Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2,842

Export CSV
CVE-2021-39226

Snapshot authentication bypass in grafana

Grafana is an open source data visualization platform. In affected versions unauthenticated and authenticated users are able to view the snapshot with the lowest database key by accessing the literal paths: /dashboard/snapshot/:key, or /api/snapshots/:key. If the snapshot "public_mode" configuration setting is set to true (vs default of false), unauthenticated users are able to delete the snapshot with the lowest database key by accessing the literal path: /api/snapshots-delete/:deleteKey. Regardless of the snapshot "public_mode" setting, authenticated users are able to delete the snapshot with the lowest database key by accessing the literal paths: /api/snapshots/:key, or /api/snapshots-delete/:deleteKey. The combination of deletion and viewing enables a complete walk through all snapshot data while resulting in complete snapshot data loss. This issue has been resolved in versions 8.1.6 and 7.5.11. If for some reason you cannot upgrade you can use a reverse proxy or similar to block access to the literal paths: /api/snapshots/:key, /api/snapshots-delete/:deleteKey, /dashboard/snapshot/:key, and /api/snapshots/:key. They have no normal function and can be disabled without side effects.

CVSS 3.1 · 9.8 Critical EPSS 99.9% KEV · Listed
Vendors
Fedoraproject Grafana Redhat
Products
Fedora Grafana Enterprise Linux and 2 more
CVE-2023-4863

libwebp: Heap buffer overflow in WebP Codec

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)

CVSS 3.1 · 8.8 High EPSS 100.0% KEV · Listed
Vendors
Bandisoft Bentley Debian and 7 more
Products
Honeyview Seequent Leapfrog Debian Linux and 14 more
CVE-2023-5217

libvpx: Heap buffer overflow in vp8 encoding in libvpx

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVSS 3.1 · 8.8 High EPSS 49.0% KEV · Listed
Vendors
Apple Debian Fedoraproject and 5 more
Products
Ipados Iphone Os Debian Linux and 12 more
CVE-2023-42916

webkitgtk: Out-of-bounds read leads to sensitive data leak

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may disclose sensitive information. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.

CVSS 3.1 · 6.5 Medium EPSS 17.8% KEV · Listed
Vendors
Apple Debian Fedoraproject and 2 more
Products
Ipados Iphone Os Macos and 6 more
CVE-2023-42917

webkitgtk: Arbitrary Remote Code Execution

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.

CVSS 3.1 · 8.8 High EPSS 9.3% KEV · Listed
Vendors
Apple Debian Fedoraproject and 2 more
Products
Ipados Iphone Os Macos and 10 more
CVE-2022-32893

webkitgtk: processing maliciously crafted web content may lead to arbitrary code execution

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey 12.5.1, Safari 15.6.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

CVSS 3.1 · 8.8 High EPSS 10.5% KEV · Listed
Vendors
Apple Debian Fedoraproject and 3 more
Products
Ipados Iphone Os Macos and 7 more
CVE-2021-1789

webkitgtk: Type confusion issue leading to arbitrary code execution

A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4, Safari 14.0.3. Processing maliciously crafted web content may lead to arbitrary code execution.

CVSS 3.1 · 8.8 High EPSS 14.0% KEV · Listed
Vendors
Apple Fedoraproject Redhat and 1 more
Products
Ipados Iphone Os Mac Os X and 7 more
CVE-2021-1870

webkitgtk: Logic issue leading to arbitrary code execution

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..

CVSS 3.1 · 9.8 Critical EPSS 7.7% KEV · Listed
Vendors
Apple Fedoraproject Redhat and 1 more
Products
Ipados Iphone Os Mac Os X and 5 more
CVE-2021-1871

webkitgtk: Logic issue leading to arbitrary code execution

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..

CVSS 3.1 · 9.8 Critical EPSS 7.0% KEV · Listed
Vendors
Apple Debian Fedoraproject and 1 more
Products
Ipados Iphone Os Mac Os X and 5 more
CVE-2022-4283

xorg-x11-server: XkbGetKbdByName use-after-free

A vulnerability was found in X.Org. This security flaw occurs because the XkbCopyNames function left a dangling pointer to freed memory, resulting in out-of-bounds memory access on subsequent XkbGetKbdByName requests.. This issue can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for ssh X forwarding sessions.

CVSS 3.1 · 7.8 High EPSS 1.1% KEV · Not listed
Vendors
Debian Fedoraproject Redhat and 1 more
Products
Debian Linux Fedora Enterprise Linux and 1 more
CVE-2023-45802

Apache HTTP Server: HTTP/2 stream memory not reclaimed right away on RST

When a HTTP/2 stream was reset (RST frame) by a client, there was a time window were the request's memory resources were not reclaimed immediately. Instead, de-allocation was deferred to connection close. A client could send new requests and resets, keeping the connection busy and open and causing the memory footprint to keep on growing. On connection close, all resources were reclaimed, but the process might run out of memory before that. This was found by the reporter during testing of CVE-2023-44487 (HTTP/2 Rapid Reset Exploit) with their own test client. During "normal" HTTP/2 use, the probability to hit this bug is very low. The kept memory would not become noticeable before the connection closes or times out. Users are recommended to upgrade to version 2.4.58, which fixes the issue.

CVSS 3.1 · 5.9 Medium EPSS 3.2% KEV · Not listed
Vendors
Apache Debian Fedoraproject and 1 more
Products
Http Server Debian Linux Fedora and 3 more
CVE-2018-25032

zlib: A flaw found in zlib when compressing (not decompressing) certain inputs

zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.

CVSS 3.1 · 7.5 High EPSS 51.7% KEV · Not listed
Vendors
Apple Azul Debian and 10 more
Products
Mac Os X Macos Zulu and 44 more
CVE-2021-35567

OpenJDK: Incorrect principal selection when using Kerberos Constrained Delegation (Libraries, 8266689)

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via Kerberos to compromise Java SE, Oracle GraalVM Enterprise Edition. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 6.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N).

CVSS 3.1 · 6.8 Medium EPSS 2.9% KEV · Not listed
Vendors
Debian Fedoraproject Netapp and 2 more
Products
Debian Linux Fedora Active Iq Unified Manager and 16 more
CVE-2021-27923

python-pillow: Excessive memory allocation in ICO image reader

Pillow before 8.1.2 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for an ICO container, and thus an attempted memory allocation can be very large.

CVSS 3.1 · 7.5 High EPSS 3.0% KEV · Not listed
Vendors
Fedoraproject Python Redhat
Products
Fedora Pillow Enterprise Linux and 1 more
CVE-2021-27922

python-pillow: Excessive memory allocation in ICNS image reader

Pillow before 8.1.2 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for an ICNS container, and thus an attempted memory allocation can be very large.

CVSS 3.1 · 7.5 High EPSS 4.9% KEV · Not listed
Vendors
Fedoraproject Python Redhat
Products
Fedora Pillow Enterprise Linux and 1 more
CVE-2021-27921

python-pillow: Excessive memory allocation in BLP image reader

Pillow before 8.1.2 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for a BLP container, and thus an attempted memory allocation can be very large.

CVSS 3.1 · 7.5 High EPSS 3.2% KEV · Not listed
Vendors
Fedoraproject Python Redhat
Products
Fedora Pillow Enterprise Linux and 1 more