Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2,842

Export CSV
CVE-2020-12673

dovecot: Out of bound reads in dovecot NTLM implementation

In Dovecot before 2.3.11.3, sending a specially formatted NTLM request will crash the auth service because of an out-of-bounds read.

CVSS 3.1 · 7.5 High EPSS 6.2% KEV · Not listed
Vendors
Canonical Debian Dovecot and 2 more
Products
Ubuntu Linux Debian Linux Dovecot and 4 more
CVE-2020-12662

unbound: amplification of an incoming query into a large number of queries directed to a target

Unbound before 1.10.1 has Insufficient Control of Network Message Volume, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records.

CVSS 3.1 · 7.5 High EPSS 3.2% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 3 more
Products
Ubuntu Linux Debian Linux Fedora and 5 more
CVE-2020-12459

grafana: information disclosure through world-readable grafana configuration files

In certain Red Hat packages for Grafana 6.x through 6.3.6, the configuration files /etc/grafana/grafana.ini and /etc/grafana/ldap.toml (which contain a secret_key and a bind_password) are world readable.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Fedoraproject Grafana Redhat
Products
Fedora Grafana Enterprise Linux and 1 more
CVE-2020-12458

grafana: information disclosure through world-readable /var/lib/grafana/grafana.db

An information-disclosure flaw was found in Grafana through 6.7.3. The database directory /var/lib/grafana and database file /var/lib/grafana/grafana.db are world readable. This can result in exposure of sensitive information (e.g., cleartext or encrypted datasource passwords).

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Fedoraproject Grafana Redhat
Products
Fedora Grafana Ceph Storage and 1 more
CVE-2020-12402

nss: Side channel vulnerabilities during RSA key generation

During RSA key generation, bignum implementations used a variation of the Binary Extended Euclidean Algorithm which entailed significantly input-dependent flow. This allowed an attacker able to perform electromagnetic-based side channel attacks to record traces leading to the recovery of the secret primes. *Note:* An unmodified Firefox browser does not generate RSA keys in normal operation and is not affected, but products built on top of it might. This vulnerability affects Firefox < 78.

CVSS 3.1 · 4.4 Medium EPSS < 1% KEV · Not listed
Vendors
Debian Fedoraproject Mozilla and 2 more
Products
Debian Linux Fedora Firefox and 3 more
CVE-2020-12137

mailman: XSS via file attachments in list archives

GNU Mailman 2.x before 2.1.30 uses the .obj extension for scrubbed application/octet-stream MIME parts. This behavior may contribute to XSS attacks against list-archive visitors, because an HTTP reply from an archive web server may lack a MIME type, and a web browser may perform MIME sniffing, conclude that the MIME type should have been text/html, and execute JavaScript code.

CVSS 3.1 · 6.1 Medium EPSS 2.3% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 3 more
Products
Ubuntu Linux Debian Linux Fedora and 4 more
CVE-2020-12100

dovecot: Resource exhaustion via deeply nested MIME parts

In Dovecot before 2.3.11.3, uncontrolled recursion in submission, lmtp, and lda allows remote attackers to cause a denial of service (resource consumption) via a crafted e-mail message with deeply nested MIME parts.

CVSS 3.1 · 7.5 High EPSS 5.3% KEV · Not listed
Vendors
Canonical Debian Dovecot and 2 more
Products
Ubuntu Linux Debian Linux Dovecot and 4 more
CVE-2020-11988

xmlgraphics-commons: SSRF due to improper input validation by the XMPParser

Apache XmlGraphics Commons 2.4 and earlier is vulnerable to server-side request forgery, caused by improper input validation by the XMPParser. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests. Users should upgrade to 2.6 or later.

CVSS 3.1 · 8.2 High EPSS 6.7% KEV · Not listed
Vendors
Apache Fedoraproject Redhat
Products
Xmlgraphics Commons Fedora Jboss Enterprise Bpms Platform and 2 more
CVE-2020-11945

squid: improper access restriction upon Digest Authentication nonce replay could lead to remote code execution

An issue was discovered in Squid before 5.0.2. A remote attacker can replay a sniffed Digest Authentication nonce to gain access to resources that are otherwise forbidden. This occurs because the attacker can overflow the nonce reference counter (a short integer). Remote code execution may occur if the pooled token credentials are freed (instead of replayed as valid credentials).

CVSS 3.1 · 9.8 Critical EPSS 27.2% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 3 more
Products
Ubuntu Linux Debian Linux Fedora and 5 more
CVE-2020-11884

Kernel: s390: page table upgrade in secondary address mode may lead to privilege escalation

In the Linux kernel 4.19 through 5.6.7 on the s390 platform, code execution may occur because of a race condition, as demonstrated by code in enable_sacf_uaccess in arch/s390/lib/uaccess.c that fails to protect against a concurrent page table upgrade, aka CID-3f777e19d171. A crash could also occur.

CVSS 3.1 · 7.0 High EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 3 more
Products
Ubuntu Linux Debian Linux Fedora and 35 more
CVE-2020-11793

webkitgtk: use-after-free via crafted web content

A use-after-free issue exists in WebKitGTK before 2.28.1 and WPE WebKit before 2.28.1 via crafted web content that allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash).

CVSS 3.1 · 8.8 High EPSS 2.9% KEV · Not listed
Vendors
Canonical Fedoraproject Opensuse and 3 more
Products
Ubuntu Linux Fedora Leap and 3 more
CVE-2020-11764

OpenEXR: out-of-bounds write in copyIntoFrameBuffer function in ImfMisc.cpp

An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp.

CVSS 3.1 · 5.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Apple Canonical Debian and 4 more
Products
Icloud Ipados Iphone Os and 10 more
CVE-2020-11763

OpenEXR: std:: vector out-of-bounds read and write in ImfTileOffsets.cpp

An issue was discovered in OpenEXR before 2.4.1. There is an std::vector out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp.

CVSS 3.1 · 5.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Apple Canonical Debian and 4 more
Products
Icloud Ipados Iphone Os and 10 more
CVE-2020-11761

OpenEXR: out-of-bounds read during Huffman uncompression

An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder::refill in ImfFastHuf.cpp.

CVSS 3.1 · 5.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Apple Canonical Debian and 3 more
Products
Icloud Ipados Iphone Os and 9 more
CVE-2020-11612

netty: compression/decompression codecs don't enforce limits on buffer allocation sizes

The ZlibDecoders in Netty 4.1.x before 4.1.46 allow for unbounded memory allocation while decoding a ZlibEncoded byte stream. An attacker could send a large ZlibEncoded byte stream to the Netty server, forcing the server to allocate all of its free memory to a single decoder.

CVSS 3.1 · 7.5 High EPSS 9.2% KEV · Not listed
Vendors
Debian Fedoraproject Netapp and 3 more
Products
Debian Linux Fedora Oncommand Api Services and 23 more