Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 82

Export CSV
CVE-2010-0087

JDK unspecified vulnerability in JWS/Plugin component

Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

CVSS 2.0 · 7.5 High EPSS 3.3% KEV · Not listed
Vendors
Redhat Sun
Products
Network Satellite Rhel Extras Rhel Extras Sap and 3 more
CVE-2020-11078

CRLF injection in httplib2

In httplib2 before version 0.18.0, an attacker controlling unescaped part of uri for `httplib2.Http.request()` could change request headers and body, send additional hidden requests to same server. This vulnerability impacts software that uses httplib2 with uri constructed by string concatenation, as opposed to proper urllib building with escaping. This has been fixed in 0.18.0.

CVSS 3.1 · 6.8 Medium EPSS 2.4% KEV · Not listed
Vendors
Debian Fedoraproject Httplib2 Project and 1 more
Products
Debian Linux Fedora Httplib2 and 3 more