Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 331

Export CSV
CVE-2020-1730

libssh: denial of service when handling AES-CTR (or DES) ciphers

A flaw was found in libssh versions before 0.8.9 and before 0.9.4 in the way it handled AES-CTR (or DES ciphers if enabled) ciphers. The server or client could crash when the connection hasn't been fully initialized and the system tries to cleanup the ciphers when closing the connection. The biggest threat from this vulnerability is system availability.

CVSS 3.1 · 5.3 Medium EPSS 3.1% KEV · Not listed
Vendors
Canonical Fedoraproject Libssh and 3 more
Products
Ubuntu Linux Fedora Libssh and 4 more
CVE-2020-14364

QEMU: usb: out-of-bounds r/w access issue while processing usb packets

An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions before 5.2.0. This issue occurs while processing USB packets from a guest when USBDevice 'setup_len' exceeds its 'data_buf[4096]' in the do_token_in, do_token_out routines. This flaw allows a guest user to crash the QEMU process, resulting in a denial of service, or the potential execution of arbitrary code with the privileges of the QEMU process on the host.

CVSS 3.1 · 5.0 Medium EPSS 5.4% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 3 more
Products
Ubuntu Linux Debian Linux Fedora and 11 more
CVE-2020-14350

postgresql: Uncontrolled search path element in CREATE EXTENSION

It was found that some PostgreSQL extensions did not use search_path safely in their installation script. An attacker with sufficient privileges could use this flaw to trick an administrator into executing a specially crafted script, during the installation or update of such extension. This affects PostgreSQL versions before 12.4, before 11.9, before 10.14, before 9.6.19, and before 9.5.23.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Opensuse and 2 more
Products
Ubuntu Linux Debian Linux Leap and 6 more
CVE-2020-14349

postgresql: Uncontrolled search path element in logical replication

It was found that PostgreSQL versions before 12.4, before 11.9 and before 10.14 did not properly sanitize the search_path during logical replication. An authenticated attacker could use this flaw in an attack similar to CVE-2018-1058, in order to execute arbitrary SQL command in the context of the user used for replication.

CVSS 3.1 · 7.1 High EPSS 2.2% KEV · Not listed
Vendors
Opensuse Postgresql Redhat
Products
Leap Postgresql Enterprise Linux and 4 more
CVE-2020-10713

grub2: Crafted grub.cfg file can lead to arbitrary code execution during boot process

A flaw was found in grub2, prior to version 2.06. An attacker may use the GRUB 2 flaw to hijack and tamper the GRUB verification process. This flaw also allows the bypass of Secure Boot protections. In order to load an untrusted or modified kernel, an attacker would first need to establish access to the system such as gaining physical access, obtain the ability to alter a pxe-boot network, or have remote access to a networked system with root access. With this access, an attacker could then craft a string to cause a buffer overflow by injecting a malicious payload that leads to arbitrary code execution within GRUB. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

CVSS 3.1 · 8.2 High EPSS 1.7% KEV · Not listed
Vendors
Debian Gnu Opensuse and 2 more
Products
Debian Linux Grub2 Leap and 7 more
CVE-2015-8011

lldpd: buffer overflow in the lldp_decode function in daemon/protocols/lldp.c

Buffer overflow in the lldp_decode function in daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via vectors involving large management addresses and TLV boundaries.

CVSS 3.1 · 9.8 Critical EPSS 5.5% KEV · Not listed
Vendors
Debian Fedoraproject Lldpd Project and 1 more
Products
Debian Linux Fedora Lldpd and 5 more
CVE-2023-4128

kernel: net/sched: Use-after-free vulnerabilities in the net/sched classifiers: cls_fw, cls_u32 and cls_route

** REJECT ** DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-4206, CVE-2023-4207, CVE-2023-4208. Reason: This record is a duplicate of CVE-2023-4206, CVE-2023-4207, CVE-2023-4208. Notes: All CVE users should reference CVE-2023-4206, CVE-2023-4207, CVE-2023-4208 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage.

CVSS 3.1 · 7.8 High EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Rhel Aus Rhel E4s and 4 more
CVE-2023-35825

kernel: r592: race condition leading to use-after-free in r592_remove()

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-3141. Reason: This candidate is a reservation duplicate of CVE-2023-3141. Notes: All CVE users should reference CVE-2023-3141 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

CVSS 3.1 · 6.4 Medium EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Rhel Eus Rhev Hypervisor
CVE-2022-3522

kernel: race condition in hugetlb_no_page() in mm/hugetlb.c

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.

CVSS 3.1 · 7.0 High EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Rhel Eus Rhev Hypervisor
CVE-2022-23816

hw: cpu: AMD: RetBleed Arbitrary Speculative Code Execution with Return Instructions

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.

CVSS 3.1 · 5.6 Medium EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Rhel Eus Rhel Extras Rt and 1 more