[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fd9ZuQ7dr9kvGwP_4iVuIh3gasY5pmZ0T8uDa-pVWmrI":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":497,"kevVulnerabilities":558,"topProductsByCves":1351,"seoMetadata":1362,"meta":1371},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":496},7522,"debian",118,9360,106,2299,"2025-08-01","d",[16,22,29,35,41,47,53,59,64,68,73,78,83,87,91,95,100,104,109,112,116,120,124,128,132,136,140,143,148,152,156,160,164,168,172,175,179,183,187,191,195,200,203,207,211,215,219,222,226,230,234,238,241,245,248,252,256,259,264,268,272,276,280,283,287,291,294,298,302,306,309,313,317,321,325,329,332,336,340,344,348,352,356,360,364,368,372,376,380,384,388,392,396,400,404,408,413,417,421,425,429,433,437,440,444,449,453,457,461,465,469,473,477,480,483,486,489,492],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":21},32246,"debian_linux",41,9218,"2025-07-15",{"id":23,"product_name":24,"version_count":25,"cve_count":26,"kev_count":27,"last_cve_update":28},32223,"advanced_package_tool",313,21,0,"2020-12-10",{"id":30,"product_name":31,"version_count":32,"cve_count":33,"kev_count":27,"last_cve_update":34},32252,"dpkg",423,13,"2025-07-01",{"id":36,"product_name":37,"version_count":38,"cve_count":39,"kev_count":27,"last_cve_update":40},32282,"linux",1,8,"2011-03-30",{"id":42,"product_name":43,"version_count":44,"cve_count":45,"kev_count":27,"last_cve_update":46},32317,"shadow",45,7,"2021-03-17",{"id":48,"product_name":49,"version_count":50,"cve_count":51,"kev_count":27,"last_cve_update":52},32281,"lintian",166,6,"2019-11-07",{"id":54,"product_name":55,"version_count":56,"cve_count":57,"kev_count":27,"last_cve_update":58},32227,"apt",337,5,"2020-05-15",{"id":60,"product_name":61,"version_count":51,"cve_count":62,"kev_count":27,"last_cve_update":63},32268,"horde",3,"2009-03-17",{"id":65,"product_name":66,"version_count":67,"cve_count":62,"kev_count":27,"last_cve_update":13},32250,"devscripts",131,{"id":69,"product_name":70,"version_count":71,"cve_count":62,"kev_count":27,"last_cve_update":72},32313,"reportbug",4,"2014-08-06",{"id":74,"product_name":75,"version_count":38,"cve_count":76,"kev_count":27,"last_cve_update":77},32261,"fsp",2,"2004-01-20",{"id":79,"product_name":80,"version_count":81,"cve_count":76,"kev_count":27,"last_cve_update":82},32339,"yubiserver",15,"2025-06-26",{"id":84,"product_name":85,"version_count":38,"cve_count":76,"kev_count":27,"last_cve_update":86},32254,"dpkg-dev","2014-05-30",{"id":88,"product_name":89,"version_count":76,"cve_count":76,"kev_count":27,"last_cve_update":90},32238,"cifs-utils","2015-03-31",{"id":92,"product_name":93,"version_count":38,"cve_count":76,"kev_count":27,"last_cve_update":94},32309,"python-apt","2020-03-26",{"id":96,"product_name":97,"version_count":98,"cve_count":76,"kev_count":27,"last_cve_update":99},32288,"mime-support",23,"2015-01-06",{"id":101,"product_name":102,"version_count":76,"cve_count":76,"kev_count":27,"last_cve_update":103},32312,"qpopper","2005-05-25",{"id":105,"product_name":106,"version_count":107,"cve_count":76,"kev_count":27,"last_cve_update":108},32310,"python-dns",10,"2008-09-18",{"id":110,"product_name":111,"version_count":71,"cve_count":76,"kev_count":27,"last_cve_update":63},32269,"horde_groupware",{"id":113,"product_name":114,"version_count":62,"cve_count":76,"kev_count":27,"last_cve_update":115},32228,"apt-cacher","2014-10-06",{"id":117,"product_name":118,"version_count":38,"cve_count":76,"kev_count":27,"last_cve_update":119},32338,"xsabre","2008-10-03",{"id":121,"product_name":122,"version_count":76,"cve_count":76,"kev_count":27,"last_cve_update":123},32294,"netkit","2004-11-03",{"id":125,"product_name":126,"version_count":57,"cve_count":76,"kev_count":27,"last_cve_update":127},32229,"aptlinex","2008-04-22",{"id":129,"product_name":130,"version_count":27,"cve_count":76,"kev_count":27,"last_cve_update":131},32226,"apache2","2013-03-06",{"id":133,"product_name":134,"version_count":38,"cve_count":38,"kev_count":27,"last_cve_update":135},32257,"elvis_tiny","2001-01-09",{"id":137,"product_name":138,"version_count":38,"cve_count":38,"kev_count":27,"last_cve_update":139},32258,"exuberant_ctags","2014-10-07",{"id":141,"product_name":142,"version_count":27,"cve_count":38,"kev_count":27,"last_cve_update":119},32259,"feta",{"id":144,"product_name":145,"version_count":146,"cve_count":38,"kev_count":27,"last_cve_update":147},32260,"freedombox",117,"2020-09-02",{"id":149,"product_name":150,"version_count":38,"cve_count":38,"kev_count":27,"last_cve_update":151},32262,"ftpsync","2017-10-17",{"id":153,"product_name":154,"version_count":38,"cve_count":38,"kev_count":27,"last_cve_update":155},32263,"fuse","2016-01-26",{"id":157,"product_name":158,"version_count":38,"cve_count":38,"kev_count":27,"last_cve_update":159},32264,"gfax","2007-07-05",{"id":161,"product_name":162,"version_count":38,"cve_count":38,"kev_count":27,"last_cve_update":163},32265,"guilt","2007-10-04",{"id":165,"product_name":166,"version_count":27,"cve_count":38,"kev_count":27,"last_cve_update":167},32266,"hivex","2014-12-08",{"id":169,"product_name":170,"version_count":38,"cve_count":38,"kev_count":27,"last_cve_update":171},32267,"honeyd_common","2008-09-04",{"id":173,"product_name":174,"version_count":38,"cve_count":38,"kev_count":27,"last_cve_update":63},32270,"horde_imp",{"id":176,"product_name":177,"version_count":38,"cve_count":38,"kev_count":27,"last_cve_update":178},32273,"initramfs-tools","2008-11-07",{"id":180,"product_name":181,"version_count":76,"cve_count":38,"kev_count":27,"last_cve_update":182},32274,"internet_message","2003-01-17",{"id":184,"product_name":185,"version_count":27,"cve_count":38,"kev_count":27,"last_cve_update":186},32275,"kde4libs","2014-08-19",{"id":188,"product_name":189,"version_count":33,"cve_count":38,"kev_count":27,"last_cve_update":190},32276,"kernel-patch-vserver","2005-12-31",{"id":192,"product_name":193,"version_count":51,"cve_count":38,"kev_count":27,"last_cve_update":194},32277,"latd","2013-03-19",{"id":196,"product_name":197,"version_count":198,"cve_count":38,"kev_count":27,"last_cve_update":199},32279,"libdbd-pg-perl",56,"2009-04-30",{"id":201,"product_name":202,"version_count":38,"cve_count":38,"kev_count":27,"last_cve_update":190},32280,"libmail-audit-perl",{"id":204,"product_name":205,"version_count":27,"cve_count":38,"kev_count":27,"last_cve_update":206},32283,"localepurge","2014-01-28",{"id":208,"product_name":209,"version_count":38,"cve_count":38,"kev_count":27,"last_cve_update":210},32284,"logcheck","2022-09-20",{"id":212,"product_name":213,"version_count":38,"cve_count":38,"kev_count":27,"last_cve_update":214},32285,"logol","2012-08-07",{"id":216,"product_name":217,"version_count":38,"cve_count":38,"kev_count":27,"last_cve_update":218},32286,"ltp","2008-11-18",{"id":220,"product_name":221,"version_count":38,"cve_count":38,"kev_count":27,"last_cve_update":218},32287,"mailscanner",{"id":223,"product_name":224,"version_count":45,"cve_count":38,"kev_count":27,"last_cve_update":225},32291,"mono-debugger","2010-10-20",{"id":227,"product_name":228,"version_count":76,"cve_count":38,"kev_count":27,"last_cve_update":229},32292,"most","2017-12-05",{"id":231,"product_name":232,"version_count":38,"cve_count":38,"kev_count":27,"last_cve_update":233},32293,"myspell","2008-11-06",{"id":235,"product_name":236,"version_count":38,"cve_count":38,"kev_count":27,"last_cve_update":237},32295,"netstd","2002-10-04",{"id":239,"product_name":240,"version_count":38,"cve_count":38,"kev_count":27,"last_cve_update":233},32296,"newsgate",{"id":242,"product_name":243,"version_count":76,"cve_count":38,"kev_count":27,"last_cve_update":244},32297,"nss-ldap","2009-03-31",{"id":246,"product_name":247,"version_count":38,"cve_count":38,"kev_count":27,"last_cve_update":218},32298,"os-prober",{"id":249,"product_name":250,"version_count":57,"cve_count":38,"kev_count":27,"last_cve_update":251},32299,"overkill","2019-10-31",{"id":253,"product_name":254,"version_count":38,"cve_count":38,"kev_count":27,"last_cve_update":255},32300,"perm","2022-02-05",{"id":257,"product_name":258,"version_count":76,"cve_count":38,"kev_count":27,"last_cve_update":214},32301,"php5-common",{"id":260,"product_name":261,"version_count":262,"cve_count":38,"kev_count":27,"last_cve_update":263},32302,"phpbb3",28,"2013-09-12",{"id":265,"product_name":266,"version_count":267,"cve_count":38,"kev_count":27,"last_cve_update":229},32303,"postgresql-common",184,{"id":269,"product_name":270,"version_count":38,"cve_count":38,"kev_count":27,"last_cve_update":271},32304,"ppthtml","2014-04-25",{"id":273,"product_name":274,"version_count":27,"cve_count":38,"kev_count":27,"last_cve_update":275},32305,"ppxp","2005-05-19",{"id":277,"product_name":278,"version_count":38,"cve_count":38,"kev_count":27,"last_cve_update":279},32306,"projectl","2008-07-18",{"id":281,"product_name":282,"version_count":27,"cve_count":38,"kev_count":27,"last_cve_update":82},32307,"pycode-browser",{"id":284,"product_name":285,"version_count":38,"cve_count":38,"kev_count":27,"last_cve_update":286},32308,"pyftpd","2010-06-16",{"id":288,"product_name":289,"version_count":38,"cve_count":38,"kev_count":27,"last_cve_update":290},32325,"tin","2017-12-14",{"id":292,"product_name":293,"version_count":38,"cve_count":38,"kev_count":27,"last_cve_update":190},32224,"amaya",{"id":295,"product_name":296,"version_count":38,"cve_count":38,"kev_count":27,"last_cve_update":297},32225,"apache","2007-03-03",{"id":299,"product_name":300,"version_count":38,"cve_count":38,"kev_count":27,"last_cve_update":301},32230,"apt-listchanges","2008-01-17",{"id":303,"product_name":304,"version_count":27,"cve_count":38,"kev_count":27,"last_cve_update":305},32231,"apt-setup","2005-07-11",{"id":307,"product_name":308,"version_count":38,"cve_count":38,"kev_count":27,"last_cve_update":206},32232,"axiom",{"id":310,"product_name":311,"version_count":38,"cve_count":38,"kev_count":27,"last_cve_update":312},32233,"backupninja","2005-09-30",{"id":314,"product_name":315,"version_count":38,"cve_count":38,"kev_count":27,"last_cve_update":316},32234,"base-config","2006-04-19",{"id":318,"product_name":319,"version_count":81,"cve_count":38,"kev_count":27,"last_cve_update":320},32235,"bsdmainutils","2004-10-20",{"id":322,"product_name":323,"version_count":38,"cve_count":38,"kev_count":27,"last_cve_update":324},32236,"bsmtpd","2005-02-25",{"id":326,"product_name":327,"version_count":38,"cve_count":38,"kev_count":27,"last_cve_update":328},32237,"cfingerd","2013-03-14",{"id":330,"product_name":331,"version_count":38,"cve_count":38,"kev_count":27,"last_cve_update":171},32239,"citadel_server",{"id":333,"product_name":334,"version_count":57,"cve_count":38,"kev_count":27,"last_cve_update":335},32240,"courier-authlib","2021-03-15",{"id":337,"product_name":338,"version_count":62,"cve_count":38,"kev_count":27,"last_cve_update":339},32241,"cron","2019-03-12",{"id":341,"product_name":342,"version_count":38,"cve_count":38,"kev_count":27,"last_cve_update":343},32242,"crossroads","2018-10-26",{"id":345,"product_name":346,"version_count":27,"cve_count":38,"kev_count":27,"last_cve_update":347},32243,"dbd-firebird","2015-04-14",{"id":349,"product_name":350,"version_count":62,"cve_count":38,"kev_count":27,"last_cve_update":351},32244,"debian-goodies","2007-09-10",{"id":353,"product_name":354,"version_count":71,"cve_count":38,"kev_count":27,"last_cve_update":355},32245,"debian-lan-config","2019-12-23",{"id":357,"product_name":358,"version_count":51,"cve_count":38,"kev_count":27,"last_cve_update":359},32247,"debmake","2004-12-31",{"id":361,"product_name":362,"version_count":38,"cve_count":38,"kev_count":27,"last_cve_update":363},32248,"debmany","2023-03-05",{"id":365,"product_name":366,"version_count":38,"cve_count":38,"kev_count":27,"last_cve_update":367},32249,"devotee","2012-08-20",{"id":369,"product_name":370,"version_count":38,"cve_count":38,"kev_count":27,"last_cve_update":371},32253,"dpkg-cross","2008-11-05",{"id":373,"product_name":374,"version_count":27,"cve_count":38,"kev_count":27,"last_cve_update":375},32255,"duck","2022-02-19",{"id":377,"product_name":378,"version_count":76,"cve_count":38,"kev_count":27,"last_cve_update":379},32256,"duplicity","2019-12-13",{"id":381,"product_name":382,"version_count":62,"cve_count":38,"kev_count":27,"last_cve_update":383},32330,"tss","2008-04-17",{"id":385,"product_name":386,"version_count":38,"cve_count":38,"kev_count":27,"last_cve_update":387},32331,"turba","2008-07-27",{"id":389,"product_name":390,"version_count":76,"cve_count":38,"kev_count":27,"last_cve_update":391},32332,"txt2man","2013-09-30",{"id":393,"product_name":394,"version_count":27,"cve_count":38,"kev_count":27,"last_cve_update":395},32333,"unattended-upgrades","2015-07-01",{"id":397,"product_name":398,"version_count":38,"cve_count":38,"kev_count":27,"last_cve_update":399},32334,"unp","2008-01-03",{"id":401,"product_name":402,"version_count":27,"cve_count":38,"kev_count":27,"last_cve_update":403},32335,"x11-common","2020-02-21",{"id":405,"product_name":406,"version_count":38,"cve_count":38,"kev_count":27,"last_cve_update":407},32336,"xbindkeys-config","2017-08-28",{"id":409,"product_name":410,"version_count":411,"cve_count":38,"kev_count":27,"last_cve_update":412},32337,"xbuffy",40,"2014-05-05",{"id":414,"product_name":415,"version_count":27,"cve_count":38,"kev_count":27,"last_cve_update":416},32311,"python-imaging","2014-08-25",{"id":418,"product_name":419,"version_count":39,"cve_count":38,"kev_count":27,"last_cve_update":420},32314,"reprepro","2007-09-06",{"id":422,"product_name":423,"version_count":27,"cve_count":38,"kev_count":27,"last_cve_update":424},32315,"schroot","2022-08-27",{"id":426,"product_name":427,"version_count":38,"cve_count":38,"kev_count":27,"last_cve_update":428},32316,"sgml-tools","2001-06-27",{"id":430,"product_name":431,"version_count":38,"cve_count":38,"kev_count":27,"last_cve_update":432},32319,"strongswan","2014-05-07",{"id":434,"product_name":435,"version_count":38,"cve_count":38,"kev_count":27,"last_cve_update":436},32320,"sympa","2005-05-02",{"id":438,"product_name":439,"version_count":27,"cve_count":38,"kev_count":27,"last_cve_update":206},32321,"syncevolution",{"id":441,"product_name":442,"version_count":38,"cve_count":38,"kev_count":27,"last_cve_update":443},32322,"tetex-bin","2004-12-23",{"id":445,"product_name":446,"version_count":447,"cve_count":38,"kev_count":27,"last_cve_update":448},32323,"tex-common",77,"2011-03-25",{"id":450,"product_name":451,"version_count":38,"cve_count":38,"kev_count":27,"last_cve_update":452},32324,"texlive-extra-utils","2012-05-18",{"id":454,"product_name":455,"version_count":26,"cve_count":38,"kev_count":27,"last_cve_update":456},32222,"adequate","2013-12-07",{"id":458,"product_name":459,"version_count":38,"cve_count":38,"kev_count":27,"last_cve_update":460},32326,"tmpreaper","2019-02-04",{"id":462,"product_name":463,"version_count":71,"cve_count":38,"kev_count":27,"last_cve_update":464},32327,"toolchain-source","2005-04-27",{"id":466,"product_name":467,"version_count":38,"cve_count":38,"kev_count":27,"last_cve_update":468},32328,"tor","2017-07-23",{"id":470,"product_name":471,"version_count":27,"cve_count":27,"kev_count":27,"last_cve_update":472},32290,"mit_openafs",null,{"id":474,"product_name":475,"version_count":476,"cve_count":27,"kev_count":27,"last_cve_update":472},32318,"shadow-utils",9,{"id":478,"product_name":479,"version_count":76,"cve_count":27,"kev_count":27,"last_cve_update":472},32289,"mit_kerberos",{"id":481,"product_name":482,"version_count":76,"cve_count":27,"kev_count":27,"last_cve_update":472},32278,"ldapscripts",{"id":484,"product_name":485,"version_count":76,"cve_count":27,"kev_count":27,"last_cve_update":472},32251,"dhcpdump",{"id":487,"product_name":488,"version_count":81,"cve_count":27,"kev_count":27,"last_cve_update":472},32329,"trousers",{"id":490,"product_name":491,"version_count":38,"cve_count":27,"kev_count":27,"last_cve_update":472},32271,"iceape",{"id":493,"product_name":494,"version_count":495,"cve_count":27,"kev_count":27,"last_cve_update":472},32272,"ifupdown",68,"Debian is a technology vendor with 118 tracked products and 9360 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[498,506,515,520,526,531,536,541,548,553],{"cveId":499,"description":500,"publishedDate":501,"cvssScore":502,"cvssVersion":503,"severity":504,"isKev":4,"epssScore":505},"CVE-2012-1823","sapi\u002Fcgi\u002Fcgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'd' case.","2012-05-11",9.8,"v3.1","Critical",0.99998,{"cveId":507,"description":508,"publishedDate":509,"cvssScore":510,"cvssVersion":511,"severity":512,"isKev":513,"epssScore":514},"CVE-2013-0156","active_support\u002Fcore_ext\u002Fhash\u002Fconversions.rb in Ruby on Rails before 2.3.15, 3.0.x before 3.0.19, 3.1.x before 3.1.10, and 3.2.x before 3.2.11 does not properly restrict casts of string values, which allows remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service (memory and CPU consumption) involving nested XML entity references, by leveraging Action Pack support for (1) YAML type conversion or (2) Symbol type conversion.","2013-01-13",7.5,"v2","High",false,0.99449,{"cveId":516,"description":517,"publishedDate":518,"cvssScore":502,"cvssVersion":503,"severity":504,"isKev":4,"epssScore":519},"CVE-2012-0507","Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Concurrency.  NOTE: the previous information was obtained from the February 2012 Oracle CPU. Oracle has not commented on claims from a downstream vendor and third party researchers that this issue occurs because the AtomicReferenceArray class implementation does not ensure that the array is of the Object[] type, which allows attackers to cause a denial of service (JVM crash) or bypass Java sandbox restrictions.  NOTE: this issue was originally mapped to CVE-2011-3571, but that identifier was already assigned to a different issue.","2012-06-07",0.98189,{"cveId":521,"description":522,"publishedDate":523,"cvssScore":524,"cvssVersion":511,"severity":512,"isKev":513,"epssScore":525},"CVE-2006-3747","Off-by-one error in the ldap scheme handling in the Rewrite module (mod_rewrite) in Apache 1.3 from 1.3.28, 2.0.46 and other versions before 2.0.59, and 2.2, when RewriteEngine is enabled, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted URLs that are not properly handled using certain rewrite rules.","2006-07-28",7.6,0.96578,{"cveId":527,"description":528,"publishedDate":529,"cvssScore":502,"cvssVersion":503,"severity":504,"isKev":4,"epssScore":530},"CVE-2009-1151","Static code injection vulnerability in setup.php in phpMyAdmin 2.11.x before 2.11.9.5 and 3.x before 3.1.3.1 allows remote attackers to inject arbitrary PHP code into a configuration file via the save action.","2009-03-26",0.96565,{"cveId":532,"description":533,"publishedDate":534,"cvssScore":502,"cvssVersion":503,"severity":504,"isKev":513,"epssScore":535},"CVE-2011-2523","vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200\u002Ftcp.","2019-11-27",0.96184,{"cveId":537,"description":538,"publishedDate":539,"cvssScore":510,"cvssVersion":511,"severity":512,"isKev":513,"epssScore":540},"CVE-2002-0392","Apache 1.3 through 1.3.24, and Apache 2.0 through 2.0.36, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a chunk-encoded HTTP request that causes Apache to use an incorrect size.","2002-07-03",0.95232,{"cveId":542,"description":543,"publishedDate":544,"cvssScore":545,"cvssVersion":503,"severity":546,"isKev":513,"epssScore":547},"CVE-2008-1447","The DNS protocol, as implemented in (1) BIND 8 and 9 before 9.5.0-P1, 9.4.2-P1, and 9.3.5-P1; (2) Microsoft DNS in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2; and other implementations allow remote attackers to spoof DNS traffic via a birthday attack that uses in-bailiwick referrals to conduct cache poisoning against recursive resolvers, related to insufficient randomness of DNS transaction IDs and source ports, aka \"DNS Insufficient Socket Entropy Vulnerability\" or \"the Kaminsky bug.\"","2008-07-08",6.8,"Medium",0.95182,{"cveId":549,"description":550,"publishedDate":523,"cvssScore":551,"cvssVersion":511,"severity":546,"isKev":513,"epssScore":552},"CVE-2006-3918","http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache HTTP Server 1.3 before 1.3.35, 2.0 before 2.0.58, and 2.2 before 2.2.2, does not sanitize the Expect header from an HTTP request when it is reflected back in an error message, which might allow cross-site scripting (XSS) style attacks using web client components that can send arbitrary headers in requests, as demonstrated using a Flash SWF file.",4.3,0.95145,{"cveId":554,"description":555,"publishedDate":556,"cvssScore":107,"cvssVersion":511,"severity":504,"isKev":513,"epssScore":557},"CVE-2011-4862","Buffer overflow in libtelnet\u002Fencrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long encryption key, as exploited in the wild in December 2011.","2011-12-25",0.95061,[559,568,578,586,595,603,611,619,627,636,644,654,663,671,680,689,697,705,713,721,729,736,745,752,760,768,776,783,790,798,806,814,825,833,840,846,853,861,868,875,882,890,898,904,912,921,929,936,944,952,960,967,974,980,987,995,1004,1011,1019,1028,1036,1044,1051,1055,1058,1065,1072,1080,1086,1092,1099,1106,1109,1116,1123,1129,1136,1145,1153,1158,1166,1173,1180,1187,1193,1201,1209,1216,1223,1230,1236,1243,1250,1254,1261,1268,1274,1280,1286,1292,1298,1305,1312,1319,1326,1332,1338,1344],{"cveId":560,"description":561,"publishedDate":562,"cvssScore":502,"cvssVersion":503,"severity":504,"isKev":4,"epssScore":563,"cisaVulnName":564,"cisaDateAdded":565,"cisaShortDescription":566,"cisaRequiredAction":567},"CVE-2025-39682","In the Linux kernel, the following vulnerability has been resolved:\n\ntls: fix handling of zero-length records on the rx_list\n\nEach recvmsg() call must process either\n - only contiguous DATA records (any number of them)\n - one non-DATA record\n\nIf the next record has different type than what has already been\nprocessed we break out of the main processing loop. If the record\nhas already been decrypted (which may be the case for TLS 1.3 where\nwe don't know type until decryption) we queue the pending record\nto the rx_list. Next recvmsg() will pick it up from there.\n\nQueuing the skb to rx_list after zero-copy decrypt is not possible,\nsince in that case we decrypted directly to the user space buffer,\nand we don't have an skb to queue (darg.skb points to the ciphertext\nskb for access to metadata like length).\n\nOnly data records are allowed zero-copy, and we break the processing\nloop after each non-data record. So we should never zero-copy and\nthen find out that the record type has changed. The corner case\nwe missed is when the initial record comes from rx_list, and it's\nzero length.","2025-09-05",0.03252,"Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability","2026-09-18","Linux Kernel contains an improper check for unusual or exceptional conditions vulnerability in the TLS receive path which allows a zero-length record retrieved from the rx_list to bypass the intended recvmsg() record-type handling, potentially causing subsequent TLS records to be processed using incorrect zero-copy and queuing assumptions. The impacted product(s) could be end-of-life (EoL) and\u002For end-of-service (EoS). Users are advised to discontinue use and\u002For transition to a supported version.","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",{"cveId":569,"description":570,"publishedDate":571,"cvssScore":572,"cvssVersion":503,"severity":512,"isKev":4,"epssScore":573,"cisaVulnName":574,"cisaDateAdded":575,"cisaShortDescription":576,"cisaRequiredAction":577},"CVE-2022-0492","A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel\u002Fcgroup\u002Fcgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpectedly.","2022-03-03",7.8,0.05528,"Linux Kernel Improper Authentication Vulnerability","2026-06-02","Linux Kernel contains an improper authentication vulnerability which could allow for privilege escalation via the cgroups v1 release_agent feature.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":579,"description":580,"publishedDate":581,"cvssScore":572,"cvssVersion":503,"severity":512,"isKev":4,"epssScore":582,"cisaVulnName":583,"cisaDateAdded":584,"cisaShortDescription":585,"cisaRequiredAction":577},"CVE-2021-30952","An integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution.","2021-08-24",0.06964,"Apple Multiple Products Integer Overflow or Wraparound Vulnerability","2026-03-05","Apple tvOS, macOS, Safari, iPadOS and watchOS contain an integer overflow or wraparound vulnerability due to the processing of maliciously crafted web content that may lead to arbitrary code execution.",{"cveId":587,"description":588,"publishedDate":589,"cvssScore":590,"cvssVersion":503,"severity":504,"isKev":4,"epssScore":591,"cisaVulnName":592,"cisaDateAdded":593,"cisaShortDescription":594,"cisaRequiredAction":577},"CVE-2025-32463","Sudo before 1.9.17p1 allows local users to obtain root access because \u002Fetc\u002Fnsswitch.conf from a user-controlled directory is used with the --chroot option.","2025-06-30",9.3,0.55498,"Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability","2025-09-29","Sudo contains an inclusion of functionality from untrusted control sphere vulnerability. This vulnerability could allow local attacker to leverage sudo’s -R (--chroot) option to run arbitrary commands as root, even if they are not listed in the sudoers file.",{"cveId":596,"description":597,"publishedDate":598,"cvssScore":599,"cvssVersion":503,"severity":512,"isKev":4,"epssScore":600,"cisaVulnName":601,"cisaDateAdded":593,"cisaShortDescription":602,"cisaRequiredAction":577},"CVE-2021-21311","Adminer is an open-source database management in a single PHP file. In adminer from version 4.0.0 and before 4.7.9 there is a server-side request forgery vulnerability. Users of Adminer versions bundling all drivers (e.g. `adminer.php`) are affected. This is fixed in version 4.7.9.","2021-02-11",7.2,0.98464,"Adminer Server-Side Request Forgery Vulnerability","Adminer contains a server-side request forgery vulnerability that, when exploited, allows a remote attacker to obtain potentially sensitive information.",{"cveId":604,"description":605,"publishedDate":606,"cvssScore":39,"cvssVersion":503,"severity":512,"isKev":4,"epssScore":607,"cisaVulnName":608,"cisaDateAdded":609,"cisaShortDescription":610,"cisaRequiredAction":577},"CVE-2025-48384","Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When reading a config value, Git strips any trailing carriage return and line feed (CRLF). When writing a config entry, values with a trailing CR are not quoted, causing the CR to be lost when the config is later read. When initializing a submodule, if the submodule path contains a trailing CR, the altered path is read resulting in the submodule being checked out to an incorrect location. If a symlink exists that points the altered path to the submodule hooks directory, and the submodule contains an executable post-checkout hook, the script may be unintentionally executed after checkout. This vulnerability is fixed in v2.43.7, v2.44.4, v2.45.4, v2.46.4, v2.47.3, v2.48.2, v2.49.1, and v2.50.1.","2025-07-08",0.04379,"Git Link Following Vulnerability","2025-08-25","Git contains a link following vulnerability that stems from Git’s inconsistent handling of carriage return characters in configuration files.",{"cveId":612,"description":613,"publishedDate":21,"cvssScore":614,"cvssVersion":503,"severity":512,"isKev":4,"epssScore":615,"cisaVulnName":616,"cisaDateAdded":617,"cisaShortDescription":618,"cisaRequiredAction":577},"CVE-2025-6558","Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",8.8,0.10927,"Google Chromium ANGLE and GPU Improper Input Validation Vulnerability","2025-07-22","Google Chromium contains an improper input validation vulnerability in ANGLE and GPU. This vulnerability could allow a remote attacker to potentially perform a sandbox escape via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":620,"description":621,"publishedDate":622,"cvssScore":510,"cvssVersion":503,"severity":512,"isKev":4,"epssScore":623,"cisaVulnName":624,"cisaDateAdded":625,"cisaShortDescription":626,"cisaRequiredAction":577},"CVE-2019-5418","There is a File Content Disclosure vulnerability in Action View \u003C5.2.2.1, \u003C5.1.6.2, \u003C5.0.7.2, \u003C4.2.11.1 and v3 where specially crafted accept headers can cause contents of arbitrary files on the target system's filesystem to be exposed.","2019-03-27",0.98507,"Rails Ruby on Rails Path Traversal Vulnerability","2025-07-07","Rails Ruby on Rails contains a path traversal vulnerability in Action View. Specially crafted accept headers in combination with calls to `render file:` can cause arbitrary files on the target server to be rendered, disclosing the file contents.",{"cveId":628,"description":629,"publishedDate":630,"cvssScore":631,"cvssVersion":503,"severity":512,"isKev":4,"epssScore":632,"cisaVulnName":633,"cisaDateAdded":634,"cisaShortDescription":635,"cisaRequiredAction":577},"CVE-2025-27363","An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse font subglyph structures related to TrueType GX and variable font files. The vulnerable code assigns a signed short value to an unsigned long and then adds a static value causing it to wrap around and allocate too small of a heap buffer. The code then writes up to 6 signed long integers out of bounds relative to this buffer. This may result in arbitrary code execution. This vulnerability may have been exploited in the wild.","2025-03-11",8.1,0.27775,"FreeType Out-of-Bounds Write Vulnerability","2025-05-06","FreeType contains an out-of-bounds write vulnerability when attempting to parse font subglyph structures related to TrueType GX and variable font files that may allow for arbitrary code execution.",{"cveId":637,"description":638,"publishedDate":639,"cvssScore":502,"cvssVersion":503,"severity":504,"isKev":4,"epssScore":640,"cisaVulnName":641,"cisaDateAdded":642,"cisaShortDescription":643,"cisaRequiredAction":577},"CVE-2025-24813","Path Equivalence: 'file.Name' (Internal Dot) leading to Remote Code Execution and\u002For Information disclosure and\u002For malicious content added to uploaded files via write enabled Default Servlet in Apache Tomcat.\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.2, from 10.1.0-M1 through 10.1.34, from 9.0.0.M1 through 9.0.98.\nThe following versions were EOL at the time the CVE was created but are \nknown to be affected: 8.5.0 though 8.5.100. Other, older, EOL versions \nmay also be affected.\n\n\nIf all of the following were true, a malicious user was able to view       security sensitive files and\u002For inject content into those files:\n- writes enabled for the default servlet (disabled by default)\n- support for partial PUT (enabled by default)\n- a target URL for security sensitive uploads that was a sub-directory of a target URL for public uploads\n- attacker knowledge of the names of security sensitive files being uploaded\n- the security sensitive files also being uploaded via partial PUT\n\nIf all of the following were true, a malicious user was able to       perform remote code execution:\n- writes enabled for the default servlet (disabled by default)\n- support for partial PUT (enabled by default)\n- application was using Tomcat's file based session persistence with the default storage location\n- application included a library that may be leveraged in a deserialization attack\n\nUsers are recommended to upgrade to version 11.0.3, 10.1.35 or 9.0.99, which fixes the issue.","2025-03-10",0.99942,"Apache Tomcat Path Equivalence Vulnerability","2025-04-01","Apache Tomcat contains a path equivalence vulnerability that allows a remote attacker to execute code, disclose information, or inject malicious content via a partial PUT request. This vulnerability can be chained with CVE‑2026‑34486.",{"cveId":645,"description":646,"publishedDate":647,"cvssScore":648,"cvssVersion":503,"severity":546,"isKev":4,"epssScore":649,"cisaVulnName":650,"cisaDateAdded":651,"cisaShortDescription":652,"cisaRequiredAction":653},"CVE-2020-11023","In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing \u003Coption> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.","2020-04-29",6.9,0.84887,"JQuery Cross-Site Scripting (XSS) Vulnerability","2025-01-23","JQuery contains a persistent cross-site scripting (XSS) vulnerability. When passing maliciously formed, untrusted input enclosed in HTML tags, JQuery's DOM manipulators can execute untrusted code in the context of the user's browser.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":655,"description":656,"publishedDate":657,"cvssScore":658,"cvssVersion":503,"severity":546,"isKev":4,"epssScore":659,"cisaVulnName":660,"cisaDateAdded":661,"cisaShortDescription":662,"cisaRequiredAction":653},"CVE-2024-37383","Roundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 allows XSS via SVG animate attributes.","2024-06-07",6.1,0.73995,"RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability","2024-10-24","RoundCube Webmail contains a cross-site scripting (XSS) vulnerability in the handling of SVG animate attributes that allows a remote attacker to run malicious JavaScript code.",{"cveId":664,"description":665,"publishedDate":666,"cvssScore":502,"cvssVersion":503,"severity":504,"isKev":4,"epssScore":667,"cisaVulnName":668,"cisaDateAdded":669,"cisaShortDescription":670,"cisaRequiredAction":653},"CVE-2024-9680","An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. This vulnerability affects Firefox \u003C 131.0.2, Firefox ESR \u003C 128.3.1, Firefox ESR \u003C 115.16.1, Thunderbird \u003C 131.0.1, Thunderbird \u003C 128.3.1, and Thunderbird \u003C 115.16.0.","2024-10-09",0.23184,"Mozilla Firefox Use-After-Free Vulnerability","2024-10-15","Mozilla Firefox and Firefox ESR contain a use-after-free vulnerability in Animation timelines that allows for code execution in the content process.",{"cveId":672,"description":673,"publishedDate":674,"cvssScore":675,"cvssVersion":503,"severity":546,"isKev":4,"epssScore":676,"cisaVulnName":677,"cisaDateAdded":678,"cisaShortDescription":679,"cisaRequiredAction":653},"CVE-2021-4043","NULL Pointer Dereference in GitHub repository gpac\u002Fgpac prior to 1.1.0.","2022-02-04",5.5,0.04615,"Motion Spell GPAC Null Pointer Dereference Vulnerability","2024-09-30","Motion Spell GPAC contains a null pointer dereference vulnerability that could allow a local attacker to cause a denial-of-service (DoS) condition.",{"cveId":681,"description":682,"publishedDate":683,"cvssScore":684,"cvssVersion":503,"severity":512,"isKev":4,"epssScore":685,"cisaVulnName":686,"cisaDateAdded":687,"cisaShortDescription":688,"cisaRequiredAction":653},"CVE-2016-3714","The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to execute arbitrary code via shell metacharacters in a crafted image, aka \"ImageTragick.\"","2016-05-05",8.4,0.97485,"ImageMagick Improper Input Validation Vulnerability","2024-09-09","ImageMagick contains an improper input validation vulnerability that affects the EPHEMERAL, HTTPS, MVG, MSL, TEXT, SHOW, WIN, and PLT coders. This allows a remote attacker to execute arbitrary code via shell metacharacters in a crafted image.",{"cveId":690,"description":691,"publishedDate":692,"cvssScore":658,"cvssVersion":503,"severity":546,"isKev":4,"epssScore":693,"cisaVulnName":694,"cisaDateAdded":695,"cisaShortDescription":696,"cisaRequiredAction":653},"CVE-2020-13965","An issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. There is XSS via a malicious XML attachment because text\u002Fxml is among the allowed types for a preview.","2020-06-09",0.76596,"Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability","2024-06-26","Roundcube Webmail contains a cross-site scripting (XSS) vulnerability that allows a remote attacker to manipulate data via a malicious XML attachment.",{"cveId":698,"description":699,"publishedDate":700,"cvssScore":572,"cvssVersion":503,"severity":512,"isKev":4,"epssScore":701,"cisaVulnName":702,"cisaDateAdded":703,"cisaShortDescription":704,"cisaRequiredAction":653},"CVE-2024-1086","A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.\n\n\n\nThe nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the nf_hook_slow() function can cause a double free vulnerability when NF_DROP is issued with a drop error which resembles NF_ACCEPT.\n\n\n\nWe recommend upgrading past commit f342de4e2f33e0e39165d8639387aa6c19dff660.","2024-01-31",0.28058,"Linux Kernel Use-After-Free Vulnerability","2024-05-30","Linux kernel contains a use-after-free vulnerability in the netfilter: nf_tables component that allows an attacker to achieve local privilege escalation.",{"cveId":706,"description":707,"publishedDate":708,"cvssScore":658,"cvssVersion":503,"severity":546,"isKev":4,"epssScore":709,"cisaVulnName":710,"cisaDateAdded":711,"cisaShortDescription":712,"cisaRequiredAction":653},"CVE-2023-43770","Roundcube before 1.4.14, 1.5.x before 1.5.4, and 1.6.x before 1.6.3 allows XSS via text\u002Fplain e-mail messages with crafted links because of program\u002Flib\u002FRoundcube\u002Frcube_string_replacer.php behavior.","2023-09-22",0.6366,"Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability","2024-02-12","Roundcube Webmail contains a persistent cross-site scripting (XSS) vulnerability that can lead to information disclosure via malicious link references in plain\u002Ftext messages.",{"cveId":714,"description":715,"publishedDate":716,"cvssScore":614,"cvssVersion":503,"severity":512,"isKev":4,"epssScore":717,"cisaVulnName":718,"cisaDateAdded":719,"cisaShortDescription":720,"cisaRequiredAction":653},"CVE-2023-4762","Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)","2023-09-05",0.41375,"Google Chromium V8 Type Confusion Vulnerability","2024-02-06","Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to execute code via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":722,"description":723,"publishedDate":724,"cvssScore":614,"cvssVersion":503,"severity":512,"isKev":4,"epssScore":725,"cisaVulnName":726,"cisaDateAdded":727,"cisaShortDescription":728,"cisaRequiredAction":653},"CVE-2023-7024","Heap buffer overflow in WebRTC in Google Chrome prior to 120.0.6099.129 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)","2023-12-21",0.06671,"Google Chromium WebRTC Heap Buffer Overflow Vulnerability","2024-01-02","Google Chromium WebRTC, an open-source project providing web browsers with real-time communication, contains a heap buffer overflow vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could impact web browsers using WebRTC, including but not limited to Google Chrome.",{"cveId":730,"description":731,"publishedDate":732,"cvssScore":572,"cvssVersion":503,"severity":512,"isKev":4,"epssScore":733,"cisaVulnName":734,"cisaDateAdded":727,"cisaShortDescription":735,"cisaRequiredAction":653},"CVE-2023-7101","Spreadsheet::ParseExcel version 0.65 is a Perl module used for parsing Excel files. Spreadsheet::ParseExcel is vulnerable to an arbitrary code execution (ACE) vulnerability due to passing unvalidated input from a file into a string-type “eval”. Specifically, the issue stems from the evaluation of Number format strings (not to be confused with printf-style format strings) within the Excel parsing logic.","2023-12-24",0.18959,"Spreadsheet::ParseExcel Remote Code Execution Vulnerability","Spreadsheet::ParseExcel contains a remote code execution vulnerability due to passing unvalidated input from a file into a string-type “eval”. Specifically, the issue stems from the evaluation of Number format strings within the Excel parsing logic.",{"cveId":737,"description":738,"publishedDate":739,"cvssScore":614,"cvssVersion":503,"severity":512,"isKev":4,"epssScore":740,"cisaVulnName":741,"cisaDateAdded":742,"cisaShortDescription":743,"cisaRequiredAction":744},"CVE-2023-42917","A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.","2023-11-30",0.09295,"Apple Multiple Products WebKit Memory Corruption Vulnerability","2023-12-04","Apple iOS, iPadOS, macOS, and Safari WebKit contain a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.","Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.",{"cveId":746,"description":747,"publishedDate":739,"cvssScore":748,"cvssVersion":503,"severity":546,"isKev":4,"epssScore":749,"cisaVulnName":750,"cisaDateAdded":742,"cisaShortDescription":751,"cisaRequiredAction":744},"CVE-2023-42916","An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may disclose sensitive information. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.",6.5,0.17823,"Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability","Apple iOS, iPadOS, macOS, and Safari WebKit contain an out-of-bounds read vulnerability that may disclose sensitive information when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.",{"cveId":753,"description":754,"publishedDate":755,"cvssScore":756,"cvssVersion":503,"severity":504,"isKev":4,"epssScore":757,"cisaVulnName":758,"cisaDateAdded":739,"cisaShortDescription":759,"cisaRequiredAction":653},"CVE-2023-6345","Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)","2023-11-29",9.6,0.16468,"Google Skia Integer Overflow Vulnerability","Google Chromium Skia contains an integer overflow vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a malicious file. This vulnerability affects Google Chrome and ChromeOS, Android, Flutter, and possibly other products.",{"cveId":761,"description":762,"publishedDate":763,"cvssScore":572,"cvssVersion":503,"severity":512,"isKev":4,"epssScore":764,"cisaVulnName":765,"cisaDateAdded":766,"cisaShortDescription":767,"cisaRequiredAction":653},"CVE-2023-4911","A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.","2023-10-03",0.63769,"GNU C Library Buffer Overflow Vulnerability","2023-11-21","GNU C Library's dynamic loader ld.so contains a buffer overflow vulnerability when processing the GLIBC_TUNABLES environment variable, allowing a local attacker to execute code with elevated privileges.",{"cveId":769,"description":770,"publishedDate":771,"cvssScore":107,"cvssVersion":503,"severity":504,"isKev":4,"epssScore":772,"cisaVulnName":773,"cisaDateAdded":774,"cisaShortDescription":775,"cisaRequiredAction":653},"CVE-2023-46604","The Java OpenWire protocol marshaller is vulnerable to Remote Code \nExecution. This vulnerability may allow a remote attacker with network \naccess to either a Java-based OpenWire broker or client to run arbitrary\n shell commands by manipulating serialized class types in the OpenWire \nprotocol to cause either the client or the broker (respectively) to \ninstantiate any class on the classpath.\n\nUsers are recommended to upgrade\n both brokers and clients to version 5.15.16, 5.16.7, 5.17.6, or 5.18.3 \nwhich fixes this issue.","2023-10-27",0.99891,"Apache ActiveMQ Deserialization of Untrusted Data Vulnerability","2023-11-02","Apache ActiveMQ contains a deserialization of untrusted data vulnerability that may allow a remote attacker with network access to a broker to run shell commands by manipulating serialized class types in the OpenWire protocol to cause the broker to instantiate any class on the classpath.",{"cveId":777,"description":778,"publishedDate":779,"cvssScore":658,"cvssVersion":503,"severity":546,"isKev":4,"epssScore":780,"cisaVulnName":710,"cisaDateAdded":781,"cisaShortDescription":782,"cisaRequiredAction":653},"CVE-2023-5631","Roundcube before 1.4.15, 1.5.x before 1.5.5, and 1.6.x before 1.6.4 allows stored XSS via an HTML e-mail message with a crafted SVG document because of program\u002Flib\u002FRoundcube\u002Frcube_washtml.php behavior. This could allow a remote attacker\n\nto load arbitrary JavaScript code.","2023-10-18",0.76337,"2023-10-26","Roundcube Webmail contains a persistent cross-site scripting (XSS) vulnerability that allows a remote attacker to run malicious JavaScript code.",{"cveId":784,"description":785,"publishedDate":786,"cvssScore":510,"cvssVersion":503,"severity":512,"isKev":4,"epssScore":787,"cisaVulnName":788,"cisaDateAdded":786,"cisaShortDescription":789,"cisaRequiredAction":577},"CVE-2023-44487","The HTTP\u002F2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.","2023-10-10",0.99999,"HTTP\u002F2 Rapid Reset Attack Vulnerability","HTTP\u002F2 contains a rapid reset vulnerability that allows for a distributed denial-of-service attack (DDoS).",{"cveId":791,"description":792,"publishedDate":793,"cvssScore":614,"cvssVersion":503,"severity":512,"isKev":4,"epssScore":794,"cisaVulnName":795,"cisaDateAdded":796,"cisaShortDescription":797,"cisaRequiredAction":653},"CVE-2023-5217","Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)","2023-09-28",0.49013,"Google Chromium libvpx Heap Buffer Overflow Vulnerability","2023-10-02","Google Chromium libvpx contains a heap buffer overflow vulnerability in vp8 encoding that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could impact web browsers using libvpx, including but not limited to Google Chrome.",{"cveId":799,"description":800,"publishedDate":801,"cvssScore":614,"cvssVersion":503,"severity":512,"isKev":4,"epssScore":802,"cisaVulnName":803,"cisaDateAdded":804,"cisaShortDescription":805,"cisaRequiredAction":653},"CVE-2023-41993","The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.","2023-09-21",0.24349,"Apple Multiple Products WebKit Code Execution Vulnerability","2023-09-25","Apple iOS, iPadOS, macOS, and Safari WebKit contain an unspecified vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.",{"cveId":807,"description":808,"publishedDate":809,"cvssScore":614,"cvssVersion":503,"severity":512,"isKev":4,"epssScore":810,"cisaVulnName":811,"cisaDateAdded":812,"cisaShortDescription":813,"cisaRequiredAction":653},"CVE-2023-4863","Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)","2023-09-12",0.99979,"Google Chromium WebP Heap-Based Buffer Overflow Vulnerability","2023-09-13","Google Chromium WebP contains a heap-based buffer overflow vulnerability that allows a remote attacker to perform an out-of-bounds memory write via a crafted HTML page. This vulnerability can affect applications that use the WebP Codec.",{"cveId":815,"description":816,"publishedDate":817,"cvssScore":818,"cvssVersion":503,"severity":819,"isKev":4,"epssScore":820,"cisaVulnName":821,"cisaDateAdded":822,"cisaShortDescription":823,"cisaRequiredAction":824},"CVE-2023-20867","A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine.","2023-06-13",3.9,"Low",0.13638,"VMware Tools Authentication Bypass Vulnerability","2023-06-23","VMware Tools contains an authentication bypass vulnerability in the vgauth module. A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine. An attacker must have root access over ESXi to exploit this vulnerability.","Apply updates per vendor instructions.",{"cveId":826,"description":827,"publishedDate":828,"cvssScore":502,"cvssVersion":503,"severity":504,"isKev":4,"epssScore":829,"cisaVulnName":830,"cisaDateAdded":831,"cisaShortDescription":832,"cisaRequiredAction":824},"CVE-2021-44026","Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to a potential SQL injection via search or search_params.","2021-11-19",0.69882,"Roundcube Webmail SQL Injection Vulnerability","2023-06-22","Roundcube Webmail is vulnerable to SQL injection via search or search_params.",{"cveId":834,"description":835,"publishedDate":836,"cvssScore":510,"cvssVersion":503,"severity":512,"isKev":4,"epssScore":837,"cisaVulnName":838,"cisaDateAdded":831,"cisaShortDescription":839,"cisaRequiredAction":824},"CVE-2016-9079","A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild targeting Firefox and Tor Browser users on Windows. This vulnerability affects Firefox \u003C 50.0.2, Firefox ESR \u003C 45.5.1, and Thunderbird \u003C 45.5.1.","2018-06-11",0.87357,"Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability","Mozilla Firefox, Firefox ESR, and Thunderbird contain a use-after-free vulnerability in SVG Animation, targeting Firefox and Tor browser users on Windows.",{"cveId":841,"description":842,"publishedDate":843,"cvssScore":658,"cvssVersion":503,"severity":546,"isKev":4,"epssScore":844,"cisaVulnName":694,"cisaDateAdded":831,"cisaShortDescription":845,"cisaRequiredAction":824},"CVE-2020-35730","An XSS issue was discovered in Roundcube Webmail before 1.2.13, 1.3.x before 1.3.16, and 1.4.x before 1.4.10. The attacker can send a plain text e-mail message, with JavaScript in a link reference element that is mishandled by linkref_addindex in rcube_string_replacer.php.","2020-12-28",0.3292,"Roundcube Webmail contains a cross-site scripting (XSS) vulnerability that allows an attacker to send a plain text e-mail message with Javascript in a link reference element that is mishandled by linkref_addinindex in rcube_string_replacer.php.",{"cveId":847,"description":848,"publishedDate":849,"cvssScore":614,"cvssVersion":503,"severity":512,"isKev":4,"epssScore":850,"cisaVulnName":718,"cisaDateAdded":851,"cisaShortDescription":852,"cisaRequiredAction":824},"CVE-2023-3079","Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)","2023-06-05",0.37858,"2023-06-07","Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":854,"description":855,"publishedDate":856,"cvssScore":502,"cvssVersion":503,"severity":504,"isKev":4,"epssScore":857,"cisaVulnName":858,"cisaDateAdded":859,"cisaShortDescription":860,"cisaRequiredAction":824},"CVE-2016-8735","Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8.5.7, and 9.x before 9.0.0.M12 if JmxRemoteLifecycleListener is used and an attacker can reach JMX ports. The issue exists because this listener wasn't updated for consistency with the CVE-2016-3427 Oracle patch that affected credential types.","2017-04-06",0.90338,"Apache Tomcat Remote Code Execution Vulnerability","2023-05-12","Apache Tomcat contains an unspecified vulnerability that allows for remote code execution if JmxRemoteLifecycleListener is used and an attacker can reach Java Management Extension (JMX) ports. This CVE exists because this listener wasn't updated for consistency with the Oracle patched issues for CVE-2016-3427 which affected credential types.",{"cveId":862,"description":863,"publishedDate":864,"cvssScore":502,"cvssVersion":503,"severity":504,"isKev":4,"epssScore":865,"cisaVulnName":866,"cisaDateAdded":859,"cisaShortDescription":867,"cisaRequiredAction":824},"CVE-2016-3427","Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.","2016-04-21",0.92334,"Oracle Java SE and JRockit Unspecified Vulnerability","Oracle Java SE and JRockit contains an unspecified vulnerability that allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Java Management Extensions (JMX). This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service.",{"cveId":869,"description":870,"publishedDate":871,"cvssScore":572,"cvssVersion":503,"severity":512,"isKev":4,"epssScore":872,"cisaVulnName":873,"cisaDateAdded":859,"cisaShortDescription":874,"cisaRequiredAction":824},"CVE-2021-3560","It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.","2022-02-16",0.23708,"Red Hat Polkit Incorrect Authorization Vulnerability","Red Hat Polkit contains an incorrect authorization vulnerability through the bypassing of credential checks for D-Bus requests, allowing for privilege escalation.",{"cveId":876,"description":877,"publishedDate":432,"cvssScore":675,"cvssVersion":503,"severity":546,"isKev":4,"epssScore":878,"cisaVulnName":879,"cisaDateAdded":859,"cisaShortDescription":880,"cisaRequiredAction":881},"CVE-2014-0196","The n_tty_write function in drivers\u002Ftty\u002Fn_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the \"LECHO & !OPOST\" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings.",0.20329,"Linux Kernel Race Condition Vulnerability","Linux Kernel contains a race condition vulnerability within the n_tty_write function that allows local users to cause a denial-of-service (DoS) or gain privileges via read and write operations with long strings.","The impacted product is end-of-life and should be disconnected if still in use.",{"cveId":883,"description":884,"publishedDate":885,"cvssScore":476,"cvssVersion":503,"severity":504,"isKev":4,"epssScore":886,"cisaVulnName":887,"cisaDateAdded":888,"cisaShortDescription":889,"cisaRequiredAction":824},"CVE-2021-45046","It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. This could allows attackers with control over Thread Context Map (MDC) input data when the logging configuration uses a non-default Pattern Layout with either a Context Lookup (for example, $${ctx:loginId}) or a Thread Context Map pattern (%X, %mdc, or %MDC) to craft malicious input data using a JNDI Lookup pattern resulting in an information leak and remote code execution in some environments and local code execution in all environments. Log4j 2.16.0 (Java 8) and 2.12.2 (Java 7) fix this issue by removing support for message lookup patterns and disabling JNDI functionality by default.","2021-12-14",0.99977,"Apache Log4j2 Deserialization of Untrusted Data Vulnerability","2023-05-01","Apache Log4j2 contains a deserialization of untrusted data vulnerability due to the incomplete fix of CVE-2021-44228, where the Thread Context Lookup Pattern is vulnerable to remote code execution in certain non-default configurations.",{"cveId":891,"description":892,"publishedDate":893,"cvssScore":756,"cvssVersion":503,"severity":504,"isKev":4,"epssScore":894,"cisaVulnName":895,"cisaDateAdded":896,"cisaShortDescription":897,"cisaRequiredAction":824},"CVE-2023-2136","Integer overflow in Skia in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)","2023-04-19",0.05739,"Google Chrome Skia Integer Overflow Vulnerability","2023-04-21","Google Chromium Skia contains an integer overflow vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability affects Google Chrome and ChromeOS, Android, Flutter, and possibly other products.",{"cveId":899,"description":900,"publishedDate":901,"cvssScore":614,"cvssVersion":503,"severity":512,"isKev":4,"epssScore":902,"cisaVulnName":718,"cisaDateAdded":903,"cisaShortDescription":852,"cisaRequiredAction":824},"CVE-2023-2033","Type confusion in V8 in Google Chrome prior to 112.0.5615.121 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)","2023-04-14",0.40798,"2023-04-17",{"cveId":905,"description":906,"publishedDate":907,"cvssScore":502,"cvssVersion":503,"severity":504,"isKev":4,"epssScore":908,"cisaVulnName":909,"cisaDateAdded":910,"cisaShortDescription":911,"cisaRequiredAction":824},"CVE-2017-7494","Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share, and then cause the server to load and execute it.","2017-05-30",0.99448,"Samba Remote Code Execution Vulnerability","2023-03-30","Samba contains a remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share and then cause the server to load and execute it.",{"cveId":913,"description":914,"publishedDate":915,"cvssScore":916,"cvssVersion":503,"severity":512,"isKev":4,"epssScore":917,"cisaVulnName":918,"cisaDateAdded":919,"cisaShortDescription":920,"cisaRequiredAction":824},"CVE-2021-39144","XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. XStream 1.4.18 uses no longer a blacklist by default, since it cannot be secured for general purpose.","2021-08-23",8.5,0.98124,"XStream Remote Code Execution Vulnerability","2023-03-10","XStream contains a remote code execution vulnerability that allows an attacker to manipulate the processed input stream and replace or inject objects that result in the execution of a local command on the server. This vulnerability can affect multiple products, including but not limited to VMware Cloud Foundation.",{"cveId":922,"description":923,"publishedDate":924,"cvssScore":572,"cvssVersion":503,"severity":512,"isKev":4,"epssScore":925,"cisaVulnName":926,"cisaDateAdded":927,"cisaShortDescription":928,"cisaRequiredAction":824},"CVE-2020-28949","Archive_Tar through 1.4.10 has :\u002F\u002F filename sanitization only to address phar attacks, and thus any other stream-wrapper attack (such as file:\u002F\u002F to overwrite files) can still succeed.","2020-11-19",0.84554,"PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability","2022-08-25","PEAR Archive_Tar allows an unserialization attack because phar: is blocked but PHAR: is not blocked. PEAR stands for PHP Extension and Application Repository and it is an open-source framework and distribution system for reusable PHP components with known usage in third-party products such as Drupal Core and Red Hat Linux.",{"cveId":930,"description":931,"publishedDate":932,"cvssScore":510,"cvssVersion":503,"severity":512,"isKev":4,"epssScore":933,"cisaVulnName":934,"cisaDateAdded":927,"cisaShortDescription":935,"cisaRequiredAction":824},"CVE-2020-36193","Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.","2021-01-18",0.70595,"PEAR Archive_Tar Improper Link Resolution Vulnerability","PEAR Archive_Tar Tar.php allows write operations with directory traversal due to inadequate checking of symbolic links. PEAR stands for PHP Extension and Application Repository and it is an open-source framework and distribution system for reusable PHP components with known usage in third-party products such as Drupal Core and Red Hat Linux.",{"cveId":937,"description":938,"publishedDate":939,"cvssScore":614,"cvssVersion":503,"severity":512,"isKev":4,"epssScore":940,"cisaVulnName":941,"cisaDateAdded":942,"cisaShortDescription":943,"cisaRequiredAction":824},"CVE-2022-32893","An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey 12.5.1, Safari 15.6.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.","2022-08-24",0.09931,"Apple iOS and macOS Out-of-Bounds Write Vulnerability","2022-08-18","Apple iOS and macOS contain an out-of-bounds write vulnerability that could allow for remote code execution when processing malicious crafted web content.",{"cveId":945,"description":946,"publishedDate":947,"cvssScore":510,"cvssVersion":503,"severity":512,"isKev":4,"epssScore":948,"cisaVulnName":949,"cisaDateAdded":950,"cisaShortDescription":951,"cisaRequiredAction":824},"CVE-2022-30333","RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) operation, as demonstrated by creating a ~\u002F.ssh\u002Fauthorized_keys file. NOTE: WinRAR and Android RAR are unaffected.","2022-05-09",0.99233,"RARLAB UnRAR Directory Traversal Vulnerability","2022-08-09","RARLAB UnRAR on Linux and UNIX contains a directory traversal vulnerability, allowing an attacker to write to files during an extract (unpack) operation.",{"cveId":953,"description":954,"publishedDate":955,"cvssScore":614,"cvssVersion":503,"severity":512,"isKev":4,"epssScore":956,"cisaVulnName":957,"cisaDateAdded":958,"cisaShortDescription":959,"cisaRequiredAction":824},"CVE-2018-6065","Integer overflow in computing the required allocation size when instantiating a new javascript object in V8 in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.","2018-11-14",0.60304,"Google Chromium V8 Integer Overflow Vulnerability","2022-06-08","Google Chromium V8 Engine contains an integer overflow vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":961,"description":962,"publishedDate":963,"cvssScore":614,"cvssVersion":503,"severity":512,"isKev":4,"epssScore":964,"cisaVulnName":965,"cisaDateAdded":958,"cisaShortDescription":966,"cisaRequiredAction":824},"CVE-2016-1646","The Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome before 49.0.2623.108, does not properly consider element data types, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted JavaScript code.","2016-03-29",0.4811,"Google Chromium V8 Out-of-Bounds Read Vulnerability","Google Chromium V8 Engine contains an out-of-bounds read vulnerability that allows a remote attacker to cause a denial of service or possibly have another unspecified impact via crafted JavaScript code. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":968,"description":969,"publishedDate":970,"cvssScore":614,"cvssVersion":503,"severity":512,"isKev":4,"epssScore":971,"cisaVulnName":972,"cisaDateAdded":958,"cisaShortDescription":973,"cisaRequiredAction":824},"CVE-2017-5030","Incorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac and 57.0.2987.108 for Android allowed a remote attacker to execute arbitrary code via a crafted HTML page.","2017-04-24",0.40635,"Google Chromium V8 Memory Corruption Vulnerability","Google Chromium V8 Engine contains a memory corruption vulnerability that allows a remote attacker to execute code via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":975,"description":976,"publishedDate":955,"cvssScore":614,"cvssVersion":503,"severity":512,"isKev":4,"epssScore":977,"cisaVulnName":978,"cisaDateAdded":958,"cisaShortDescription":979,"cisaRequiredAction":824},"CVE-2018-17463","Incorrect side effect annotation in V8 in Google Chrome prior to 70.0.3538.64 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.",0.84564,"Google Chromium V8 Remote Code Execution Vulnerability","Google Chromium V8 Engine contains an unspecified vulnerability that allows a remote attacker to execute code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":981,"description":982,"publishedDate":983,"cvssScore":614,"cvssVersion":503,"severity":512,"isKev":4,"epssScore":984,"cisaVulnName":985,"cisaDateAdded":958,"cisaShortDescription":986,"cisaRequiredAction":824},"CVE-2018-17480","Execution of user supplied Javascript during array deserialization leading to an out of bounds write in V8 in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.","2018-12-11",0.3564,"Google Chromium V8 Out-of-Bounds Write Vulnerability","Google Chromium V8 Engine contains out-of-bounds write vulnerability that allows a remote attacker to execute code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":988,"description":989,"publishedDate":990,"cvssScore":572,"cvssVersion":503,"severity":512,"isKev":4,"epssScore":991,"cisaVulnName":992,"cisaDateAdded":993,"cisaShortDescription":994,"cisaRequiredAction":824},"CVE-2017-8291","Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via .rsdparams type confusion with a \"\u002FOutputFile (%pipe%\" substring in a crafted .eps document that is an input to the gs program, as exploited in the wild in April 2017.","2017-04-27",0.96968,"Artifex Ghostscript Type Confusion Vulnerability","2022-05-24","Artifex Ghostscript allows -dSAFER bypass and remote command execution via .rsdparams type confusion with a \"\u002FOutputFile.",{"cveId":996,"description":997,"publishedDate":998,"cvssScore":999,"cvssVersion":503,"severity":546,"isKev":4,"epssScore":1000,"cisaVulnName":1001,"cisaDateAdded":1002,"cisaShortDescription":1003,"cisaRequiredAction":824},"CVE-2021-0920","In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-196926917References: Upstream kernel","2021-12-15",6.4,0.00867,"Android Kernel Race Condition Vulnerability","2022-05-23","Android kernel contains a race condition, which allows for a use-after-free vulnerability. Exploitation can allow for privilege escalation.",{"cveId":1005,"description":1006,"publishedDate":1007,"cvssScore":510,"cvssVersion":503,"severity":512,"isKev":4,"epssScore":787,"cisaVulnName":1008,"cisaDateAdded":1009,"cisaShortDescription":1010,"cisaRequiredAction":824},"CVE-2014-0160","The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug.","2014-04-07","OpenSSL Information Disclosure Vulnerability","2022-05-04","The TLS and DTLS implementations in OpenSSL do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information.",{"cveId":1012,"description":1013,"publishedDate":1014,"cvssScore":502,"cvssVersion":503,"severity":504,"isKev":4,"epssScore":1015,"cisaVulnName":1016,"cisaDateAdded":1017,"cisaShortDescription":1018,"cisaRequiredAction":824},"CVE-2018-7602","A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being compromised. This vulnerability is related to Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-002. Both SA-CORE-2018-002 and this vulnerability are being exploited in the wild.","2018-07-19",0.99172,"Drupal Core Remote Code Execution Vulnerability","2022-04-13","A remote code execution vulnerability exists within multiple subsystems of Drupal that can allow attackers to exploit multiple attack vectors on a Drupal site.",{"cveId":1020,"description":1021,"publishedDate":1022,"cvssScore":1023,"cvssVersion":503,"severity":546,"isKev":4,"epssScore":1024,"cisaVulnName":1025,"cisaDateAdded":1026,"cisaShortDescription":1027,"cisaRequiredAction":824},"CVE-2021-22600","A double free bug in packet_set_ring() in net\u002Fpacket\u002Faf_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgrading kernel past the effected versions or rebuilding past ec6af094ea28f0f2dda1a6a33b14cd57e36a9755","2022-01-26",6.6,0.06586,"Linux Kernel Privilege Escalation Vulnerability","2022-04-11","Linux Kernel contains a flaw in the packet socket (AF_PACKET) implementation which could lead to incorrectly freeing memory. A local user could exploit this for denial-of-service (DoS) or possibly for privilege escalation.",{"cveId":1029,"description":1030,"publishedDate":1031,"cvssScore":572,"cvssVersion":503,"severity":512,"isKev":4,"epssScore":1032,"cisaVulnName":1033,"cisaDateAdded":1034,"cisaShortDescription":1035,"cisaRequiredAction":824},"CVE-2021-3156","Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via \"sudoedit -s\" and a command-line argument that ends with a single backslash character.","2021-01-26",0.99962,"Sudo Heap-Based Buffer Overflow Vulnerability","2022-04-06","Sudo contains an off-by-one error that can result in a heap-based buffer overflow, which allows for privilege escalation.",{"cveId":1037,"description":1038,"publishedDate":1039,"cvssScore":107,"cvssVersion":503,"severity":504,"isKev":4,"epssScore":1040,"cisaVulnName":1041,"cisaDateAdded":1042,"cisaShortDescription":1043,"cisaRequiredAction":824},"CVE-2022-0543","It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specific) Lua sandbox escape, which could result in remote code execution.","2022-02-18",0.99351,"Debian-specific Redis Server Lua Sandbox Escape Vulnerability","2022-03-28","Redis is prone to a (Debian-specific) Lua sandbox escape, which could result in remote code execution.",{"cveId":1045,"description":1046,"publishedDate":1047,"cvssScore":614,"cvssVersion":503,"severity":512,"isKev":4,"epssScore":1048,"cisaVulnName":1049,"cisaDateAdded":1042,"cisaShortDescription":1050,"cisaRequiredAction":824},"CVE-2013-1690","Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted web site that triggers an attempt to execute data at an unmapped memory location.","2013-06-26",0.69021,"Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability","Mozilla Firefox and Thunderbird do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial-of-service (DoS) or possibly execute malicious code via a crafted web site.",{"cveId":527,"description":528,"publishedDate":529,"cvssScore":502,"cvssVersion":503,"severity":504,"isKev":4,"epssScore":530,"cisaVulnName":1052,"cisaDateAdded":1053,"cisaShortDescription":1054,"cisaRequiredAction":824},"phpMyAdmin Remote Code Execution Vulnerability","2022-03-25","Setup script used to generate configuration can be fooled using a crafted POST request to include arbitrary PHP code in generated configuration file.",{"cveId":499,"description":500,"publishedDate":501,"cvssScore":502,"cvssVersion":503,"severity":504,"isKev":4,"epssScore":505,"cisaVulnName":1056,"cisaDateAdded":1053,"cisaShortDescription":1057,"cisaRequiredAction":824},"PHP-CGI Query String Parameter Vulnerability","sapi\u002Fcgi\u002Fcgi_main.c in PHP, when configured as a CGI script, does not properly handle query strings, which allows remote attackers to execute arbitrary code.",{"cveId":1059,"description":1060,"publishedDate":1061,"cvssScore":502,"cvssVersion":503,"severity":504,"isKev":4,"epssScore":1062,"cisaVulnName":1063,"cisaDateAdded":1053,"cisaShortDescription":1064,"cisaRequiredAction":824},"CVE-2020-7247","smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to execute arbitrary commands as root via a crafted SMTP session, as demonstrated by shell metacharacters in a MAIL FROM field. This affects the \"uncommented\" default configuration. The issue exists because of an incorrect return value upon failure of input validation.","2020-01-29",0.98972,"OpenSMTPD Remote Code Execution Vulnerability","smtp_mailaddr in smtp_session.c in OpenSMTPD, as used in OpenBSD and other products, allows remote attackers to execute arbitrary commands as root via a crafted SMTP session.",{"cveId":1066,"description":1067,"publishedDate":1068,"cvssScore":502,"cvssVersion":503,"severity":504,"isKev":4,"epssScore":1069,"cisaVulnName":1070,"cisaDateAdded":1053,"cisaShortDescription":1071,"cisaRequiredAction":824},"CVE-2010-4344","Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMTP session that includes two MAIL commands in conjunction with a large message containing crafted headers, leading to improper rejection logging.","2010-12-14",0.71706,"Exim Heap-Based Buffer Overflow Vulnerability","Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMTP session.",{"cveId":1073,"description":1074,"publishedDate":1075,"cvssScore":1076,"cvssVersion":503,"severity":512,"isKev":4,"epssScore":1077,"cisaVulnName":1078,"cisaDateAdded":1053,"cisaShortDescription":1079,"cisaRequiredAction":824},"CVE-2019-11043","In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space reserved for FCGI protocol data, thus opening the possibility of remote code execution.","2019-10-28",8.7,0.99748,"PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability","In some versions of PHP in certain configurations of FPM setup, it is possible to cause FPM module to write past allocated buffers allowing the possibility of remote code execution.",{"cveId":1081,"description":1082,"publishedDate":1083,"cvssScore":631,"cvssVersion":503,"severity":512,"isKev":4,"epssScore":1084,"cisaVulnName":858,"cisaDateAdded":1053,"cisaShortDescription":1085,"cisaRequiredAction":824},"CVE-2017-12617","When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.","2017-10-04",0.99968,"When running Apache Tomcat, it is possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.",{"cveId":1087,"description":1088,"publishedDate":1068,"cvssScore":572,"cvssVersion":503,"severity":512,"isKev":4,"epssScore":1089,"cisaVulnName":1090,"cisaDateAdded":1053,"cisaShortDescription":1091,"cisaRequiredAction":824},"CVE-2010-4345","Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary commands, as demonstrated by the spool_directory directive.",0.17965,"Exim Privilege Escalation Vulnerability","Exim allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary commands.",{"cveId":1093,"description":1094,"publishedDate":1095,"cvssScore":510,"cvssVersion":503,"severity":512,"isKev":4,"epssScore":1096,"cisaVulnName":1097,"cisaDateAdded":1053,"cisaShortDescription":1098,"cisaRequiredAction":824},"CVE-2016-0752","Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a .. (dot dot) in a pathname.","2016-02-16",0.95537,"Ruby on Rails Directory Traversal Vulnerability","Directory traversal vulnerability in Action View in Ruby on Rails allows remote attackers to read arbitrary files.",{"cveId":1100,"description":1101,"publishedDate":1102,"cvssScore":502,"cvssVersion":503,"severity":504,"isKev":4,"epssScore":1103,"cisaVulnName":1104,"cisaDateAdded":571,"cisaShortDescription":1105,"cisaRequiredAction":824},"CVE-2015-2590","Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2015-4732.","2015-07-16",0.25469,"Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability","An unspecified vulnerability exists within Oracle Java Runtime Environment that allows an attacker to perform remote code execution.",{"cveId":516,"description":517,"publishedDate":518,"cvssScore":502,"cvssVersion":503,"severity":504,"isKev":4,"epssScore":519,"cisaVulnName":1107,"cisaDateAdded":571,"cisaShortDescription":1108,"cisaRequiredAction":824},"Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability","An incorrect type vulnerability exists in the Concurrency component of Oracle's Java Runtime Environment allows an attacker to remotely execute arbitrary code.",{"cveId":1110,"description":1111,"publishedDate":1112,"cvssScore":502,"cvssVersion":503,"severity":504,"isKev":4,"epssScore":1113,"cisaVulnName":1114,"cisaDateAdded":571,"cisaShortDescription":1115,"cisaRequiredAction":824},"CVE-2020-1938","When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an attacker, they can be exploited in ways that may be surprising. In Apache Tomcat 9.0.0.M1 to 9.0.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99, Tomcat shipped with an AJP Connector enabled by default that listened on all configured IP addresses. It was expected (and recommended in the security guide) that this Connector would be disabled if not required. This vulnerability report identified a mechanism that allowed: - returning arbitrary files from anywhere in the web application - processing any file in the web application as a JSP Further, if the web application allowed file upload and stored those files within the web application (or the attacker was able to control the content of the web application by some other means) then this, along with the ability to process a file as a JSP, made remote code execution possible. It is important to note that mitigation is only required if an AJP port is accessible to untrusted users. Users wishing to take a defence-in-depth approach and block the vector that permits returning arbitrary files and execution as JSP may upgrade to Apache Tomcat 9.0.31, 8.5.51 or 7.0.100 or later. A number of changes were made to the default AJP Connector configuration in 9.0.31 to harden the default configuration. It is likely that users upgrading to 9.0.31, 8.5.51 or 7.0.100 or later will need to make small changes to their configurations.","2020-02-24",0.9927,"Apache Tomcat Improper Privilege Management Vulnerability","Apache Tomcat treats Apache JServ Protocol (AJP) connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an attacker, they can be exploited.",{"cveId":1117,"description":1118,"publishedDate":1119,"cvssScore":502,"cvssVersion":503,"severity":504,"isKev":4,"epssScore":1120,"cisaVulnName":1121,"cisaDateAdded":571,"cisaShortDescription":1122,"cisaRequiredAction":824},"CVE-2019-16928","Exim 4.92 through 4.92.2 allows remote code execution, a different vulnerability than CVE-2019-15846. There is a heap-based buffer overflow in string_vformat in string.c involving a long EHLO command.","2019-09-27",0.41638,"Exim Out-of-bounds Write Vulnerability","Exim contains an out-of-bounds write vulnerability which can allow for remote code execution.",{"cveId":1124,"description":1125,"publishedDate":1126,"cvssScore":45,"cvssVersion":503,"severity":512,"isKev":4,"epssScore":1127,"cisaVulnName":879,"cisaDateAdded":571,"cisaShortDescription":1128,"cisaRequiredAction":824},"CVE-2016-5195","Race condition in mm\u002Fgup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka \"Dirty COW.\"","2016-11-10",0.83524,"Race condition in mm\u002Fgup.c in the Linux kernel allows local users to escalate privileges.",{"cveId":1130,"description":1131,"publishedDate":1132,"cvssScore":748,"cvssVersion":503,"severity":546,"isKev":4,"epssScore":1133,"cisaVulnName":1134,"cisaDateAdded":571,"cisaShortDescription":1135,"cisaRequiredAction":824},"CVE-2013-1675","Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 do not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.","2013-05-16",0.06696,"Mozilla Firefox Information Disclosure Vulnerability","Mozilla Firefox does not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.",{"cveId":1137,"description":1138,"publishedDate":1139,"cvssScore":1140,"cvssVersion":503,"severity":819,"isKev":4,"epssScore":1141,"cisaVulnName":1142,"cisaDateAdded":1143,"cisaShortDescription":1144,"cisaRequiredAction":824},"CVE-2022-23134","After the initial setup process, some steps of setup.php file are reachable not only by super-administrators, but by unauthenticated users as well. Malicious actor can pass step checks and potentially change the configuration of Zabbix Frontend.","2022-01-13",3.7,0.9526,"Zabbix Frontend Improper Access Control Vulnerability","2022-02-22","Malicious actors can pass step checks and potentially change the configuration of Zabbix Frontend.",{"cveId":1146,"description":1147,"publishedDate":1148,"cvssScore":502,"cvssVersion":503,"severity":504,"isKev":4,"epssScore":1149,"cisaVulnName":1150,"cisaDateAdded":1151,"cisaShortDescription":1152,"cisaRequiredAction":824},"CVE-2014-7169","GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown other impact via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-6271.","2014-09-25",0.9994,"GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability","2022-01-28","GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code. This CVE correctly remediates the vulnerability in CVE-2014-6271.",{"cveId":1154,"description":1155,"publishedDate":1156,"cvssScore":502,"cvssVersion":503,"severity":504,"isKev":4,"epssScore":787,"cisaVulnName":1150,"cisaDateAdded":1151,"cisaShortDescription":1157,"cisaRequiredAction":824},"CVE-2014-6271","GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka \"ShellShock.\"  NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix.","2014-09-24","GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code.",{"cveId":1159,"description":1160,"publishedDate":1161,"cvssScore":502,"cvssVersion":503,"severity":504,"isKev":4,"epssScore":1162,"cisaVulnName":1163,"cisaDateAdded":1164,"cisaShortDescription":1165,"cisaRequiredAction":824},"CVE-2019-10149","A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message() function in \u002Fsrc\u002Fdeliver.c may lead to remote command execution.","2019-06-05",0.99961,"Exim Mail Transfer Agent (MTA) Improper Input Validation","2022-01-10","Improper validation of recipient address in deliver_message() function in \u002Fsrc\u002Fdeliver.c may lead to remote command execution.",{"cveId":1167,"description":1168,"publishedDate":1169,"cvssScore":107,"cvssVersion":503,"severity":504,"isKev":4,"epssScore":787,"cisaVulnName":1170,"cisaDateAdded":1169,"cisaShortDescription":1171,"cisaRequiredAction":1172},"CVE-2021-44228","Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. From version 2.16.0 (along with 2.12.2, 2.12.3, and 2.3.1), this functionality has been completely removed. Note that this vulnerability is specific to log4j-core and does not affect log4net, log4cxx, or other Apache Logging Services projects.","2021-12-10","Apache Log4j2 Remote Code Execution Vulnerability","Apache Log4j2 contains a vulnerability where JNDI features do not protect against attacker-controlled JNDI-related endpoints, allowing for remote code execution.","For all affected software assets for which updates exist, the only acceptable remediation actions are: 1) Apply updates; OR 2) remove affected assets from agency networks. Temporary mitigations using one of the measures provided at https:\u002F\u002Fwww.cisa.gov\u002Fuscert\u002Fed-22-02-apache-log4j-recommended-mitigation-measures are only acceptable until updates are available.",{"cveId":1174,"description":1175,"publishedDate":1176,"cvssScore":572,"cvssVersion":503,"severity":512,"isKev":4,"epssScore":1177,"cisaVulnName":1178,"cisaDateAdded":1169,"cisaShortDescription":1179,"cisaRequiredAction":824},"CVE-2019-13272","In the Linux kernel before 5.1.17, ptrace_link in kernel\u002Fptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows local users to obtain root access by leveraging certain scenarios with a parent-child process relationship, where a parent drops privileges and calls execve (potentially allowing control by an attacker). One contributing factor is an object lifetime issue (which can also cause a panic). Another contributing factor is incorrect marking of a ptrace relationship as privileged, which is exploitable through (for example) Polkit's pkexec helper with PTRACE_TRACEME. NOTE: SELinux deny_ptrace might be a usable workaround in some environments.","2019-07-17",0.52199,"Linux Kernel Improper Privilege Management Vulnerability","Kernel\u002Fptrace.c in Linux kernel mishandles contains an improper privilege management vulnerability that allows local users to obtain root access.",{"cveId":1181,"description":1182,"publishedDate":1183,"cvssScore":599,"cvssVersion":503,"severity":512,"isKev":4,"epssScore":1184,"cisaVulnName":1185,"cisaDateAdded":1169,"cisaShortDescription":1186,"cisaRequiredAction":824},"CVE-2019-0193","In Apache Solr, the DataImportHandler, an optional but popular module to pull in data from databases and other sources, has a feature in which the whole DIH configuration can come from a request's \"dataConfig\" parameter. The debug mode of the DIH admin screen uses this to allow convenient debugging \u002F development of a DIH config. Since a DIH config can contain scripts, this parameter is a security risk. Starting with version 8.2.0 of Solr, use of this parameter requires setting the Java System property \"enable.dih.dataConfigParam\" to true.","2019-08-01",0.83547,"Apache Solr DataImportHandler Code Injection Vulnerability","The optional Apache Solr module DataImportHandler contains a code injection vulnerability.",{"cveId":1188,"description":1189,"publishedDate":1190,"cvssScore":476,"cvssVersion":503,"severity":504,"isKev":4,"epssScore":787,"cisaVulnName":1191,"cisaDateAdded":1192,"cisaShortDescription":1189,"cisaRequiredAction":824},"CVE-2021-40438","A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.","2021-09-16","Apache HTTP Server-Side Request Forgery (SSRF)","2021-12-01",{"cveId":1194,"description":1195,"publishedDate":1196,"cvssScore":545,"cvssVersion":503,"severity":546,"isKev":4,"epssScore":1197,"cisaVulnName":1198,"cisaDateAdded":1199,"cisaShortDescription":1200,"cisaRequiredAction":824},"CVE-2021-22204","Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing the malicious image","2021-04-23",0.99981,"ExifTool Remote Code Execution Vulnerability","2021-11-17","Improper neutralization of user data in the DjVu file format in Exiftool versions 7.44 and up allows arbitrary code execution when parsing the malicious image",{"cveId":1202,"description":1203,"publishedDate":1204,"cvssScore":502,"cvssVersion":503,"severity":504,"isKev":4,"epssScore":1205,"cisaVulnName":1206,"cisaDateAdded":1207,"cisaShortDescription":1208,"cisaRequiredAction":824},"CVE-2018-6789","An issue was discovered in the base64d function in the SMTP listener in Exim before 4.90.1. By sending a handcrafted message, a buffer overflow may happen. This can be used to execute code remotely.","2018-02-08",0.82137,"Exim Buffer Overflow Vulnerability","2021-11-03","Exim contains a buffer overflow vulnerability in the base64d function part of the SMTP listener that may allow for remote code execution.",{"cveId":1210,"description":1211,"publishedDate":1212,"cvssScore":502,"cvssVersion":503,"severity":504,"isKev":4,"epssScore":1213,"cisaVulnName":1214,"cisaDateAdded":1207,"cisaShortDescription":1215,"cisaRequiredAction":824},"CVE-2021-1871","A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..","2021-04-02",0.07002,"Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability","Apple iOS, iPadOS, and macOS WebKit contain an unspecified logic vulnerability that allows a remote attacker to execute code. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.",{"cveId":1217,"description":1218,"publishedDate":1219,"cvssScore":502,"cvssVersion":503,"severity":504,"isKev":4,"epssScore":1220,"cisaVulnName":1221,"cisaDateAdded":1207,"cisaShortDescription":1222,"cisaRequiredAction":824},"CVE-2020-16846","An issue was discovered in SaltStack Salt through 3002. Sending crafted web requests to the Salt API, with the SSH client enabled, can result in shell injection.","2020-11-06",0.99585,"SaltStack Salt Shell Injection Vulnerability","SaltStack Salt allows an unauthenticated user with network access to the Salt API to use shell injections to run code on the Salt API using the SSH client. This vulnerability affects any users running the Salt API.",{"cveId":1224,"description":1225,"publishedDate":1226,"cvssScore":502,"cvssVersion":503,"severity":504,"isKev":4,"epssScore":1227,"cisaVulnName":1228,"cisaDateAdded":1207,"cisaShortDescription":1229,"cisaRequiredAction":824},"CVE-2020-11651","An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class does not properly validate method calls. This allows a remote user to access some methods without authentication. These methods can be used to retrieve user tokens from the salt master and\u002For run arbitrary commands on salt minions.","2020-04-30",0.96614,"SaltStack Salt Authentication Bypass Vulnerability","SaltStack Salt contains an authentication bypass vulnerability in the salt-master process ClearFuncs due to improperly validating method calls. The vulnerability allows a remote user to access some methods without authentication, which can be used to retrieve user tokens from the salt master and\u002For run commands on salt minions. Salt users who follow fundamental internet security guidelines and best practices are not affected by this vulnerability.",{"cveId":1231,"description":1232,"publishedDate":1233,"cvssScore":502,"cvssVersion":503,"severity":504,"isKev":4,"epssScore":1234,"cisaVulnName":1016,"cisaDateAdded":1207,"cisaShortDescription":1235,"cisaRequiredAction":824},"CVE-2018-7600","Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbitrary code because of an issue affecting multiple subsystems with default or common module configurations.","2018-03-29",0.99991,"Drupal Core contains a remote code execution vulnerability that could allow an attacker to exploit multiple attack vectors on a Drupal site, resulting in complete site compromise.",{"cveId":1237,"description":1238,"publishedDate":1239,"cvssScore":756,"cvssVersion":503,"severity":504,"isKev":4,"epssScore":1240,"cisaVulnName":1241,"cisaDateAdded":1207,"cisaShortDescription":1242,"cisaRequiredAction":824},"CVE-2021-37973","Use after free in Portals in Google Chrome prior to 94.0.4606.61 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.","2021-10-08",0.11735,"Google Chromium Portals Use-After-Free Vulnerability","Google Chromium Portals contains a use-after-free vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability affects web browsers that utilize Chromium, including Google Chrome and Microsoft Edge.",{"cveId":1244,"description":1245,"publishedDate":1246,"cvssScore":756,"cvssVersion":503,"severity":504,"isKev":4,"epssScore":1247,"cisaVulnName":1248,"cisaDateAdded":1207,"cisaShortDescription":1249,"cisaRequiredAction":824},"CVE-2020-15999","Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.","2020-11-03",0.63894,"Google Chrome FreeType Heap Buffer Overflow Vulnerability","Google Chrome uses FreeType, an open-source software library to render fonts, which contains a heap buffer overflow vulnerability in the function Load_SBit_Png when processing PNG images embedded into fonts. This vulnerability is part of an exploit chain with CVE-2020-17087 on Windows and CVE-2020-16010 on Android.",{"cveId":1251,"description":1252,"publishedDate":1246,"cvssScore":614,"cvssVersion":503,"severity":512,"isKev":4,"epssScore":1253,"cisaVulnName":718,"cisaDateAdded":1207,"cisaShortDescription":852,"cisaRequiredAction":824},"CVE-2020-16009","Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",0.48293,{"cveId":1255,"description":1256,"publishedDate":1257,"cvssScore":614,"cvssVersion":503,"severity":512,"isKev":4,"epssScore":1258,"cisaVulnName":1259,"cisaDateAdded":1207,"cisaShortDescription":1260,"cisaRequiredAction":824},"CVE-2021-21166","Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.","2021-03-09",0.24027,"Google Chromium Race Condition Vulnerability","Google Chromium contains a race condition vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":1262,"description":1263,"publishedDate":1264,"cvssScore":614,"cvssVersion":503,"severity":512,"isKev":4,"epssScore":1265,"cisaVulnName":1266,"cisaDateAdded":1207,"cisaShortDescription":1267,"cisaRequiredAction":824},"CVE-2021-21193","Use after free in Blink in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.","2021-03-16",0.0995,"Google Chromium Blink Use-After-Free Vulnerability","Google Chromium Blink contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":1269,"description":1270,"publishedDate":1271,"cvssScore":614,"cvssVersion":503,"severity":512,"isKev":4,"epssScore":1272,"cisaVulnName":718,"cisaDateAdded":1207,"cisaShortDescription":1273,"cisaRequiredAction":824},"CVE-2021-21224","Type confusion in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.","2021-04-26",0.84173,"Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to execute code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":1275,"description":1276,"publishedDate":581,"cvssScore":614,"cvssVersion":503,"severity":512,"isKev":4,"epssScore":1277,"cisaVulnName":1278,"cisaDateAdded":1207,"cisaShortDescription":1279,"cisaRequiredAction":824},"CVE-2021-30858","A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.",0.13379,"Apple iOS, iPadOS, macOS Use-After-Free Vulnerability","Apple iOS, iPadOS, and macOS WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.",{"cveId":1281,"description":1282,"publishedDate":1239,"cvssScore":614,"cvssVersion":503,"severity":512,"isKev":4,"epssScore":1283,"cisaVulnName":1284,"cisaDateAdded":1207,"cisaShortDescription":1285,"cisaRequiredAction":824},"CVE-2021-37975","Use after free in V8 in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",0.34887,"Google Chromium V8 Use-After-Free Vulnerability","Google Chromium V8 Engine contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":1287,"description":1288,"publishedDate":1289,"cvssScore":614,"cvssVersion":503,"severity":512,"isKev":4,"epssScore":1290,"cisaVulnName":972,"cisaDateAdded":1207,"cisaShortDescription":1291,"cisaRequiredAction":824},"CVE-2021-38003","Inappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.","2021-11-23",0.38573,"Google Chromium V8 Engine has a bug in JSON.stringify, where the internal TheHole value can leak to script code, causing memory corruption. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":1293,"description":1294,"publishedDate":1295,"cvssScore":614,"cvssVersion":503,"severity":512,"isKev":4,"epssScore":1296,"cisaVulnName":718,"cisaDateAdded":1207,"cisaShortDescription":1297,"cisaRequiredAction":824},"CVE-2020-6418","Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.","2020-02-27",0.78808,"Google Chromium V8 Engine contains a type confusion vulnerability allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":1299,"description":1300,"publishedDate":1301,"cvssScore":614,"cvssVersion":503,"severity":512,"isKev":4,"epssScore":1302,"cisaVulnName":1303,"cisaDateAdded":1207,"cisaShortDescription":1304,"cisaRequiredAction":824},"CVE-2021-21148","Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.","2021-02-09",0.19968,"Google Chromium V8 Heap Buffer Overflow Vulnerability","Google Chromium V8 Engine contains a heap buffer overflow vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":1306,"description":1307,"publishedDate":1308,"cvssScore":572,"cvssVersion":503,"severity":512,"isKev":4,"epssScore":1309,"cisaVulnName":1310,"cisaDateAdded":1207,"cisaShortDescription":1311,"cisaRequiredAction":824},"CVE-2017-16651","Roundcube Webmail before 1.1.10, 1.2.x before 1.2.7, and 1.3.x before 1.3.3 allows unauthorized access to arbitrary files on the host's filesystem, including configuration files, as exploited in the wild in November 2017. The attacker must be able to authenticate at the target system with a valid username\u002Fpassword as the attack requires an active session. The issue is related to file-based attachment plugins and _task=settings&_action=upload-display&_from=timezone requests.","2017-11-09",0.45742,"Roundcube Webmail File Disclosure Vulnerability","Roundcube Webmail contains a file disclosure vulnerability caused by insufficient input validation in conjunction with file-based attachment plugins, which are used by default.",{"cveId":1313,"description":1314,"publishedDate":1315,"cvssScore":572,"cvssVersion":503,"severity":512,"isKev":4,"epssScore":1316,"cisaVulnName":1317,"cisaDateAdded":1207,"cisaShortDescription":1318,"cisaRequiredAction":824},"CVE-2019-0211","In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute arbitrary code with the privileges of the parent process (usually root) by manipulating the scoreboard. Non-Unix systems are not affected.","2019-04-08",0.65005,"Apache HTTP Server Privilege Escalation Vulnerability","Apache HTTP Server, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute code with the privileges of the parent process (usually root) by manipulating the scoreboard.",{"cveId":1320,"description":1321,"publishedDate":1322,"cvssScore":572,"cvssVersion":503,"severity":512,"isKev":4,"epssScore":1323,"cisaVulnName":1324,"cisaDateAdded":1207,"cisaShortDescription":1325,"cisaRequiredAction":824},"CVE-2019-2215","A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network facing application.Product: AndroidAndroid ID: A-141720095","2019-10-11",0.72105,"Android Kernel Use-After-Free Vulnerability","Android Kernel contains a use-after-free vulnerability in binder.c that allows for privilege escalation from an application to the Linux Kernel. This vulnerability was observed chained with CVE-2020-0041 and CVE-2020-0069 under exploit chain \"AbstractEmu.\"",{"cveId":1327,"description":1328,"publishedDate":1226,"cvssScore":748,"cvssVersion":503,"severity":546,"isKev":4,"epssScore":1329,"cisaVulnName":1330,"cisaDateAdded":1207,"cisaShortDescription":1331,"cisaRequiredAction":824},"CVE-2020-11652","An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class allows access to some methods that improperly sanitize paths. These methods allow arbitrary directory access to authenticated users.",0.86178,"SaltStack Salt Path Traversal Vulnerability","SaltStack Salt contains a path traversal vulnerability in the salt-master process ClearFuncs which allows directory access to authenticated users. Salt users who follow fundamental internet security guidelines and best practices are not affected by this vulnerability.",{"cveId":1333,"description":1334,"publishedDate":1239,"cvssScore":748,"cvssVersion":503,"severity":546,"isKev":4,"epssScore":1335,"cisaVulnName":1336,"cisaDateAdded":1207,"cisaShortDescription":1337,"cisaRequiredAction":824},"CVE-2021-37976","Inappropriate implementation in Memory in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",0.19901,"Google Chromium Information Disclosure Vulnerability","Google Chromium contains an information disclosure vulnerability within the core memory component that allows a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":1339,"description":1340,"publishedDate":1289,"cvssScore":658,"cvssVersion":503,"severity":546,"isKev":4,"epssScore":1341,"cisaVulnName":1342,"cisaDateAdded":1207,"cisaShortDescription":1343,"cisaRequiredAction":824},"CVE-2021-38000","Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 95.0.4638.69 allowed a remote attacker to arbitrarily browser to a malicious URL via a crafted HTML page.",0.04948,"Google Chromium Intents Improper Input Validation Vulnerability","Google Chromium Intents contains an improper input validation vulnerability that allows a remote attacker to arbitrarily browser to a malicious URL via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":1345,"description":1346,"publishedDate":1347,"cvssScore":675,"cvssVersion":503,"severity":546,"isKev":4,"epssScore":1348,"cisaVulnName":1349,"cisaDateAdded":1207,"cisaShortDescription":1350,"cisaRequiredAction":824},"CVE-2020-1472","An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protocol (MS-NRPC). An attacker who successfully exploited the vulnerability could run a specially crafted application on a device on the network.\nTo exploit the vulnerability, an unauthenticated attacker would be required to use MS-NRPC to connect to a domain controller to obtain domain administrator access.\nMicrosoft is addressing the vulnerability in a phased two-part rollout. These updates address the vulnerability by modifying how Netlogon handles the usage of Netlogon secure channels.\nFor guidelines on how to manage the changes required for this vulnerability and more information on the phased rollout, see  How to manage the changes in Netlogon secure channel connections associated with CVE-2020-1472 (updated September 28, 2020).\nWhen the second phase of Windows updates become available in Q1 2021, customers will be notified via a revision to this security vulnerability. If you wish to be notified when these updates are released, we recommend that you register for the security notifications mailer to be alerted of content changes to this advisory. See Microsoft Technical Security Notifications.\n","2020-08-17",0.99389,"Microsoft Netlogon Privilege Escalation Vulnerability","Microsoft's Netlogon Remote Protocol (MS-NRPC) contains a privilege escalation vulnerability when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller. An attacker who successfully exploits the vulnerability could run a specially crafted application on a device on the network. The vulnerability is also known under the moniker of Zerologon.",[1352,1353,1354,1355,1356,1357,1358,1359,1360,1361],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":21},{"id":23,"product_name":24,"version_count":25,"cve_count":26,"kev_count":27,"last_cve_update":28},{"id":30,"product_name":31,"version_count":32,"cve_count":33,"kev_count":27,"last_cve_update":34},{"id":36,"product_name":37,"version_count":38,"cve_count":39,"kev_count":27,"last_cve_update":40},{"id":42,"product_name":43,"version_count":44,"cve_count":45,"kev_count":27,"last_cve_update":46},{"id":48,"product_name":49,"version_count":50,"cve_count":51,"kev_count":27,"last_cve_update":52},{"id":54,"product_name":55,"version_count":56,"cve_count":57,"kev_count":27,"last_cve_update":58},{"id":60,"product_name":61,"version_count":51,"cve_count":62,"kev_count":27,"last_cve_update":63},{"id":65,"product_name":66,"version_count":67,"cve_count":62,"kev_count":27,"last_cve_update":13},{"id":69,"product_name":70,"version_count":71,"cve_count":62,"kev_count":27,"last_cve_update":72},{"title":1363,"metaDescription":1364,"keywords":1365,"structuredData":1366},"Debian - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Debian covering 118 products with 9360 tracked vulnerabilities including 34 critical and 55 high-severity issues and 106 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Debian vulnerabilities, Debian security, Debian CVE, Debian threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking, Debian KEV, Debian exploited vulnerabilities",{"@context":1367,"@type":1368,"name":1369,"description":1364,"url":1370},"https:\u002F\u002Fschema.org","Organization","Debian","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fdebian",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":1372,"apiVersion":1373},"2026-10-28T15:24:44.773Z","3.0"]