Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.8PHP FastCGI Process Manager (FPM) Buffer Overflow VulnerabilityKEVEPSS 99.7%Oct 28, 2019
- High7.8Android Kernel Use-After-Free VulnerabilityKEVEPSS 72.1%Oct 11, 2019
- Critical9.8Exim Out-of-bounds Write VulnerabilityKEVEPSS 41.6%Sep 27, 2019
- Medium6.3It was discovered that there was a ECDSA timing attack in the libgcrypt20 cryptographic library.Sep 25, 2019
- High7.5An exploitable code execution vulnerability exists in the quota file functionality of E2fsprogs 1.45.3.Sep 24, 2019
- Medium6.5In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a…Sep 9, 2019
- High7.5An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4.Sep 6, 2019
- High7.5An issue was discovered in OpenLDAP 2.x before 2.4.48.Jul 26, 2019
- Medium4.9An issue was discovered in the server in OpenLDAP before 2.4.48.Jul 26, 2019
- High7.8Linux Kernel Improper Privilege Management VulnerabilityKEVEPSS 52.2%Jul 17, 2019
- High7.5In libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of colons could make the XML parser consume a high amount of RAM and CPU r…Jun 24, 2019
- Critical9.8BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.Jun 19, 2019
- Critical9.8A security regression of CVE-2019-9636 was discovered in python since commit d537ab0ff9767ef024f26246899728f0116b1ec3 affecting versions 2.7, 3.5, 3.6, 3.7 and from v3…Jun 7, 2019
- Critical9.8Exim Mail Transfer Agent (MTA) Improper Input ValidationKEVEPSS 100.0%Jun 5, 2019
- Critical9.8SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables.May 30, 2019
- High8.1An exploitable use after free vulnerability exists in the window function functionality of Sqlite3 3.26.0.May 10, 2019
- High7.8Apache HTTP Server Privilege Escalation VulnerabilityKEVEPSS 65.0%Apr 8, 2019
- Critical9.1urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for remote attackers to bypass protection mechanisms that blacklist file: UR…Mar 23, 2019
- Critical9.8Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode Encoding (with an incorrect netloc) during NFKC normalization.Mar 8, 2019
- Critical9.8In the GNU C Library (aka glibc or libc6) through 2.29, proceed_next_node in posix/regexec.c has a heap-based buffer over-read via an attempted case-insensitive regula…Feb 26, 2019
- Medium5.9An issue was discovered in OpenSSH 7.9.Jan 31, 2019
- Medium6.8An issue was discovered in OpenSSH 7.9.Jan 31, 2019
- High7.8Linux Kernel Integer Overflow VulnerabilityKEVEPSS 14.7%Sep 25, 2018
- Medium6.5Integer overflow in international date handling in International Components for Unicode (ICU) for C/C++ before 60.1, as used in V8 in Google Chrome prior to 63.0.3239.84 and otherAug 28, 2018
- Medium6.5libxml2 2.9.8, if --with-lzma is used, allows remote attackers to cause a denial of service (infinite loop) via a crafted XML file that triggers LZMA_MEMLIMIT_ERROR, a…Aug 16, 2018