Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.8Linux Kernel Privilege Escalation VulnerabilityKEVEPSS 49.2%Apr 16, 2021
- High7.2http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x before 3.8.5 allows CRLF injection if the attacker controls the HTTP reques…EPSS 6.4%Sep 27, 2020
- High7.5An issue was discovered in GnuTLS before 3.6.15.EPSS 3.8%Sep 4, 2020
- Medium5.5Microsoft Netlogon Privilege Escalation VulnerabilityKEVEPSS 99.4%Aug 17, 2020
- High7.5In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open, because _proc_pax lacks…EPSS 3.0%Jul 13, 2020
- Medium5.5In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for…EPSS 1.0%Jun 27, 2020
- High7.4GnuTLS 3.6.x before 3.6.14 uses incorrect cryptography for encrypting a session ticket (a loss of confidentiality in TLS 1.2, and an authentication bypass in TLS 1.3).EPSS 22.3%Jun 4, 2020
- Medium5.5ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query.EPSS 0.6%May 27, 2020
- Medium5.5SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c.EPSS 0.7%May 27, 2020
- High7.0ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature.EPSS 1.0%May 27, 2020
- Medium5.5SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.EPSS 1.0%May 24, 2020
- Medium4.4iproute2 before 5.1.0 has a use-after-free in get_netnsid_from_name in ip/ipnetns.c.EPSS 0.4%May 9, 2020
- High7.8json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.EPSS 1.9%May 9, 2020
- High7.0A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde expansion was carried out.EPSS 0.5%Apr 30, 2020
- Medium6.5SaltStack Salt Path Traversal VulnerabilityKEVEPSS 86.2%Apr 30, 2020
- Critical9.8SaltStack Salt Authentication Bypass VulnerabilityKEVEPSS 96.6%Apr 30, 2020
- High7.5In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash).EPSS 4.7%Apr 28, 2020
- High7.0An out-of-bounds write vulnerability was found in glibc before 2.31 when handling signal trampolines on PowerPC.EPSS 0.5%Apr 17, 2020
- High7.5SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initializat…EPSS 4.3%Apr 9, 2020
- High7.4GnuTLS 3.6.x before 3.6.13 uses incorrect cryptography for DTLS.EPSS 3.4%Apr 3, 2020
- High8.8An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1.EPSS 2.7%Mar 12, 2020
- Medium5.5The GNU C Library (aka glibc or libc6) before 2.32 could overflow an on-stack buffer during range reduction if an input to an 80-bit long double function contains a no…EPSS 0.8%Mar 4, 2020
- High8.8Mozilla Firefox And Thunderbird Type Confusion VulnerabilityKEVEPSS 46.3%Mar 1, 2020
- High7.5In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference and segmentation fault because of generated column optimizations.EPSS 3.7%Feb 21, 2020
- High7.5Lib/zipfile.py in Python through 3.7.2 allows remote attackers to cause a denial of service (resource consumption) via a ZIP bomb.EPSS 5.6%Feb 4, 2020