Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2,536

Export CSV
CVE-2020-8284

curl: FTP PASV command response can cause curl to connect to arbitrary host

A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and not disclosed, for example doing port scanning and service banner extractions.

CVSS 3.1 · 3.7 Low EPSS 3.9% KEV · Not listed
Vendors
Apple Debian Fedoraproject and 7 more
Products
Mac Os X Macos Debian Linux and 28 more
CVE-2020-1752

glibc: use-after-free in glob() function when expanding ~user

A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde expansion was carried out. Directory paths containing an initial tilde followed by a valid username were affected by this issue. A local attacker could exploit this flaw by creating a specially crafted path that, when processed by the glob function, would potentially lead to arbitrary code execution. This was fixed in version 2.32.

CVSS 3.1 · 7 High EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Gnu and 2 more
Products
Ubuntu Linux Debian Linux Glibc and 7 more
CVE-2020-10878

perl: corruption of intermediate language state of compiled regular expression due to integer overflow leads to DoS

Perl before 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)] == NOTHING" situation. A crafted regular expression could lead to malformed bytecode with a possibility of instruction injection.

CVSS 3.1 · 8.6 High EPSS 4.9% KEV · Not listed
Vendors
Fedoraproject Netapp Opensuse and 3 more
Products
Fedora Oncommand Workflow Automation Snap Creator Framework and 19 more
CVE-2020-10029

glibc: stack corruption from crafted input in cosl, sinl, sincosl, and tanl functions

The GNU C Library (aka glibc or libc6) before 2.32 could overflow an on-stack buffer during range reduction if an input to an 80-bit long double function contains a non-canonical bit pattern, a seen when passing a 0x5d414141414141410000 value to sinl on x86 targets. This is related to sysdeps/ieee754/ldbl-96/e_rem_pio2l.c.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 4 more
Products
Ubuntu Linux Debian Linux Fedora and 15 more
CVE-2019-25013

glibc: buffer over-read in iconv when processing invalid multi-byte input sequences in the EUC-KR encoding

The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-byte input sequences in the EUC-KR encoding, may have a buffer over-read.

CVSS 3.1 · 5.9 Medium EPSS 3.6% KEV · Not listed
Vendors
Broadcom Debian Fedoraproject and 3 more
Products
Fabric Operating System Debian Linux Fedora and 9 more
CVE-2019-20907

python: infinite loop in the tarfile module via crafted TAR archive

In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open, because _proc_pax lacks header validation.

CVSS 3.1 · 5.5 Medium EPSS 3.0% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 5 more
Products
Ubuntu Linux Debian Linux Fedora and 12 more
CVE-2019-19926

sqlite: error mishandling because of incomplete fix of CVE-2019-19880

multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite() calls. NOTE: this vulnerability exists because of an incomplete fix for CVE-2019-19880.

CVSS 3.1 · 7.5 High EPSS 8.0% KEV · Not listed
Vendors
Debian Netapp Opensuse and 5 more
Products
Debian Linux Cloud Backup Backports Sle and 10 more
CVE-2019-19925

sqlite: zipfileUpdate in ext/misc/zipfile.c mishandles a NULL pathname during an update of a ZIP archive

zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive.

CVSS 3.1 · 7.5 High EPSS 6.8% KEV · Not listed
Vendors
Debian Netapp Opensuse and 5 more
Products
Debian Linux Cloud Backup Backports Sle and 11 more
CVE-2019-19924

sqlite: incorrect sqlite3WindowRewrite() error handling leads to mishandling certain parser-tree rewriting

SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window.c. This is caused by incorrect sqlite3WindowRewrite() error handling.

CVSS 3.1 · 5.3 Medium EPSS 10.7% KEV · Not listed
Vendors
Apache Netapp Oracle and 3 more
Products
Bookkeeper Cloud Backup Mysql Workbench and 3 more
CVE-2019-19923

sqlite: mishandling of certain uses of SELECT DISTINCT involving a LEFT JOIN in flattenSubquery in select.c leads to a NULL pointer dereference

flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. This can cause a NULL pointer dereference (or incorrect results).

CVSS 3.1 · 7.5 High EPSS 6.8% KEV · Not listed
Vendors
Debian Netapp Opensuse and 5 more
Products
Debian Linux Cloud Backup Backports Sle and 11 more
CVE-2019-19880

sqlite: invalid pointer dereference in exprListAppendList in window.c

exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definitions are mishandled.

CVSS 3.1 · 7.5 High EPSS 6.9% KEV · Not listed
Vendors
Debian Netapp Opensuse and 5 more
Products
Debian Linux Cloud Backup Backports Sle and 10 more
CVE-2019-19645

sqlite: infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements

alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Netapp Oracle Siemens and 2 more
Products
Cloud Backup Ontap Select Deploy Administration Utility Mysql Workbench and 3 more
CVE-2019-19317

sqlite: omits bits from the colUsed bitmask in the case of a generated column

lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a generated column, which allows attackers to cause a denial of service or possibly have unspecified other impact.

CVSS 3.1 · 9.8 Critical EPSS 4.7% KEV · Not listed
Vendors
Netapp Oracle Siemens and 1 more
Products
Cloud Backup Ontap Select Deploy Administration Utility Mysql Workbench and 2 more