Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5,386

Export CSV
CVE-2023-41909

frr: NULL pointer dereference in bgp_nlri_parse_flowspec() in bgpd/bgp_flowspec.c

An issue was discovered in FRRouting FRR through 9.0. bgp_nlri_parse_flowspec in bgpd/bgp_flowspec.c processes malformed requests with no attributes, leading to a NULL pointer dereference.

CVSS 3.1 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Debian Fedoraproject Frrouting and 1 more
Products
Debian Linux Fedora Frrouting and 1 more
CVE-2023-41359

frr: out of bounds read in bgp_attr_aigp_valid

An issue was discovered in FRRouting FRR through 9.0. There is an out-of-bounds read in bgp_attr_aigp_valid in bgpd/bgp_attr.c because there is no check for the availability of two bytes during AIGP validation.

CVSS 3.1 · 9.1 Critical EPSS 1.2% KEV · Not listed
Vendors
Fedoraproject Frrouting Redhat
Products
Fedora Frrouting Enterprise Linux
CVE-2023-3180

Heap buffer overflow in virtio_crypto_sym_op_helper()

A flaw was found in the QEMU virtual crypto device while handling data encryption/decryption requests in virtio_crypto_handle_sym_req. There is no check for the value of `src_len` and `dst_len` in virtio_crypto_sym_op_helper, potentially leading to a heap buffer overflow when the two values differ.

CVSS 3.1 · 6 Medium EPSS < 1% KEV · Not listed
Vendors
Debian Fedoraproject Qemu and 1 more
Products
Debian Linux Fedora Qemu and 2 more
CVE-2023-38802

frr: Incorrect handling of a error in parsing of an invalid section of a BGP update can de-peer a router

FRRouting FRR 7.5.1 through 9.0 and Pica8 PICOS 4.3.3.2 allow a remote attacker to cause a denial of service via a crafted BGP update with a corrupted attribute 23 (Tunnel Encapsulation).

CVSS 3.1 · 7.5 High EPSS 2.4% KEV · Not listed
Vendors
Debian Fedoraproject Frrouting and 2 more
Products
Debian Linux Fedora Frrouting and 6 more
CVE-2023-38633

librsvg: Arbitrary file read when xinclude href has special characters

A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files (on the local filesystem outside of the expected area), as demonstrated by href=".?../../../../../../../../../../etc/passwd" in an xi:include element.

CVSS 3.1 · 5.5 Medium EPSS 2.3% KEV · Not listed
Vendors
Debian Fedoraproject Gnome and 1 more
Products
Debian Linux Fedora Librsvg and 2 more
CVE-2023-38197

qtbase: infinite loops in QXmlStreamReader

An issue was discovered in Qt before 5.15.15, 6.x before 6.2.10, and 6.3.x through 6.5.x before 6.5.3. There are infinite loops in recursive entity expansion.

CVSS 3.1 · 7.5 High EPSS 1.3% KEV · Not listed
Vendors
Fedoraproject Qt Redhat
Products
Fedora Qt Enterprise Linux
CVE-2023-34474

ImageMagick: heap-based buffer overflow in ReadTIM2ImageData() function in coders/tim2.c

A heap-based buffer overflow issue was discovered in ImageMagick's ReadTIM2ImageData() function in coders/tim2.c. A local attacker could trick the user in opening specially crafted file, triggering an out-of-bounds read error, allowing an application to crash, resulting in a denial of service.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Fedoraproject Imagemagick
Products
Extra Packages For Enterprise Linux Fedora Imagemagick
CVE-2023-30944

Moodle: minor sql injection risk in external wiki method for listing pages

The vulnerability was found Moodle which exists due to insufficient sanitization of user-supplied data in external Wiki method for listing pages. A remote attacker can send a specially crafted request to the affected application and execute limited SQL commands within the application database.

CVSS 3.1 · 5.6 Medium EPSS 1.1% KEV · Not listed
Vendors
Fedoraproject Moodle
Products
Extra Packages For Enterprise Linux Fedora Moodle
CVE-2023-30943

Moodle: tinymce loaders susceptible to arbitrary folder creation

The vulnerability was found Moodle which exists because the application allows a user to control path of the older to create in TinyMCE loaders. A remote user can send a specially crafted HTTP request and create arbitrary folders on the system.

CVSS 3.1 · 6.5 Medium EPSS 6.8% KEV · Not listed
Vendors
Fedoraproject Moodle
Products
Extra Packages For Enterprise Linux Fedora Moodle
CVE-2023-2602

libcap: Memory Leak on pthread_create() Error

A vulnerability was found in the pthread_create() function in libcap. This issue may allow a malicious actor to use cause __real_pthread_create() to return an error, which can exhaust the process memory.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Debian Fedoraproject Libcap Project and 1 more
Products
Debian Linux Fedora Libcap and 2 more
CVE-2023-2156

kernel: net: IPv6 RPL protocol reachable assertion leads to DoS

A flaw was found in the networking subsystem of the Linux kernel within the handling of the RPL protocol. This issue results from the lack of proper handling of user-supplied data, which can lead to an assertion failure. This may allow an unauthenticated remote attacker to create a denial of service condition on the system.

CVSS 3.1 · 7.5 High EPSS 6.2% KEV · Not listed
Vendors
Debian Fedoraproject Linux and 1 more
Products
Debian Linux Fedora Linux Kernel and 1 more
CVE-2023-28336

Moodle: teacher can access names of users they do not have permission to access

Insufficient filtering of grade report history made it possible for teachers to access the names of users they could not otherwise access.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Fedoraproject Moodle
Products
Fedora Moodle
CVE-2023-28333

Moodle: pix helper potential mustache code injection risk

The Mustache pix helper contained a potential Mustache injection risk if combined with user input (note: This did not appear to be implemented/exploitable anywhere in the core Moodle LMS).

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
Fedoraproject Moodle
Products
Fedora Moodle
CVE-2023-20569

amd: Return Address Predictor vulnerability leading to information disclosure

A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in speculative execution at an attacker-controlled address, potentially leading to information disclosure.

CVSS 3.1 · 4.7 Medium EPSS 7.3% KEV · Not listed
Vendors
Amd Debian Fedoraproject and 2 more
Products
Epyc 72f3 Epyc 72f3 Firmware Epyc 7313 and 299 more