Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 66

Export CSV
CVE-2020-8927

Buffer overflow in Brotli library

A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It is recommended to update your Brotli library to 1.0.8 or later. If one cannot update, we recommend to use the "streaming" API as opposed to the "one-shot" API, and impose chunk size limits.

CVSS 3.1 · 5.3 Medium EPSS 3.3% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 4 more
Products
Ubuntu Linux Debian Linux Fedora and 9 more
CVE-2022-1650

Improper Removal of Sensitive Information Before Storage or Transfer in eventsource/eventsource

Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository eventsource/eventsource prior to v2.0.2.

CVSS 3.1 · 8.1 High EPSS 1.9% KEV · Not listed
Vendors
Debian Eventsource Redhat
Products
Debian Linux Eventsource Ceph Storage and 8 more
CVE-2020-1597

ASP.NET Core Denial of Service Vulnerability

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against an ASP.NET Core web application. The vulnerability can be exploited remotely, without authentication. A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the ASP.NET Core application. The update addresses the vulnerability by correcting how the ASP.NET Core web application handles web requests.

CVSS 3.1 · 7.5 High EPSS 6.6% KEV · Not listed
Vendors
Fedoraproject Microsoft Redhat
Products
Fedora Asp.net Core Visual Studio 2017 and 3 more
CVE-2020-1045

Microsoft ASP.NET Core Security Feature Bypass Vulnerability

<p>A security feature bypass vulnerability exists in the way Microsoft ASP.NET Core parses encoded cookie names.</p> <p>The ASP.NET Core cookie parser decodes entire cookie strings which could allow a malicious attacker to set a second cookie with the name being percent encoded.</p> <p>The security update addresses the vulnerability by fixing the way the ASP.NET Core cookie parser handles encoded names.</p>

CVSS 3.1 · 7.5 High EPSS 5.9% KEV · Not listed
Vendors
Fedoraproject Microsoft Redhat
Products
Fedora Asp.net Core Enterprise Linux and 4 more
CVE-2020-1147

dotnet: XML source markup processing remote code execution

A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability'.

CVSS 3.1 · 7.8 High EPSS 95.8% KEV · Listed
Vendors
Microsoft Redhat
Products
.net Core .net Framework Sharepoint Enterprise Server and 15 more