Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 120

Export CSV
CVE-2020-26137

python-urllib3: CRLF injection via HTTP request method

urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of putrequest(). NOTE: this is similar to CVE-2020-26116.

CVSS 3.1 · 6.5 Medium EPSS 2.3% KEV · Not listed
Vendors
Canonical Debian Oracle and 2 more
Products
Ubuntu Linux Debian Linux Communications Cloud Native Core Network Function Cloud Native Environment and 5 more
CVE-2020-25866

wireshark: BLIP dissector crash (wnpa-sec-2020-13)

In Wireshark 3.2.0 to 3.2.6 and 3.0.0 to 3.0.13, the BLIP protocol dissector has a NULL pointer dereference because a buffer was sized for compressed (not uncompressed) messages. This was addressed in epan/dissectors/packet-blip.c by allowing reasonable compression ratios and rejecting ZIP bombs.

CVSS 3.1 · 7.5 High EPSS 4.0% KEV · Not listed
Vendors
Fedoraproject Opensuse Oracle and 1 more
Products
Fedora Leap Zfs Storage Appliance Kit and 1 more
CVE-2020-24584

django: permission escalation in intermediate-level directories of the file system cache on Python 3.7+

An issue was discovered in Django 2.2 before 2.2.16, 3.0 before 3.0.10, and 3.1 before 3.1.1 (when Python 3.7+ is used). The intermediate-level directories of the filesystem cache had the system's standard umask rather than 0o077.

CVSS 3.1 · 7.5 High EPSS 3.3% KEV · Not listed
Vendors
Canonical Djangoproject Fedoraproject and 1 more
Products
Ubuntu Linux Django Fedora and 1 more
CVE-2020-24583

django: incorrect permissions on intermediate-level directories on Python 3.7+

An issue was discovered in Django 2.2 before 2.2.16, 3.0 before 3.0.10, and 3.1 before 3.1.1 (when Python 3.7+ is used). FILE_UPLOAD_DIRECTORY_PERMISSIONS mode was not applied to intermediate-level directories created in the process of uploading files. It was also not applied to intermediate-level collected static directories when using the collectstatic management command.

CVSS 3.1 · 7.5 High EPSS 4.0% KEV · Not listed
Vendors
Canonical Djangoproject Fedoraproject and 1 more
Products
Ubuntu Linux Django Fedora and 1 more
CVE-2020-1927

httpd: mod_rewrite configurations vulnerable to open redirect

In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an an unexpected URL within the request URL.

CVSS 3.1 · 6.1 Medium EPSS 56.7% KEV · Not listed
Vendors
Apache Broadcom Canonical and 6 more
Products
Http Server Brocade Fabric Operating System Ubuntu Linux and 14 more
CVE-2020-17498

wireshark: Kafka protocol dissector could crash (wnpa-sec-2020-10)

In Wireshark 3.2.0 to 3.2.5, the Kafka protocol dissector could crash. This was addressed in epan/dissectors/packet-kafka.c by avoiding a double free during LZ4 decompression.

CVSS 3.1 · 6.5 Medium EPSS 2.6% KEV · Not listed
Vendors
Fedoraproject Opensuse Oracle and 1 more
Products
Fedora Leap Zfs Storage Appliance Kit and 1 more
CVE-2020-15025

ntp: Resource exhaustion via memory leak with CMAC keys

ntpd in ntp 4.2.8 before 4.2.8p15 and 4.3.x before 4.3.101 allows remote attackers to cause a denial of service (memory consumption) by sending packets, because memory is not freed in situations where a CMAC key is used and associated with a CMAC algorithm in the ntp.keys file.

CVSS 3.1 · 4.4 Medium EPSS 3.1% KEV · Not listed
Vendors
Netapp Ntp Opensuse and 1 more
Products
8300 8300 Firmware 8700 and 24 more
CVE-2020-13950

mod_proxy_http NULL pointer dereference

Apache HTTP Server versions 2.4.41 to 2.4.46 mod_proxy_http can be made to crash (NULL pointer dereference) with specially crafted requests using both Content-Length and Transfer-Encoding headers, leading to a Denial of Service

CVSS 3.1 · 7.5 High EPSS 50.0% KEV · Not listed
Vendors
Apache Debian Fedoraproject and 2 more
Products
Http Server Debian Linux Fedora and 5 more
CVE-2020-13596

django: possible XSS via admin ForeignKeyRawIdWidget

An issue was discovered in Django 2.2 before 2.2.13 and 3.0 before 3.0.7. Query parameters generated by the Django admin ForeignKeyRawIdWidget were not properly URL encoded, leading to a possibility of an XSS attack.

CVSS 3.1 · 6.1 Medium EPSS 2.9% KEV · Not listed
Vendors
Canonical Debian Djangoproject and 3 more
Products
Ubuntu Linux Debian Linux Django and 4 more
CVE-2020-13254

django: potential data leakage via malformed memcached keys

An issue was discovered in Django 2.2 before 2.2.13 and 3.0 before 3.0.7. In cases where a memcached backend does not perform key validation, passing malformed cache keys could result in a key collision, and potential data leakage.

CVSS 3.1 · 5.9 Medium EPSS 6.1% KEV · Not listed
Vendors
Canonical Debian Djangoproject and 4 more
Products
Ubuntu Linux Debian Linux Django and 5 more
CVE-2019-20892

net-snmp: double free in usm_free_usmStateReference function in snmplib/snmpusm.c via an SNMPv3 GetBulk request

net-snmp before 5.8.1.pre1 has a double free in usm_free_usmStateReference in snmplib/snmpusm.c via an SNMPv3 GetBulk request. NOTE: this affects net-snmp packages shipped to end users by multiple Linux distributions, but might not affect an upstream release.

CVSS 3.1 · 6.5 Medium EPSS 2.3% KEV · Not listed
Vendors
Net-snmp Oracle Redhat
Products
Net-snmp Zfs Storage Appliance Kit Enterprise Linux
CVE-2019-17567

mod_proxy_wstunnel tunneling of non Upgraded connections

Apache HTTP Server versions 2.4.6 to 2.4.46 mod_proxy_wstunnel configured on an URL that is not necessarily Upgraded by the origin server was tunneling the whole connection regardless, thus allowing for subsequent requests on the same connection to pass through with no HTTP validation, authentication or authorization possibly configured.

CVSS 3.1 · 5.3 Medium EPSS 59.7% KEV · Not listed
Vendors
Apache Fedoraproject Oracle and 1 more
Products
Http Server Fedora Enterprise Manager Ops Center and 3 more
CVE-2019-14822

ibus: missing authorization allows local attacker to access the input bus of another user

A flaw was discovered in ibus in versions before 1.5.22 that allows any unprivileged user to monitor and send method calls to the ibus bus of another user due to a misconfiguration in the DBus server setup. A local attacker may use this flaw to intercept all keystrokes of a victim user who is using the graphical interface, change the input method engine, or modify other input related configurations of the victim user.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Canonical Ibus Project Oracle and 1 more
Products
Ubuntu Linux Ibus Zfs Storage Appliance Kit and 2 more
CVE-2018-20781

gnome-keyring: user's login credentials is kept in a session-child process resulting in exposed plaintext password

In pam/gkr-pam-module.c in GNOME Keyring before 3.27.2, the user's password is kept in a session-child process spawned from the LightDM daemon. This can expose the credential in cleartext.

CVSS 3.1 · 7.8 High EPSS 1.5% KEV · Not listed
Vendors
Canonical Gnome Oracle
Products
Ubuntu Linux Gnome Keyring Zfs Storage Appliance Kit