Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.1An exploitable signed comparison vulnerability exists in the ARMv7 memcpy() implementation of GNU glibc 2.30.9000.EPSS 5.5%Apr 1, 2020
- High7.8A heap use-after-free vulnerability was found in systemd before version v245-rc1, where asynchronous Polkit queries are performed while handling dbus messages.EPSS 0.5%Mar 31, 2020
- High8.8An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1.EPSS 2.7%Mar 12, 2020
- Medium5.5The GNU C Library (aka glibc or libc6) before 2.32 could overflow an on-stack buffer during range reduction if an input to an 80-bit long double function contains a no…EPSS 0.8%Mar 4, 2020
- High8.8Google Chromium V8 Type Confusion VulnerabilityKEVEPSS 78.8%Feb 27, 2020
- Critical9.8Apache Tomcat Improper Privilege Management VulnerabilityKEVEPSS 99.3%Feb 24, 2020
- Medium6.5Python 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1 allows an HTTP server to conduct Regular Expression Denial o…EPSS 6.6%Jan 30, 2020
- Critical9.8OpenSMTPD Remote Code Execution VulnerabilityKEVEPSS 99.0%Jan 29, 2020
- High7.5xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.EPSS 7.8%Jan 21, 2020
- High7.5xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.EPSS 3.2%Jan 21, 2020
- Critical9.1nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (strtab).EPSS 2.9%Jan 8, 2020
- Medium6.7A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4.EPSS 1.1%Jan 8, 2020
- High7.5selectExpander in select.c in SQLite 3.30.1 proceeds with WITH stack unwinding even after a parsing error.EPSS 3.7%Jan 2, 2020
- High7.5zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive.EPSS 6.8%Dec 24, 2019
- High7.5xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc->oldNs.EPSS 5.6%Dec 24, 2019
- High7.5flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view.EPSS 6.8%Dec 24, 2019
- High7.5multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite() calls.EPSS 8.0%Dec 23, 2019
- High7.5cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet.EPSS 8.0%Dec 19, 2019
- High7.5exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of windo…EPSS 6.9%Dec 18, 2019
- Medium4.7shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory treesEPSS 0.3%Dec 3, 2019
- Low3.3On the x86-64 architecture, the GNU C Library (aka glibc) before 2.31 fails to ignore the LD_PREFER_MAP_32BIT_EXEC environment variable during program execution after…EPSS 0.4%Nov 19, 2019
- Critical9.8PHP FastCGI Process Manager (FPM) Buffer Overflow VulnerabilityKEVEPSS 99.7%Oct 28, 2019
- High8.1In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrar…EPSS 3.8%Oct 21, 2019
- High7.8Android Kernel Use-After-Free VulnerabilityKEVEPSS 72.1%Oct 11, 2019
- Critical9.8Exim Out-of-bounds Write VulnerabilityKEVEPSS 41.6%Sep 27, 2019