":78,"cve_count":17,"kev_count":17,"has_kev":18},"2.5.3-3",{"version":80,"cve_count":81,"kev_count":17,"has_kev":18},"3.0",98,{"version":83,"cve_count":30,"kev_count":17,"has_kev":18},"3.0.18",{"version":85,"cve_count":30,"kev_count":17,"has_kev":18},"3.0.23",{"version":87,"cve_count":88,"kev_count":17,"has_kev":18},"3.1",115,{"version":90,"cve_count":30,"kev_count":17,"has_kev":18},"3.2.4",{"version":92,"cve_count":93,"kev_count":30,"has_kev":4},"4.0",198,{"version":95,"cve_count":96,"kev_count":16,"has_kev":4},"5.0",184,{"version":98,"cve_count":17,"kev_count":17,"has_kev":18},"5.0.9",{"version":100,"cve_count":101,"kev_count":43,"has_kev":4},"6.0",254,{"version":103,"cve_count":17,"kev_count":17,"has_kev":18},"6.0.14",{"version":105,"cve_count":30,"kev_count":17,"has_kev":18},"6.06",{"version":107,"cve_count":30,"kev_count":17,"has_kev":18},"6.2",{"version":109,"cve_count":110,"kev_count":47,"has_kev":4},"7.0",1254,{"version":112,"cve_count":47,"kev_count":17,"has_kev":18},"7.1",{"version":114,"cve_count":115,"kev_count":116,"has_kev":4},"8.0",3489,21,{"version":118,"cve_count":119,"kev_count":120,"has_kev":4},"9.0",4003,39,{"version":122,"cve_count":30,"kev_count":17,"has_kev":18},"9.2","Debian Linux by Debian is a technology product with 41 tracked versions and 9218 known security vulnerabilities including 106 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":16,"kev_count":17,"has_kev":18},{"version":22,"cve_count":16,"kev_count":17,"has_kev":18},{"version":24,"cve_count":25,"kev_count":17,"has_kev":18},{"version":27,"cve_count":16,"kev_count":17,"has_kev":18},{"version":29,"cve_count":30,"kev_count":17,"has_kev":18},{"version":32,"cve_count":33,"kev_count":34,"has_kev":4},{"version":36,"cve_count":16,"kev_count":17,"has_kev":18},{"version":38,"cve_count":39,"kev_count":40,"has_kev":4},{"version":42,"cve_count":43,"kev_count":17,"has_kev":18},{"version":45,"cve_count":46,"kev_count":47,"has_kev":4},{"version":49,"cve_count":50,"kev_count":17,"has_kev":18},{"version":52,"cve_count":25,"kev_count":30,"has_kev":4},{"version":54,"cve_count":50,"kev_count":17,"has_kev":18},{"version":56,"cve_count":57,"kev_count":17,"has_kev":18},{"version":59,"cve_count":25,"kev_count":17,"has_kev":18},{"version":61,"cve_count":30,"kev_count":17,"has_kev":18},{"version":63,"cve_count":64,"kev_count":17,"has_kev":18},{"version":66,"cve_count":17,"kev_count":17,"has_kev":18},{"version":68,"cve_count":69,"kev_count":17,"has_kev":18},{"version":71,"cve_count":72,"kev_count":17,"has_kev":18},{"version":74,"cve_count":17,"kev_count":17,"has_kev":18},{"version":76,"cve_count":17,"kev_count":17,"has_kev":18},{"version":78,"cve_count":17,"kev_count":17,"has_kev":18},{"version":80,"cve_count":81,"kev_count":17,"has_kev":18},{"version":83,"cve_count":30,"kev_count":17,"has_kev":18},{"version":85,"cve_count":30,"kev_count":17,"has_kev":18},{"version":87,"cve_count":88,"kev_count":17,"has_kev":18},{"version":90,"cve_count":30,"kev_count":17,"has_kev":18},{"version":92,"cve_count":93,"kev_count":30,"has_kev":4},{"version":95,"cve_count":96,"kev_count":16,"has_kev":4},{"version":98,"cve_count":17,"kev_count":17,"has_kev":18},{"version":100,"cve_count":101,"kev_count":43,"has_kev":4},{"version":103,"cve_count":17,"kev_count":17,"has_kev":18},{"version":105,"cve_count":30,"kev_count":17,"has_kev":18},{"version":107,"cve_count":30,"kev_count":17,"has_kev":18},{"version":109,"cve_count":110,"kev_count":47,"has_kev":4},{"version":112,"cve_count":47,"kev_count":17,"has_kev":18},{"version":114,"cve_count":115,"kev_count":116,"has_kev":4},{"version":118,"cve_count":119,"kev_count":120,"has_kev":4},{"version":122,"cve_count":30,"kev_count":17,"has_kev":18},[167,175,183,188,194,199,204,209,216,221],{"cveId":168,"description":169,"publishedDate":170,"cvssScore":171,"cvssVersion":172,"severity":173,"isKev":4,"epssScore":174},"CVE-2012-1823","sapi\u002Fcgi\u002Fcgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'd' case.","2012-05-11",9.8,"v3.1","Critical",0.99998,{"cveId":176,"description":177,"publishedDate":178,"cvssScore":179,"cvssVersion":180,"severity":181,"isKev":18,"epssScore":182},"CVE-2013-0156","active_support\u002Fcore_ext\u002Fhash\u002Fconversions.rb in Ruby on Rails before 2.3.15, 3.0.x before 3.0.19, 3.1.x before 3.1.10, and 3.2.x before 3.2.11 does not properly restrict casts of string values, which allows remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service (memory and CPU consumption) involving nested XML entity references, by leveraging Action Pack support for (1) YAML type conversion or (2) Symbol type conversion.","2013-01-13",7.5,"v2","High",0.99449,{"cveId":184,"description":185,"publishedDate":186,"cvssScore":171,"cvssVersion":172,"severity":173,"isKev":4,"epssScore":187},"CVE-2012-0507","Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Concurrency.  NOTE: the previous information was obtained from the February 2012 Oracle CPU. Oracle has not commented on claims from a downstream vendor and third party researchers that this issue occurs because the AtomicReferenceArray class implementation does not ensure that the array is of the Object[] type, which allows attackers to cause a denial of service (JVM crash) or bypass Java sandbox restrictions.  NOTE: this issue was originally mapped to CVE-2011-3571, but that identifier was already assigned to a different issue.","2012-06-07",0.98189,{"cveId":189,"description":190,"publishedDate":191,"cvssScore":192,"cvssVersion":180,"severity":181,"isKev":18,"epssScore":193},"CVE-2006-3747","Off-by-one error in the ldap scheme handling in the Rewrite module (mod_rewrite) in Apache 1.3 from 1.3.28, 2.0.46 and other versions before 2.0.59, and 2.2, when RewriteEngine is enabled, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted URLs that are not properly handled using certain rewrite rules.","2006-07-28",7.6,0.96578,{"cveId":195,"description":196,"publishedDate":197,"cvssScore":171,"cvssVersion":172,"severity":173,"isKev":4,"epssScore":198},"CVE-2009-1151","Static code injection vulnerability in setup.php in phpMyAdmin 2.11.x before 2.11.9.5 and 3.x before 3.1.3.1 allows remote attackers to inject arbitrary PHP code into a configuration file via the save action.","2009-03-26",0.96565,{"cveId":200,"description":201,"publishedDate":202,"cvssScore":171,"cvssVersion":172,"severity":173,"isKev":18,"epssScore":203},"CVE-2011-2523","vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200\u002Ftcp.","2019-11-27",0.96184,{"cveId":205,"description":206,"publishedDate":207,"cvssScore":179,"cvssVersion":180,"severity":181,"isKev":18,"epssScore":208},"CVE-2002-0392","Apache 1.3 through 1.3.24, and Apache 2.0 through 2.0.36, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a chunk-encoded HTTP request that causes Apache to use an incorrect size.","2002-07-03",0.95232,{"cveId":210,"description":211,"publishedDate":212,"cvssScore":213,"cvssVersion":172,"severity":214,"isKev":18,"epssScore":215},"CVE-2008-1447","The DNS protocol, as implemented in (1) BIND 8 and 9 before 9.5.0-P1, 9.4.2-P1, and 9.3.5-P1; (2) Microsoft DNS in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2; and other implementations allow remote attackers to spoof DNS traffic via a birthday attack that uses in-bailiwick referrals to conduct cache poisoning against recursive resolvers, related to insufficient randomness of DNS transaction IDs and source ports, aka \"DNS Insufficient Socket Entropy Vulnerability\" or \"the Kaminsky bug.\"","2008-07-08",6.8,"Medium",0.95182,{"cveId":217,"description":218,"publishedDate":191,"cvssScore":219,"cvssVersion":180,"severity":214,"isKev":18,"epssScore":220},"CVE-2006-3918","http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache HTTP Server 1.3 before 1.3.35, 2.0 before 2.0.58, and 2.2 before 2.2.2, does not sanitize the Expect header from an HTTP request when it is reflected back in an error message, which might allow cross-site scripting (XSS) style attacks using web client components that can send arbitrary headers in requests, as demonstrated using a Flash SWF file.",4.3,0.95145,{"cveId":222,"description":223,"publishedDate":224,"cvssScore":72,"cvssVersion":180,"severity":173,"isKev":18,"epssScore":225},"CVE-2011-4862","Buffer overflow in libtelnet\u002Fencrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long encryption key, as exploited in the wild in December 2011.","2011-12-25",0.95061,[227,236,246,254,263,271,280,288,296,305,313,323,332,340,349,358,366,374,382,390,398,405,415,421,429,437,445,452,459,467,475,483,494,501,508,515,522,530,537,545,552,561,569,575,583,592,600,607,615,623],{"cveId":228,"description":229,"publishedDate":230,"cvssScore":171,"severity":173,"isKev":4,"epssScore":231,"cisaVulnName":232,"cisaDateAdded":233,"cisaShortDescription":234,"cisaRequiredAction":235},"CVE-2025-39682","In the Linux kernel, the following vulnerability has been resolved:\n\ntls: fix handling of zero-length records on the rx_list\n\nEach recvmsg() call must process either\n - only contiguous DATA records (any number of them)\n - one non-DATA record\n\nIf the next record has different type than what has already been\nprocessed we break out of the main processing loop. If the record\nhas already been decrypted (which may be the case for TLS 1.3 where\nwe don't know type until decryption) we queue the pending record\nto the rx_list. Next recvmsg() will pick it up from there.\n\nQueuing the skb to rx_list after zero-copy decrypt is not possible,\nsince in that case we decrypted directly to the user space buffer,\nand we don't have an skb to queue (darg.skb points to the ciphertext\nskb for access to metadata like length).\n\nOnly data records are allowed zero-copy, and we break the processing\nloop after each non-data record. So we should never zero-copy and\nthen find out that the record type has changed. The corner case\nwe missed is when the initial record comes from rx_list, and it's\nzero length.","2025-09-05",0.03252,"Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability","2026-09-18","Linux Kernel contains an improper check for unusual or exceptional conditions vulnerability in the TLS receive path which allows a zero-length record retrieved from the rx_list to bypass the intended recvmsg() record-type handling, potentially causing subsequent TLS records to be processed using incorrect zero-copy and queuing assumptions. The impacted product(s) could be end-of-life (EoL) and\u002For end-of-service (EoS). Users are advised to discontinue use and\u002For transition to a supported version.","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",{"cveId":237,"description":238,"publishedDate":239,"cvssScore":240,"severity":181,"isKev":4,"epssScore":241,"cisaVulnName":242,"cisaDateAdded":243,"cisaShortDescription":244,"cisaRequiredAction":245},"CVE-2022-0492","A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel\u002Fcgroup\u002Fcgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpectedly.","2022-03-03",7.8,0.05528,"Linux Kernel Improper Authentication Vulnerability","2026-06-02","Linux Kernel contains an improper authentication vulnerability which could allow for privilege escalation via the cgroups v1 release_agent feature.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":247,"description":248,"publishedDate":249,"cvssScore":240,"severity":181,"isKev":4,"epssScore":250,"cisaVulnName":251,"cisaDateAdded":252,"cisaShortDescription":253,"cisaRequiredAction":245},"CVE-2021-30952","An integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution.","2021-08-24",0.06964,"Apple Multiple Products Integer Overflow or Wraparound Vulnerability","2026-03-05","Apple tvOS, macOS, Safari, iPadOS and watchOS contain an integer overflow or wraparound vulnerability due to the processing of maliciously crafted web content that may lead to arbitrary code execution.",{"cveId":255,"description":256,"publishedDate":257,"cvssScore":258,"severity":181,"isKev":4,"epssScore":259,"cisaVulnName":260,"cisaDateAdded":261,"cisaShortDescription":262,"cisaRequiredAction":245},"CVE-2021-21311","Adminer is an open-source database management in a single PHP file. In adminer from version 4.0.0 and before 4.7.9 there is a server-side request forgery vulnerability. Users of Adminer versions bundling all drivers (e.g. `adminer.php`) are affected. This is fixed in version 4.7.9.","2021-02-11",7.2,0.98464,"Adminer Server-Side Request Forgery Vulnerability","2025-09-29","Adminer contains a server-side request forgery vulnerability that, when exploited, allows a remote attacker to obtain potentially sensitive information.",{"cveId":264,"description":265,"publishedDate":266,"cvssScore":267,"severity":173,"isKev":4,"epssScore":268,"cisaVulnName":269,"cisaDateAdded":261,"cisaShortDescription":270,"cisaRequiredAction":245},"CVE-2025-32463","Sudo before 1.9.17p1 allows local users to obtain root access because \u002Fetc\u002Fnsswitch.conf from a user-controlled directory is used with the --chroot option.","2025-06-30",9.3,0.55498,"Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability","Sudo contains an inclusion of functionality from untrusted control sphere vulnerability. This vulnerability could allow local attacker to leverage sudo’s -R (--chroot) option to run arbitrary commands as root, even if they are not listed in the sudoers file.",{"cveId":272,"description":273,"publishedDate":274,"cvssScore":275,"severity":181,"isKev":4,"epssScore":276,"cisaVulnName":277,"cisaDateAdded":278,"cisaShortDescription":279,"cisaRequiredAction":245},"CVE-2025-48384","Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When reading a config value, Git strips any trailing carriage return and line feed (CRLF). When writing a config entry, values with a trailing CR are not quoted, causing the CR to be lost when the config is later read. When initializing a submodule, if the submodule path contains a trailing CR, the altered path is read resulting in the submodule being checked out to an incorrect location. If a symlink exists that points the altered path to the submodule hooks directory, and the submodule contains an executable post-checkout hook, the script may be unintentionally executed after checkout. This vulnerability is fixed in v2.43.7, v2.44.4, v2.45.4, v2.46.4, v2.47.3, v2.48.2, v2.49.1, and v2.50.1.","2025-07-08",8,0.04379,"Git Link Following Vulnerability","2025-08-25","Git contains a link following vulnerability that stems from Git’s inconsistent handling of carriage return characters in configuration files.",{"cveId":281,"description":282,"publishedDate":12,"cvssScore":283,"severity":181,"isKev":4,"epssScore":284,"cisaVulnName":285,"cisaDateAdded":286,"cisaShortDescription":287,"cisaRequiredAction":245},"CVE-2025-6558","Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",8.8,0.10927,"Google Chromium ANGLE and GPU Improper Input Validation Vulnerability","2025-07-22","Google Chromium contains an improper input validation vulnerability in ANGLE and GPU. This vulnerability could allow a remote attacker to potentially perform a sandbox escape via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":289,"description":290,"publishedDate":291,"cvssScore":179,"severity":181,"isKev":4,"epssScore":292,"cisaVulnName":293,"cisaDateAdded":294,"cisaShortDescription":295,"cisaRequiredAction":245},"CVE-2019-5418","There is a File Content Disclosure vulnerability in Action View \u003C5.2.2.1, \u003C5.1.6.2, \u003C5.0.7.2, \u003C4.2.11.1 and v3 where specially crafted accept headers can cause contents of arbitrary files on the target system's filesystem to be exposed.","2019-03-27",0.98507,"Rails Ruby on Rails Path Traversal Vulnerability","2025-07-07","Rails Ruby on Rails contains a path traversal vulnerability in Action View. Specially crafted accept headers in combination with calls to `render file:` can cause arbitrary files on the target server to be rendered, disclosing the file contents.",{"cveId":297,"description":298,"publishedDate":299,"cvssScore":300,"severity":181,"isKev":4,"epssScore":301,"cisaVulnName":302,"cisaDateAdded":303,"cisaShortDescription":304,"cisaRequiredAction":245},"CVE-2025-27363","An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse font subglyph structures related to TrueType GX and variable font files. The vulnerable code assigns a signed short value to an unsigned long and then adds a static value causing it to wrap around and allocate too small of a heap buffer. The code then writes up to 6 signed long integers out of bounds relative to this buffer. This may result in arbitrary code execution. This vulnerability may have been exploited in the wild.","2025-03-11",8.1,0.27775,"FreeType Out-of-Bounds Write Vulnerability","2025-05-06","FreeType contains an out-of-bounds write vulnerability when attempting to parse font subglyph structures related to TrueType GX and variable font files that may allow for arbitrary code execution.",{"cveId":306,"description":307,"publishedDate":308,"cvssScore":171,"severity":173,"isKev":4,"epssScore":309,"cisaVulnName":310,"cisaDateAdded":311,"cisaShortDescription":312,"cisaRequiredAction":245},"CVE-2025-24813","Path Equivalence: 'file.Name' (Internal Dot) leading to Remote Code Execution and\u002For Information disclosure and\u002For malicious content added to uploaded files via write enabled Default Servlet in Apache Tomcat.\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.2, from 10.1.0-M1 through 10.1.34, from 9.0.0.M1 through 9.0.98.\nThe following versions were EOL at the time the CVE was created but are \nknown to be affected: 8.5.0 though 8.5.100. Other, older, EOL versions \nmay also be affected.\n\n\nIf all of the following were true, a malicious user was able to view       security sensitive files and\u002For inject content into those files:\n- writes enabled for the default servlet (disabled by default)\n- support for partial PUT (enabled by default)\n- a target URL for security sensitive uploads that was a sub-directory of a target URL for public uploads\n- attacker knowledge of the names of security sensitive files being uploaded\n- the security sensitive files also being uploaded via partial PUT\n\nIf all of the following were true, a malicious user was able to       perform remote code execution:\n- writes enabled for the default servlet (disabled by default)\n- support for partial PUT (enabled by default)\n- application was using Tomcat's file based session persistence with the default storage location\n- application included a library that may be leveraged in a deserialization attack\n\nUsers are recommended to upgrade to version 11.0.3, 10.1.35 or 9.0.99, which fixes the issue.","2025-03-10",0.99942,"Apache Tomcat Path Equivalence Vulnerability","2025-04-01","Apache Tomcat contains a path equivalence vulnerability that allows a remote attacker to execute code, disclose information, or inject malicious content via a partial PUT request. This vulnerability can be chained with CVE‑2026‑34486.",{"cveId":314,"description":315,"publishedDate":316,"cvssScore":317,"severity":214,"isKev":4,"epssScore":318,"cisaVulnName":319,"cisaDateAdded":320,"cisaShortDescription":321,"cisaRequiredAction":322},"CVE-2020-11023","In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing \u003Coption> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.","2020-04-29",6.9,0.84887,"JQuery Cross-Site Scripting (XSS) Vulnerability","2025-01-23","JQuery contains a persistent cross-site scripting (XSS) vulnerability. When passing maliciously formed, untrusted input enclosed in HTML tags, JQuery's DOM manipulators can execute untrusted code in the context of the user's browser.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":324,"description":325,"publishedDate":326,"cvssScore":327,"severity":214,"isKev":4,"epssScore":328,"cisaVulnName":329,"cisaDateAdded":330,"cisaShortDescription":331,"cisaRequiredAction":322},"CVE-2024-37383","Roundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 allows XSS via SVG animate attributes.","2024-06-07",6.1,0.73995,"RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability","2024-10-24","RoundCube Webmail contains a cross-site scripting (XSS) vulnerability in the handling of SVG animate attributes that allows a remote attacker to run malicious JavaScript code.",{"cveId":333,"description":334,"publishedDate":335,"cvssScore":171,"severity":173,"isKev":4,"epssScore":336,"cisaVulnName":337,"cisaDateAdded":338,"cisaShortDescription":339,"cisaRequiredAction":322},"CVE-2024-9680","An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. This vulnerability affects Firefox \u003C 131.0.2, Firefox ESR \u003C 128.3.1, Firefox ESR \u003C 115.16.1, Thunderbird \u003C 131.0.1, Thunderbird \u003C 128.3.1, and Thunderbird \u003C 115.16.0.","2024-10-09",0.23184,"Mozilla Firefox Use-After-Free Vulnerability","2024-10-15","Mozilla Firefox and Firefox ESR contain a use-after-free vulnerability in Animation timelines that allows for code execution in the content process.",{"cveId":341,"description":342,"publishedDate":343,"cvssScore":344,"severity":214,"isKev":4,"epssScore":345,"cisaVulnName":346,"cisaDateAdded":347,"cisaShortDescription":348,"cisaRequiredAction":322},"CVE-2021-4043","NULL Pointer Dereference in GitHub repository gpac\u002Fgpac prior to 1.1.0.","2022-02-04",5.5,0.04615,"Motion Spell GPAC Null Pointer Dereference Vulnerability","2024-09-30","Motion Spell GPAC contains a null pointer dereference vulnerability that could allow a local attacker to cause a denial-of-service (DoS) condition.",{"cveId":350,"description":351,"publishedDate":352,"cvssScore":353,"severity":181,"isKev":4,"epssScore":354,"cisaVulnName":355,"cisaDateAdded":356,"cisaShortDescription":357,"cisaRequiredAction":322},"CVE-2016-3714","The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to execute arbitrary code via shell metacharacters in a crafted image, aka \"ImageTragick.\"","2016-05-05",8.4,0.97485,"ImageMagick Improper Input Validation Vulnerability","2024-09-09","ImageMagick contains an improper input validation vulnerability that affects the EPHEMERAL, HTTPS, MVG, MSL, TEXT, SHOW, WIN, and PLT coders. This allows a remote attacker to execute arbitrary code via shell metacharacters in a crafted image.",{"cveId":359,"description":360,"publishedDate":361,"cvssScore":327,"severity":214,"isKev":4,"epssScore":362,"cisaVulnName":363,"cisaDateAdded":364,"cisaShortDescription":365,"cisaRequiredAction":322},"CVE-2020-13965","An issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. There is XSS via a malicious XML attachment because text\u002Fxml is among the allowed types for a preview.","2020-06-09",0.76596,"Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability","2024-06-26","Roundcube Webmail contains a cross-site scripting (XSS) vulnerability that allows a remote attacker to manipulate data via a malicious XML attachment.",{"cveId":367,"description":368,"publishedDate":369,"cvssScore":240,"severity":181,"isKev":4,"epssScore":370,"cisaVulnName":371,"cisaDateAdded":372,"cisaShortDescription":373,"cisaRequiredAction":322},"CVE-2024-1086","A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.\n\n\n\nThe nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the nf_hook_slow() function can cause a double free vulnerability when NF_DROP is issued with a drop error which resembles NF_ACCEPT.\n\n\n\nWe recommend upgrading past commit f342de4e2f33e0e39165d8639387aa6c19dff660.","2024-01-31",0.28058,"Linux Kernel Use-After-Free Vulnerability","2024-05-30","Linux kernel contains a use-after-free vulnerability in the netfilter: nf_tables component that allows an attacker to achieve local privilege escalation.",{"cveId":375,"description":376,"publishedDate":377,"cvssScore":327,"severity":214,"isKev":4,"epssScore":378,"cisaVulnName":379,"cisaDateAdded":380,"cisaShortDescription":381,"cisaRequiredAction":322},"CVE-2023-43770","Roundcube before 1.4.14, 1.5.x before 1.5.4, and 1.6.x before 1.6.3 allows XSS via text\u002Fplain e-mail messages with crafted links because of program\u002Flib\u002FRoundcube\u002Frcube_string_replacer.php behavior.","2023-09-22",0.6366,"Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability","2024-02-12","Roundcube Webmail contains a persistent cross-site scripting (XSS) vulnerability that can lead to information disclosure via malicious link references in plain\u002Ftext messages.",{"cveId":383,"description":384,"publishedDate":385,"cvssScore":283,"severity":181,"isKev":4,"epssScore":386,"cisaVulnName":387,"cisaDateAdded":388,"cisaShortDescription":389,"cisaRequiredAction":322},"CVE-2023-4762","Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)","2023-09-05",0.41375,"Google Chromium V8 Type Confusion Vulnerability","2024-02-06","Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to execute code via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":391,"description":392,"publishedDate":393,"cvssScore":283,"severity":181,"isKev":4,"epssScore":394,"cisaVulnName":395,"cisaDateAdded":396,"cisaShortDescription":397,"cisaRequiredAction":322},"CVE-2023-7024","Heap buffer overflow in WebRTC in Google Chrome prior to 120.0.6099.129 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)","2023-12-21",0.06671,"Google Chromium WebRTC Heap Buffer Overflow Vulnerability","2024-01-02","Google Chromium WebRTC, an open-source project providing web browsers with real-time communication, contains a heap buffer overflow vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could impact web browsers using WebRTC, including but not limited to Google Chrome.",{"cveId":399,"description":400,"publishedDate":401,"cvssScore":240,"severity":181,"isKev":4,"epssScore":402,"cisaVulnName":403,"cisaDateAdded":396,"cisaShortDescription":404,"cisaRequiredAction":322},"CVE-2023-7101","Spreadsheet::ParseExcel version 0.65 is a Perl module used for parsing Excel files. Spreadsheet::ParseExcel is vulnerable to an arbitrary code execution (ACE) vulnerability due to passing unvalidated input from a file into a string-type “eval”. Specifically, the issue stems from the evaluation of Number format strings (not to be confused with printf-style format strings) within the Excel parsing logic.","2023-12-24",0.18959,"Spreadsheet::ParseExcel Remote Code Execution Vulnerability","Spreadsheet::ParseExcel contains a remote code execution vulnerability due to passing unvalidated input from a file into a string-type “eval”. Specifically, the issue stems from the evaluation of Number format strings within the Excel parsing logic.",{"cveId":406,"description":407,"publishedDate":408,"cvssScore":409,"severity":214,"isKev":4,"epssScore":410,"cisaVulnName":411,"cisaDateAdded":412,"cisaShortDescription":413,"cisaRequiredAction":414},"CVE-2023-42916","An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may disclose sensitive information. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.","2023-11-30",6.5,0.17823,"Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability","2023-12-04","Apple iOS, iPadOS, macOS, and Safari WebKit contain an out-of-bounds read vulnerability that may disclose sensitive information when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.","Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.",{"cveId":416,"description":417,"publishedDate":408,"cvssScore":283,"severity":181,"isKev":4,"epssScore":418,"cisaVulnName":419,"cisaDateAdded":412,"cisaShortDescription":420,"cisaRequiredAction":414},"CVE-2023-42917","A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.",0.09295,"Apple Multiple Products WebKit Memory Corruption Vulnerability","Apple iOS, iPadOS, macOS, and Safari WebKit contain a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.",{"cveId":422,"description":423,"publishedDate":424,"cvssScore":425,"severity":173,"isKev":4,"epssScore":426,"cisaVulnName":427,"cisaDateAdded":408,"cisaShortDescription":428,"cisaRequiredAction":322},"CVE-2023-6345","Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)","2023-11-29",9.6,0.16468,"Google Skia Integer Overflow Vulnerability","Google Chromium Skia contains an integer overflow vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a malicious file. This vulnerability affects Google Chrome and ChromeOS, Android, Flutter, and possibly other products.",{"cveId":430,"description":431,"publishedDate":432,"cvssScore":240,"severity":181,"isKev":4,"epssScore":433,"cisaVulnName":434,"cisaDateAdded":435,"cisaShortDescription":436,"cisaRequiredAction":322},"CVE-2023-4911","A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.","2023-10-03",0.63769,"GNU C Library Buffer Overflow Vulnerability","2023-11-21","GNU C Library's dynamic loader ld.so contains a buffer overflow vulnerability when processing the GLIBC_TUNABLES environment variable, allowing a local attacker to execute code with elevated privileges.",{"cveId":438,"description":439,"publishedDate":440,"cvssScore":72,"severity":173,"isKev":4,"epssScore":441,"cisaVulnName":442,"cisaDateAdded":443,"cisaShortDescription":444,"cisaRequiredAction":322},"CVE-2023-46604","The Java OpenWire protocol marshaller is vulnerable to Remote Code \nExecution. This vulnerability may allow a remote attacker with network \naccess to either a Java-based OpenWire broker or client to run arbitrary\n shell commands by manipulating serialized class types in the OpenWire \nprotocol to cause either the client or the broker (respectively) to \ninstantiate any class on the classpath.\n\nUsers are recommended to upgrade\n both brokers and clients to version 5.15.16, 5.16.7, 5.17.6, or 5.18.3 \nwhich fixes this issue.","2023-10-27",0.99891,"Apache ActiveMQ Deserialization of Untrusted Data Vulnerability","2023-11-02","Apache ActiveMQ contains a deserialization of untrusted data vulnerability that may allow a remote attacker with network access to a broker to run shell commands by manipulating serialized class types in the OpenWire protocol to cause the broker to instantiate any class on the classpath.",{"cveId":446,"description":447,"publishedDate":448,"cvssScore":327,"severity":214,"isKev":4,"epssScore":449,"cisaVulnName":379,"cisaDateAdded":450,"cisaShortDescription":451,"cisaRequiredAction":322},"CVE-2023-5631","Roundcube before 1.4.15, 1.5.x before 1.5.5, and 1.6.x before 1.6.4 allows stored XSS via an HTML e-mail message with a crafted SVG document because of program\u002Flib\u002FRoundcube\u002Frcube_washtml.php behavior. This could allow a remote attacker\n\nto load arbitrary JavaScript code.","2023-10-18",0.76337,"2023-10-26","Roundcube Webmail contains a persistent cross-site scripting (XSS) vulnerability that allows a remote attacker to run malicious JavaScript code.",{"cveId":453,"description":454,"publishedDate":455,"cvssScore":179,"severity":181,"isKev":4,"epssScore":456,"cisaVulnName":457,"cisaDateAdded":455,"cisaShortDescription":458,"cisaRequiredAction":245},"CVE-2023-44487","The HTTP\u002F2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.","2023-10-10",0.99999,"HTTP\u002F2 Rapid Reset Attack Vulnerability","HTTP\u002F2 contains a rapid reset vulnerability that allows for a distributed denial-of-service attack (DDoS).",{"cveId":460,"description":461,"publishedDate":462,"cvssScore":283,"severity":181,"isKev":4,"epssScore":463,"cisaVulnName":464,"cisaDateAdded":465,"cisaShortDescription":466,"cisaRequiredAction":322},"CVE-2023-5217","Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)","2023-09-28",0.49013,"Google Chromium libvpx Heap Buffer Overflow Vulnerability","2023-10-02","Google Chromium libvpx contains a heap buffer overflow vulnerability in vp8 encoding that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could impact web browsers using libvpx, including but not limited to Google Chrome.",{"cveId":468,"description":469,"publishedDate":470,"cvssScore":283,"severity":181,"isKev":4,"epssScore":471,"cisaVulnName":472,"cisaDateAdded":473,"cisaShortDescription":474,"cisaRequiredAction":322},"CVE-2023-41993","The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.","2023-09-21",0.24349,"Apple Multiple Products WebKit Code Execution Vulnerability","2023-09-25","Apple iOS, iPadOS, macOS, and Safari WebKit contain an unspecified vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.",{"cveId":476,"description":477,"publishedDate":478,"cvssScore":283,"severity":181,"isKev":4,"epssScore":479,"cisaVulnName":480,"cisaDateAdded":481,"cisaShortDescription":482,"cisaRequiredAction":322},"CVE-2023-4863","Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)","2023-09-12",0.99979,"Google Chromium WebP Heap-Based Buffer Overflow Vulnerability","2023-09-13","Google Chromium WebP contains a heap-based buffer overflow vulnerability that allows a remote attacker to perform an out-of-bounds memory write via a crafted HTML page. This vulnerability can affect applications that use the WebP Codec.",{"cveId":484,"description":485,"publishedDate":486,"cvssScore":487,"severity":488,"isKev":4,"epssScore":489,"cisaVulnName":490,"cisaDateAdded":491,"cisaShortDescription":492,"cisaRequiredAction":493},"CVE-2023-20867","A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine.","2023-06-13",3.9,"Low",0.13638,"VMware Tools Authentication Bypass Vulnerability","2023-06-23","VMware Tools contains an authentication bypass vulnerability in the vgauth module. A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine. An attacker must have root access over ESXi to exploit this vulnerability.","Apply updates per vendor instructions.",{"cveId":495,"description":496,"publishedDate":497,"cvssScore":327,"severity":214,"isKev":4,"epssScore":498,"cisaVulnName":363,"cisaDateAdded":499,"cisaShortDescription":500,"cisaRequiredAction":493},"CVE-2020-35730","An XSS issue was discovered in Roundcube Webmail before 1.2.13, 1.3.x before 1.3.16, and 1.4.x before 1.4.10. The attacker can send a plain text e-mail message, with JavaScript in a link reference element that is mishandled by linkref_addindex in rcube_string_replacer.php.","2020-12-28",0.3292,"2023-06-22","Roundcube Webmail contains a cross-site scripting (XSS) vulnerability that allows an attacker to send a plain text e-mail message with Javascript in a link reference element that is mishandled by linkref_addinindex in rcube_string_replacer.php.",{"cveId":502,"description":503,"publishedDate":504,"cvssScore":179,"severity":181,"isKev":4,"epssScore":505,"cisaVulnName":506,"cisaDateAdded":499,"cisaShortDescription":507,"cisaRequiredAction":493},"CVE-2016-9079","A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild targeting Firefox and Tor Browser users on Windows. This vulnerability affects Firefox \u003C 50.0.2, Firefox ESR \u003C 45.5.1, and Thunderbird \u003C 45.5.1.","2018-06-11",0.87357,"Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability","Mozilla Firefox, Firefox ESR, and Thunderbird contain a use-after-free vulnerability in SVG Animation, targeting Firefox and Tor browser users on Windows.",{"cveId":509,"description":510,"publishedDate":511,"cvssScore":171,"severity":173,"isKev":4,"epssScore":512,"cisaVulnName":513,"cisaDateAdded":499,"cisaShortDescription":514,"cisaRequiredAction":493},"CVE-2021-44026","Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to a potential SQL injection via search or search_params.","2021-11-19",0.69882,"Roundcube Webmail SQL Injection Vulnerability","Roundcube Webmail is vulnerable to SQL injection via search or search_params.",{"cveId":516,"description":517,"publishedDate":518,"cvssScore":283,"severity":181,"isKev":4,"epssScore":519,"cisaVulnName":387,"cisaDateAdded":520,"cisaShortDescription":521,"cisaRequiredAction":493},"CVE-2023-3079","Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)","2023-06-05",0.37858,"2023-06-07","Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":523,"description":524,"publishedDate":525,"cvssScore":171,"severity":173,"isKev":4,"epssScore":526,"cisaVulnName":527,"cisaDateAdded":528,"cisaShortDescription":529,"cisaRequiredAction":493},"CVE-2016-3427","Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.","2016-04-21",0.92334,"Oracle Java SE and JRockit Unspecified Vulnerability","2023-05-12","Oracle Java SE and JRockit contains an unspecified vulnerability that allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Java Management Extensions (JMX). This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service.",{"cveId":531,"description":532,"publishedDate":533,"cvssScore":240,"severity":181,"isKev":4,"epssScore":534,"cisaVulnName":535,"cisaDateAdded":528,"cisaShortDescription":536,"cisaRequiredAction":493},"CVE-2021-3560","It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.","2022-02-16",0.23708,"Red Hat Polkit Incorrect Authorization Vulnerability","Red Hat Polkit contains an incorrect authorization vulnerability through the bypassing of credential checks for D-Bus requests, allowing for privilege escalation.",{"cveId":538,"description":539,"publishedDate":540,"cvssScore":344,"severity":214,"isKev":4,"epssScore":541,"cisaVulnName":542,"cisaDateAdded":528,"cisaShortDescription":543,"cisaRequiredAction":544},"CVE-2014-0196","The n_tty_write function in drivers\u002Ftty\u002Fn_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the \"LECHO & !OPOST\" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings.","2014-05-07",0.20329,"Linux Kernel Race Condition Vulnerability","Linux Kernel contains a race condition vulnerability within the n_tty_write function that allows local users to cause a denial-of-service (DoS) or gain privileges via read and write operations with long strings.","The impacted product is end-of-life and should be disconnected if still in use.",{"cveId":546,"description":547,"publishedDate":548,"cvssScore":171,"severity":173,"isKev":4,"epssScore":549,"cisaVulnName":550,"cisaDateAdded":528,"cisaShortDescription":551,"cisaRequiredAction":493},"CVE-2016-8735","Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8.5.7, and 9.x before 9.0.0.M12 if JmxRemoteLifecycleListener is used and an attacker can reach JMX ports. The issue exists because this listener wasn't updated for consistency with the CVE-2016-3427 Oracle patch that affected credential types.","2017-04-06",0.90338,"Apache Tomcat Remote Code Execution Vulnerability","Apache Tomcat contains an unspecified vulnerability that allows for remote code execution if JmxRemoteLifecycleListener is used and an attacker can reach Java Management Extension (JMX) ports. This CVE exists because this listener wasn't updated for consistency with the Oracle patched issues for CVE-2016-3427 which affected credential types.",{"cveId":553,"description":554,"publishedDate":555,"cvssScore":556,"severity":173,"isKev":4,"epssScore":557,"cisaVulnName":558,"cisaDateAdded":559,"cisaShortDescription":560,"cisaRequiredAction":493},"CVE-2021-45046","It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. This could allows attackers with control over Thread Context Map (MDC) input data when the logging configuration uses a non-default Pattern Layout with either a Context Lookup (for example, $${ctx:loginId}) or a Thread Context Map pattern (%X, %mdc, or %MDC) to craft malicious input data using a JNDI Lookup pattern resulting in an information leak and remote code execution in some environments and local code execution in all environments. Log4j 2.16.0 (Java 8) and 2.12.2 (Java 7) fix this issue by removing support for message lookup patterns and disabling JNDI functionality by default.","2021-12-14",9,0.99977,"Apache Log4j2 Deserialization of Untrusted Data Vulnerability","2023-05-01","Apache Log4j2 contains a deserialization of untrusted data vulnerability due to the incomplete fix of CVE-2021-44228, where the Thread Context Lookup Pattern is vulnerable to remote code execution in certain non-default configurations.",{"cveId":562,"description":563,"publishedDate":564,"cvssScore":425,"severity":173,"isKev":4,"epssScore":565,"cisaVulnName":566,"cisaDateAdded":567,"cisaShortDescription":568,"cisaRequiredAction":493},"CVE-2023-2136","Integer overflow in Skia in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)","2023-04-19",0.05739,"Google Chrome Skia Integer Overflow Vulnerability","2023-04-21","Google Chromium Skia contains an integer overflow vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability affects Google Chrome and ChromeOS, Android, Flutter, and possibly other products.",{"cveId":570,"description":571,"publishedDate":572,"cvssScore":283,"severity":181,"isKev":4,"epssScore":573,"cisaVulnName":387,"cisaDateAdded":574,"cisaShortDescription":521,"cisaRequiredAction":493},"CVE-2023-2033","Type confusion in V8 in Google Chrome prior to 112.0.5615.121 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)","2023-04-14",0.40798,"2023-04-17",{"cveId":576,"description":577,"publishedDate":578,"cvssScore":171,"severity":173,"isKev":4,"epssScore":579,"cisaVulnName":580,"cisaDateAdded":581,"cisaShortDescription":582,"cisaRequiredAction":493},"CVE-2017-7494","Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share, and then cause the server to load and execute it.","2017-05-30",0.99448,"Samba Remote Code Execution Vulnerability","2023-03-30","Samba contains a remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share and then cause the server to load and execute it.",{"cveId":584,"description":585,"publishedDate":586,"cvssScore":587,"severity":181,"isKev":4,"epssScore":588,"cisaVulnName":589,"cisaDateAdded":590,"cisaShortDescription":591,"cisaRequiredAction":493},"CVE-2021-39144","XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. XStream 1.4.18 uses no longer a blacklist by default, since it cannot be secured for general purpose.","2021-08-23",8.5,0.98124,"XStream Remote Code Execution Vulnerability","2023-03-10","XStream contains a remote code execution vulnerability that allows an attacker to manipulate the processed input stream and replace or inject objects that result in the execution of a local command on the server. This vulnerability can affect multiple products, including but not limited to VMware Cloud Foundation.",{"cveId":593,"description":594,"publishedDate":595,"cvssScore":179,"severity":181,"isKev":4,"epssScore":596,"cisaVulnName":597,"cisaDateAdded":598,"cisaShortDescription":599,"cisaRequiredAction":493},"CVE-2020-36193","Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.","2021-01-18",0.70595,"PEAR Archive_Tar Improper Link Resolution Vulnerability","2022-08-25","PEAR Archive_Tar Tar.php allows write operations with directory traversal due to inadequate checking of symbolic links. PEAR stands for PHP Extension and Application Repository and it is an open-source framework and distribution system for reusable PHP components with known usage in third-party products such as Drupal Core and Red Hat Linux.",{"cveId":601,"description":602,"publishedDate":603,"cvssScore":240,"severity":181,"isKev":4,"epssScore":604,"cisaVulnName":605,"cisaDateAdded":598,"cisaShortDescription":606,"cisaRequiredAction":493},"CVE-2020-28949","Archive_Tar through 1.4.10 has :\u002F\u002F filename sanitization only to address phar attacks, and thus any other stream-wrapper attack (such as file:\u002F\u002F to overwrite files) can still succeed.","2020-11-19",0.84554,"PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability","PEAR Archive_Tar allows an unserialization attack because phar: is blocked but PHAR: is not blocked. PEAR stands for PHP Extension and Application Repository and it is an open-source framework and distribution system for reusable PHP components with known usage in third-party products such as Drupal Core and Red Hat Linux.",{"cveId":608,"description":609,"publishedDate":610,"cvssScore":283,"severity":181,"isKev":4,"epssScore":611,"cisaVulnName":612,"cisaDateAdded":613,"cisaShortDescription":614,"cisaRequiredAction":493},"CVE-2022-32893","An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey 12.5.1, Safari 15.6.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.","2022-08-24",0.09931,"Apple iOS and macOS Out-of-Bounds Write Vulnerability","2022-08-18","Apple iOS and macOS contain an out-of-bounds write vulnerability that could allow for remote code execution when processing malicious crafted web content.",{"cveId":616,"description":617,"publishedDate":618,"cvssScore":179,"severity":181,"isKev":4,"epssScore":619,"cisaVulnName":620,"cisaDateAdded":621,"cisaShortDescription":622,"cisaRequiredAction":493},"CVE-2022-30333","RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) operation, as demonstrated by creating a ~\u002F.ssh\u002Fauthorized_keys file. NOTE: WinRAR and Android RAR are unaffected.","2022-05-09",0.99233,"RARLAB UnRAR Directory Traversal Vulnerability","2022-08-09","RARLAB UnRAR on Linux and UNIX contains a directory traversal vulnerability, allowing an attacker to write to files during an extract (unpack) operation.",{"cveId":624,"description":625,"publishedDate":626,"cvssScore":283,"severity":181,"isKev":4,"epssScore":627,"cisaVulnName":628,"cisaDateAdded":629,"cisaShortDescription":630,"cisaRequiredAction":493},"CVE-2016-1646","The Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome before 49.0.2623.108, does not properly consider element data types, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted JavaScript code.","2016-03-29",0.4811,"Google Chromium V8 Out-of-Bounds Read Vulnerability","2022-06-08","Google Chromium V8 Engine contains an out-of-bounds read vulnerability that allows a remote attacker to cause a denial of service or possibly have another unspecified impact via crafted JavaScript code. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"title":632,"metaDescription":633,"keywords":634,"structuredData":635},"Debian Linux by Debian - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Debian Linux by Debian covering 41 versions with 9218 tracked vulnerabilities including 12 critical and 28 high-severity issues and 106 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Debian Linux vulnerabilities, Debian Linux security, Debian Linux CVE, Debian Debian Linux, Debian Linux threat intelligence, Debian security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Debian Linux KEV, Debian Linux exploited vulnerabilities",{"@context":636,"@type":637,"name":638,"description":633,"url":639,"manufacturer":640,"applicationCategory":644,"softwareVersion":645,"mainEntity":646},"https:\u002F\u002Fschema.org","SoftwareApplication","Debian Linux","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fdebian\u002Fdebian_linux",{"@type":641,"name":642,"url":643},"Organization","Debian","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fdebian","Security Software","41 versions tracked",{"@type":647,"name":648,"description":649,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Debian Linux Security Vulnerabilities","Security vulnerabilities affecting Debian Linux by Debian",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":651,"apiVersion":80},"2026-10-28T15:24:44.895Z",[],{"rows":654,"total":775,"capped":4,"failed":17},[655,659,663,667,671,675,679,683,687,691,695,699,703,707,711,715,719,723,727,731,735,739,743,747,751,755,759,763,767,771],{"cveId":228,"name":232,"severity":173,"cvss":171,"added":233,"epss":231,"published":656,"ranges":657,"checked":4,"hits":658,"covers":18},"2025-09-05T18:15:44.67",[38],[],{"cveId":237,"name":242,"severity":181,"cvss":240,"added":243,"epss":241,"published":660,"ranges":661,"checked":4,"hits":662,"covers":18},"2022-03-03T19:15:08.633",[118,32,38],[],{"cveId":247,"name":251,"severity":181,"cvss":240,"added":252,"epss":250,"published":664,"ranges":665,"checked":4,"hits":666,"covers":18},"2021-08-24T19:15:21.777",[32,38],[],{"cveId":255,"name":260,"severity":181,"cvss":258,"added":261,"epss":259,"published":668,"ranges":669,"checked":4,"hits":670,"covers":18},"2021-02-11T21:15:13.82",[118],[],{"cveId":264,"name":269,"severity":173,"cvss":267,"added":261,"epss":268,"published":672,"ranges":673,"checked":4,"hits":674,"covers":18},"2025-06-30T21:15:30.257",[38,45,52],[],{"cveId":272,"name":277,"severity":181,"cvss":275,"added":278,"epss":276,"published":676,"ranges":677,"checked":4,"hits":678,"covers":18},"2025-07-08T19:15:42.8",[38],[],{"cveId":281,"name":285,"severity":181,"cvss":283,"added":286,"epss":284,"published":680,"ranges":681,"checked":4,"hits":682,"covers":18},"2025-07-15T18:15:24.533",[38],[],{"cveId":289,"name":293,"severity":181,"cvss":179,"added":294,"epss":292,"published":684,"ranges":685,"checked":4,"hits":686,"covers":18},"2019-03-27T14:29:01.533",[114],[],{"cveId":297,"name":302,"severity":181,"cvss":300,"added":303,"epss":301,"published":688,"ranges":689,"checked":4,"hits":690,"covers":18},"2025-03-11T14:15:25.427",[38],[],{"cveId":306,"name":310,"severity":173,"cvss":171,"added":311,"epss":309,"published":692,"ranges":693,"checked":4,"hits":694,"covers":18},"2025-03-10T17:15:35.067",[38],[],{"cveId":314,"name":319,"severity":214,"cvss":317,"added":320,"epss":318,"published":696,"ranges":697,"checked":4,"hits":698,"covers":18},"2020-04-29T21:15:11.743",[118],[],{"cveId":324,"name":329,"severity":214,"cvss":327,"added":330,"epss":328,"published":700,"ranges":701,"checked":4,"hits":702,"covers":18},"2024-06-07T04:15:30.463",[32],[],{"cveId":333,"name":337,"severity":173,"cvss":171,"added":338,"epss":336,"published":704,"ranges":705,"checked":4,"hits":706,"covers":18},"2024-10-09T13:15:12.09",[38],[],{"cveId":341,"name":346,"severity":214,"cvss":344,"added":347,"epss":345,"published":708,"ranges":709,"checked":4,"hits":710,"covers":18},"2022-02-04T23:15:12.25",[38],[],{"cveId":350,"name":355,"severity":181,"cvss":353,"added":356,"epss":354,"published":712,"ranges":713,"checked":4,"hits":714,"covers":18},"2016-05-05T18:59:03.273",[114,118],[],{"cveId":359,"name":363,"severity":214,"cvss":327,"added":364,"epss":362,"published":716,"ranges":717,"checked":4,"hits":718,"covers":18},"2020-06-09T03:15:11.25",[118,32],[],{"cveId":367,"name":371,"severity":181,"cvss":240,"added":372,"epss":370,"published":720,"ranges":721,"checked":4,"hits":722,"covers":18},"2024-01-31T13:15:10.827",[32],[],{"cveId":375,"name":379,"severity":214,"cvss":327,"added":380,"epss":378,"published":724,"ranges":725,"checked":4,"hits":726,"covers":18},"2023-09-22T06:15:10.09",[32],[],{"cveId":383,"name":387,"severity":181,"cvss":283,"added":388,"epss":386,"published":728,"ranges":729,"checked":4,"hits":730,"covers":18},"2023-09-05T22:15:09.677",[38,45],[],{"cveId":391,"name":395,"severity":181,"cvss":283,"added":396,"epss":394,"published":732,"ranges":733,"checked":4,"hits":734,"covers":18},"2023-12-21T23:15:11.213",[38,45],[],{"cveId":399,"name":403,"severity":181,"cvss":240,"added":396,"epss":402,"published":736,"ranges":737,"checked":4,"hits":738,"covers":18},"2023-12-24T22:15:07.983",[32],[],{"cveId":406,"name":411,"severity":214,"cvss":409,"added":412,"epss":410,"published":740,"ranges":741,"checked":4,"hits":742,"covers":18},"2023-11-30T23:15:07.223",[38,45],[],{"cveId":416,"name":419,"severity":181,"cvss":283,"added":412,"epss":418,"published":744,"ranges":745,"checked":4,"hits":746,"covers":18},"2023-11-30T23:15:07.28",[38,45],[],{"cveId":422,"name":427,"severity":173,"cvss":425,"added":408,"epss":426,"published":748,"ranges":749,"checked":4,"hits":750,"covers":18},"2023-11-29T12:15:07.077",[38,45],[],{"cveId":430,"name":434,"severity":181,"cvss":240,"added":435,"epss":433,"published":752,"ranges":753,"checked":4,"hits":754,"covers":18},"2023-10-03T18:15:10.463",[38,45],[],{"cveId":438,"name":442,"severity":173,"cvss":72,"added":443,"epss":441,"published":756,"ranges":757,"checked":4,"hits":758,"covers":18},"2023-10-27T15:15:14.017",[32,38],[],{"cveId":446,"name":379,"severity":214,"cvss":327,"added":450,"epss":449,"published":760,"ranges":761,"checked":4,"hits":762,"covers":18},"2023-10-18T15:15:08.727",[32,38,45],[],{"cveId":453,"name":457,"severity":181,"cvss":179,"added":455,"epss":456,"published":764,"ranges":765,"checked":4,"hits":766,"covers":18},"2023-10-10T14:15:10.883",[32,38,45],[],{"cveId":460,"name":464,"severity":181,"cvss":283,"added":465,"epss":463,"published":768,"ranges":769,"checked":4,"hits":770,"covers":18},"2023-09-28T16:15:10.98",[32,38,45],[],{"cveId":468,"name":472,"severity":181,"cvss":283,"added":473,"epss":471,"published":772,"ranges":773,"checked":4,"hits":774,"covers":18},"2023-09-21T19:15:11.66",[38,45],[],50]