Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8There is a possible tty hijacking in shadow 4.x before 4.1.5 and sudo 1.x before 1.7.4 via "su - user -c program".Check if you run itEPSS 0.63%Nov 4, 2019
- Medium5.5Mutt before 1.5.20 patch 7 allows an attacker to cause a denial of service via a series of requests to mutt temporary files.Check if you run itEPSS 0.35%Nov 1, 2019
- Unknowngpw generates shorter passwords than requiredCheck if you run itEPSS 1.50%Oct 29, 2019
- Medium6.1An issue was discovered in urllib2 in Python 2.x through 2.7.17 and urllib in Python 3.x through 3.8.0.Check if you run itEPSS 3.51%Oct 23, 2019
- Medium6.3It was discovered that there was a ECDSA timing attack in the libgcrypt20 cryptographic library.Check if you run itEPSS 0.55%Sep 25, 2019
- High7.8Linux Kernel Improper Privilege Management VulnerabilityPatch nowKEVEPSS 52.20%Jul 17, 2019
- Unknowndebian debian_linux Improper Access ControlPatch nowKEVEPSS 26.62%Jun 13, 2019
- Critical9.8The getgrouplist function in the GNU C library (glibc) before version 2.3.5, when invoked with a zero argument, writes to the passed pointer even if the specified array size is zerCheck if you run itEPSS 2.09%Apr 10, 2019
- High7.8Linux Kernel Integer Overflow VulnerabilityPatch nowKEVEPSS 14.69%Sep 25, 2018
- High7.5A NULL pointer dereference vulnerability exists in the xpath.c:xmlXPathCompOpEval() function of libxml2 through 2.9.8 when parsing an invalid XPath expression in the XPATH_OP_AND oCheck if you run itEPSS 3.75%Jul 19, 2018
- Medium5.3The debug module is vulnerable to regular expression denial of service when untrusted user input is passed into the o formatter.Check if you run itEPSS 2.83%Jun 7, 2018
- Unknownid3_utf16_deserialize() in utf16.c in libid3tag through 0.15.1b misparses ID3v2 tags encoded in UTF-16 with an odd number of bytes, triggering an endless loop allocating memory untCheck if you run itEPSS 2.46%Feb 20, 2018
- UnknownLinux Kernel ping_unhash Function Privilege EscalationPatch nowKEVEPSS 2.47%Jan 16, 2018
- UnknownLinux Kernel MSM_CAM_IOCTL_SET_MEM_MAP_INFO Privilege EscalationPatch nowKEVEPSS 0.89%Jan 16, 2018
- Medium5.6Intel atom_c Observable DiscrepancyPatch nowKEVEPSS 93.84%Jan 4, 2018
- Unknownscanf and related functions in glibc before 2.15 allow local users to cause a denial of service (segmentation fault) via a large string of 0s.Check if you run itEPSS 0.47%Oct 18, 2017
- High7.8Linux Kernel PIE Stack Buffer Corruption VulnerabilityPatch nowKEVEPSS 10.70%Oct 4, 2017
- UnknownDirectory traversal vulnerability in the BusyBox implementation of tar before 1.22.0 v5 allows remote attackers to point to files outside the current working directory via a symlinCheck if you run itEPSS 6.98%Aug 7, 2017
- UnknownLinux kernel 2.2.x before 2.2.25, and 2.4.x before 2.4.21 Kernel Module Loader Privilege EscalationPatch nowKEVEPSS 1.57%Jun 20, 2017
- UnknownRed Hat linux Out-of-bounds WritePatch nowKEVEPSS 10.04%Jun 20, 2017
- High7.1The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a craftedCheck if you run itEPSS 2.76%Feb 3, 2017
- High7.5Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free VulnerabilityPatch nowKEVEPSS 87.36%Nov 29, 2016
- High7.0Linux Kernel Race Condition VulnerabilityPatch nowKEVEPSS 83.52%Oct 18, 2016
- UnknownOracle linux Improper Input ValidationPatch nowKEVEPSS 89.48%Oct 5, 2016
- High8.1Apache Tomcat 7.x through 7.0.70 and 8.x through 8.5.4, when the CGI Servlet is enabled, follows RFC 3875 section 4.1.18 and therefore does not protect applications fr…Check this weekEPSS 50.90%Jul 19, 2016
Sort