[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$firGFSya1DpJSuP__r577NdgIytg4E0LymRYuHGpUo4s":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":118,"kevVulnerabilities":182,"topProductsByCves":785,"seoMetadata":796,"meta":805},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":117},10479,"fedoraproject",22,5392,84,560,"2024-11-14","f",[16,21,28,35,41,47,51,55,60,64,68,72,76,80,84,88,92,96,100,105,109,114],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":13},45028,"fedora",36,5323,{"id":22,"product_name":23,"version_count":24,"cve_count":25,"kev_count":26,"last_cve_update":27},45026,"extra_packages_for_enterprise_linux",3,76,1,"2024-01-16",{"id":29,"product_name":30,"version_count":31,"cve_count":32,"kev_count":33,"last_cve_update":34},45019,"389_directory_server",185,39,0,"2020-01-09",{"id":36,"product_name":37,"version_count":38,"cve_count":39,"kev_count":33,"last_cve_update":40},45037,"sssd",112,17,"2023-02-01",{"id":42,"product_name":43,"version_count":44,"cve_count":45,"kev_count":33,"last_cve_update":46},45029,"fedora_core",7,8,"2008-06-30",{"id":48,"product_name":49,"version_count":26,"cve_count":26,"kev_count":33,"last_cve_update":50},45024,"coolkey","2007-11-08",{"id":52,"product_name":53,"version_count":26,"cve_count":26,"kev_count":33,"last_cve_update":54},45025,"crypto-utils","2012-10-10",{"id":56,"product_name":57,"version_count":58,"cve_count":26,"kev_count":33,"last_cve_update":59},45027,"fedmsg",60,"2017-07-17",{"id":61,"product_name":62,"version_count":26,"cve_count":26,"kev_count":33,"last_cve_update":63},45031,"fedora_linux_kernel","2023-08-22",{"id":65,"product_name":66,"version_count":33,"cve_count":26,"kev_count":33,"last_cve_update":67},45039,"unbound","2024-02-15",{"id":69,"product_name":70,"version_count":33,"cve_count":26,"kev_count":33,"last_cve_update":71},45020,"anaconda","2012-07-03",{"id":73,"product_name":74,"version_count":26,"cve_count":26,"kev_count":33,"last_cve_update":75},45021,"arm_installer","2017-06-26",{"id":77,"product_name":78,"version_count":33,"cve_count":26,"kev_count":33,"last_cve_update":79},45022,"atomic","2017-10-16",{"id":81,"product_name":82,"version_count":33,"cve_count":26,"kev_count":33,"last_cve_update":83},45023,"commons","2007-08-15",{"id":85,"product_name":86,"version_count":39,"cve_count":26,"kev_count":33,"last_cve_update":87},45038,"supybot-fedora","2022-10-18",{"id":89,"product_name":90,"version_count":26,"cve_count":26,"kev_count":33,"last_cve_update":91},45018,"389_administration_server","2017-08-28",{"id":93,"product_name":94,"version_count":26,"cve_count":26,"kev_count":33,"last_cve_update":95},45033,"python-fedora","2017-09-14",{"id":97,"product_name":98,"version_count":33,"cve_count":26,"kev_count":33,"last_cve_update":99},45034,"sectool","2019-12-06",{"id":101,"product_name":102,"version_count":103,"cve_count":26,"kev_count":33,"last_cve_update":104},45035,"selinux-policy",2,"2020-08-24",{"id":106,"product_name":107,"version_count":108,"cve_count":26,"kev_count":33,"last_cve_update":79},45036,"spin-kickstarts",67,{"id":110,"product_name":111,"version_count":112,"cve_count":33,"kev_count":33,"last_cve_update":113},45032,"mirrormanager",64,null,{"id":115,"product_name":116,"version_count":26,"cve_count":33,"kev_count":33,"last_cve_update":113},45030,"fedora_extra_packages_for_enterprise_linux","Fedoraproject is a technology vendor with 22 tracked products and 5392 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[119,128,134,141,149,155,160,166,171,176],{"cveId":120,"description":121,"publishedDate":122,"cvssScore":123,"cvssVersion":124,"severity":125,"isKev":126,"epssScore":127},"CVE-2014-3566","The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the \"POODLE\" issue.","2014-10-15",3.4,"v3.1","Low",false,0.99999,{"cveId":129,"description":130,"publishedDate":131,"cvssScore":132,"cvssVersion":124,"severity":133,"isKev":4,"epssScore":127},"CVE-2014-0160","The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug.","2014-04-07",7.5,"High",{"cveId":135,"description":136,"publishedDate":137,"cvssScore":138,"cvssVersion":124,"severity":139,"isKev":4,"epssScore":140},"CVE-2012-1823","sapi\u002Fcgi\u002Fcgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'd' case.","2012-05-11",9.8,"Critical",0.99998,{"cveId":142,"description":143,"publishedDate":144,"cvssScore":145,"cvssVersion":146,"severity":147,"isKev":126,"epssScore":148},"CVE-2014-0195","The dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly validate fragment lengths in DTLS ClientHello messages, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via a long non-initial fragment.","2014-06-05",6.8,"v2","Medium",0.99977,{"cveId":150,"description":151,"publishedDate":152,"cvssScore":138,"cvssVersion":153,"severity":139,"isKev":126,"epssScore":154},"CVE-2016-9299","The remoting module in Jenkins before 2.32 and LTS before 2.19.3 allows remote attackers to execute arbitrary code via a crafted serialized Java object, which triggers an LDAP query to a third-party server.","2017-01-12","v3.0",0.96943,{"cveId":156,"description":157,"publishedDate":144,"cvssScore":158,"cvssVersion":124,"severity":133,"isKev":126,"epssScore":159},"CVE-2014-0224","OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows man-in-the-middle attackers to trigger use of a zero-length master key in certain OpenSSL-to-OpenSSL communications, and consequently hijack sessions or obtain sensitive information, via a crafted TLS handshake, aka the \"CCS Injection\" vulnerability.",7.4,0.95326,{"cveId":161,"description":162,"publishedDate":163,"cvssScore":164,"cvssVersion":146,"severity":139,"isKev":126,"epssScore":165},"CVE-2011-4862","Buffer overflow in libtelnet\u002Fencrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long encryption key, as exploited in the wild in December 2011.","2011-12-25",10,0.95104,{"cveId":167,"description":168,"publishedDate":169,"cvssScore":132,"cvssVersion":153,"severity":133,"isKev":126,"epssScore":170},"CVE-2018-1111","DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a command injection flaw in the NetworkManager integration script included in the DHCP client. A malicious DHCP server, or an attacker on the local network able to spoof DHCP responses, could use this flaw to execute arbitrary commands with root privileges on systems using NetworkManager and configured to obtain network configuration using the DHCP protocol.","2018-05-17",0.94457,{"cveId":172,"description":173,"publishedDate":144,"cvssScore":174,"cvssVersion":146,"severity":147,"isKev":126,"epssScore":175},"CVE-2014-0221","The dtls1_get_message_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service (recursion and client crash) via a DTLS hello message in an invalid DTLS handshake.",4.3,0.87892,{"cveId":177,"description":178,"publishedDate":179,"cvssScore":180,"cvssVersion":153,"severity":133,"isKev":126,"epssScore":181},"CVE-2017-11610","The XML-RPC server in supervisor before 3.0.1, 3.1.x before 3.1.4, 3.2.x before 3.2.4, and 3.3.x before 3.3.3 allows remote authenticated users to execute arbitrary commands via a crafted XML-RPC request, related to nested supervisord namespace lookups.","2017-08-23",8.8,0.87544,[183,193,201,209,219,228,236,244,252,259,267,274,280,287,295,302,311,318,325,333,341,347,355,363,371,379,389,397,403,410,418,426,432,440,449,456,464,471,478,485,493,499,507,515,518,526,534,542,545,553,560,567,574,583,591,598,605,611,619,626,632,635,642,649,656,663,669,676,683,689,695,701,708,713,718,724,729,736,743,749,753,760,765,771,777],{"cveId":184,"description":185,"publishedDate":186,"cvssScore":187,"cvssVersion":124,"severity":133,"isKev":4,"epssScore":188,"cisaVulnName":189,"cisaDateAdded":190,"cisaShortDescription":191,"cisaRequiredAction":192},"CVE-2022-0492","A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel\u002Fcgroup\u002Fcgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpectedly.","2022-03-03",7.8,0.05528,"Linux Kernel Improper Authentication Vulnerability","2026-06-02","Linux Kernel contains an improper authentication vulnerability which could allow for privilege escalation via the cgroups v1 release_agent feature.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":194,"description":195,"publishedDate":196,"cvssScore":187,"cvssVersion":124,"severity":133,"isKev":4,"epssScore":197,"cisaVulnName":198,"cisaDateAdded":199,"cisaShortDescription":200,"cisaRequiredAction":192},"CVE-2021-30952","An integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution.","2021-08-24",0.07617,"Apple Multiple Products Integer Overflow or Wraparound Vulnerability","2026-03-05","Apple tvOS, macOS, Safari, iPadOS and watchOS contain an integer overflow or wraparound vulnerability due to the processing of maliciously crafted web content that may lead to arbitrary code execution.",{"cveId":202,"description":203,"publishedDate":204,"cvssScore":132,"cvssVersion":124,"severity":133,"isKev":4,"epssScore":205,"cisaVulnName":206,"cisaDateAdded":207,"cisaShortDescription":208,"cisaRequiredAction":192},"CVE-2019-5418","There is a File Content Disclosure vulnerability in Action View \u003C5.2.2.1, \u003C5.1.6.2, \u003C5.0.7.2, \u003C4.2.11.1 and v3 where specially crafted accept headers can cause contents of arbitrary files on the target system's filesystem to be exposed.","2019-03-27",0.98507,"Rails Ruby on Rails Path Traversal Vulnerability","2025-07-07","Rails Ruby on Rails contains a path traversal vulnerability in Action View. Specially crafted accept headers in combination with calls to `render file:` can cause arbitrary files on the target server to be rendered, disclosing the file contents.",{"cveId":210,"description":211,"publishedDate":212,"cvssScore":213,"cvssVersion":124,"severity":147,"isKev":4,"epssScore":214,"cisaVulnName":215,"cisaDateAdded":216,"cisaShortDescription":217,"cisaRequiredAction":218},"CVE-2020-11023","In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing \u003Coption> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.","2020-04-29",6.9,0.8383,"JQuery Cross-Site Scripting (XSS) Vulnerability","2025-01-23","JQuery contains a persistent cross-site scripting (XSS) vulnerability. When passing maliciously formed, untrusted input enclosed in HTML tags, JQuery's DOM manipulators can execute untrusted code in the context of the user's browser.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":220,"description":221,"publishedDate":222,"cvssScore":223,"cvssVersion":124,"severity":147,"isKev":4,"epssScore":224,"cisaVulnName":225,"cisaDateAdded":226,"cisaShortDescription":227,"cisaRequiredAction":218},"CVE-2020-13965","An issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. There is XSS via a malicious XML attachment because text\u002Fxml is among the allowed types for a preview.","2020-06-09",6.1,0.76596,"Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability","2024-06-26","Roundcube Webmail contains a cross-site scripting (XSS) vulnerability that allows a remote attacker to manipulate data via a malicious XML attachment.",{"cveId":229,"description":230,"publishedDate":231,"cvssScore":138,"cvssVersion":124,"severity":139,"isKev":4,"epssScore":232,"cisaVulnName":233,"cisaDateAdded":234,"cisaShortDescription":235,"cisaRequiredAction":218},"CVE-2024-4577","In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set up to use certain code pages, Windows may use \"Best-Fit\" behavior to replace characters in command line given to Win32 API functions. PHP CGI module may misinterpret those characters as PHP options, which may allow a malicious user to pass options to PHP binary being run, and thus reveal the source code of scripts, run arbitrary PHP code on the server, etc.","2024-06-09",0.99987,"PHP-CGI OS Command Injection Vulnerability","2024-06-12","PHP, specifically Windows-based PHP used in CGI mode, contains an OS command injection vulnerability that allows for arbitrary code execution. This vulnerability is a patch bypass for CVE-2012-1823.",{"cveId":237,"description":238,"publishedDate":239,"cvssScore":187,"cvssVersion":124,"severity":133,"isKev":4,"epssScore":240,"cisaVulnName":241,"cisaDateAdded":242,"cisaShortDescription":243,"cisaRequiredAction":218},"CVE-2024-1086","A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.\n\nThe nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the nf_hook_slow() function can cause a double free vulnerability when NF_DROP is issued with a drop error which resembles NF_ACCEPT.\n\nWe recommend upgrading past commit f342de4e2f33e0e39165d8639387aa6c19dff660.","2024-01-31",0.28058,"Linux Kernel Use-After-Free Vulnerability","2024-05-30","Linux kernel contains a use-after-free vulnerability in the netfilter: nf_tables component that allows an attacker to achieve local privilege escalation.",{"cveId":245,"description":246,"publishedDate":247,"cvssScore":248,"cvssVersion":124,"severity":139,"isKev":4,"epssScore":249,"cisaVulnName":250,"cisaDateAdded":247,"cisaShortDescription":251,"cisaRequiredAction":218},"CVE-2024-5274","Type Confusion in V8 in Google Chrome prior to 125.0.6422.112 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)","2024-05-28",9.6,0.1002,"Google Chromium V8 Type Confusion Vulnerability","Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to execute code via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":253,"description":254,"publishedDate":255,"cvssScore":248,"cvssVersion":124,"severity":139,"isKev":4,"epssScore":256,"cisaVulnName":250,"cisaDateAdded":257,"cisaShortDescription":258,"cisaRequiredAction":218},"CVE-2024-4947","Type Confusion in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)","2024-05-15",0.15111,"2024-05-20","Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to execute code via a crafted HTML page.",{"cveId":260,"description":261,"publishedDate":262,"cvssScore":180,"cvssVersion":124,"severity":133,"isKev":4,"epssScore":263,"cisaVulnName":264,"cisaDateAdded":265,"cisaShortDescription":266,"cisaRequiredAction":218},"CVE-2024-4761","Out of bounds write in V8 in Google Chrome prior to 124.0.6367.207 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High)","2024-05-14",0.11007,"Google Chromium V8 Out-of-Bounds Memory Write Vulnerability","2024-05-16","Google Chromium V8 Engine contains an unspecified out-of-bounds memory write vulnerability via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. ",{"cveId":268,"description":269,"publishedDate":262,"cvssScore":248,"cvssVersion":124,"severity":139,"isKev":4,"epssScore":270,"cisaVulnName":271,"cisaDateAdded":272,"cisaShortDescription":273,"cisaRequiredAction":218},"CVE-2024-4671","Use after free in Visuals in Google Chrome prior to 124.0.6367.201 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",0.08348,"Google Chromium Visuals Use-After-Free Vulnerability","2024-05-13","Google Chromium Visuals contains a use-after-free vulnerability that allows a remote attacker to exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":275,"description":276,"publishedDate":277,"cvssScore":180,"cvssVersion":124,"severity":133,"isKev":4,"epssScore":278,"cisaVulnName":250,"cisaDateAdded":279,"cisaShortDescription":251,"cisaRequiredAction":218},"CVE-2023-4762","Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)","2023-09-05",0.37987,"2024-02-06",{"cveId":281,"description":282,"publishedDate":27,"cvssScore":180,"cvssVersion":124,"severity":133,"isKev":4,"epssScore":283,"cisaVulnName":284,"cisaDateAdded":285,"cisaShortDescription":286,"cisaRequiredAction":218},"CVE-2024-0519","Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",0.03769,"Google Chromium V8 Out-of-Bounds Memory Access Vulnerability","2024-01-17","Google Chromium V8 Engine contains an out-of-bounds memory access vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":288,"description":289,"publishedDate":290,"cvssScore":180,"cvssVersion":124,"severity":133,"isKev":4,"epssScore":291,"cisaVulnName":292,"cisaDateAdded":293,"cisaShortDescription":294,"cisaRequiredAction":218},"CVE-2023-7024","Heap buffer overflow in WebRTC in Google Chrome prior to 120.0.6099.129 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)","2023-12-21",0.07356,"Google Chromium WebRTC Heap Buffer Overflow Vulnerability","2024-01-02","Google Chromium WebRTC, an open-source project providing web browsers with real-time communication, contains a heap buffer overflow vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could impact web browsers using WebRTC, including but not limited to Google Chrome.",{"cveId":296,"description":297,"publishedDate":298,"cvssScore":187,"cvssVersion":124,"severity":133,"isKev":4,"epssScore":299,"cisaVulnName":300,"cisaDateAdded":293,"cisaShortDescription":301,"cisaRequiredAction":218},"CVE-2023-7101","Spreadsheet::ParseExcel version 0.65 is a Perl module used for parsing Excel files. Spreadsheet::ParseExcel is vulnerable to an arbitrary code execution (ACE) vulnerability due to passing unvalidated input from a file into a string-type “eval”. Specifically, the issue stems from the evaluation of Number format strings (not to be confused with printf-style format strings) within the Excel parsing logic.","2023-12-24",0.167,"Spreadsheet::ParseExcel Remote Code Execution Vulnerability","Spreadsheet::ParseExcel contains a remote code execution vulnerability due to passing unvalidated input from a file into a string-type “eval”. Specifically, the issue stems from the evaluation of Number format strings within the Excel parsing logic.",{"cveId":303,"description":304,"publishedDate":305,"cvssScore":180,"cvssVersion":124,"severity":133,"isKev":4,"epssScore":306,"cisaVulnName":307,"cisaDateAdded":308,"cisaShortDescription":309,"cisaRequiredAction":310},"CVE-2023-42917","A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.","2023-11-30",0.0937,"Apple Multiple Products WebKit Memory Corruption Vulnerability","2023-12-04","Apple iOS, iPadOS, macOS, and Safari WebKit contain a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.","Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.",{"cveId":312,"description":313,"publishedDate":305,"cvssScore":314,"cvssVersion":124,"severity":147,"isKev":4,"epssScore":315,"cisaVulnName":316,"cisaDateAdded":308,"cisaShortDescription":317,"cisaRequiredAction":310},"CVE-2023-42916","An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may disclose sensitive information. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.",6.5,0.17823,"Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability","Apple iOS, iPadOS, macOS, and Safari WebKit contain an out-of-bounds read vulnerability that may disclose sensitive information when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.",{"cveId":319,"description":320,"publishedDate":321,"cvssScore":248,"cvssVersion":124,"severity":139,"isKev":4,"epssScore":322,"cisaVulnName":323,"cisaDateAdded":305,"cisaShortDescription":324,"cisaRequiredAction":218},"CVE-2023-6345","Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)","2023-11-29",0.1963,"Google Skia Integer Overflow Vulnerability","Google Chromium Skia contains an integer overflow vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a malicious file. This vulnerability affects Google Chrome and ChromeOS, Android, Flutter, and possibly other products.",{"cveId":326,"description":327,"publishedDate":328,"cvssScore":187,"cvssVersion":124,"severity":133,"isKev":4,"epssScore":329,"cisaVulnName":330,"cisaDateAdded":331,"cisaShortDescription":332,"cisaRequiredAction":218},"CVE-2023-4911","A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.","2023-10-03",0.81422,"GNU C Library Buffer Overflow Vulnerability","2023-11-21","GNU C Library's dynamic loader ld.so contains a buffer overflow vulnerability when processing the GLIBC_TUNABLES environment variable, allowing a local attacker to execute code with elevated privileges.",{"cveId":334,"description":335,"publishedDate":336,"cvssScore":223,"cvssVersion":124,"severity":147,"isKev":4,"epssScore":337,"cisaVulnName":338,"cisaDateAdded":339,"cisaShortDescription":340,"cisaRequiredAction":218},"CVE-2023-5631","Roundcube before 1.4.15, 1.5.x before 1.5.5, and 1.6.x before 1.6.4 allows stored XSS via an HTML e-mail message with a crafted SVG document because of program\u002Flib\u002FRoundcube\u002Frcube_washtml.php behavior. This could allow a remote attacker\n\nto load arbitrary JavaScript code.","2023-10-18",0.73445,"Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability","2023-10-26","Roundcube Webmail contains a persistent cross-site scripting (XSS) vulnerability that allows a remote attacker to run malicious JavaScript code.",{"cveId":342,"description":343,"publishedDate":344,"cvssScore":132,"cvssVersion":124,"severity":133,"isKev":4,"epssScore":127,"cisaVulnName":345,"cisaDateAdded":344,"cisaShortDescription":346,"cisaRequiredAction":192},"CVE-2023-44487","The HTTP\u002F2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.","2023-10-10","HTTP\u002F2 Rapid Reset Attack Vulnerability","HTTP\u002F2 contains a rapid reset vulnerability that allows for a distributed denial-of-service attack (DDoS).",{"cveId":348,"description":349,"publishedDate":350,"cvssScore":180,"cvssVersion":124,"severity":133,"isKev":4,"epssScore":351,"cisaVulnName":352,"cisaDateAdded":353,"cisaShortDescription":354,"cisaRequiredAction":218},"CVE-2023-5217","Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)","2023-09-28",0.49013,"Google Chromium libvpx Heap Buffer Overflow Vulnerability","2023-10-02","Google Chromium libvpx contains a heap buffer overflow vulnerability in vp8 encoding that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could impact web browsers using libvpx, including but not limited to Google Chrome.",{"cveId":356,"description":357,"publishedDate":358,"cvssScore":180,"cvssVersion":124,"severity":133,"isKev":4,"epssScore":359,"cisaVulnName":360,"cisaDateAdded":361,"cisaShortDescription":362,"cisaRequiredAction":218},"CVE-2023-41993","The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.","2023-09-21",0.29179,"Apple Multiple Products WebKit Code Execution Vulnerability","2023-09-25","Apple iOS, iPadOS, macOS, and Safari WebKit contain an unspecified vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.",{"cveId":364,"description":365,"publishedDate":366,"cvssScore":180,"cvssVersion":124,"severity":133,"isKev":4,"epssScore":367,"cisaVulnName":368,"cisaDateAdded":369,"cisaShortDescription":370,"cisaRequiredAction":218},"CVE-2023-4863","Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)","2023-09-12",0.99735,"Google Chromium WebP Heap-Based Buffer Overflow Vulnerability","2023-09-13","Google Chromium WebP contains a heap-based buffer overflow vulnerability that allows a remote attacker to perform an out-of-bounds memory write via a crafted HTML page. This vulnerability can affect applications that use the WebP Codec.",{"cveId":372,"description":373,"publishedDate":374,"cvssScore":132,"cvssVersion":124,"severity":133,"isKev":4,"epssScore":375,"cisaVulnName":376,"cisaDateAdded":377,"cisaShortDescription":378,"cisaRequiredAction":218},"CVE-2023-38180",".NET and Visual Studio Denial of Service Vulnerability","2023-08-08",0.15519,"Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability","2023-08-09","Microsoft .NET Core and Visual Studio contain an unspecified vulnerability that allows for denial-of-service (DoS).",{"cveId":380,"description":381,"publishedDate":382,"cvssScore":383,"cvssVersion":124,"severity":125,"isKev":4,"epssScore":384,"cisaVulnName":385,"cisaDateAdded":386,"cisaShortDescription":387,"cisaRequiredAction":388},"CVE-2023-20867","A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine.","2023-06-13",3.9,0.13638,"VMware Tools Authentication Bypass Vulnerability","2023-06-23","VMware Tools contains an authentication bypass vulnerability in the vgauth module. A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine. An attacker must have root access over ESXi to exploit this vulnerability.","Apply updates per vendor instructions.",{"cveId":390,"description":391,"publishedDate":392,"cvssScore":138,"cvssVersion":124,"severity":139,"isKev":4,"epssScore":393,"cisaVulnName":394,"cisaDateAdded":395,"cisaShortDescription":396,"cisaRequiredAction":388},"CVE-2021-44026","Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to a potential SQL injection via search or search_params.","2021-11-19",0.42751,"Roundcube Webmail SQL Injection Vulnerability","2023-06-22","Roundcube Webmail is vulnerable to SQL injection via search or search_params.",{"cveId":398,"description":399,"publishedDate":400,"cvssScore":223,"cvssVersion":124,"severity":147,"isKev":4,"epssScore":401,"cisaVulnName":225,"cisaDateAdded":395,"cisaShortDescription":402,"cisaRequiredAction":388},"CVE-2020-35730","An XSS issue was discovered in Roundcube Webmail before 1.2.13, 1.3.x before 1.3.16, and 1.4.x before 1.4.10. The attacker can send a plain text e-mail message, with JavaScript in a link reference element that is mishandled by linkref_addindex in rcube_string_replacer.php.","2020-12-28",0.32823,"Roundcube Webmail contains a cross-site scripting (XSS) vulnerability that allows an attacker to send a plain text e-mail message with Javascript in a link reference element that is mishandled by linkref_addinindex in rcube_string_replacer.php.",{"cveId":404,"description":405,"publishedDate":406,"cvssScore":180,"cvssVersion":124,"severity":133,"isKev":4,"epssScore":407,"cisaVulnName":250,"cisaDateAdded":408,"cisaShortDescription":409,"cisaRequiredAction":388},"CVE-2023-3079","Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)","2023-06-05",0.32724,"2023-06-07","Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":411,"description":412,"publishedDate":413,"cvssScore":414,"cvssVersion":124,"severity":139,"isKev":4,"epssScore":148,"cisaVulnName":415,"cisaDateAdded":416,"cisaShortDescription":417,"cisaRequiredAction":388},"CVE-2021-45046","It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. This could allows attackers with control over Thread Context Map (MDC) input data when the logging configuration uses a non-default Pattern Layout with either a Context Lookup (for example, $${ctx:loginId}) or a Thread Context Map pattern (%X, %mdc, or %MDC) to craft malicious input data using a JNDI Lookup pattern resulting in an information leak and remote code execution in some environments and local code execution in all environments. Log4j 2.16.0 (Java 8) and 2.12.2 (Java 7) fix this issue by removing support for message lookup patterns and disabling JNDI functionality by default.","2021-12-14",9,"Apache Log4j2 Deserialization of Untrusted Data Vulnerability","2023-05-01","Apache Log4j2 contains a deserialization of untrusted data vulnerability due to the incomplete fix of CVE-2021-44228, where the Thread Context Lookup Pattern is vulnerable to remote code execution in certain non-default configurations.",{"cveId":419,"description":420,"publishedDate":421,"cvssScore":248,"cvssVersion":124,"severity":139,"isKev":4,"epssScore":422,"cisaVulnName":423,"cisaDateAdded":424,"cisaShortDescription":425,"cisaRequiredAction":388},"CVE-2023-2136","Integer overflow in Skia in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)","2023-04-19",0.05786,"Google Chrome Skia Integer Overflow Vulnerability","2023-04-21","Google Chromium Skia contains an integer overflow vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability affects Google Chrome and ChromeOS, Android, Flutter, and possibly other products.",{"cveId":427,"description":428,"publishedDate":429,"cvssScore":180,"cvssVersion":124,"severity":133,"isKev":4,"epssScore":430,"cisaVulnName":250,"cisaDateAdded":431,"cisaShortDescription":409,"cisaRequiredAction":388},"CVE-2023-2033","Type confusion in V8 in Google Chrome prior to 112.0.5615.121 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)","2023-04-14",0.40798,"2023-04-17",{"cveId":433,"description":434,"publishedDate":435,"cvssScore":180,"cvssVersion":124,"severity":133,"isKev":4,"epssScore":436,"cisaVulnName":437,"cisaDateAdded":438,"cisaShortDescription":439,"cisaRequiredAction":388},"CVE-2022-3038","Use after free in Network Service in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.","2022-09-26",0.24738,"Google Chromium Network Service Use-After-Free Vulnerability","2023-03-30","Google Chromium Network Service contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":441,"description":442,"publishedDate":443,"cvssScore":444,"cvssVersion":124,"severity":133,"isKev":4,"epssScore":445,"cisaVulnName":446,"cisaDateAdded":447,"cisaShortDescription":448,"cisaRequiredAction":388},"CVE-2021-39144","XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. XStream 1.4.18 uses no longer a blacklist by default, since it cannot be secured for general purpose.","2021-08-23",8.5,0.98124,"XStream Remote Code Execution Vulnerability","2023-03-10","XStream contains a remote code execution vulnerability that allows an attacker to manipulate the processed input stream and replace or inject objects that result in the execution of a local command on the server. This vulnerability can affect multiple products, including but not limited to VMware Cloud Foundation.",{"cveId":450,"description":451,"publishedDate":435,"cvssScore":248,"cvssVersion":124,"severity":139,"isKev":4,"epssScore":452,"cisaVulnName":453,"cisaDateAdded":454,"cisaShortDescription":455,"cisaRequiredAction":388},"CVE-2022-3075","Insufficient data validation in Mojo in Google Chrome prior to 105.0.5195.102 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",0.0568,"Google Chromium Mojo Insufficient Data Validation Vulnerability","2022-09-08","Google Chromium Mojo contains an insufficient data validation vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":457,"description":458,"publishedDate":459,"cvssScore":138,"cvssVersion":124,"severity":139,"isKev":4,"epssScore":460,"cisaVulnName":461,"cisaDateAdded":462,"cisaShortDescription":463,"cisaRequiredAction":388},"CVE-2021-39226","Grafana is an open source data visualization platform. In affected versions unauthenticated and authenticated users are able to view the snapshot with the lowest database key by accessing the literal paths: \u002Fdashboard\u002Fsnapshot\u002F:key, or \u002Fapi\u002Fsnapshots\u002F:key. If the snapshot \"public_mode\" configuration setting is set to true (vs default of false), unauthenticated users are able to delete the snapshot with the lowest database key by accessing the literal path: \u002Fapi\u002Fsnapshots-delete\u002F:deleteKey. Regardless of the snapshot \"public_mode\" setting, authenticated users are able to delete the snapshot with the lowest database key by accessing the literal paths: \u002Fapi\u002Fsnapshots\u002F:key, or \u002Fapi\u002Fsnapshots-delete\u002F:deleteKey. The combination of deletion and viewing enables a complete walk through all snapshot data while resulting in complete snapshot data loss. This issue has been resolved in versions 8.1.6 and 7.5.11. If for some reason you cannot upgrade you can use a reverse proxy or similar to block access to the literal paths: \u002Fapi\u002Fsnapshots\u002F:key, \u002Fapi\u002Fsnapshots-delete\u002F:deleteKey, \u002Fdashboard\u002Fsnapshot\u002F:key, and \u002Fapi\u002Fsnapshots\u002F:key. They have no normal function and can be disabled without side effects.","2021-10-05",0.99888,"Grafana Authentication Bypass Vulnerability","2022-08-25","Grafana contains an authentication bypass vulnerability that allows authenticated and unauthenticated users to view and delete all snapshot data, potentially resulting in complete snapshot data loss.",{"cveId":465,"description":466,"publishedDate":467,"cvssScore":180,"cvssVersion":124,"severity":133,"isKev":4,"epssScore":468,"cisaVulnName":469,"cisaDateAdded":462,"cisaShortDescription":470,"cisaRequiredAction":388},"CVE-2022-2294","Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.","2022-07-28",0.70461,"WebRTC Heap Buffer Overflow Vulnerability","WebRTC, an open-source project providing web browsers with real-time communication, contains a heap buffer overflow vulnerability that allows an attacker to perform shellcode execution. This vulnerability impacts web browsers using WebRTC including but not limited to Google Chrome.",{"cveId":472,"description":473,"publishedDate":474,"cvssScore":187,"cvssVersion":124,"severity":133,"isKev":4,"epssScore":475,"cisaVulnName":476,"cisaDateAdded":462,"cisaShortDescription":477,"cisaRequiredAction":388},"CVE-2020-28949","Archive_Tar through 1.4.10 has :\u002F\u002F filename sanitization only to address phar attacks, and thus any other stream-wrapper attack (such as file:\u002F\u002F to overwrite files) can still succeed.","2020-11-19",0.84554,"PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability","PEAR Archive_Tar allows an unserialization attack because phar: is blocked but PHAR: is not blocked. PEAR stands for PHP Extension and Application Repository and it is an open-source framework and distribution system for reusable PHP components with known usage in third-party products such as Drupal Core and Red Hat Linux.",{"cveId":479,"description":480,"publishedDate":481,"cvssScore":132,"cvssVersion":124,"severity":133,"isKev":4,"epssScore":482,"cisaVulnName":483,"cisaDateAdded":462,"cisaShortDescription":484,"cisaRequiredAction":388},"CVE-2020-36193","Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.","2021-01-18",0.70595,"PEAR Archive_Tar Improper Link Resolution Vulnerability","PEAR Archive_Tar Tar.php allows write operations with directory traversal due to inadequate checking of symbolic links. PEAR stands for PHP Extension and Application Repository and it is an open-source framework and distribution system for reusable PHP components with known usage in third-party products such as Drupal Core and Red Hat Linux.",{"cveId":486,"description":487,"publishedDate":488,"cvssScore":180,"cvssVersion":124,"severity":133,"isKev":4,"epssScore":489,"cisaVulnName":490,"cisaDateAdded":491,"cisaShortDescription":492,"cisaRequiredAction":388},"CVE-2022-32893","An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey 12.5.1, Safari 15.6.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.","2022-08-24",0.09785,"Apple iOS and macOS Out-of-Bounds Write Vulnerability","2022-08-18","Apple iOS and macOS contain an out-of-bounds write vulnerability that could allow for remote code execution when processing malicious crafted web content.",{"cveId":494,"description":495,"publishedDate":435,"cvssScore":314,"cvssVersion":124,"severity":147,"isKev":4,"epssScore":496,"cisaVulnName":497,"cisaDateAdded":491,"cisaShortDescription":498,"cisaRequiredAction":388},"CVE-2022-2856","Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker to arbitrarily browse to a malicious website via a crafted HTML page.",0.04493,"Google Chromium Intents Insufficient Input Validation Vulnerability","Google Chromium Intents contains an insufficient validation of untrusted input vulnerability that allows a remote attacker to browse to a malicious website via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":500,"description":501,"publishedDate":502,"cvssScore":314,"cvssVersion":124,"severity":147,"isKev":4,"epssScore":503,"cisaVulnName":504,"cisaDateAdded":505,"cisaShortDescription":506,"cisaRequiredAction":388},"CVE-2021-30533","Insufficient policy enforcement in PopupBlocker in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass navigation restrictions via a crafted iframe.","2021-06-07",0.16611,"Google Chromium PopupBlocker Security Bypass Vulnerability","2022-06-27","Google Chromium PopupBlocker contains an insufficient policy enforcement vulnerability that allows a remote attacker to bypass navigation restrictions via a crafted iframe. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":508,"description":509,"publishedDate":510,"cvssScore":180,"cvssVersion":124,"severity":133,"isKev":4,"epssScore":511,"cisaVulnName":512,"cisaDateAdded":513,"cisaShortDescription":514,"cisaRequiredAction":388},"CVE-2021-1789","A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4, Safari 14.0.3. Processing maliciously crafted web content may lead to arbitrary code execution.","2021-04-02",0.14542,"Apple Multiple Products Type Confusion Vulnerability","2022-05-04","A type confusion issue affecting multiple Apple products allows processing of maliciously crafted web content, leading to arbitrary code execution.",{"cveId":129,"description":130,"publishedDate":131,"cvssScore":132,"cvssVersion":124,"severity":133,"isKev":4,"epssScore":127,"cisaVulnName":516,"cisaDateAdded":513,"cisaShortDescription":517,"cisaRequiredAction":388},"OpenSSL Information Disclosure Vulnerability","The TLS and DTLS implementations in OpenSSL do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information.",{"cveId":519,"description":520,"publishedDate":521,"cvssScore":187,"cvssVersion":124,"severity":133,"isKev":4,"epssScore":522,"cisaVulnName":523,"cisaDateAdded":524,"cisaShortDescription":525,"cisaRequiredAction":388},"CVE-2022-0847","A flaw was found in the way the \"flags\" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use this flaw to write to pages in the page cache backed by read only files and as such escalate their privileges on the system.","2022-03-10",0.88106,"Linux Kernel Privilege Escalation Vulnerability","2022-04-25","Linux kernel contains an improper initialization vulnerability where an unprivileged local user could escalate their privileges on the system. This vulnerability has the moniker of \"Dirty Pipe.\"",{"cveId":527,"description":528,"publishedDate":529,"cvssScore":187,"cvssVersion":124,"severity":133,"isKev":4,"epssScore":530,"cisaVulnName":531,"cisaDateAdded":532,"cisaShortDescription":533,"cisaRequiredAction":388},"CVE-2021-3156","Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via \"sudoedit -s\" and a command-line argument that ends with a single backslash character.","2021-01-26",0.99295,"Sudo Heap-Based Buffer Overflow Vulnerability","2022-04-06","Sudo contains an off-by-one error that can result in a heap-based buffer overflow, which allows for privilege escalation.",{"cveId":535,"description":536,"publishedDate":537,"cvssScore":138,"cvssVersion":124,"severity":139,"isKev":4,"epssScore":538,"cisaVulnName":539,"cisaDateAdded":540,"cisaShortDescription":541,"cisaRequiredAction":388},"CVE-2020-7247","smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to execute arbitrary commands as root via a crafted SMTP session, as demonstrated by shell metacharacters in a MAIL FROM field. This affects the \"uncommented\" default configuration. The issue exists because of an incorrect return value upon failure of input validation.","2020-01-29",0.98946,"OpenSMTPD Remote Code Execution Vulnerability","2022-03-25","smtp_mailaddr in smtp_session.c in OpenSMTPD, as used in OpenBSD and other products, allows remote attackers to execute arbitrary commands as root via a crafted SMTP session.",{"cveId":135,"description":136,"publishedDate":137,"cvssScore":138,"cvssVersion":124,"severity":139,"isKev":4,"epssScore":140,"cisaVulnName":543,"cisaDateAdded":540,"cisaShortDescription":544,"cisaRequiredAction":388},"PHP-CGI Query String Parameter Vulnerability","sapi\u002Fcgi\u002Fcgi_main.c in PHP, when configured as a CGI script, does not properly handle query strings, which allows remote attackers to execute arbitrary code.",{"cveId":546,"description":547,"publishedDate":548,"cvssScore":549,"cvssVersion":124,"severity":133,"isKev":4,"epssScore":550,"cisaVulnName":551,"cisaDateAdded":540,"cisaShortDescription":552,"cisaRequiredAction":388},"CVE-2019-11043","In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space reserved for FCGI protocol data, thus opening the possibility of remote code execution.","2019-10-28",8.7,0.9947,"PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability","In some versions of PHP in certain configurations of FPM setup, it is possible to cause FPM module to write past allocated buffers allowing the possibility of remote code execution.",{"cveId":554,"description":555,"publishedDate":556,"cvssScore":138,"cvssVersion":124,"severity":139,"isKev":4,"epssScore":557,"cisaVulnName":558,"cisaDateAdded":186,"cisaShortDescription":559,"cisaRequiredAction":388},"CVE-2020-1938","When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an attacker, they can be exploited in ways that may be surprising. In Apache Tomcat 9.0.0.M1 to 9.0.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99, Tomcat shipped with an AJP Connector enabled by default that listened on all configured IP addresses. It was expected (and recommended in the security guide) that this Connector would be disabled if not required. This vulnerability report identified a mechanism that allowed: - returning arbitrary files from anywhere in the web application - processing any file in the web application as a JSP Further, if the web application allowed file upload and stored those files within the web application (or the attacker was able to control the content of the web application by some other means) then this, along with the ability to process a file as a JSP, made remote code execution possible. It is important to note that mitigation is only required if an AJP port is accessible to untrusted users. Users wishing to take a defence-in-depth approach and block the vector that permits returning arbitrary files and execution as JSP may upgrade to Apache Tomcat 9.0.31, 8.5.51 or 7.0.100 or later. A number of changes were made to the default AJP Connector configuration in 9.0.31 to harden the default configuration. It is likely that users upgrading to 9.0.31, 8.5.51 or 7.0.100 or later will need to make small changes to their configurations.","2020-02-24",0.9927,"Apache Tomcat Improper Privilege Management Vulnerability","Apache Tomcat treats Apache JServ Protocol (AJP) connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an attacker, they can be exploited.",{"cveId":561,"description":562,"publishedDate":563,"cvssScore":138,"cvssVersion":124,"severity":139,"isKev":4,"epssScore":564,"cisaVulnName":565,"cisaDateAdded":186,"cisaShortDescription":566,"cisaRequiredAction":388},"CVE-2019-16928","Exim 4.92 through 4.92.2 allows remote code execution, a different vulnerability than CVE-2019-15846. There is a heap-based buffer overflow in string_vformat in string.c involving a long EHLO command.","2019-09-27",0.41589,"Exim Out-of-bounds Write Vulnerability","Exim contains an out-of-bounds write vulnerability which can allow for remote code execution.",{"cveId":568,"description":569,"publishedDate":570,"cvssScore":44,"cvssVersion":124,"severity":133,"isKev":4,"epssScore":571,"cisaVulnName":572,"cisaDateAdded":186,"cisaShortDescription":573,"cisaRequiredAction":388},"CVE-2016-5195","Race condition in mm\u002Fgup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka \"Dirty COW.\"","2016-11-10",0.83524,"Linux Kernel Race Condition Vulnerability","Race condition in mm\u002Fgup.c in the Linux kernel allows local users to escalate privileges.",{"cveId":575,"description":576,"publishedDate":577,"cvssScore":578,"cvssVersion":124,"severity":125,"isKev":4,"epssScore":579,"cisaVulnName":580,"cisaDateAdded":581,"cisaShortDescription":582,"cisaRequiredAction":388},"CVE-2022-23134","After the initial setup process, some steps of setup.php file are reachable not only by super-administrators, but by unauthenticated users as well. Malicious actor can pass step checks and potentially change the configuration of Zabbix Frontend.","2022-01-13",3.7,0.84657,"Zabbix Frontend Improper Access Control Vulnerability","2022-02-22","Malicious actors can pass step checks and potentially change the configuration of Zabbix Frontend.",{"cveId":584,"description":585,"publishedDate":586,"cvssScore":180,"cvssVersion":124,"severity":133,"isKev":4,"epssScore":587,"cisaVulnName":588,"cisaDateAdded":589,"cisaShortDescription":590,"cisaRequiredAction":388},"CVE-2020-13671","Drupal core does not properly sanitize certain filenames on uploaded files, which can lead to files being interpreted as the incorrect extension and served as the wrong MIME type or executed as PHP for certain hosting configurations. This issue affects: Drupal Drupal Core 9.0 versions prior to 9.0.8, 8.9 versions prior to 8.9.9, 8.8 versions prior to 8.8.11, and 7 versions prior to 7.74.","2020-11-20",0.04269,"Drupal core Un-restricted Upload of File","2022-01-18","Improper sanitization in the extension file names is present in Drupal core.",{"cveId":592,"description":593,"publishedDate":594,"cvssScore":164,"cvssVersion":124,"severity":139,"isKev":4,"epssScore":127,"cisaVulnName":595,"cisaDateAdded":594,"cisaShortDescription":596,"cisaRequiredAction":597},"CVE-2021-44228","Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. From version 2.16.0 (along with 2.12.2, 2.12.3, and 2.3.1), this functionality has been completely removed. Note that this vulnerability is specific to log4j-core and does not affect log4net, log4cxx, or other Apache Logging Services projects.","2021-12-10","Apache Log4j2 Remote Code Execution Vulnerability","Apache Log4j2 contains a vulnerability where JNDI features do not protect against attacker-controlled JNDI-related endpoints, allowing for remote code execution.","For all affected software assets for which updates exist, the only acceptable remediation actions are: 1) Apply updates; OR 2) remove affected assets from agency networks. Temporary mitigations using one of the measures provided at https:\u002F\u002Fwww.cisa.gov\u002Fuscert\u002Fed-22-02-apache-log4j-recommended-mitigation-measures are only acceptable until updates are available.",{"cveId":599,"description":600,"publishedDate":601,"cvssScore":187,"cvssVersion":124,"severity":133,"isKev":4,"epssScore":602,"cisaVulnName":603,"cisaDateAdded":594,"cisaShortDescription":604,"cisaRequiredAction":388},"CVE-2019-13272","In the Linux kernel before 5.1.17, ptrace_link in kernel\u002Fptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows local users to obtain root access by leveraging certain scenarios with a parent-child process relationship, where a parent drops privileges and calls execve (potentially allowing control by an attacker). One contributing factor is an object lifetime issue (which can also cause a panic). Another contributing factor is incorrect marking of a ptrace relationship as privileged, which is exploitable through (for example) Polkit's pkexec helper with PTRACE_TRACEME. NOTE: SELinux deny_ptrace might be a usable workaround in some environments.","2019-07-17",0.52199,"Linux Kernel Improper Privilege Management Vulnerability","Kernel\u002Fptrace.c in Linux kernel mishandles contains an improper privilege management vulnerability that allows local users to obtain root access.",{"cveId":606,"description":607,"publishedDate":608,"cvssScore":414,"cvssVersion":124,"severity":139,"isKev":4,"epssScore":127,"cisaVulnName":609,"cisaDateAdded":610,"cisaShortDescription":607,"cisaRequiredAction":388},"CVE-2021-40438","A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.","2021-09-16","Apache HTTP Server-Side Request Forgery (SSRF)","2021-12-01",{"cveId":612,"description":613,"publishedDate":614,"cvssScore":145,"cvssVersion":124,"severity":147,"isKev":4,"epssScore":615,"cisaVulnName":616,"cisaDateAdded":617,"cisaShortDescription":618,"cisaRequiredAction":388},"CVE-2021-22204","Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing the malicious image","2021-04-23",0.99981,"ExifTool Remote Code Execution Vulnerability","2021-11-17","Improper neutralization of user data in the DjVu file format in Exiftool versions 7.44 and up allows arbitrary code execution when parsing the malicious image",{"cveId":620,"description":621,"publishedDate":99,"cvssScore":138,"cvssVersion":124,"severity":139,"isKev":4,"epssScore":622,"cisaVulnName":623,"cisaDateAdded":624,"cisaShortDescription":625,"cisaRequiredAction":388},"CVE-2019-5544","OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8.",0.96823,"VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability","2021-11-03","VMware ESXi and Horizon Desktop as a Service (DaaS) OpenSLP contains a heap-based buffer overflow vulnerability that allows an attacker with network access to port 427 to overwrite the heap of the OpenSLP service to perform remote code execution.",{"cveId":627,"description":628,"publishedDate":510,"cvssScore":138,"cvssVersion":124,"severity":139,"isKev":4,"epssScore":629,"cisaVulnName":630,"cisaDateAdded":624,"cisaShortDescription":631,"cisaRequiredAction":388},"CVE-2021-1871","A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..",0.0712,"Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability","Apple iOS, iPadOS, and macOS WebKit contain an unspecified logic vulnerability that allows a remote attacker to execute code. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.",{"cveId":633,"description":628,"publishedDate":510,"cvssScore":138,"cvssVersion":124,"severity":139,"isKev":4,"epssScore":634,"cisaVulnName":630,"cisaDateAdded":624,"cisaShortDescription":631,"cisaRequiredAction":388},"CVE-2021-1870",0.07921,{"cveId":636,"description":637,"publishedDate":638,"cvssScore":138,"cvssVersion":124,"severity":139,"isKev":4,"epssScore":639,"cisaVulnName":640,"cisaDateAdded":624,"cisaShortDescription":641,"cisaRequiredAction":388},"CVE-2020-16846","An issue was discovered in SaltStack Salt through 3002. Sending crafted web requests to the Salt API, with the SSH client enabled, can result in shell injection.","2020-11-06",0.99585,"SaltStack Salt Shell Injection Vulnerability","SaltStack Salt allows an unauthenticated user with network access to the Salt API to use shell injections to run code on the Salt API using the SSH client. This vulnerability affects any users running the Salt API.",{"cveId":643,"description":644,"publishedDate":645,"cvssScore":138,"cvssVersion":124,"severity":139,"isKev":4,"epssScore":646,"cisaVulnName":647,"cisaDateAdded":624,"cisaShortDescription":648,"cisaRequiredAction":388},"CVE-2021-42013","It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was insufficient. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default configuration \"require all denied\", these requests can succeed. If CGI scripts are also enabled for these aliased pathes, this could allow for remote code execution. This issue only affects Apache 2.4.49 and Apache 2.4.50 and not earlier versions.","2021-10-07",0.99964,"Apache HTTP Server Path Traversal Vulnerability","Apache HTTP Server contains a path traversal vulnerability that allows an attacker to perform remote code execution if files outside directories configured by Alias-like directives are not under default require all denied or if CGI scripts are enabled. This CVE ID resolves an incomplete patch for CVE-2021-41773.",{"cveId":650,"description":651,"publishedDate":652,"cvssScore":248,"cvssVersion":124,"severity":139,"isKev":4,"epssScore":653,"cisaVulnName":654,"cisaDateAdded":624,"cisaShortDescription":655,"cisaRequiredAction":388},"CVE-2021-30633","Use after free in Indexed DB API in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.","2021-10-08",0.32657,"Google Chromium Indexed DB API Use-After-Free Vulnerability","Google Chromium Indexed DB API contains a use-after-free vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":657,"description":658,"publishedDate":659,"cvssScore":248,"cvssVersion":124,"severity":139,"isKev":4,"epssScore":660,"cisaVulnName":661,"cisaDateAdded":624,"cisaShortDescription":662,"cisaRequiredAction":388},"CVE-2020-15999","Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.","2020-11-03",0.5063,"Google Chrome FreeType Heap Buffer Overflow Vulnerability","Google Chrome uses FreeType, an open-source software library to render fonts, which contains a heap buffer overflow vulnerability in the function Load_SBit_Png when processing PNG images embedded into fonts. This vulnerability is part of an exploit chain with CVE-2020-17087 on Windows and CVE-2020-16010 on Android.",{"cveId":664,"description":665,"publishedDate":652,"cvssScore":248,"cvssVersion":124,"severity":139,"isKev":4,"epssScore":666,"cisaVulnName":667,"cisaDateAdded":624,"cisaShortDescription":668,"cisaRequiredAction":388},"CVE-2021-37973","Use after free in Portals in Google Chrome prior to 94.0.4606.61 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",0.11735,"Google Chromium Portals Use-After-Free Vulnerability","Google Chromium Portals contains a use-after-free vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability affects web browsers that utilize Chromium, including Google Chrome and Microsoft Edge.",{"cveId":670,"description":671,"publishedDate":672,"cvssScore":180,"cvssVersion":124,"severity":133,"isKev":4,"epssScore":673,"cisaVulnName":674,"cisaDateAdded":624,"cisaShortDescription":675,"cisaRequiredAction":388},"CVE-2021-21206","Use after free in Blink in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.","2021-04-26",0.09401,"Google Chromium Blink Use-After-Free Vulnerability","Google Chromium Blink contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":677,"description":678,"publishedDate":679,"cvssScore":180,"cvssVersion":124,"severity":133,"isKev":4,"epssScore":680,"cisaVulnName":681,"cisaDateAdded":624,"cisaShortDescription":682,"cisaRequiredAction":388},"CVE-2021-38003","Inappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.","2021-11-23",0.36238,"Google Chromium V8 Memory Corruption Vulnerability","Google Chromium V8 Engine has a bug in JSON.stringify, where the internal TheHole value can leak to script code, causing memory corruption. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":684,"description":685,"publishedDate":652,"cvssScore":180,"cvssVersion":124,"severity":133,"isKev":4,"epssScore":686,"cisaVulnName":687,"cisaDateAdded":624,"cisaShortDescription":688,"cisaRequiredAction":388},"CVE-2021-37975","Use after free in V8 in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",0.34887,"Google Chromium V8 Use-After-Free Vulnerability","Google Chromium V8 Engine contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":690,"description":691,"publishedDate":196,"cvssScore":180,"cvssVersion":124,"severity":133,"isKev":4,"epssScore":692,"cisaVulnName":693,"cisaDateAdded":624,"cisaShortDescription":694,"cisaRequiredAction":388},"CVE-2021-30858","A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.",0.13486,"Apple iOS, iPadOS, macOS Use-After-Free Vulnerability","Apple iOS, iPadOS, and macOS WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.",{"cveId":696,"description":697,"publishedDate":652,"cvssScore":180,"cvssVersion":124,"severity":133,"isKev":4,"epssScore":698,"cisaVulnName":699,"cisaDateAdded":624,"cisaShortDescription":700,"cisaRequiredAction":388},"CVE-2021-30632","Out of bounds write in V8 in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",0.64546,"Google Chromium V8 Out-of-Bounds Write Vulnerability","Google Chromium V8 Engine contains an out-of-bounds write vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":702,"description":703,"publishedDate":704,"cvssScore":180,"cvssVersion":124,"severity":133,"isKev":4,"epssScore":705,"cisaVulnName":706,"cisaDateAdded":624,"cisaShortDescription":707,"cisaRequiredAction":388},"CVE-2021-30554","Use after free in WebGL in Google Chrome prior to 91.0.4472.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.","2021-07-02",0.07367,"Google Chromium WebGL Use-After-Free Vulnerability","Google Chromium WebGL contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":709,"description":710,"publishedDate":711,"cvssScore":180,"cvssVersion":124,"severity":133,"isKev":4,"epssScore":712,"cisaVulnName":250,"cisaDateAdded":624,"cisaShortDescription":409,"cisaRequiredAction":388},"CVE-2021-30551","Type confusion in V8 in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.","2021-06-15",0.64701,{"cveId":714,"description":715,"publishedDate":672,"cvssScore":180,"cvssVersion":124,"severity":133,"isKev":4,"epssScore":716,"cisaVulnName":250,"cisaDateAdded":624,"cisaShortDescription":717,"cisaRequiredAction":388},"CVE-2021-21224","Type confusion in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.",0.57736,"Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to execute code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":719,"description":720,"publishedDate":672,"cvssScore":180,"cvssVersion":124,"severity":133,"isKev":4,"epssScore":721,"cisaVulnName":722,"cisaDateAdded":624,"cisaShortDescription":723,"cisaRequiredAction":388},"CVE-2021-21220","Insufficient validation of untrusted input in V8 in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",0.70435,"Google Chromium V8 Improper Input Validation Vulnerability","Google Chromium V8 Engine contains an improper input validation vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":725,"description":726,"publishedDate":727,"cvssScore":180,"cvssVersion":124,"severity":133,"isKev":4,"epssScore":728,"cisaVulnName":674,"cisaDateAdded":624,"cisaShortDescription":675,"cisaRequiredAction":388},"CVE-2021-21193","Use after free in Blink in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.","2021-03-16",0.0987,{"cveId":730,"description":731,"publishedDate":732,"cvssScore":180,"cvssVersion":124,"severity":133,"isKev":4,"epssScore":733,"cisaVulnName":734,"cisaDateAdded":624,"cisaShortDescription":735,"cisaRequiredAction":388},"CVE-2021-21166","Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.","2021-03-09",0.26525,"Google Chromium Race Condition Vulnerability","Google Chromium contains a race condition vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":737,"description":738,"publishedDate":739,"cvssScore":180,"cvssVersion":124,"severity":133,"isKev":4,"epssScore":740,"cisaVulnName":741,"cisaDateAdded":624,"cisaShortDescription":742,"cisaRequiredAction":388},"CVE-2021-21148","Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.","2021-02-09",0.19815,"Google Chromium V8 Heap Buffer Overflow Vulnerability","Google Chromium V8 Engine contains a heap buffer overflow vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":744,"description":745,"publishedDate":746,"cvssScore":180,"cvssVersion":124,"severity":133,"isKev":4,"epssScore":747,"cisaVulnName":250,"cisaDateAdded":624,"cisaShortDescription":748,"cisaRequiredAction":388},"CVE-2020-6418","Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.","2020-02-27",0.78808,"Google Chromium V8 Engine contains a type confusion vulnerability allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":750,"description":751,"publishedDate":659,"cvssScore":180,"cvssVersion":124,"severity":133,"isKev":4,"epssScore":752,"cisaVulnName":250,"cisaDateAdded":624,"cisaShortDescription":409,"cisaRequiredAction":388},"CVE-2020-16009","Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",0.48574,{"cveId":754,"description":755,"publishedDate":756,"cvssScore":187,"cvssVersion":124,"severity":133,"isKev":4,"epssScore":757,"cisaVulnName":758,"cisaDateAdded":624,"cisaShortDescription":759,"cisaRequiredAction":388},"CVE-2019-0211","In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute arbitrary code with the privileges of the parent process (usually root) by manipulating the scoreboard. Non-Unix systems are not affected.","2019-04-08",0.65005,"Apache HTTP Server Privilege Escalation Vulnerability","Apache HTTP Server, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute code with the privileges of the parent process (usually root) by manipulating the scoreboard.",{"cveId":761,"description":762,"publishedDate":459,"cvssScore":132,"cvssVersion":124,"severity":133,"isKev":4,"epssScore":763,"cisaVulnName":647,"cisaDateAdded":624,"cisaShortDescription":764,"cisaRequiredAction":388},"CVE-2021-41773","A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default configuration \"require all denied\", these requests can succeed. If CGI scripts are also enabled for these aliased pathes, this could allow for remote code execution. This issue is known to be exploited in the wild. This issue only affects Apache 2.4.49 and not earlier versions. The fix in Apache HTTP Server 2.4.50 was found to be incomplete, see CVE-2021-42013.",0.99992,"Apache HTTP Server contains a path traversal vulnerability that allows an attacker to perform remote code execution if files outside directories configured by Alias-like directives are not under default �require all denied� or if CGI scripts are enabled. The original patch issued under this CVE ID is insufficient, please review remediation information under CVE-2021-42013.",{"cveId":766,"description":767,"publishedDate":652,"cvssScore":314,"cvssVersion":124,"severity":147,"isKev":4,"epssScore":768,"cisaVulnName":769,"cisaDateAdded":624,"cisaShortDescription":770,"cisaRequiredAction":388},"CVE-2021-37976","Inappropriate implementation in Memory in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",0.19901,"Google Chromium Information Disclosure Vulnerability","Google Chromium contains an information disclosure vulnerability within the core memory component that allows a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":772,"description":773,"publishedDate":679,"cvssScore":223,"cvssVersion":124,"severity":147,"isKev":4,"epssScore":774,"cisaVulnName":775,"cisaDateAdded":624,"cisaShortDescription":776,"cisaRequiredAction":388},"CVE-2021-38000","Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 95.0.4638.69 allowed a remote attacker to arbitrarily browser to a malicious URL via a crafted HTML page.",0.04485,"Google Chromium Intents Improper Input Validation Vulnerability","Google Chromium Intents contains an improper input validation vulnerability that allows a remote attacker to arbitrarily browser to a malicious URL via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":778,"description":779,"publishedDate":780,"cvssScore":781,"cvssVersion":124,"severity":147,"isKev":4,"epssScore":782,"cisaVulnName":783,"cisaDateAdded":624,"cisaShortDescription":784,"cisaRequiredAction":388},"CVE-2020-1472","An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protocol (MS-NRPC). An attacker who successfully exploited the vulnerability could run a specially crafted application on a device on the network.\nTo exploit the vulnerability, an unauthenticated attacker would be required to use MS-NRPC to connect to a domain controller to obtain domain administrator access.\nMicrosoft is addressing the vulnerability in a phased two-part rollout. These updates address the vulnerability by modifying how Netlogon handles the usage of Netlogon secure channels.\nFor guidelines on how to manage the changes required for this vulnerability and more information on the phased rollout, see  How to manage the changes in Netlogon secure channel connections associated with CVE-2020-1472 (updated September 28, 2020).\nWhen the second phase of Windows updates become available in Q1 2021, customers will be notified via a revision to this security vulnerability. If you wish to be notified when these updates are released, we recommend that you register for the security notifications mailer to be alerted of content changes to this advisory. See Microsoft Technical Security Notifications.\n","2020-08-17",5.5,0.99512,"Microsoft Netlogon Privilege Escalation Vulnerability","Microsoft's Netlogon Remote Protocol (MS-NRPC) contains a privilege escalation vulnerability when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller. An attacker who successfully exploits the vulnerability could run a specially crafted application on a device on the network. The vulnerability is also known under the moniker of Zerologon.",[786,787,788,789,790,791,792,793,794,795],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":13},{"id":22,"product_name":23,"version_count":24,"cve_count":25,"kev_count":26,"last_cve_update":27},{"id":29,"product_name":30,"version_count":31,"cve_count":32,"kev_count":33,"last_cve_update":34},{"id":36,"product_name":37,"version_count":38,"cve_count":39,"kev_count":33,"last_cve_update":40},{"id":42,"product_name":43,"version_count":44,"cve_count":45,"kev_count":33,"last_cve_update":46},{"id":48,"product_name":49,"version_count":26,"cve_count":26,"kev_count":33,"last_cve_update":50},{"id":52,"product_name":53,"version_count":26,"cve_count":26,"kev_count":33,"last_cve_update":54},{"id":56,"product_name":57,"version_count":58,"cve_count":26,"kev_count":33,"last_cve_update":59},{"id":61,"product_name":62,"version_count":26,"cve_count":26,"kev_count":33,"last_cve_update":63},{"id":65,"product_name":66,"version_count":33,"cve_count":26,"kev_count":33,"last_cve_update":67},{"title":797,"metaDescription":798,"keywords":799,"structuredData":800},"Fedoraproject - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Fedoraproject covering 22 products with 5392 tracked vulnerabilities including 24 critical and 48 high-severity issues and 84 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Fedoraproject vulnerabilities, Fedoraproject security, Fedoraproject CVE, Fedoraproject threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking, Fedoraproject KEV, Fedoraproject exploited vulnerabilities",{"@context":801,"@type":802,"name":803,"description":798,"url":804},"https:\u002F\u002Fschema.org","Organization","Fedoraproject","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Ffedoraproject",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":806,"apiVersion":807},"2026-10-28T15:41:35.039Z","3.0"]