[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fQU2UXkcbXznhE5NdzALO0Sc8uMk9HhIY-aE03MrHuDU":3,"g5a-family:fedoraproject\u002Ffedora":630,"g5a-ex:fedoraproject\u002Ffedora@*":636},{"success":4,"data":5},true,{"product":6,"versions":129,"topVulnerabilitiesByEpss":166,"kevVulnerabilities":228,"seoMetadata":608,"meta":627},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":128},"fedoraproject","fedora",36,5323,84,"2024-11-14",[14,19,22,25,28,31,34,37,40,43,47,50,53,56,59,62,65,68,71,74,78,82,86,90,94,97,101,104,107,110,113,117,119,121,123,125],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"10",30,0,false,{"version":20,"cve_count":21,"kev_count":17,"has_kev":18},"11",31,{"version":23,"cve_count":24,"kev_count":17,"has_kev":18},"12",25,{"version":26,"cve_count":27,"kev_count":17,"has_kev":18},"13",47,{"version":29,"cve_count":30,"kev_count":17,"has_kev":18},"14",27,{"version":32,"cve_count":33,"kev_count":17,"has_kev":18},"15",37,{"version":35,"cve_count":36,"kev_count":17,"has_kev":18},"16",48,{"version":38,"cve_count":39,"kev_count":17,"has_kev":18},"17",57,{"version":41,"cve_count":42,"kev_count":17,"has_kev":18},"18",67,{"version":44,"cve_count":45,"kev_count":46,"has_kev":4},"19",115,1,{"version":48,"cve_count":49,"kev_count":46,"has_kev":4},"20",187,{"version":51,"cve_count":52,"kev_count":17,"has_kev":18},"21",164,{"version":54,"cve_count":55,"kev_count":17,"has_kev":18},"22",197,{"version":57,"cve_count":58,"kev_count":46,"has_kev":4},"23",184,{"version":60,"cve_count":61,"kev_count":46,"has_kev":4},"24",109,{"version":63,"cve_count":64,"kev_count":46,"has_kev":4},"25",68,{"version":66,"cve_count":67,"kev_count":17,"has_kev":18},"26",15,{"version":69,"cve_count":70,"kev_count":17,"has_kev":18},"27",12,{"version":72,"cve_count":73,"kev_count":46,"has_kev":4},"28",105,{"version":75,"cve_count":76,"kev_count":77,"has_kev":4},"29",398,4,{"version":79,"cve_count":80,"kev_count":81,"has_kev":4},"30",728,7,{"version":83,"cve_count":84,"kev_count":85,"has_kev":4},"31",868,10,{"version":87,"cve_count":88,"kev_count":89,"has_kev":4},"32",972,20,{"version":91,"cve_count":92,"kev_count":93,"has_kev":4},"33",1209,28,{"version":95,"cve_count":96,"kev_count":24,"has_kev":4},"34",1184,{"version":98,"cve_count":99,"kev_count":100,"has_kev":4},"35",1096,19,{"version":102,"cve_count":103,"kev_count":77,"has_kev":4},"36",707,{"version":105,"cve_count":106,"kev_count":67,"has_kev":4},"37",696,{"version":108,"cve_count":109,"kev_count":89,"has_kev":4},"38",613,{"version":111,"cve_count":112,"kev_count":89,"has_kev":4},"39",461,{"version":114,"cve_count":115,"kev_count":116,"has_kev":4},"40",207,6,{"version":118,"cve_count":46,"kev_count":17,"has_kev":18},"41",{"version":120,"cve_count":17,"kev_count":17,"has_kev":18},"6",{"version":122,"cve_count":89,"kev_count":17,"has_kev":18},"7",{"version":124,"cve_count":16,"kev_count":17,"has_kev":18},"8",{"version":126,"cve_count":127,"kev_count":17,"has_kev":18},"9",33,"Fedora by Fedoraproject is a technology product with 36 tracked versions and 5323 known security vulnerabilities including 84 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":21,"kev_count":17,"has_kev":18},{"version":23,"cve_count":24,"kev_count":17,"has_kev":18},{"version":26,"cve_count":27,"kev_count":17,"has_kev":18},{"version":29,"cve_count":30,"kev_count":17,"has_kev":18},{"version":32,"cve_count":33,"kev_count":17,"has_kev":18},{"version":35,"cve_count":36,"kev_count":17,"has_kev":18},{"version":38,"cve_count":39,"kev_count":17,"has_kev":18},{"version":41,"cve_count":42,"kev_count":17,"has_kev":18},{"version":44,"cve_count":45,"kev_count":46,"has_kev":4},{"version":48,"cve_count":49,"kev_count":46,"has_kev":4},{"version":51,"cve_count":52,"kev_count":17,"has_kev":18},{"version":54,"cve_count":55,"kev_count":17,"has_kev":18},{"version":57,"cve_count":58,"kev_count":46,"has_kev":4},{"version":60,"cve_count":61,"kev_count":46,"has_kev":4},{"version":63,"cve_count":64,"kev_count":46,"has_kev":4},{"version":66,"cve_count":67,"kev_count":17,"has_kev":18},{"version":69,"cve_count":70,"kev_count":17,"has_kev":18},{"version":72,"cve_count":73,"kev_count":46,"has_kev":4},{"version":75,"cve_count":76,"kev_count":77,"has_kev":4},{"version":79,"cve_count":80,"kev_count":81,"has_kev":4},{"version":83,"cve_count":84,"kev_count":85,"has_kev":4},{"version":87,"cve_count":88,"kev_count":89,"has_kev":4},{"version":91,"cve_count":92,"kev_count":93,"has_kev":4},{"version":95,"cve_count":96,"kev_count":24,"has_kev":4},{"version":98,"cve_count":99,"kev_count":100,"has_kev":4},{"version":102,"cve_count":103,"kev_count":77,"has_kev":4},{"version":105,"cve_count":106,"kev_count":67,"has_kev":4},{"version":108,"cve_count":109,"kev_count":89,"has_kev":4},{"version":111,"cve_count":112,"kev_count":89,"has_kev":4},{"version":114,"cve_count":115,"kev_count":116,"has_kev":4},{"version":118,"cve_count":46,"kev_count":17,"has_kev":18},{"version":120,"cve_count":17,"kev_count":17,"has_kev":18},{"version":122,"cve_count":89,"kev_count":17,"has_kev":18},{"version":124,"cve_count":16,"kev_count":17,"has_kev":18},{"version":126,"cve_count":127,"kev_count":17,"has_kev":18},[167,175,181,188,196,202,207,212,217,222],{"cveId":168,"description":169,"publishedDate":170,"cvssScore":171,"cvssVersion":172,"severity":173,"isKev":18,"epssScore":174},"CVE-2014-3566","The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the \"POODLE\" issue.","2014-10-15",3.4,"v3.1","Low",0.99999,{"cveId":176,"description":177,"publishedDate":178,"cvssScore":179,"cvssVersion":172,"severity":180,"isKev":4,"epssScore":174},"CVE-2014-0160","The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug.","2014-04-07",7.5,"High",{"cveId":182,"description":183,"publishedDate":184,"cvssScore":185,"cvssVersion":172,"severity":186,"isKev":4,"epssScore":187},"CVE-2012-1823","sapi\u002Fcgi\u002Fcgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'd' case.","2012-05-11",9.8,"Critical",0.99998,{"cveId":189,"description":190,"publishedDate":191,"cvssScore":192,"cvssVersion":193,"severity":194,"isKev":18,"epssScore":195},"CVE-2014-0195","The dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly validate fragment lengths in DTLS ClientHello messages, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via a long non-initial fragment.","2014-06-05",6.8,"v2","Medium",0.99977,{"cveId":197,"description":198,"publishedDate":199,"cvssScore":179,"cvssVersion":200,"severity":180,"isKev":18,"epssScore":201},"CVE-2018-1111","DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a command injection flaw in the NetworkManager integration script included in the DHCP client. A malicious DHCP server, or an attacker on the local network able to spoof DHCP responses, could use this flaw to execute arbitrary commands with root privileges on systems using NetworkManager and configured to obtain network configuration using the DHCP protocol.","2018-05-17","v3.0",0.97862,{"cveId":203,"description":204,"publishedDate":205,"cvssScore":185,"cvssVersion":200,"severity":186,"isKev":18,"epssScore":206},"CVE-2016-9299","The remoting module in Jenkins before 2.32 and LTS before 2.19.3 allows remote attackers to execute arbitrary code via a crafted serialized Java object, which triggers an LDAP query to a third-party server.","2017-01-12",0.96943,{"cveId":208,"description":209,"publishedDate":191,"cvssScore":210,"cvssVersion":172,"severity":180,"isKev":18,"epssScore":211},"CVE-2014-0224","OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows man-in-the-middle attackers to trigger use of a zero-length master key in certain OpenSSL-to-OpenSSL communications, and consequently hijack sessions or obtain sensitive information, via a crafted TLS handshake, aka the \"CCS Injection\" vulnerability.",7.4,0.95326,{"cveId":213,"description":214,"publishedDate":215,"cvssScore":85,"cvssVersion":193,"severity":186,"isKev":18,"epssScore":216},"CVE-2011-4862","Buffer overflow in libtelnet\u002Fencrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long encryption key, as exploited in the wild in December 2011.","2011-12-25",0.95061,{"cveId":218,"description":219,"publishedDate":191,"cvssScore":220,"cvssVersion":193,"severity":194,"isKev":18,"epssScore":221},"CVE-2014-0221","The dtls1_get_message_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service (recursion and client crash) via a DTLS hello message in an invalid DTLS handshake.",4.3,0.87892,{"cveId":223,"description":224,"publishedDate":225,"cvssScore":226,"cvssVersion":200,"severity":180,"isKev":18,"epssScore":227},"CVE-2017-11610","The XML-RPC server in supervisor before 3.0.1, 3.1.x before 3.1.4, 3.2.x before 3.2.4, and 3.3.x before 3.3.3 allows remote authenticated users to execute arbitrary commands via a crafted XML-RPC request, related to nested supervisord namespace lookups.","2017-08-23",8.8,0.87549,[229,239,248,256,264,274,283,291,299,307,314,322,329,335,343,351,358,367,374,381,389,397,403,411,419,427,435,445,452,459,466,474,482,488,496,505,512,520,527,534,541,549,555,563,571,574,582,590,597,605],{"cveId":230,"description":231,"publishedDate":232,"cvssScore":233,"severity":180,"isKev":4,"epssScore":234,"cisaVulnName":235,"cisaDateAdded":236,"cisaShortDescription":237,"cisaRequiredAction":238},"CVE-2022-0995","An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a denial of service on the system.","2022-03-25",7.8,0.08859,"Linux Kernel Out-of-Bounds Write Vulnerability","2026-08-26","Linux Kernel contains an out-of-bounds memory write vulnerability which could allow a local user to gain privileged access or cause a denial of service on the system.","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",{"cveId":240,"description":241,"publishedDate":242,"cvssScore":233,"severity":180,"isKev":4,"epssScore":243,"cisaVulnName":244,"cisaDateAdded":245,"cisaShortDescription":246,"cisaRequiredAction":247},"CVE-2022-0492","A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel\u002Fcgroup\u002Fcgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpectedly.","2022-03-03",0.05528,"Linux Kernel Improper Authentication Vulnerability","2026-06-02","Linux Kernel contains an improper authentication vulnerability which could allow for privilege escalation via the cgroups v1 release_agent feature.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":249,"description":250,"publishedDate":251,"cvssScore":233,"severity":180,"isKev":4,"epssScore":252,"cisaVulnName":253,"cisaDateAdded":254,"cisaShortDescription":255,"cisaRequiredAction":247},"CVE-2021-30952","An integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution.","2021-08-24",0.06964,"Apple Multiple Products Integer Overflow or Wraparound Vulnerability","2026-03-05","Apple tvOS, macOS, Safari, iPadOS and watchOS contain an integer overflow or wraparound vulnerability due to the processing of maliciously crafted web content that may lead to arbitrary code execution.",{"cveId":257,"description":258,"publishedDate":259,"cvssScore":179,"severity":180,"isKev":4,"epssScore":260,"cisaVulnName":261,"cisaDateAdded":262,"cisaShortDescription":263,"cisaRequiredAction":247},"CVE-2019-5418","There is a File Content Disclosure vulnerability in Action View \u003C5.2.2.1, \u003C5.1.6.2, \u003C5.0.7.2, \u003C4.2.11.1 and v3 where specially crafted accept headers can cause contents of arbitrary files on the target system's filesystem to be exposed.","2019-03-27",0.98507,"Rails Ruby on Rails Path Traversal Vulnerability","2025-07-07","Rails Ruby on Rails contains a path traversal vulnerability in Action View. Specially crafted accept headers in combination with calls to `render file:` can cause arbitrary files on the target server to be rendered, disclosing the file contents.",{"cveId":265,"description":266,"publishedDate":267,"cvssScore":268,"severity":194,"isKev":4,"epssScore":269,"cisaVulnName":270,"cisaDateAdded":271,"cisaShortDescription":272,"cisaRequiredAction":273},"CVE-2020-11023","In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing \u003Coption> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.","2020-04-29",6.9,0.84887,"JQuery Cross-Site Scripting (XSS) Vulnerability","2025-01-23","JQuery contains a persistent cross-site scripting (XSS) vulnerability. When passing maliciously formed, untrusted input enclosed in HTML tags, JQuery's DOM manipulators can execute untrusted code in the context of the user's browser.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":275,"description":276,"publishedDate":277,"cvssScore":278,"severity":194,"isKev":4,"epssScore":279,"cisaVulnName":280,"cisaDateAdded":281,"cisaShortDescription":282,"cisaRequiredAction":273},"CVE-2020-13965","An issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. There is XSS via a malicious XML attachment because text\u002Fxml is among the allowed types for a preview.","2020-06-09",6.1,0.76596,"Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability","2024-06-26","Roundcube Webmail contains a cross-site scripting (XSS) vulnerability that allows a remote attacker to manipulate data via a malicious XML attachment.",{"cveId":284,"description":285,"publishedDate":286,"cvssScore":185,"severity":186,"isKev":4,"epssScore":287,"cisaVulnName":288,"cisaDateAdded":289,"cisaShortDescription":290,"cisaRequiredAction":273},"CVE-2024-4577","In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set up to use certain code pages, Windows may use \"Best-Fit\" behavior to replace characters in command line given to Win32 API functions. PHP CGI module may misinterpret those characters as PHP options, which may allow a malicious user to pass options to PHP binary being run, and thus reveal the source code of scripts, run arbitrary PHP code on the server, etc.","2024-06-09",0.99987,"PHP-CGI OS Command Injection Vulnerability","2024-06-12","PHP, specifically Windows-based PHP used in CGI mode, contains an OS command injection vulnerability that allows for arbitrary code execution. This vulnerability is a patch bypass for CVE-2012-1823.",{"cveId":292,"description":293,"publishedDate":294,"cvssScore":233,"severity":180,"isKev":4,"epssScore":295,"cisaVulnName":296,"cisaDateAdded":297,"cisaShortDescription":298,"cisaRequiredAction":273},"CVE-2024-1086","A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.\n\n\n\nThe nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the nf_hook_slow() function can cause a double free vulnerability when NF_DROP is issued with a drop error which resembles NF_ACCEPT.\n\n\n\nWe recommend upgrading past commit f342de4e2f33e0e39165d8639387aa6c19dff660.","2024-01-31",0.28058,"Linux Kernel Use-After-Free Vulnerability","2024-05-30","Linux kernel contains a use-after-free vulnerability in the netfilter: nf_tables component that allows an attacker to achieve local privilege escalation.",{"cveId":300,"description":301,"publishedDate":302,"cvssScore":303,"severity":186,"isKev":4,"epssScore":304,"cisaVulnName":305,"cisaDateAdded":302,"cisaShortDescription":306,"cisaRequiredAction":273},"CVE-2024-5274","Type Confusion in V8 in Google Chrome prior to 125.0.6422.112 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)","2024-05-28",9.6,0.0773,"Google Chromium V8 Type Confusion Vulnerability","Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to execute code via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":308,"description":309,"publishedDate":310,"cvssScore":303,"severity":186,"isKev":4,"epssScore":311,"cisaVulnName":305,"cisaDateAdded":312,"cisaShortDescription":313,"cisaRequiredAction":273},"CVE-2024-4947","Type Confusion in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)","2024-05-15",0.15236,"2024-05-20","Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to execute code via a crafted HTML page.",{"cveId":315,"description":316,"publishedDate":317,"cvssScore":226,"severity":180,"isKev":4,"epssScore":318,"cisaVulnName":319,"cisaDateAdded":320,"cisaShortDescription":321,"cisaRequiredAction":273},"CVE-2024-4761","Out of bounds write in V8 in Google Chrome prior to 124.0.6367.207 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High)","2024-05-14",0.11007,"Google Chromium V8 Out-of-Bounds Memory Write Vulnerability","2024-05-16","Google Chromium V8 Engine contains an unspecified out-of-bounds memory write vulnerability via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. ",{"cveId":323,"description":324,"publishedDate":317,"cvssScore":303,"severity":186,"isKev":4,"epssScore":325,"cisaVulnName":326,"cisaDateAdded":327,"cisaShortDescription":328,"cisaRequiredAction":273},"CVE-2024-4671","Use after free in Visuals in Google Chrome prior to 124.0.6367.201 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",0.08348,"Google Chromium Visuals Use-After-Free Vulnerability","2024-05-13","Google Chromium Visuals contains a use-after-free vulnerability that allows a remote attacker to exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":330,"description":331,"publishedDate":332,"cvssScore":226,"severity":180,"isKev":4,"epssScore":333,"cisaVulnName":305,"cisaDateAdded":334,"cisaShortDescription":306,"cisaRequiredAction":273},"CVE-2023-4762","Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)","2023-09-05",0.41375,"2024-02-06",{"cveId":336,"description":337,"publishedDate":338,"cvssScore":226,"severity":180,"isKev":4,"epssScore":339,"cisaVulnName":340,"cisaDateAdded":341,"cisaShortDescription":342,"cisaRequiredAction":273},"CVE-2024-0519","Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)","2024-01-16",0.03802,"Google Chromium V8 Out-of-Bounds Memory Access Vulnerability","2024-01-17","Google Chromium V8 Engine contains an out-of-bounds memory access vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":344,"description":345,"publishedDate":346,"cvssScore":233,"severity":180,"isKev":4,"epssScore":347,"cisaVulnName":348,"cisaDateAdded":349,"cisaShortDescription":350,"cisaRequiredAction":273},"CVE-2023-7101","Spreadsheet::ParseExcel version 0.65 is a Perl module used for parsing Excel files. Spreadsheet::ParseExcel is vulnerable to an arbitrary code execution (ACE) vulnerability due to passing unvalidated input from a file into a string-type “eval”. Specifically, the issue stems from the evaluation of Number format strings (not to be confused with printf-style format strings) within the Excel parsing logic.","2023-12-24",0.18959,"Spreadsheet::ParseExcel Remote Code Execution Vulnerability","2024-01-02","Spreadsheet::ParseExcel contains a remote code execution vulnerability due to passing unvalidated input from a file into a string-type “eval”. Specifically, the issue stems from the evaluation of Number format strings within the Excel parsing logic.",{"cveId":352,"description":353,"publishedDate":354,"cvssScore":226,"severity":180,"isKev":4,"epssScore":355,"cisaVulnName":356,"cisaDateAdded":349,"cisaShortDescription":357,"cisaRequiredAction":273},"CVE-2023-7024","Heap buffer overflow in WebRTC in Google Chrome prior to 120.0.6099.129 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)","2023-12-21",0.06671,"Google Chromium WebRTC Heap Buffer Overflow Vulnerability","Google Chromium WebRTC, an open-source project providing web browsers with real-time communication, contains a heap buffer overflow vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could impact web browsers using WebRTC, including but not limited to Google Chrome.",{"cveId":359,"description":360,"publishedDate":361,"cvssScore":226,"severity":180,"isKev":4,"epssScore":362,"cisaVulnName":363,"cisaDateAdded":364,"cisaShortDescription":365,"cisaRequiredAction":366},"CVE-2023-42917","A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.","2023-11-30",0.09295,"Apple Multiple Products WebKit Memory Corruption Vulnerability","2023-12-04","Apple iOS, iPadOS, macOS, and Safari WebKit contain a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.","Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.",{"cveId":368,"description":369,"publishedDate":361,"cvssScore":370,"severity":194,"isKev":4,"epssScore":371,"cisaVulnName":372,"cisaDateAdded":364,"cisaShortDescription":373,"cisaRequiredAction":366},"CVE-2023-42916","An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may disclose sensitive information. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.",6.5,0.17823,"Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability","Apple iOS, iPadOS, macOS, and Safari WebKit contain an out-of-bounds read vulnerability that may disclose sensitive information when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.",{"cveId":375,"description":376,"publishedDate":377,"cvssScore":303,"severity":186,"isKev":4,"epssScore":378,"cisaVulnName":379,"cisaDateAdded":361,"cisaShortDescription":380,"cisaRequiredAction":273},"CVE-2023-6345","Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)","2023-11-29",0.16468,"Google Skia Integer Overflow Vulnerability","Google Chromium Skia contains an integer overflow vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a malicious file. This vulnerability affects Google Chrome and ChromeOS, Android, Flutter, and possibly other products.",{"cveId":382,"description":383,"publishedDate":384,"cvssScore":233,"severity":180,"isKev":4,"epssScore":385,"cisaVulnName":386,"cisaDateAdded":387,"cisaShortDescription":388,"cisaRequiredAction":273},"CVE-2023-4911","A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.","2023-10-03",0.63769,"GNU C Library Buffer Overflow Vulnerability","2023-11-21","GNU C Library's dynamic loader ld.so contains a buffer overflow vulnerability when processing the GLIBC_TUNABLES environment variable, allowing a local attacker to execute code with elevated privileges.",{"cveId":390,"description":391,"publishedDate":392,"cvssScore":278,"severity":194,"isKev":4,"epssScore":393,"cisaVulnName":394,"cisaDateAdded":395,"cisaShortDescription":396,"cisaRequiredAction":273},"CVE-2023-5631","Roundcube before 1.4.15, 1.5.x before 1.5.5, and 1.6.x before 1.6.4 allows stored XSS via an HTML e-mail message with a crafted SVG document because of program\u002Flib\u002FRoundcube\u002Frcube_washtml.php behavior. This could allow a remote attacker\n\nto load arbitrary JavaScript code.","2023-10-18",0.76337,"Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability","2023-10-26","Roundcube Webmail contains a persistent cross-site scripting (XSS) vulnerability that allows a remote attacker to run malicious JavaScript code.",{"cveId":398,"description":399,"publishedDate":400,"cvssScore":179,"severity":180,"isKev":4,"epssScore":174,"cisaVulnName":401,"cisaDateAdded":400,"cisaShortDescription":402,"cisaRequiredAction":247},"CVE-2023-44487","The HTTP\u002F2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.","2023-10-10","HTTP\u002F2 Rapid Reset Attack Vulnerability","HTTP\u002F2 contains a rapid reset vulnerability that allows for a distributed denial-of-service attack (DDoS).",{"cveId":404,"description":405,"publishedDate":406,"cvssScore":226,"severity":180,"isKev":4,"epssScore":407,"cisaVulnName":408,"cisaDateAdded":409,"cisaShortDescription":410,"cisaRequiredAction":273},"CVE-2023-5217","Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)","2023-09-28",0.49013,"Google Chromium libvpx Heap Buffer Overflow Vulnerability","2023-10-02","Google Chromium libvpx contains a heap buffer overflow vulnerability in vp8 encoding that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could impact web browsers using libvpx, including but not limited to Google Chrome.",{"cveId":412,"description":413,"publishedDate":414,"cvssScore":226,"severity":180,"isKev":4,"epssScore":415,"cisaVulnName":416,"cisaDateAdded":417,"cisaShortDescription":418,"cisaRequiredAction":273},"CVE-2023-41993","The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.","2023-09-21",0.24349,"Apple Multiple Products WebKit Code Execution Vulnerability","2023-09-25","Apple iOS, iPadOS, macOS, and Safari WebKit contain an unspecified vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.",{"cveId":420,"description":421,"publishedDate":422,"cvssScore":226,"severity":180,"isKev":4,"epssScore":423,"cisaVulnName":424,"cisaDateAdded":425,"cisaShortDescription":426,"cisaRequiredAction":273},"CVE-2023-4863","Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)","2023-09-12",0.99979,"Google Chromium WebP Heap-Based Buffer Overflow Vulnerability","2023-09-13","Google Chromium WebP contains a heap-based buffer overflow vulnerability that allows a remote attacker to perform an out-of-bounds memory write via a crafted HTML page. This vulnerability can affect applications that use the WebP Codec.",{"cveId":428,"description":429,"publishedDate":430,"cvssScore":179,"severity":180,"isKev":4,"epssScore":431,"cisaVulnName":432,"cisaDateAdded":433,"cisaShortDescription":434,"cisaRequiredAction":273},"CVE-2023-38180",".NET and Visual Studio Denial of Service Vulnerability","2023-08-08",0.14127,"Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability","2023-08-09","Microsoft .NET Core and Visual Studio contain an unspecified vulnerability that allows for denial-of-service (DoS).",{"cveId":436,"description":437,"publishedDate":438,"cvssScore":439,"severity":173,"isKev":4,"epssScore":440,"cisaVulnName":441,"cisaDateAdded":442,"cisaShortDescription":443,"cisaRequiredAction":444},"CVE-2023-20867","A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine.","2023-06-13",3.9,0.13638,"VMware Tools Authentication Bypass Vulnerability","2023-06-23","VMware Tools contains an authentication bypass vulnerability in the vgauth module. A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine. An attacker must have root access over ESXi to exploit this vulnerability.","Apply updates per vendor instructions.",{"cveId":446,"description":447,"publishedDate":448,"cvssScore":278,"severity":194,"isKev":4,"epssScore":449,"cisaVulnName":280,"cisaDateAdded":450,"cisaShortDescription":451,"cisaRequiredAction":444},"CVE-2020-35730","An XSS issue was discovered in Roundcube Webmail before 1.2.13, 1.3.x before 1.3.16, and 1.4.x before 1.4.10. The attacker can send a plain text e-mail message, with JavaScript in a link reference element that is mishandled by linkref_addindex in rcube_string_replacer.php.","2020-12-28",0.3292,"2023-06-22","Roundcube Webmail contains a cross-site scripting (XSS) vulnerability that allows an attacker to send a plain text e-mail message with Javascript in a link reference element that is mishandled by linkref_addinindex in rcube_string_replacer.php.",{"cveId":453,"description":454,"publishedDate":455,"cvssScore":185,"severity":186,"isKev":4,"epssScore":456,"cisaVulnName":457,"cisaDateAdded":450,"cisaShortDescription":458,"cisaRequiredAction":444},"CVE-2021-44026","Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to a potential SQL injection via search or search_params.","2021-11-19",0.69882,"Roundcube Webmail SQL Injection Vulnerability","Roundcube Webmail is vulnerable to SQL injection via search or search_params.",{"cveId":460,"description":461,"publishedDate":462,"cvssScore":226,"severity":180,"isKev":4,"epssScore":463,"cisaVulnName":305,"cisaDateAdded":464,"cisaShortDescription":465,"cisaRequiredAction":444},"CVE-2023-3079","Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)","2023-06-05",0.37858,"2023-06-07","Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":467,"description":468,"publishedDate":469,"cvssScore":470,"severity":186,"isKev":4,"epssScore":195,"cisaVulnName":471,"cisaDateAdded":472,"cisaShortDescription":473,"cisaRequiredAction":444},"CVE-2021-45046","It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. This could allows attackers with control over Thread Context Map (MDC) input data when the logging configuration uses a non-default Pattern Layout with either a Context Lookup (for example, $${ctx:loginId}) or a Thread Context Map pattern (%X, %mdc, or %MDC) to craft malicious input data using a JNDI Lookup pattern resulting in an information leak and remote code execution in some environments and local code execution in all environments. Log4j 2.16.0 (Java 8) and 2.12.2 (Java 7) fix this issue by removing support for message lookup patterns and disabling JNDI functionality by default.","2021-12-14",9,"Apache Log4j2 Deserialization of Untrusted Data Vulnerability","2023-05-01","Apache Log4j2 contains a deserialization of untrusted data vulnerability due to the incomplete fix of CVE-2021-44228, where the Thread Context Lookup Pattern is vulnerable to remote code execution in certain non-default configurations.",{"cveId":475,"description":476,"publishedDate":477,"cvssScore":303,"severity":186,"isKev":4,"epssScore":478,"cisaVulnName":479,"cisaDateAdded":480,"cisaShortDescription":481,"cisaRequiredAction":444},"CVE-2023-2136","Integer overflow in Skia in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)","2023-04-19",0.05739,"Google Chrome Skia Integer Overflow Vulnerability","2023-04-21","Google Chromium Skia contains an integer overflow vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability affects Google Chrome and ChromeOS, Android, Flutter, and possibly other products.",{"cveId":483,"description":484,"publishedDate":485,"cvssScore":226,"severity":180,"isKev":4,"epssScore":486,"cisaVulnName":305,"cisaDateAdded":487,"cisaShortDescription":465,"cisaRequiredAction":444},"CVE-2023-2033","Type confusion in V8 in Google Chrome prior to 112.0.5615.121 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)","2023-04-14",0.40798,"2023-04-17",{"cveId":489,"description":490,"publishedDate":491,"cvssScore":226,"severity":180,"isKev":4,"epssScore":492,"cisaVulnName":493,"cisaDateAdded":494,"cisaShortDescription":495,"cisaRequiredAction":444},"CVE-2022-3038","Use after free in Network Service in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.","2022-09-26",0.24925,"Google Chromium Network Service Use-After-Free Vulnerability","2023-03-30","Google Chromium Network Service contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":497,"description":498,"publishedDate":499,"cvssScore":500,"severity":180,"isKev":4,"epssScore":501,"cisaVulnName":502,"cisaDateAdded":503,"cisaShortDescription":504,"cisaRequiredAction":444},"CVE-2021-39144","XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. XStream 1.4.18 uses no longer a blacklist by default, since it cannot be secured for general purpose.","2021-08-23",8.5,0.98124,"XStream Remote Code Execution Vulnerability","2023-03-10","XStream contains a remote code execution vulnerability that allows an attacker to manipulate the processed input stream and replace or inject objects that result in the execution of a local command on the server. This vulnerability can affect multiple products, including but not limited to VMware Cloud Foundation.",{"cveId":506,"description":507,"publishedDate":491,"cvssScore":303,"severity":186,"isKev":4,"epssScore":508,"cisaVulnName":509,"cisaDateAdded":510,"cisaShortDescription":511,"cisaRequiredAction":444},"CVE-2022-3075","Insufficient data validation in Mojo in Google Chrome prior to 105.0.5195.102 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",0.05846,"Google Chromium Mojo Insufficient Data Validation Vulnerability","2022-09-08","Google Chromium Mojo contains an insufficient data validation vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":513,"description":514,"publishedDate":515,"cvssScore":185,"severity":186,"isKev":4,"epssScore":516,"cisaVulnName":517,"cisaDateAdded":518,"cisaShortDescription":519,"cisaRequiredAction":444},"CVE-2021-39226","Grafana is an open source data visualization platform. In affected versions unauthenticated and authenticated users are able to view the snapshot with the lowest database key by accessing the literal paths: \u002Fdashboard\u002Fsnapshot\u002F:key, or \u002Fapi\u002Fsnapshots\u002F:key. If the snapshot \"public_mode\" configuration setting is set to true (vs default of false), unauthenticated users are able to delete the snapshot with the lowest database key by accessing the literal path: \u002Fapi\u002Fsnapshots-delete\u002F:deleteKey. Regardless of the snapshot \"public_mode\" setting, authenticated users are able to delete the snapshot with the lowest database key by accessing the literal paths: \u002Fapi\u002Fsnapshots\u002F:key, or \u002Fapi\u002Fsnapshots-delete\u002F:deleteKey. The combination of deletion and viewing enables a complete walk through all snapshot data while resulting in complete snapshot data loss. This issue has been resolved in versions 8.1.6 and 7.5.11. If for some reason you cannot upgrade you can use a reverse proxy or similar to block access to the literal paths: \u002Fapi\u002Fsnapshots\u002F:key, \u002Fapi\u002Fsnapshots-delete\u002F:deleteKey, \u002Fdashboard\u002Fsnapshot\u002F:key, and \u002Fapi\u002Fsnapshots\u002F:key. They have no normal function and can be disabled without side effects.","2021-10-05",0.99933,"Grafana Authentication Bypass Vulnerability","2022-08-25","Grafana contains an authentication bypass vulnerability that allows authenticated and unauthenticated users to view and delete all snapshot data, potentially resulting in complete snapshot data loss.",{"cveId":521,"description":522,"publishedDate":523,"cvssScore":233,"severity":180,"isKev":4,"epssScore":524,"cisaVulnName":525,"cisaDateAdded":518,"cisaShortDescription":526,"cisaRequiredAction":444},"CVE-2020-28949","Archive_Tar through 1.4.10 has :\u002F\u002F filename sanitization only to address phar attacks, and thus any other stream-wrapper attack (such as file:\u002F\u002F to overwrite files) can still succeed.","2020-11-19",0.84554,"PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability","PEAR Archive_Tar allows an unserialization attack because phar: is blocked but PHAR: is not blocked. PEAR stands for PHP Extension and Application Repository and it is an open-source framework and distribution system for reusable PHP components with known usage in third-party products such as Drupal Core and Red Hat Linux.",{"cveId":528,"description":529,"publishedDate":530,"cvssScore":226,"severity":180,"isKev":4,"epssScore":531,"cisaVulnName":532,"cisaDateAdded":518,"cisaShortDescription":533,"cisaRequiredAction":444},"CVE-2022-2294","Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.","2022-07-28",0.70833,"WebRTC Heap Buffer Overflow Vulnerability","WebRTC, an open-source project providing web browsers with real-time communication, contains a heap buffer overflow vulnerability that allows an attacker to perform shellcode execution. This vulnerability impacts web browsers using WebRTC including but not limited to Google Chrome.",{"cveId":535,"description":536,"publishedDate":537,"cvssScore":179,"severity":180,"isKev":4,"epssScore":538,"cisaVulnName":539,"cisaDateAdded":518,"cisaShortDescription":540,"cisaRequiredAction":444},"CVE-2020-36193","Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.","2021-01-18",0.70595,"PEAR Archive_Tar Improper Link Resolution Vulnerability","PEAR Archive_Tar Tar.php allows write operations with directory traversal due to inadequate checking of symbolic links. PEAR stands for PHP Extension and Application Repository and it is an open-source framework and distribution system for reusable PHP components with known usage in third-party products such as Drupal Core and Red Hat Linux.",{"cveId":542,"description":543,"publishedDate":544,"cvssScore":226,"severity":180,"isKev":4,"epssScore":545,"cisaVulnName":546,"cisaDateAdded":547,"cisaShortDescription":548,"cisaRequiredAction":444},"CVE-2022-32893","An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey 12.5.1, Safari 15.6.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.","2022-08-24",0.09931,"Apple iOS and macOS Out-of-Bounds Write Vulnerability","2022-08-18","Apple iOS and macOS contain an out-of-bounds write vulnerability that could allow for remote code execution when processing malicious crafted web content.",{"cveId":550,"description":551,"publishedDate":491,"cvssScore":370,"severity":194,"isKev":4,"epssScore":552,"cisaVulnName":553,"cisaDateAdded":547,"cisaShortDescription":554,"cisaRequiredAction":444},"CVE-2022-2856","Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker to arbitrarily browse to a malicious website via a crafted HTML page.",0.04561,"Google Chromium Intents Insufficient Input Validation Vulnerability","Google Chromium Intents contains an insufficient validation of untrusted input vulnerability that allows a remote attacker to browse to a malicious website via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":556,"description":557,"publishedDate":558,"cvssScore":370,"severity":194,"isKev":4,"epssScore":559,"cisaVulnName":560,"cisaDateAdded":561,"cisaShortDescription":562,"cisaRequiredAction":444},"CVE-2021-30533","Insufficient policy enforcement in PopupBlocker in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass navigation restrictions via a crafted iframe.","2021-06-07",0.16742,"Google Chromium PopupBlocker Security Bypass Vulnerability","2022-06-27","Google Chromium PopupBlocker contains an insufficient policy enforcement vulnerability that allows a remote attacker to bypass navigation restrictions via a crafted iframe. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":564,"description":565,"publishedDate":566,"cvssScore":226,"severity":180,"isKev":4,"epssScore":567,"cisaVulnName":568,"cisaDateAdded":569,"cisaShortDescription":570,"cisaRequiredAction":444},"CVE-2021-1789","A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4, Safari 14.0.3. Processing maliciously crafted web content may lead to arbitrary code execution.","2021-04-02",0.13975,"Apple Multiple Products Type Confusion Vulnerability","2022-05-04","A type confusion issue affecting multiple Apple products allows processing of maliciously crafted web content, leading to arbitrary code execution.",{"cveId":176,"description":177,"publishedDate":178,"cvssScore":179,"severity":180,"isKev":4,"epssScore":174,"cisaVulnName":572,"cisaDateAdded":569,"cisaShortDescription":573,"cisaRequiredAction":444},"OpenSSL Information Disclosure Vulnerability","The TLS and DTLS implementations in OpenSSL do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information.",{"cveId":575,"description":576,"publishedDate":577,"cvssScore":233,"severity":180,"isKev":4,"epssScore":578,"cisaVulnName":579,"cisaDateAdded":580,"cisaShortDescription":581,"cisaRequiredAction":444},"CVE-2022-0847","A flaw was found in the way the \"flags\" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use this flaw to write to pages in the page cache backed by read only files and as such escalate their privileges on the system.","2022-03-10",0.92795,"Linux Kernel Privilege Escalation Vulnerability","2022-04-25","Linux kernel contains an improper initialization vulnerability where an unprivileged local user could escalate their privileges on the system. This vulnerability has the moniker of \"Dirty Pipe.\"",{"cveId":583,"description":584,"publishedDate":585,"cvssScore":233,"severity":180,"isKev":4,"epssScore":586,"cisaVulnName":587,"cisaDateAdded":588,"cisaShortDescription":589,"cisaRequiredAction":444},"CVE-2021-3156","Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via \"sudoedit -s\" and a command-line argument that ends with a single backslash character.","2021-01-26",0.99962,"Sudo Heap-Based Buffer Overflow Vulnerability","2022-04-06","Sudo contains an off-by-one error that can result in a heap-based buffer overflow, which allows for privilege escalation.",{"cveId":591,"description":592,"publishedDate":593,"cvssScore":185,"severity":186,"isKev":4,"epssScore":594,"cisaVulnName":595,"cisaDateAdded":232,"cisaShortDescription":596,"cisaRequiredAction":444},"CVE-2020-7247","smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to execute arbitrary commands as root via a crafted SMTP session, as demonstrated by shell metacharacters in a MAIL FROM field. This affects the \"uncommented\" default configuration. The issue exists because of an incorrect return value upon failure of input validation.","2020-01-29",0.98972,"OpenSMTPD Remote Code Execution Vulnerability","smtp_mailaddr in smtp_session.c in OpenSMTPD, as used in OpenBSD and other products, allows remote attackers to execute arbitrary commands as root via a crafted SMTP session.",{"cveId":598,"description":599,"publishedDate":600,"cvssScore":601,"severity":180,"isKev":4,"epssScore":602,"cisaVulnName":603,"cisaDateAdded":232,"cisaShortDescription":604,"cisaRequiredAction":444},"CVE-2019-11043","In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space reserved for FCGI protocol data, thus opening the possibility of remote code execution.","2019-10-28",8.7,0.99748,"PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability","In some versions of PHP in certain configurations of FPM setup, it is possible to cause FPM module to write past allocated buffers allowing the possibility of remote code execution.",{"cveId":182,"description":183,"publishedDate":184,"cvssScore":185,"severity":186,"isKev":4,"epssScore":187,"cisaVulnName":606,"cisaDateAdded":232,"cisaShortDescription":607,"cisaRequiredAction":444},"PHP-CGI Query String Parameter Vulnerability","sapi\u002Fcgi\u002Fcgi_main.c in PHP, when configured as a CGI script, does not properly handle query strings, which allows remote attackers to execute arbitrary code.",{"title":609,"metaDescription":610,"keywords":611,"structuredData":612},"Fedora by Fedoraproject - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Fedora by Fedoraproject covering 36 versions with 5323 tracked vulnerabilities including 12 critical and 30 high-severity issues and 84 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Fedora vulnerabilities, Fedora security, Fedora CVE, Fedoraproject Fedora, Fedora threat intelligence, Fedoraproject security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Fedora KEV, Fedora exploited vulnerabilities",{"@context":613,"@type":614,"name":615,"description":610,"url":616,"manufacturer":617,"applicationCategory":621,"softwareVersion":622,"mainEntity":623},"https:\u002F\u002Fschema.org","SoftwareApplication","Fedora","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Ffedoraproject\u002Ffedora",{"@type":618,"name":619,"url":620},"Organization","Fedoraproject","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Ffedoraproject","Security Software","36 versions tracked",{"@type":624,"name":625,"description":626,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Fedora Security Vulnerabilities","Security vulnerabilities affecting Fedora by Fedoraproject",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":628,"apiVersion":629},"2026-10-29T15:16:05.899Z","3.0",[631,634],{"product":632,"cves":633},"fedora_core",8,{"product":635,"cves":46},"fedora_linux_kernel",{"rows":637,"total":758,"capped":4,"failed":17},[638,642,646,650,654,658,662,666,670,674,678,682,686,690,694,698,702,706,710,714,718,722,726,730,734,738,742,746,750,754],{"cveId":230,"name":235,"severity":180,"cvss":233,"added":236,"epss":234,"published":639,"ranges":640,"checked":4,"hits":641,"covers":18},"2022-03-25T19:15:10.52",[98],[],{"cveId":240,"name":244,"severity":180,"cvss":233,"added":245,"epss":243,"published":643,"ranges":644,"checked":4,"hits":645,"covers":18},"2022-03-03T19:15:08.633",[98],[],{"cveId":249,"name":253,"severity":180,"cvss":233,"added":254,"epss":252,"published":647,"ranges":648,"checked":4,"hits":649,"covers":18},"2021-08-24T19:15:21.777",[95,98],[],{"cveId":257,"name":261,"severity":180,"cvss":179,"added":262,"epss":260,"published":651,"ranges":652,"checked":4,"hits":653,"covers":18},"2019-03-27T14:29:01.533",[79],[],{"cveId":265,"name":270,"severity":194,"cvss":268,"added":271,"epss":269,"published":655,"ranges":656,"checked":4,"hits":657,"covers":18},"2020-04-29T21:15:11.743",[83,87,91],[],{"cveId":275,"name":280,"severity":194,"cvss":278,"added":281,"epss":279,"published":659,"ranges":660,"checked":4,"hits":661,"covers":18},"2020-06-09T03:15:11.25",[83,87],[],{"cveId":284,"name":288,"severity":186,"cvss":185,"added":289,"epss":287,"published":663,"ranges":664,"checked":4,"hits":665,"covers":18},"2024-06-09T20:15:09.55",[111,114],[],{"cveId":292,"name":296,"severity":180,"cvss":233,"added":297,"epss":295,"published":667,"ranges":668,"checked":4,"hits":669,"covers":18},"2024-01-31T13:15:10.827",[111],[],{"cveId":300,"name":305,"severity":186,"cvss":303,"added":302,"epss":304,"published":671,"ranges":672,"checked":4,"hits":673,"covers":18},"2024-05-28T15:15:10.443",[111,114],[],{"cveId":308,"name":305,"severity":186,"cvss":303,"added":312,"epss":311,"published":675,"ranges":676,"checked":4,"hits":677,"covers":18},"2024-05-15T21:15:09.273",[108,111,114],[],{"cveId":315,"name":319,"severity":180,"cvss":226,"added":320,"epss":318,"published":679,"ranges":680,"checked":4,"hits":681,"covers":18},"2024-05-14T16:17:35.81",[108,111,114],[],{"cveId":323,"name":326,"severity":186,"cvss":303,"added":327,"epss":325,"published":683,"ranges":684,"checked":4,"hits":685,"covers":18},"2024-05-14T15:44:15.573",[108,111,114],[],{"cveId":330,"name":305,"severity":180,"cvss":226,"added":334,"epss":333,"published":687,"ranges":688,"checked":4,"hits":689,"covers":18},"2023-09-05T22:15:09.677",[105,108,111],[],{"cveId":336,"name":340,"severity":180,"cvss":226,"added":341,"epss":339,"published":691,"ranges":692,"checked":4,"hits":693,"covers":18},"2024-01-16T22:15:37.753",[108,111],[],{"cveId":344,"name":348,"severity":180,"cvss":233,"added":349,"epss":347,"published":695,"ranges":696,"checked":4,"hits":697,"covers":18},"2023-12-24T22:15:07.983",[108,111],[],{"cveId":352,"name":356,"severity":180,"cvss":226,"added":349,"epss":355,"published":699,"ranges":700,"checked":4,"hits":701,"covers":18},"2023-12-21T23:15:11.213",[108,111],[],{"cveId":359,"name":363,"severity":180,"cvss":226,"added":364,"epss":362,"published":703,"ranges":704,"checked":4,"hits":705,"covers":18},"2023-11-30T23:15:07.28",[108,111],[],{"cveId":368,"name":372,"severity":194,"cvss":370,"added":364,"epss":371,"published":707,"ranges":708,"checked":4,"hits":709,"covers":18},"2023-11-30T23:15:07.223",[108,111],[],{"cveId":375,"name":379,"severity":186,"cvss":303,"added":361,"epss":378,"published":711,"ranges":712,"checked":4,"hits":713,"covers":18},"2023-11-29T12:15:07.077",[105,108,111],[],{"cveId":382,"name":386,"severity":180,"cvss":233,"added":387,"epss":385,"published":715,"ranges":716,"checked":4,"hits":717,"covers":18},"2023-10-03T18:15:10.463",[105,108,111],[],{"cveId":390,"name":394,"severity":194,"cvss":278,"added":395,"epss":393,"published":719,"ranges":720,"checked":4,"hits":721,"covers":18},"2023-10-18T15:15:08.727",[111],[],{"cveId":398,"name":401,"severity":180,"cvss":179,"added":400,"epss":174,"published":723,"ranges":724,"checked":4,"hits":725,"covers":18},"2023-10-10T14:15:10.883",[105,108],[],{"cveId":404,"name":408,"severity":180,"cvss":226,"added":409,"epss":407,"published":727,"ranges":728,"checked":4,"hits":729,"covers":18},"2023-09-28T16:15:10.98",[105,108,111],[],{"cveId":412,"name":416,"severity":180,"cvss":226,"added":417,"epss":415,"published":731,"ranges":732,"checked":4,"hits":733,"covers":18},"2023-09-21T19:15:11.66",[105,108,111],[],{"cveId":420,"name":424,"severity":180,"cvss":226,"added":425,"epss":423,"published":735,"ranges":736,"checked":4,"hits":737,"covers":18},"2023-09-12T15:15:24.327",[105,108,111],[],{"cveId":428,"name":432,"severity":180,"cvss":179,"added":433,"epss":431,"published":739,"ranges":740,"checked":4,"hits":741,"covers":18},"2023-08-08T19:15:10.367",[105,108],[],{"cveId":436,"name":441,"severity":173,"cvss":439,"added":442,"epss":440,"published":743,"ranges":744,"checked":4,"hits":745,"covers":18},"2023-06-13T17:15:14.07",[105,108,111],[],{"cveId":446,"name":280,"severity":194,"cvss":278,"added":450,"epss":449,"published":747,"ranges":748,"checked":4,"hits":749,"covers":18},"2020-12-28T20:15:13.15",[87,91],[],{"cveId":453,"name":457,"severity":186,"cvss":185,"added":450,"epss":456,"published":751,"ranges":752,"checked":4,"hits":753,"covers":18},"2021-11-19T04:15:07.197",[91,95],[],{"cveId":460,"name":305,"severity":180,"cvss":226,"added":464,"epss":463,"published":755,"ranges":756,"checked":4,"hits":757,"covers":18},"2023-06-05T22:15:12.383",[105,108],[],50]