= 9)

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2021-44142	125	Exec Code	2022-02-21	2022-02-23	9.0	None	Remote	Low	???	Complete	Complete	Complete
The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver." Samba versions prior to 4.13.17, 4.14.12 and 4.15.5 with vfs_fruit configured allow out-of-bounds heap read and write via specially crafted extended file attributes. A remote attacker with write access to extended file attributes can execute arbitrary code with the privileges of smbd, typically root.
2	CVE-2020-25719	362		2022-02-18	2022-10-21	9.0	None	Remote	Low	???	Complete	Complete	Complete
A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentication. The Samba AD DC, could become confused about the user a ticket represents if it did not strictly require a Kerberos PAC and always use the SIDs found within. The result could include total domain compromise.
3	CVE-2020-24916	78		2020-09-09	2022-12-06	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
CGI implementation in Yaws web server versions 1.81 to 2.0.7 is vulnerable to OS command injection.
4	CVE-2020-15659	787	Mem. Corr.	2020-08-10	2020-08-21	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Mozilla developers and community members reported memory safety bugs present in Firefox 78 and Firefox ESR 78.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 79, Firefox ESR < 68.11, Firefox ESR < 78.1, Thunderbird < 68.11, and Thunderbird < 78.1.
5	CVE-2020-15656	843		2020-08-10	2023-02-02	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
JIT optimizations involving the Javascript arguments object could confuse later optimizations. This risk was already mitigated by various precautions in the code, resulting in this bug rated at only moderate severity. This vulnerability affects Firefox ESR < 78.1, Firefox < 79, and Thunderbird < 78.1.
6	CVE-2020-12420	362	Mem. Corr.	2020-07-09	2022-05-03	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
When trying to connect to a STUN server, a race condition could have caused a use-after-free of a pointer, leading to memory corruption and a potentially exploitable crash. This vulnerability affects Firefox ESR < 68.10, Firefox < 78, and Thunderbird < 68.10.0.
7	CVE-2020-12419	416	Mem. Corr.	2020-07-09	2023-01-27	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
When processing callbacks that occurred during window flushing in the parent process, the associated window may die; causing a use-after-free condition. This could have led to memory corruption and a potentially exploitable crash. This vulnerability affects Firefox ESR < 68.10, Firefox < 78, and Thunderbird < 68.10.0.
8	CVE-2020-12417	787	Mem. Corr.	2020-07-09	2022-05-03	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Due to confusion about ValueTags on JavaScript Objects, an object may pass through the type barrier, resulting in memory corruption and a potentially exploitable crash. Note: this issue only affects Firefox on ARM64 platforms. This vulnerability affects Firefox ESR < 68.10, Firefox < 78, and Thunderbird < 68.10.0.
9	CVE-2020-12410	787	Mem. Corr.	2020-07-09	2022-05-03	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Mozilla developers reported memory safety bugs present in Firefox 76 and Firefox ESR 68.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 68.9.0, Firefox < 77, and Firefox ESR < 68.9.
10	CVE-2020-12406	345		2020-07-09	2023-01-27	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Mozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal, resulting in a crash. We presume that with enough effort that it could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 68.9.0, Firefox < 77, and Firefox ESR < 68.9.
11	CVE-2020-12395	787	Mem. Corr.	2020-05-26	2022-04-26	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Mozilla developers and community members reported memory safety bugs present in Firefox 75 and Firefox ESR 68.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 68.8, Firefox < 76, and Thunderbird < 68.8.0.
12	CVE-2020-12284	787	Overflow	2020-04-28	2022-04-29	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
cbs_jpeg_split_fragment in libavcodec/cbs_jpeg.c in FFmpeg 4.1 and 4.2.2 has a heap-based buffer overflow during JPEG_MARKER_SOS handling because of a missing length check.
13	CVE-2020-8794	125	Exec Code	2020-02-25	2022-10-08	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
OpenSMTPD before 6.6.4 allows remote code execution because of an out-of-bounds read in mta_io in mta_session.c for multi-line replies. Although this vulnerability affects the client side of OpenSMTPD, it is possible to attack a server because the server code launches the client code during bounce handling.
14	CVE-2020-7247	78	Exec Code	2020-01-29	2022-04-29	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to execute arbitrary commands as root via a crafted SMTP session, as demonstrated by shell metacharacters in a MAIL FROM field. This affects the "uncommented" default configuration. The issue exists because of an incorrect return value upon failure of input validation.
15	CVE-2020-7040	59		2020-01-21	2023-01-27	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
storeBackup.pl in storeBackup through 3.5 relies on the /tmp/storeBackup.lock pathname, which allows symlink attacks that possibly lead to privilege escalation. (Local users can also create a plain file named /tmp/storeBackup.lock to block use of storeBackup until an admin manually deletes that file.)
16	CVE-2020-1472	330		2020-08-17	2022-04-26	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protocol (MS-NRPC), aka 'Netlogon Elevation of Privilege Vulnerability'.
17	CVE-2019-19920	78	Exec Code	2019-12-22	2022-12-14	9.0	None	Remote	Low	???	Complete	Complete	Complete
sa-exim 4.2.1 allows attackers to execute arbitrary code if they can write a .cf file or a rule. This occurs because Greylisting.pm relies on eval (rather than direct parsing and/or use of the taint feature). This issue is similar to CVE-2018-11805.
18	CVE-2019-19816	787		2019-12-17	2023-01-19	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image and performing some operations can cause slab-out-of-bounds write access in __btrfs_map_block in fs/btrfs/volumes.c, because a value of 1 for the number of data stripes is mishandled.
19	CVE-2019-15926	125		2019-09-04	2023-01-19	9.4	None	Remote	Low	Not required	Complete	None	Complete
An issue was discovered in the Linux kernel before 5.2.3. Out of bounds access exists in the functions ath6kl_wmi_pstream_timeout_event_rx and ath6kl_wmi_cac_event_rx in the file drivers/net/wireless/ath/ath6kl/wmi.c.
20	CVE-2019-15505	125		2019-08-23	2022-11-16	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
drivers/media/usb/dvb-usb/technisat-usb2.c in the Linux kernel through 5.2.9 has an out-of-bounds read via crafted USB device traffic (which may be remote via usbip or usbredir).
21	CVE-2019-15504	415		2019-08-23	2023-01-19	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
drivers/net/wireless/rsi/rsi_91x_usb.c in the Linux kernel through 5.2.9 has a Double Free via crafted USB device traffic (which may be remote via usbip or usbredir).
22	CVE-2019-15292	416		2019-08-21	2023-01-19	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
An issue was discovered in the Linux kernel before 5.0.9. There is a use-after-free in atalk_proc_exit, related to net/appletalk/atalk_proc.c, net/appletalk/ddp.c, and net/appletalk/sysctl_net_atalk.c.
23	CVE-2019-14901	400	DoS Exec Code Overflow	2019-11-29	2023-02-12	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
A heap overflow flaw was found in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver. The vulnerability allows a remote attacker to cause a system crash, resulting in a denial of service, or execute arbitrary code. The highest threat with this vulnerability is with the availability of the system. If code execution occurs, the code will run with the permissions of root. This will affect both confidentiality and integrity of files on the system.
24	CVE-2019-14896	122	DoS Exec Code Overflow	2019-11-27	2023-02-12	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
A heap-based buffer overflow vulnerability was found in the Linux kernel, version kernel-2.6.32, in Marvell WiFi chip driver. A remote attacker could cause a denial of service (system crash) or, possibly execute arbitrary code, when the lbs_ibss_join_existing function is called after a STA connects to an AP.
25	CVE-2019-14889	78	Exec Code	2019-12-10	2023-02-01	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
A flaw was found with the libssh API function ssh_scp_new() in versions before 0.9.3 and before 0.8.8. When the libssh SCP client connects to a server, the scp command, which includes a user-provided path, is executed on the server-side. In case the library is used in a way where users can influence the third parameter of the function, it would become possible for an attacker to inject arbitrary commands, leading to a compromise of the remote target.
26	CVE-2019-14287	755	Bypass	2019-10-17	2022-04-18	9.0	None	Remote	Low	???	Complete	Complete	Complete
In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user ID. For example, this allows bypass of !root configuration, and USER= logging, for a "sudo -u \#$((0xffffffff))" command.
27	CVE-2019-11815	362		2019-05-08	2021-07-21	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
An issue was discovered in rds_tcp_kill_sock in net/rds/tcp.c in the Linux kernel before 5.0.8. There is a race condition leading to a use-after-free, related to net namespace cleanup.
28	CVE-2019-11683	787	DoS Mem. Corr.	2019-05-02	2023-01-19	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
udp_gro_receive_segment in net/ipv4/udp_offload.c in the Linux kernel 5.x before 5.0.13 allows remote attackers to cause a denial of service (slab-out-of-bounds memory corruption) or possibly have unspecified other impact via UDP packets with a 0 payload, because of mishandling of padded packets, aka the "GRO packet of death" issue.
29	CVE-2019-10269	787	Overflow	2019-03-29	2023-02-28	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
BWA (aka Burrow-Wheeler Aligner) before 2019-01-23 has a stack-based buffer overflow in the bns_restore function in bntseq.c via a long sequence name in a .alt file.
30	CVE-2019-10220	22	Dir. Trav.	2019-11-27	2022-11-03	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Linux kernel CIFS implementation, version 4.9.0 is vulnerable to a relative paths injection in directory entry lists.
31	CVE-2019-10149	78	Exec Code	2019-06-05	2022-11-07	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message() function in /src/deliver.c may lead to remote command execution.
32	CVE-2019-7304	863		2019-04-23	2022-11-30	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Canonical snapd before version 2.37.1 incorrectly performed socket owner validation, allowing an attacker to run arbitrary commands as root. This issue affects: Canonical snapd versions prior to 2.37.1.
33	CVE-2019-5736	78	Exec Code	2019-02-11	2021-12-16	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveraging the ability to execute a command as root within one of these types of containers: (1) a new container with an attacker-controlled image, or (2) an existing container, to which the attacker previously had write access, that can be attached with docker exec. This occurs because of file-descriptor mishandling, related to /proc/self/exe.
34	CVE-2019-3462		Exec Code	2019-01-28	2020-08-24	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Incorrect sanitation of the 302 redirect field in HTTP transport method of apt versions 1.4.8 and earlier can lead to content injection by a MITM attacker, potentially leading to remote code execution on the target machine.
35	CVE-2019-2201	787	Exec Code	2019-11-13	2022-06-02	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
In generate_jsimd_ycc_rgb_convert_neon of jsimd_arm64_neon.S, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-120551338
36	CVE-2019-2126	415	Exec Code	2019-08-20	2023-03-29	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
In ParseContentEncodingEntry of mkvparser.cc, there is a possible double free due to a missing reset of a freed pointer. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-127702368.
37	CVE-2018-20836	362		2019-05-07	2022-11-03	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
An issue was discovered in the Linux kernel before 4.20. There is a race condition in smp_task_timedout() and smp_task_done() in drivers/scsi/libsas/sas_expander.c, leading to a use-after-free.
38	CVE-2018-19788	20	Exec Code	2018-12-03	2019-08-06	9.0	None	Remote	Low	???	Complete	Complete	Complete
A flaw was found in PolicyKit (aka polkit) 0.115 that allows a user with a uid greater than INT_MAX to successfully execute any systemctl command.
39	CVE-2018-18502	119	Overflow Mem. Corr.	2019-02-05	2019-02-07	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Mozilla developers and community members reported memory safety bugs present in Firefox 64. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 65.
40	CVE-2018-16509		Exec Code	2018-09-05	2019-10-03	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
An issue was discovered in Artifex Ghostscript before 9.24. Incorrect "restoration of privilege" checking during handling of /invalidaccess exceptions could be used by attackers able to supply crafted PostScript to execute code using the "pipe" instruction.
41	CVE-2018-14618	190	Overflow	2018-09-05	2019-04-22	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The internal function Curl_ntlm_core_mk_nt_hash multiplies the length of the password by two (SUM) to figure out how large temporary storage area to allocate from the heap. The length value is then subsequently used to iterate over the password and generate output into the allocated storage buffer. On systems with a 32 bit size_t, the math to calculate SUM triggers an integer overflow when the password length exceeds 2GB (2^31 bytes). This integer overflow usually causes a very small buffer to actually get allocated instead of the intended very huge one, making the use of that buffer end up in a heap buffer overflow. (This bug is almost identical to CVE-2017-8816.)
42	CVE-2018-5151	119	Overflow Mem. Corr.	2018-06-11	2018-08-03	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Memory safety bugs were reported in Firefox 59. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 60.
43	CVE-2018-5090	119	Overflow Mem. Corr.	2018-06-11	2018-06-25	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Memory safety bugs were reported in Firefox 57. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 58.
44	CVE-2017-18017	416	DoS Mem. Corr.	2018-01-03	2023-01-19	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-after-free and memory corruption) or possibly have unspecified other impact by leveraging the presence of xt_TCPMSS in an iptables action.
45	CVE-2017-14176		Exec Code	2017-11-27	2019-10-03	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Bazaar through 2.7.0, when Subprocess SSH is used, allows remote attackers to execute arbitrary commands via a bzr+ssh URL with an initial dash character in the hostname, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-12976, CVE-2017-16228, CVE-2017-1000116, and CVE-2017-1000117.
46	CVE-2017-12762	119	Overflow	2017-08-09	2023-01-19	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
In /drivers/isdn/i4l/isdn_net.c: A user-controlled buffer is copied into a local buffer of constant size using strcpy without a length check which can cause a buffer overflow. This affects the Linux kernel 4.9-stable tree, 4.12-stable tree, 3.18-stable tree, and 4.4-stable tree.
47	CVE-2017-7826	119	Overflow Mem. Corr.	2018-06-11	2018-08-01	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Memory safety bugs were reported in Firefox 56 and Firefox ESR 52.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 57, Firefox ESR < 52.5, and Thunderbird < 52.5.
48	CVE-2017-7810	119	Overflow Mem. Corr.	2018-06-11	2018-08-01	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Memory safety bugs were reported in Firefox 55 and Firefox ESR 52.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 56, Firefox ESR < 52.4, and Thunderbird < 52.4.
49	CVE-2016-9950	22	Dir. Trav.	2016-12-17	2017-01-07	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
An issue was discovered in Apport before 2.20.4. There is a path traversal issue in the Apport crash file "Package" and "SourcePackage" fields. These fields are used to build a path to the package specific hook files in the /usr/share/apport/package-hooks/ directory. An attacker can exploit this path traversal to execute arbitrary Python files from the local system.
50	CVE-2016-9949	94	Exec Code	2016-12-17	2017-01-07	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
An issue was discovered in Apport before 2.20.4. In apport/ui.py, Apport reads the CrashDB field and it then evaluates the field as Python code if it begins with a "{". This allows remote attackers to execute arbitrary Python code.

Total number of vulnerabilities : 283 Page : 1 (This Page)2 3 4 5 6