Export limit exceeded: 425880 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 425880 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 17087 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 17,087

Export CSV
CVE-2020-12351

kernel: net: bluetooth: type confusion while processing AMP packets

Improper input validation in BlueZ may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.

CVSS 3.1 · 8.8 High EPSS 7.8% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux Rhel Aus and 4 more
CVE-2020-12268

jbig2dec: heap-based buffer overflow in jbig2_image_compose in jbig2_image.c

jbig2_image_compose in jbig2_image.c in Artifex jbig2dec before 0.18 has a heap-based buffer overflow.

CVSS 3.1 · 9.8 Critical EPSS 2.7% KEV · Not listed
Vendors
Artifex Debian Opensuse and 1 more
Products
Jbig2dec Debian Linux Leap and 3 more
CVE-2020-12137

mailman: XSS via file attachments in list archives

GNU Mailman 2.x before 2.1.30 uses the .obj extension for scrubbed application/octet-stream MIME parts. This behavior may contribute to XSS attacks against list-archive visitors, because an HTTP reply from an archive web server may lack a MIME type, and a web browser may perform MIME sniffing, conclude that the MIME type should have been text/html, and execute JavaScript code.

CVSS 3.1 · 6.1 Medium EPSS 2.3% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 3 more
Products
Ubuntu Linux Debian Linux Fedora and 4 more
CVE-2020-12114

kernel: DoS by corrupting mountpoint reference counter

A pivot_root race condition in fs/namespace.c in the Linux kernel 4.4.x before 4.4.221, 4.9.x before 4.9.221, 4.14.x before 4.14.178, 4.19.x before 4.19.119, and 5.x before 5.3 allows local users to cause a denial of service (panic) by corrupting a mountpoint reference counter.

CVSS 3.1 · 4.7 Medium EPSS < 1% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux Rhel Eus
CVE-2020-12100

dovecot: Resource exhaustion via deeply nested MIME parts

In Dovecot before 2.3.11.3, uncontrolled recursion in submission, lmtp, and lda allows remote attackers to cause a denial of service (resource consumption) via a crafted e-mail message with deeply nested MIME parts.

CVSS 3.1 · 7.5 High EPSS 5.3% KEV · Not listed
Vendors
Canonical Debian Dovecot and 2 more
Products
Ubuntu Linux Debian Linux Dovecot and 4 more
CVE-2020-12049

dbus: denial of service via file descriptor leak

An issue was discovered in dbus >= 1.3.0 before 1.12.18. The DBusServer in libdbus, as used in dbus-daemon, leaks file descriptors when a message exceeds the per-message file descriptor limit. A local attacker with access to the D-Bus system bus or another system service's private AF_UNIX socket could use this to make the system service reach its file descriptor limit, denying service to subsequent D-Bus clients.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Freedesktop Redhat
Products
Ubuntu Linux Dbus Enterprise Linux and 2 more
CVE-2020-11985

httpd: IP address spoofing when proxying using mod_remoteip and mod_rewrite

IP address spoofing when proxying using mod_remoteip and mod_rewrite For configurations using proxying with mod_remoteip and certain mod_rewrite rules, an attacker could spoof their IP address for logging and PHP scripts. Note this issue was fixed in Apache HTTP Server 2.4.24 but was retrospectively allocated a low severity CVE in 2020.

CVSS 3.1 · 5.3 Medium EPSS 7.1% KEV · Not listed
Vendors
Apache Redhat
Products
Http Server Enterprise Linux Rhel Software Collections
CVE-2020-11947

QEMU: heap buffer overflow in iscsi_aio_ioctl_cb() in block/iscsi.c may lead to information disclosure

iscsi_aio_ioctl_cb in block/iscsi.c in QEMU 4.1.0 has a heap-based buffer over-read that may disclose unrelated information from process memory to an attacker.

CVSS 3.1 · 3.8 Low EPSS < 1% KEV · Not listed
Vendors
Qemu Redhat
Products
Qemu Advanced Virtualization Enterprise Linux
CVE-2020-11945

squid: improper access restriction upon Digest Authentication nonce replay could lead to remote code execution

An issue was discovered in Squid before 5.0.2. A remote attacker can replay a sniffed Digest Authentication nonce to gain access to resources that are otherwise forbidden. This occurs because the attacker can overflow the nonce reference counter (a short integer). Remote code execution may occur if the pooled token credentials are freed (instead of replayed as valid credentials).

CVSS 3.1 · 9.8 Critical EPSS 27.2% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 3 more
Products
Ubuntu Linux Debian Linux Fedora and 5 more
CVE-2020-11884

Kernel: s390: page table upgrade in secondary address mode may lead to privilege escalation

In the Linux kernel 4.19 through 5.6.7 on the s390 platform, code execution may occur because of a race condition, as demonstrated by code in enable_sacf_uaccess in arch/s390/lib/uaccess.c that fails to protect against a concurrent page table upgrade, aka CID-3f777e19d171. A crash could also occur.

CVSS 3.1 · 7.0 High EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 3 more
Products
Ubuntu Linux Debian Linux Fedora and 35 more
CVE-2020-11793

webkitgtk: use-after-free via crafted web content

A use-after-free issue exists in WebKitGTK before 2.28.1 and WPE WebKit before 2.28.1 via crafted web content that allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash).

CVSS 3.1 · 8.8 High EPSS 2.9% KEV · Not listed
Vendors
Canonical Fedoraproject Opensuse and 3 more
Products
Ubuntu Linux Fedora Leap and 3 more
CVE-2020-11764

OpenEXR: out-of-bounds write in copyIntoFrameBuffer function in ImfMisc.cpp

An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp.

CVSS 3.1 · 5.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Apple Canonical Debian and 4 more
Products
Icloud Ipados Iphone Os and 10 more
CVE-2020-11763

OpenEXR: std:: vector out-of-bounds read and write in ImfTileOffsets.cpp

An issue was discovered in OpenEXR before 2.4.1. There is an std::vector out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp.

CVSS 3.1 · 5.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Apple Canonical Debian and 4 more
Products
Icloud Ipados Iphone Os and 10 more
CVE-2020-11761

OpenEXR: out-of-bounds read during Huffman uncompression

An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder::refill in ImfFastHuf.cpp.

CVSS 3.1 · 5.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Apple Canonical Debian and 3 more
Products
Icloud Ipados Iphone Os and 9 more
CVE-2020-11736

file-roller: directory traversal via directory symlink pointing outside of the target directory

fr-archive-libarchive.c in GNOME file-roller through 3.36.1 allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink to a directory outside of the intended extraction location.

CVSS 3.1 · 3.9 Low EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Gnome and 1 more
Products
Ubuntu Linux Debian Linux File-roller and 1 more
CVE-2020-11669

kernel: powerpc: guest can cause DoS on POWER9 KVM hosts

An issue was discovered in the Linux kernel before 5.2 on the powerpc platform. arch/powerpc/kernel/idle_book3s.S does not have save/restore functionality for PNV_POWERSAVE_AMR, PNV_POWERSAVE_UAMOR, and PNV_POWERSAVE_AMOR, aka CID-53a712bae5dd.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Linux Opensuse Redhat
Products
Linux Kernel Leap Enterprise Linux