Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.0A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde expansion was carried out.EPSS 0.5%Apr 30, 2020
- Medium6.5SaltStack Salt Path Traversal VulnerabilityKEVEPSS 86.2%Apr 30, 2020
- Critical9.8SaltStack Salt Authentication Bypass VulnerabilityKEVEPSS 96.6%Apr 30, 2020
- Medium6.1JQuery Cross-Site Scripting (XSS) VulnerabilityKEVEPSS 84.9%Apr 29, 2020
- High7.5In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash).EPSS 4.7%Apr 28, 2020
- High7.5SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initializat…EPSS 4.3%Apr 9, 2020
- High7.4GnuTLS 3.6.x before 3.6.13 uses incorrect cryptography for DTLS.EPSS 3.4%Apr 3, 2020
- High8.1An exploitable signed comparison vulnerability exists in the ARMv7 memcpy() implementation of GNU glibc 2.30.9000.EPSS 5.5%Apr 1, 2020
- High7.8A heap use-after-free vulnerability was found in systemd before version v245-rc1, where asynchronous Polkit queries are performed while handling dbus messages.EPSS 0.5%Mar 31, 2020
- High8.8An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1.EPSS 2.7%Mar 12, 2020
- Medium5.5The GNU C Library (aka glibc or libc6) before 2.32 could overflow an on-stack buffer during range reduction if an input to an 80-bit long double function contains a no…EPSS 0.8%Mar 4, 2020
- High8.8Google Chromium V8 Type Confusion VulnerabilityKEVEPSS 78.8%Feb 27, 2020
- Critical9.8Apache Tomcat Improper Privilege Management VulnerabilityKEVEPSS 99.3%Feb 24, 2020
- Medium6.5Python 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1 allows an HTTP server to conduct Regular Expression Denial o…EPSS 6.6%Jan 30, 2020
- Critical9.8OpenSMTPD Remote Code Execution VulnerabilityKEVEPSS 99.0%Jan 29, 2020
- High7.5xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.EPSS 7.8%Jan 21, 2020
- High7.5xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.EPSS 3.2%Jan 21, 2020
- Critical9.1nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (strtab).EPSS 2.9%Jan 8, 2020
- Medium6.7A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4.EPSS 1.1%Jan 8, 2020
- High7.5selectExpander in select.c in SQLite 3.30.1 proceeds with WITH stack unwinding even after a parsing error.EPSS 3.7%Jan 2, 2020
- High7.5zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive.EPSS 6.8%Dec 24, 2019
- High7.5xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc->oldNs.EPSS 5.6%Dec 24, 2019
- High7.5flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view.EPSS 6.8%Dec 24, 2019
- High7.5multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite() calls.EPSS 8.0%Dec 23, 2019
- High7.5cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet.EPSS 8.0%Dec 19, 2019