[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fFSdZ4c9cX4_dXwr5ALhICFnNenrqfGp9h1_6Lis6w00":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":236,"kevVulnerabilities":298,"topProductsByCves":677,"seoMetadata":688,"meta":697},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":235},23101,"opensuse",51,3288,57,1778,"2025-06-30","o",[16,22,28,35,41,46,51,57,62,68,74,79,83,88,92,96,100,104,108,113,117,121,125,129,133,138,142,145,148,151,154,158,162,165,169,173,177,181,184,189,194,197,200,204,208,212,215,218,221,226,231],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":21,"last_cve_update":13},123325,"leap",11,1919,18,{"id":23,"product_name":8,"version_count":24,"cve_count":25,"kev_count":26,"last_cve_update":27},123342,16,1465,43,"2021-07-16",{"id":29,"product_name":30,"version_count":31,"cve_count":32,"kev_count":33,"last_cve_update":34},123315,"backports_sle",1,329,3,"2022-09-07",{"id":36,"product_name":37,"version_count":31,"cve_count":38,"kev_count":39,"last_cve_update":40},123314,"backports",97,0,"2022-02-19",{"id":42,"product_name":43,"version_count":31,"cve_count":26,"kev_count":44,"last_cve_update":45},123320,"evergreen",9,"2016-05-11",{"id":47,"product_name":48,"version_count":39,"cve_count":49,"kev_count":39,"last_cve_update":50},123321,"factory",23,"2022-10-26",{"id":52,"product_name":53,"version_count":54,"cve_count":55,"kev_count":39,"last_cve_update":56},123338,"open_build_service",154,22,"2022-05-03",{"id":58,"product_name":59,"version_count":11,"cve_count":60,"kev_count":39,"last_cve_update":61},123328,"libsolv",10,"2022-02-21",{"id":63,"product_name":64,"version_count":65,"cve_count":66,"kev_count":39,"last_cve_update":67},123349,"supportutils",4,6,"2023-02-15",{"id":69,"product_name":70,"version_count":71,"cve_count":72,"kev_count":39,"last_cve_update":73},123331,"libzypp",763,5,"2020-01-24",{"id":75,"product_name":76,"version_count":77,"cve_count":72,"kev_count":39,"last_cve_update":78},123356,"tumbleweed",2,"2023-07-07",{"id":80,"product_name":81,"version_count":31,"cve_count":65,"kev_count":39,"last_cve_update":82},123327,"libeconf","2023-08-22",{"id":84,"product_name":85,"version_count":86,"cve_count":33,"kev_count":39,"last_cve_update":87},123340,"openldap2",7,"2022-11-09",{"id":89,"product_name":90,"version_count":77,"cve_count":33,"kev_count":39,"last_cve_update":91},123350,"suse_linux_enterprise_server","2020-02-22",{"id":93,"product_name":94,"version_count":66,"cve_count":33,"kev_count":39,"last_cve_update":95},123363,"zypper","2018-03-01",{"id":97,"product_name":98,"version_count":77,"cve_count":77,"kev_count":39,"last_cve_update":99},123318,"cscreen","2022-03-16",{"id":101,"product_name":102,"version_count":33,"cve_count":77,"kev_count":39,"last_cve_update":103},123354,"texlive-filesystem","2020-04-02",{"id":105,"product_name":106,"version_count":86,"cve_count":77,"kev_count":39,"last_cve_update":107},123317,"cryptctl","2021-06-30",{"id":109,"product_name":110,"version_count":111,"cve_count":77,"kev_count":39,"last_cve_update":112},123359,"wicked",98,"2020-02-11",{"id":114,"product_name":115,"version_count":65,"cve_count":77,"kev_count":39,"last_cve_update":116},123348,"rmt-server","2023-02-07",{"id":118,"product_name":119,"version_count":72,"cve_count":77,"kev_count":39,"last_cve_update":120},123346,"pcp","2020-03-03",{"id":122,"product_name":123,"version_count":65,"cve_count":77,"kev_count":39,"last_cve_update":124},123343,"osc","2020-06-29",{"id":126,"product_name":127,"version_count":31,"cve_count":31,"kev_count":39,"last_cve_update":128},123355,"travel_support_program","2023-01-10",{"id":130,"product_name":131,"version_count":77,"cve_count":31,"kev_count":39,"last_cve_update":132},123313,"autoyast2","2020-04-03",{"id":134,"product_name":135,"version_count":136,"cve_count":31,"kev_count":39,"last_cve_update":137},123358,"welcome",13,"2023-09-19",{"id":139,"product_name":140,"version_count":31,"cve_count":31,"kev_count":39,"last_cve_update":141},123360,"yast2-multipath","2019-03-15",{"id":143,"product_name":144,"version_count":60,"cve_count":31,"kev_count":39,"last_cve_update":141},123361,"yast2-printer",{"id":146,"product_name":147,"version_count":31,"cve_count":31,"kev_count":39,"last_cve_update":141},123362,"yast2-samba-provision",{"id":149,"product_name":150,"version_count":31,"cve_count":31,"kev_count":39,"last_cve_update":124},123357,"tumbleweed_kopano-spamd",{"id":152,"product_name":153,"version_count":33,"cve_count":31,"kev_count":39,"last_cve_update":34},123316,"canna",{"id":155,"product_name":156,"version_count":39,"cve_count":31,"kev_count":39,"last_cve_update":157},123319,"cyrus-sasl","2021-02-25",{"id":159,"product_name":160,"version_count":39,"cve_count":31,"kev_count":39,"last_cve_update":161},123322,"factory_watchman","2022-01-26",{"id":163,"product_name":164,"version_count":33,"cve_count":31,"kev_count":39,"last_cve_update":124},123323,"hylafax\\+",{"id":166,"product_name":167,"version_count":77,"cve_count":31,"kev_count":39,"last_cve_update":168},123324,"inn","2021-06-10",{"id":170,"product_name":171,"version_count":31,"cve_count":31,"kev_count":39,"last_cve_update":172},123326,"leap_micro","2022-10-06",{"id":174,"product_name":175,"version_count":39,"cve_count":31,"kev_count":39,"last_cve_update":176},123329,"libstorage","2016-09-26",{"id":178,"product_name":179,"version_count":180,"cve_count":31,"kev_count":39,"last_cve_update":176},123330,"libstorage-ng",347,{"id":182,"product_name":183,"version_count":39,"cve_count":31,"kev_count":39,"last_cve_update":116},123332,"libzypp-plugin-appdata",{"id":185,"product_name":186,"version_count":187,"cve_count":31,"kev_count":39,"last_cve_update":188},123334,"mirrorcache",93,"2024-11-13",{"id":190,"product_name":191,"version_count":192,"cve_count":31,"kev_count":39,"last_cve_update":193},123335,"munge",25,"2020-01-23",{"id":195,"product_name":196,"version_count":77,"cve_count":31,"kev_count":39,"last_cve_update":73},123336,"munin",{"id":198,"product_name":199,"version_count":31,"cve_count":31,"kev_count":39,"last_cve_update":95},123337,"obs-service-source_validator",{"id":201,"product_name":202,"version_count":39,"cve_count":31,"kev_count":39,"last_cve_update":203},123339,"open_buildservice","2018-03-02",{"id":205,"product_name":206,"version_count":31,"cve_count":31,"kev_count":39,"last_cve_update":207},123341,"openstack_cloud","2015-07-06",{"id":209,"product_name":210,"version_count":39,"cve_count":31,"kev_count":39,"last_cve_update":211},123344,"package_hub","2019-02-04",{"id":213,"product_name":214,"version_count":31,"cve_count":31,"kev_count":39,"last_cve_update":116},123345,"paste",{"id":216,"product_name":217,"version_count":77,"cve_count":31,"kev_count":39,"last_cve_update":168},123347,"python-postorius",{"id":219,"product_name":220,"version_count":39,"cve_count":31,"kev_count":39,"last_cve_update":91},123351,"suse_package_hub",{"id":222,"product_name":223,"version_count":224,"cve_count":31,"kev_count":39,"last_cve_update":225},123352,"sysconfig",89,"2018-06-12",{"id":227,"product_name":228,"version_count":229,"cve_count":31,"kev_count":39,"last_cve_update":230},123353,"tar_scm",29,"2018-10-09",{"id":232,"product_name":233,"version_count":31,"cve_count":39,"kev_count":39,"last_cve_update":234},123333,"linux_enterprise_high_availability_extension",null,"Opensuse is a technology vendor with 51 tracked products and 3288 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[237,246,252,258,263,271,276,281,287,293],{"cveId":238,"description":239,"publishedDate":240,"cvssScore":241,"cvssVersion":242,"severity":243,"isKev":244,"epssScore":245},"CVE-2014-3566","The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the \"POODLE\" issue.","2014-10-15",3.4,"v3.1","Low",false,0.99999,{"cveId":247,"description":248,"publishedDate":249,"cvssScore":250,"cvssVersion":242,"severity":251,"isKev":4,"epssScore":245},"CVE-2014-0160","The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug.","2014-04-07",7.5,"High",{"cveId":253,"description":254,"publishedDate":255,"cvssScore":256,"cvssVersion":242,"severity":257,"isKev":4,"epssScore":245},"CVE-2014-6271","GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka \"ShellShock.\"  NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix.","2014-09-24",9.8,"Critical",{"cveId":259,"description":260,"publishedDate":261,"cvssScore":256,"cvssVersion":242,"severity":257,"isKev":4,"epssScore":262},"CVE-2012-1823","sapi\u002Fcgi\u002Fcgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'd' case.","2012-05-11",0.99998,{"cveId":264,"description":265,"publishedDate":266,"cvssScore":267,"cvssVersion":268,"severity":269,"isKev":244,"epssScore":270},"CVE-2014-0195","The dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly validate fragment lengths in DTLS ClientHello messages, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via a long non-initial fragment.","2014-06-05",6.8,"v2","Medium",0.99977,{"cveId":272,"description":273,"publishedDate":274,"cvssScore":256,"cvssVersion":242,"severity":257,"isKev":4,"epssScore":275},"CVE-2014-7169","GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown other impact via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-6271.","2014-09-25",0.9994,{"cveId":277,"description":278,"publishedDate":279,"cvssScore":256,"cvssVersion":242,"severity":257,"isKev":4,"epssScore":280},"CVE-2014-0497","Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors.","2014-02-05",0.99883,{"cveId":282,"description":283,"publishedDate":284,"cvssScore":285,"cvssVersion":242,"severity":251,"isKev":4,"epssScore":286},"CVE-2011-0611","Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.19140; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader 9.x before 9.4.4 and 10.x through 10.0.1 on Windows, Adobe Reader 9.x before 9.4.4 and 10.x before 10.0.3 on Mac OS X, and Adobe Acrobat 9.x before 9.4.4 and 10.x before 10.0.3 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content; as demonstrated by a Microsoft Office document with an embedded .swf file that has a size inconsistency in a \"group of included constants,\" object type confusion, ActionScript that adds custom functions to prototypes, and Date objects; and as exploited in the wild in April 2011.","2011-04-13",8.8,0.9941,{"cveId":288,"description":289,"publishedDate":290,"cvssScore":291,"cvssVersion":268,"severity":251,"isKev":244,"epssScore":292},"CVE-2011-3192","The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attackers to cause a denial of service (memory and CPU consumption) via a Range header that expresses multiple overlapping ranges, as exploited in the wild in August 2011, a different vulnerability than CVE-2007-0086.","2011-08-29",7.8,0.98945,{"cveId":294,"description":295,"publishedDate":296,"cvssScore":256,"cvssVersion":242,"severity":257,"isKev":4,"epssScore":297},"CVE-2013-0422","Multiple vulnerabilities in Oracle Java 7 before Update 11 allow remote attackers to execute arbitrary code by (1) using the public getMBeanInstantiator method in the JmxMBeanServer class to obtain a reference to a private MBeanInstantiator object, then retrieving arbitrary Class references using the findClass method, and (2) using the Reflection API with recursion in a way that bypasses a security check by the java.lang.invoke.MethodHandles.Lookup.checkSecurityManager method due to the inability of the sun.reflect.Reflection.getCallerClass method to skip frames related to the new reflection API, as exploited in the wild in January 2013, as demonstrated by Blackhole and Nuclear Pack, and a different vulnerability than CVE-2012-4681 and CVE-2012-3174. NOTE: some parties have mapped the recursive Reflection API issue to CVE-2012-3174, but CVE-2012-3174 is for a different vulnerability whose details are not public as of 20130114.  CVE-2013-0422 covers both the JMX\u002FMBean and Reflection API issues.  NOTE: it was originally reported that Java 6 was also vulnerable, but the reporter has retracted this claim, stating that Java 6 is not exploitable because the relevant code is called in a way that does not bypass security checks.  NOTE: as of 20130114, a reliable third party has claimed that the findClass\u002FMBeanInstantiator vector was not fixed in Oracle Java 7 Update 11.  If there is still a vulnerable condition, then a separate CVE identifier might be created for the unfixed issue.","2013-01-10",0.97612,[299,308,316,321,328,334,341,351,360,368,376,384,391,398,405,412,416,423,430,437,444,451,459,463,471,477,483,488,496,502,510,513,520,526,533,540,547,553,559,566,568,575,581,587,593,601,609,613,615,623,630,638,644,651,657,665,671],{"cveId":300,"description":301,"publishedDate":13,"cvssScore":302,"cvssVersion":242,"severity":257,"isKev":4,"epssScore":303,"cisaVulnName":304,"cisaDateAdded":305,"cisaShortDescription":306,"cisaRequiredAction":307},"CVE-2025-32463","Sudo before 1.9.17p1 allows local users to obtain root access because \u002Fetc\u002Fnsswitch.conf from a user-controlled directory is used with the --chroot option.",9.3,0.47467,"Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability","2025-09-29","Sudo contains an inclusion of functionality from untrusted control sphere vulnerability. This vulnerability could allow local attacker to leverage sudo’s -R (--chroot) option to run arbitrary commands as root, even if they are not listed in the sudoers file.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":309,"description":310,"publishedDate":311,"cvssScore":250,"cvssVersion":242,"severity":251,"isKev":4,"epssScore":312,"cisaVulnName":313,"cisaDateAdded":314,"cisaShortDescription":315,"cisaRequiredAction":307},"CVE-2019-5418","There is a File Content Disclosure vulnerability in Action View \u003C5.2.2.1, \u003C5.1.6.2, \u003C5.0.7.2, \u003C4.2.11.1 and v3 where specially crafted accept headers can cause contents of arbitrary files on the target system's filesystem to be exposed.","2019-03-27",0.98507,"Rails Ruby on Rails Path Traversal Vulnerability","2025-07-07","Rails Ruby on Rails contains a path traversal vulnerability in Action View. Specially crafted accept headers in combination with calls to `render file:` can cause arbitrary files on the target server to be rendered, disclosing the file contents.",{"cveId":277,"description":278,"publishedDate":279,"cvssScore":256,"cvssVersion":242,"severity":257,"isKev":4,"epssScore":280,"cisaVulnName":317,"cisaDateAdded":318,"cisaShortDescription":319,"cisaRequiredAction":320},"Adobe Flash Player Integer Underflow Vulnerablity","2024-09-17","Adobe Flash Player contains an integer underflow vulnerability that allows a remote attacker to execute arbitrary code.","The impacted product is end-of-life (EoL) and\u002For end-of-service (EoS). Users should discontinue utilization of the product.",{"cveId":322,"description":323,"publishedDate":324,"cvssScore":285,"cvssVersion":242,"severity":251,"isKev":4,"epssScore":325,"cisaVulnName":326,"cisaDateAdded":318,"cisaShortDescription":327,"cisaRequiredAction":320},"CVE-2013-0648","Unspecified vulnerability in the ExternalInterface ActionScript functionality in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, allows remote attackers to execute arbitrary code via crafted SWF content, as exploited in the wild in February 2013.","2013-02-27",0.11094,"Adobe Flash Player Code Execution Vulnerability","Adobe Flash Player contains an unspecified vulnerability in the ExternalInterface ActionScript functionality that allows a remote attacker to execute arbitrary code via crafted SWF content.",{"cveId":329,"description":330,"publishedDate":324,"cvssScore":285,"cvssVersion":242,"severity":251,"isKev":4,"epssScore":331,"cisaVulnName":332,"cisaDateAdded":318,"cisaShortDescription":333,"cisaRequiredAction":320},"CVE-2013-0643","The Firefox sandbox in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, does not properly restrict privileges, which makes it easier for remote attackers to execute arbitrary code via crafted SWF content, as exploited in the wild in February 2013.",0.10533,"Adobe Flash Player Incorrect Default Permissions Vulnerability","Adobe Flash Player contains an incorrect default permissions vulnerability in the Firefox sandbox that allows a remote attacker to execute arbitrary code via crafted SWF content. ",{"cveId":335,"description":336,"publishedDate":337,"cvssScore":285,"cvssVersion":242,"severity":251,"isKev":4,"epssScore":338,"cisaVulnName":339,"cisaDateAdded":318,"cisaShortDescription":340,"cisaRequiredAction":320},"CVE-2014-0502","Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before 4.0.0.1628 allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2014.","2014-02-21",0.24204,"Adobe Flash Player Double Free Vulnerablity","Adobe Flash Player contains a double free vulnerability that allows a remote attacker to execute arbitrary code.",{"cveId":342,"description":343,"publishedDate":344,"cvssScore":345,"cvssVersion":242,"severity":251,"isKev":4,"epssScore":346,"cisaVulnName":347,"cisaDateAdded":348,"cisaShortDescription":349,"cisaRequiredAction":350},"CVE-2016-3714","The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to execute arbitrary code via shell metacharacters in a crafted image, aka \"ImageTragick.\"","2016-05-05",8.4,0.97485,"ImageMagick Improper Input Validation Vulnerability","2024-09-09","ImageMagick contains an improper input validation vulnerability that affects the EPHEMERAL, HTTPS, MVG, MSL, TEXT, SHOW, WIN, and PLT coders. This allows a remote attacker to execute arbitrary code via shell metacharacters in a crafted image.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":352,"description":353,"publishedDate":354,"cvssScore":256,"cvssVersion":242,"severity":257,"isKev":4,"epssScore":355,"cisaVulnName":356,"cisaDateAdded":357,"cisaShortDescription":358,"cisaRequiredAction":359},"CVE-2020-12641","rcube_image.php in Roundcube Webmail before 1.4.4 allows attackers to execute arbitrary code via shell metacharacters in a configuration setting for im_convert_path or im_identify_path.","2020-05-04",0.84456,"Roundcube Webmail Remote Code Execution Vulnerability","2023-06-22","Roundcube Webmail contains an remote code execution vulnerability that allows attackers to execute code via shell metacharacters in a configuration setting for im_convert_path or im_identify_path.","Apply updates per vendor instructions.",{"cveId":361,"description":362,"publishedDate":363,"cvssScore":256,"cvssVersion":242,"severity":257,"isKev":4,"epssScore":364,"cisaVulnName":365,"cisaDateAdded":366,"cisaShortDescription":367,"cisaRequiredAction":359},"CVE-2016-3427","Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.","2016-04-21",0.92334,"Oracle Java SE and JRockit Unspecified Vulnerability","2023-05-12","Oracle Java SE and JRockit contains an unspecified vulnerability that allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Java Management Extensions (JMX). This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service.",{"cveId":369,"description":370,"publishedDate":371,"cvssScore":291,"cvssVersion":242,"severity":251,"isKev":4,"epssScore":372,"cisaVulnName":373,"cisaDateAdded":366,"cisaShortDescription":374,"cisaRequiredAction":375},"CVE-2010-3904","The rds_page_copy_user function in net\u002Frds\u002Fpage.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not properly validate addresses obtained from user space, which allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls.","2010-12-06",0.11217,"Linux Kernel Improper Input Validation Vulnerability","Linux Kernel contains an improper input validation vulnerability in the Reliable Datagram Sockets (RDS) protocol implementation that allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls.","The impacted product is end-of-life and should be disconnected if still in use.",{"cveId":377,"description":378,"publishedDate":379,"cvssScore":285,"cvssVersion":242,"severity":251,"isKev":4,"epssScore":380,"cisaVulnName":381,"cisaDateAdded":382,"cisaShortDescription":383,"cisaRequiredAction":359},"CVE-2016-1646","The Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome before 49.0.2623.108, does not properly consider element data types, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted JavaScript code.","2016-03-29",0.4811,"Google Chromium V8 Out-of-Bounds Read Vulnerability","2022-06-08","Google Chromium V8 Engine contains an out-of-bounds read vulnerability that allows a remote attacker to cause a denial of service or possibly have another unspecified impact via crafted JavaScript code. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":385,"description":386,"publishedDate":387,"cvssScore":285,"cvssVersion":242,"severity":251,"isKev":4,"epssScore":388,"cisaVulnName":389,"cisaDateAdded":382,"cisaShortDescription":390,"cisaRequiredAction":359},"CVE-2009-3953","The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x before 7.1.4 allows remote attackers to execute arbitrary code via malformed U3D data in a PDF document, related to a CLODProgressiveMeshDeclaration \"array boundary issue,\" a different vulnerability than CVE-2009-2994.","2010-01-13",0.83855,"Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability","Adobe Acrobat and Reader contains an array boundary issue in Universal 3D (U3D) support that could lead to remote code execution.",{"cveId":392,"description":393,"publishedDate":394,"cvssScore":291,"cvssVersion":242,"severity":251,"isKev":4,"epssScore":395,"cisaVulnName":396,"cisaDateAdded":382,"cisaShortDescription":397,"cisaRequiredAction":359},"CVE-2009-4324","Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted PDF file using ZLib compressed streams, as exploited in the wild in December 2009.","2009-12-15",0.81933,"Adobe Acrobat and Reader Use-After-Free Vulnerability","Use-after-free vulnerability in Adobe Acrobat and Reader allows remote attackers to execute code via a crafted PDF file.",{"cveId":399,"description":400,"publishedDate":401,"cvssScore":291,"cvssVersion":242,"severity":251,"isKev":4,"epssScore":402,"cisaVulnName":403,"cisaDateAdded":382,"cisaShortDescription":404,"cisaRequiredAction":375},"CVE-2010-1297","Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted SWF content, related to authplay.dll and the ActionScript Virtual Machine 2 (AVM2) newfunction instruction, as exploited in the wild in June 2010.","2010-06-08",0.82365,"Adobe Flash Player Memory Corruption Vulnerability","Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).",{"cveId":406,"description":407,"publishedDate":408,"cvssScore":291,"cvssVersion":242,"severity":251,"isKev":4,"epssScore":409,"cisaVulnName":410,"cisaDateAdded":382,"cisaShortDescription":411,"cisaRequiredAction":375},"CVE-2011-0609","Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android; Adobe AIR 2.5.1 and earlier; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader and Acrobat 9.x through 9.4.2 and 10.x through 10.0.1 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content, as demonstrated by a .swf file embedded in an Excel spreadsheet, and as exploited in the wild in March 2011.","2011-03-15",0.66821,"Adobe Flash Player Unspecified Vulnerability","Adobe Flash Player contains an unspecified vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).",{"cveId":294,"description":295,"publishedDate":296,"cvssScore":256,"cvssVersion":242,"severity":257,"isKev":4,"epssScore":297,"cisaVulnName":413,"cisaDateAdded":414,"cisaShortDescription":415,"cisaRequiredAction":359},"Oracle JRE Remote Code Execution Vulnerability","2022-05-25","A vulnerability in the way Java restricts the permissions of Java applets could allow an attacker to execute commands on a vulnerable system.",{"cveId":417,"description":418,"publishedDate":419,"cvssScore":256,"cvssVersion":242,"severity":257,"isKev":4,"epssScore":420,"cisaVulnName":421,"cisaDateAdded":414,"cisaShortDescription":422,"cisaRequiredAction":359},"CVE-2010-0840","Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.  NOTE: the previous information was obtained from the March 2010 CPU.  Oracle has not commented on claims from a reliable researcher that this is related to improper checks when executing privileged methods in the Java Runtime Environment (JRE), which allows attackers to execute arbitrary code via (1) an untrusted object that extends the trusted class but has not modified a certain method, or (2) \"a similar trust issue with interfaces,\" aka \"Trusted Methods Chaining Remote Code Execution Vulnerability.\"","2010-04-01",0.96319,"Oracle JRE Unspecified Vulnerability","Unspecified vulnerability in the Java Runtime Environment (JRE) in Java SE component allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors.",{"cveId":424,"description":425,"publishedDate":426,"cvssScore":285,"cvssVersion":242,"severity":251,"isKev":4,"epssScore":427,"cisaVulnName":428,"cisaDateAdded":414,"cisaShortDescription":429,"cisaRequiredAction":375},"CVE-2015-8651","Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allows attackers to execute arbitrary code via unspecified vectors.","2015-12-28",0.67922,"Adobe Flash Player Integer Overflow Vulnerability","Integer overflow in Adobe Flash Player allows attackers to execute code.",{"cveId":431,"description":432,"publishedDate":433,"cvssScore":285,"cvssVersion":242,"severity":251,"isKev":4,"epssScore":434,"cisaVulnName":435,"cisaDateAdded":414,"cisaShortDescription":436,"cisaRequiredAction":359},"CVE-2015-4495","The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remote attackers to bypass the Same Origin Policy, and read arbitrary files or gain privileges, via vectors involving crafted JavaScript code and a native setter, as exploited in the wild in August 2015.","2015-08-08",0.70226,"Mozilla Firefox Security Feature Bypass Vulnerability","Moxilla Firefox allows remote attackers to bypass the Same Origin Policy to read arbitrary files or gain privileges.",{"cveId":438,"description":439,"publishedDate":440,"cvssScore":291,"cvssVersion":242,"severity":251,"isKev":4,"epssScore":441,"cisaVulnName":442,"cisaDateAdded":414,"cisaShortDescription":443,"cisaRequiredAction":359},"CVE-2014-3153","The futex_requeue function in kernel\u002Ffutex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which allows local users to gain privileges via a crafted FUTEX_REQUEUE command that facilitates unsafe waiter modification.","2014-06-07",0.37233,"Linux Kernel Privilege Escalation Vulnerability","The futex_requeue function in kernel\u002Ffutex.c in Linux kernel does not ensure that calls have two different futex addresses, which allows local users to gain privileges.",{"cveId":445,"description":446,"publishedDate":447,"cvssScore":448,"cvssVersion":242,"severity":243,"isKev":4,"epssScore":449,"cisaVulnName":421,"cisaDateAdded":414,"cisaShortDescription":450,"cisaRequiredAction":359},"CVE-2013-2423","Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via unknown vectors related to HotSpot.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from the original researcher that this vulnerability allows remote attackers to bypass permission checks by the MethodHandles method and modify arbitrary public final fields using reflection and type confusion, as demonstrated using integer and double fields to disable the security manager.","2013-04-17",3.7,0.85333,"Unspecified vulnerability in hotspot for Java Runtime Environment (JRE) allows remote attackers to affect integrity.",{"cveId":452,"description":453,"publishedDate":454,"cvssScore":285,"cvssVersion":242,"severity":251,"isKev":4,"epssScore":455,"cisaVulnName":456,"cisaDateAdded":457,"cisaShortDescription":458,"cisaRequiredAction":359},"CVE-2019-13720","Use after free in WebAudio in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.","2019-11-25",0.72977,"Google Chrome WebAudio Use-After-Free Vulnerability","2022-05-23","Google Chrome WebAudio contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page.",{"cveId":247,"description":248,"publishedDate":249,"cvssScore":250,"cvssVersion":242,"severity":251,"isKev":4,"epssScore":245,"cisaVulnName":460,"cisaDateAdded":461,"cisaShortDescription":462,"cisaRequiredAction":359},"OpenSSL Information Disclosure Vulnerability","2022-05-04","The TLS and DTLS implementations in OpenSSL do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information.",{"cveId":464,"description":465,"publishedDate":466,"cvssScore":256,"cvssVersion":242,"severity":257,"isKev":4,"epssScore":467,"cisaVulnName":468,"cisaDateAdded":469,"cisaShortDescription":470,"cisaRequiredAction":375},"CVE-2015-5123","Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Windows and OS X, 11.x through 11.2.202.481 on Linux, and 12.x through 18.0.0.204 on Linux Chrome installations allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that overrides a valueOf function, as exploited in the wild in July 2015.","2015-07-14",0.18493,"Adobe Flash Player Use-After-Free Vulnerability","2022-04-13","Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS).",{"cveId":472,"description":473,"publishedDate":474,"cvssScore":256,"cvssVersion":242,"severity":257,"isKev":4,"epssScore":475,"cisaVulnName":468,"cisaDateAdded":469,"cisaShortDescription":476,"cisaRequiredAction":375},"CVE-2015-0313","Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2015, a different vulnerability than CVE-2015-0315, CVE-2015-0320, and CVE-2015-0322.","2015-02-02",0.95683,"Use-after-free vulnerability in Adobe Flash Player allows remote attackers to execute code.",{"cveId":478,"description":479,"publishedDate":480,"cvssScore":256,"cvssVersion":242,"severity":257,"isKev":4,"epssScore":275,"cisaVulnName":481,"cisaDateAdded":469,"cisaShortDescription":482,"cisaRequiredAction":375},"CVE-2015-3113","Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in June 2015.","2015-06-23","Adobe Flash Player Heap-Based Buffer Overflow Vulnerability","Heap-based buffer overflow vulnerability in Adobe Flash Player allows remote attackers to execute code.",{"cveId":484,"description":485,"publishedDate":466,"cvssScore":256,"cvssVersion":242,"severity":257,"isKev":4,"epssScore":486,"cisaVulnName":468,"cisaDateAdded":469,"cisaShortDescription":487,"cisaRequiredAction":375},"CVE-2015-5122","Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Windows and OS X, 11.x through 11.2.202.481 on Linux, and 12.x through 18.0.0.204 on Linux Chrome installations allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that leverages improper handling of the opaqueBackground property, as exploited in the wild in July 2015.",0.93688,"Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS).",{"cveId":489,"description":490,"publishedDate":491,"cvssScore":285,"cvssVersion":242,"severity":251,"isKev":4,"epssScore":492,"cisaVulnName":493,"cisaDateAdded":494,"cisaShortDescription":495,"cisaRequiredAction":359},"CVE-2013-1690","Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted web site that triggers an attempt to execute data at an unmapped memory location.","2013-06-26",0.69021,"Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability","2022-03-28","Mozilla Firefox and Thunderbird do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial-of-service (DoS) or possibly execute malicious code via a crafted web site.",{"cveId":497,"description":498,"publishedDate":499,"cvssScore":250,"cvssVersion":242,"severity":251,"isKev":4,"epssScore":500,"cisaVulnName":403,"cisaDateAdded":494,"cisaShortDescription":501,"cisaRequiredAction":375},"CVE-2012-2034","Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2037.","2012-06-09",0.078,"Adobe Flash Player contains a memory corruption vulnerability that allows for remote code execution or denial-of-service (DoS).",{"cveId":503,"description":504,"publishedDate":505,"cvssScore":256,"cvssVersion":242,"severity":257,"isKev":4,"epssScore":506,"cisaVulnName":507,"cisaDateAdded":508,"cisaShortDescription":509,"cisaRequiredAction":375},"CVE-2016-4171","Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in June 2016.","2016-06-16",0.19903,"Adobe Flash Player Remote Code Execution Vulnerability","2022-03-25","Unspecified vulnerability in Adobe Flash Player allows for remote code execution.",{"cveId":259,"description":260,"publishedDate":261,"cvssScore":256,"cvssVersion":242,"severity":257,"isKev":4,"epssScore":262,"cisaVulnName":511,"cisaDateAdded":508,"cisaShortDescription":512,"cisaRequiredAction":359},"PHP-CGI Query String Parameter Vulnerability","sapi\u002Fcgi\u002Fcgi_main.c in PHP, when configured as a CGI script, does not properly handle query strings, which allows remote attackers to execute arbitrary code.",{"cveId":514,"description":515,"publishedDate":516,"cvssScore":256,"cvssVersion":242,"severity":257,"isKev":4,"epssScore":517,"cisaVulnName":518,"cisaDateAdded":508,"cisaShortDescription":519,"cisaRequiredAction":359},"CVE-2010-4344","Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMTP session that includes two MAIL commands in conjunction with a large message containing crafted headers, leading to improper rejection logging.","2010-12-14",0.71794,"Exim Heap-Based Buffer Overflow Vulnerability","Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMTP session.",{"cveId":521,"description":522,"publishedDate":516,"cvssScore":291,"cvssVersion":242,"severity":251,"isKev":4,"epssScore":523,"cisaVulnName":524,"cisaDateAdded":508,"cisaShortDescription":525,"cisaRequiredAction":359},"CVE-2010-4345","Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary commands, as demonstrated by the spool_directory directive.",0.17794,"Exim Privilege Escalation Vulnerability","Exim allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary commands.",{"cveId":527,"description":528,"publishedDate":529,"cvssScore":250,"cvssVersion":242,"severity":251,"isKev":4,"epssScore":530,"cisaVulnName":531,"cisaDateAdded":508,"cisaShortDescription":532,"cisaRequiredAction":359},"CVE-2016-0752","Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a .. (dot dot) in a pathname.","2016-02-16",0.95537,"Ruby on Rails Directory Traversal Vulnerability","Directory traversal vulnerability in Action View in Ruby on Rails allows remote attackers to read arbitrary files.",{"cveId":534,"description":535,"publishedDate":536,"cvssScore":256,"cvssVersion":242,"severity":257,"isKev":4,"epssScore":537,"cisaVulnName":403,"cisaDateAdded":538,"cisaShortDescription":539,"cisaRequiredAction":375},"CVE-2015-3043","Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in April 2015, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3042.","2015-04-14",0.7983,"2022-03-03","A memory corruption vulnerability exists in Adobe Flash Player that allows an attacker to perform remote code execution.",{"cveId":541,"description":542,"publishedDate":543,"cvssScore":256,"cvssVersion":242,"severity":257,"isKev":4,"epssScore":544,"cisaVulnName":545,"cisaDateAdded":538,"cisaShortDescription":546,"cisaRequiredAction":359},"CVE-2015-2590","Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2015-4732.","2015-07-16",0.25469,"Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability","An unspecified vulnerability exists within Oracle Java Runtime Environment that allows an attacker to perform remote code execution.",{"cveId":548,"description":549,"publishedDate":550,"cvssScore":256,"cvssVersion":242,"severity":257,"isKev":4,"epssScore":551,"cisaVulnName":468,"cisaDateAdded":538,"cisaShortDescription":552,"cisaRequiredAction":375},"CVE-2015-5119","Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.296 and 14.x through 18.0.0.194 on Windows and OS X and 11.x through 11.2.202.468 on Linux allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that overrides a valueOf function, as exploited in the wild in July 2015.","2015-07-08",0.99344,"A use-after-free vulnerability exists within the ActionScript 3 ByteArray class in Adobe Flash Player that allows an attacker to perform remote code execution.",{"cveId":554,"description":555,"publishedDate":45,"cvssScore":256,"cvssVersion":242,"severity":257,"isKev":4,"epssScore":556,"cisaVulnName":557,"cisaDateAdded":538,"cisaShortDescription":558,"cisaRequiredAction":375},"CVE-2016-4117","Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in May 2016.",0.94354,"Adobe Flash Player Arbitrary Code Execution Vulnerability","An access of resource using incompatible type vulnerability exists within Adobe Flash Player that allows an attacker to perform remote code execution.",{"cveId":560,"description":561,"publishedDate":562,"cvssScore":256,"cvssVersion":242,"severity":257,"isKev":4,"epssScore":563,"cisaVulnName":564,"cisaDateAdded":538,"cisaShortDescription":565,"cisaRequiredAction":359},"CVE-2020-1938","When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an attacker, they can be exploited in ways that may be surprising. In Apache Tomcat 9.0.0.M1 to 9.0.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99, Tomcat shipped with an AJP Connector enabled by default that listened on all configured IP addresses. It was expected (and recommended in the security guide) that this Connector would be disabled if not required. This vulnerability report identified a mechanism that allowed: - returning arbitrary files from anywhere in the web application - processing any file in the web application as a JSP Further, if the web application allowed file upload and stored those files within the web application (or the attacker was able to control the content of the web application by some other means) then this, along with the ability to process a file as a JSP, made remote code execution possible. It is important to note that mitigation is only required if an AJP port is accessible to untrusted users. Users wishing to take a defence-in-depth approach and block the vector that permits returning arbitrary files and execution as JSP may upgrade to Apache Tomcat 9.0.31, 8.5.51 or 7.0.100 or later. A number of changes were made to the default AJP Connector configuration in 9.0.31 to harden the default configuration. It is likely that users upgrading to 9.0.31, 8.5.51 or 7.0.100 or later will need to make small changes to their configurations.","2020-02-24",0.9927,"Apache Tomcat Improper Privilege Management Vulnerability","Apache Tomcat treats Apache JServ Protocol (AJP) connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an attacker, they can be exploited.",{"cveId":282,"description":283,"publishedDate":284,"cvssScore":285,"cvssVersion":242,"severity":251,"isKev":4,"epssScore":286,"cisaVulnName":507,"cisaDateAdded":538,"cisaShortDescription":567,"cisaRequiredAction":375},"Adobe Flash Player contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content.",{"cveId":569,"description":570,"publishedDate":571,"cvssScore":291,"cvssVersion":242,"severity":251,"isKev":4,"epssScore":572,"cisaVulnName":573,"cisaDateAdded":538,"cisaShortDescription":574,"cisaRequiredAction":359},"CVE-2013-0640","Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document, as exploited in the wild in February 2013.","2013-02-14",0.86979,"Adobe Reader and Acrobat Memory Corruption Vulnerability","An memory corruption vulnerability exists in the acroform.dll in Adobe Reader that allows an attacker to perform remote code execution.",{"cveId":576,"description":577,"publishedDate":571,"cvssScore":291,"cvssVersion":242,"severity":251,"isKev":4,"epssScore":578,"cisaVulnName":579,"cisaDateAdded":538,"cisaShortDescription":580,"cisaRequiredAction":359},"CVE-2013-0641","Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allows remote attackers to execute arbitrary code via a crafted PDF document, as exploited in the wild in February 2013.",0.32449,"Adobe Reader Buffer Overflow Vulnerability","A buffer overflow vulnerability exists in Adobe Reader which allows an attacker to perform remote code execution.",{"cveId":582,"description":583,"publishedDate":584,"cvssScore":291,"cvssVersion":242,"severity":251,"isKev":4,"epssScore":585,"cisaVulnName":557,"cisaDateAdded":538,"cisaShortDescription":586,"cisaRequiredAction":375},"CVE-2015-7645","Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.535 on Linux allows remote attackers to execute arbitrary code via a crafted SWF file, as exploited in the wild in October 2015.","2015-10-15",0.68396,"Adobe Flash Player allows remote attackers to execute arbitrary code via a crafted SWF file.",{"cveId":588,"description":589,"publishedDate":590,"cvssScore":291,"cvssVersion":242,"severity":251,"isKev":4,"epssScore":591,"cisaVulnName":557,"cisaDateAdded":538,"cisaShortDescription":592,"cisaRequiredAction":375},"CVE-2012-1535","Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on Linux allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted SWF content, as exploited in the wild in August 2012 with SWF content in a Word document.","2012-08-15",0.70384,"Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute arbitrary code or cause a denial of service via crafted SWF content.",{"cveId":594,"description":595,"publishedDate":596,"cvssScore":597,"cvssVersion":242,"severity":269,"isKev":4,"epssScore":598,"cisaVulnName":599,"cisaDateAdded":538,"cisaShortDescription":600,"cisaRequiredAction":359},"CVE-2013-1675","Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 do not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.","2013-05-16",6.5,0.06696,"Mozilla Firefox Information Disclosure Vulnerability","Mozilla Firefox does not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.",{"cveId":602,"description":603,"publishedDate":604,"cvssScore":605,"cvssVersion":242,"severity":269,"isKev":4,"epssScore":606,"cisaVulnName":607,"cisaDateAdded":538,"cisaShortDescription":608,"cisaRequiredAction":359},"CVE-2015-4902","Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment.","2015-10-22",5.3,0.13354,"Oracle Java SE Integrity Check Vulnerability","Unspecified vulnerability in Oracle Java SE allows remote attackers to affect integrity via Unknown vectors related to deployment.",{"cveId":272,"description":273,"publishedDate":274,"cvssScore":256,"cvssVersion":242,"severity":257,"isKev":4,"epssScore":275,"cisaVulnName":610,"cisaDateAdded":611,"cisaShortDescription":612,"cisaRequiredAction":359},"GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability","2022-01-28","GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code. This CVE correctly remediates the vulnerability in CVE-2014-6271.",{"cveId":253,"description":254,"publishedDate":255,"cvssScore":256,"cvssVersion":242,"severity":257,"isKev":4,"epssScore":245,"cisaVulnName":610,"cisaDateAdded":611,"cisaShortDescription":614,"cisaRequiredAction":359},"GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code.",{"cveId":616,"description":617,"publishedDate":618,"cvssScore":256,"cvssVersion":242,"severity":257,"isKev":4,"epssScore":619,"cisaVulnName":620,"cisaDateAdded":621,"cisaShortDescription":622,"cisaRequiredAction":359},"CVE-2020-11651","An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class does not properly validate method calls. This allows a remote user to access some methods without authentication. These methods can be used to retrieve user tokens from the salt master and\u002For run arbitrary commands on salt minions.","2020-04-30",0.96405,"SaltStack Salt Authentication Bypass Vulnerability","2021-11-03","SaltStack Salt contains an authentication bypass vulnerability in the salt-master process ClearFuncs due to improperly validating method calls. The vulnerability allows a remote user to access some methods without authentication, which can be used to retrieve user tokens from the salt master and\u002For run commands on salt minions. Salt users who follow fundamental internet security guidelines and best practices are not affected by this vulnerability.",{"cveId":624,"description":625,"publishedDate":626,"cvssScore":256,"cvssVersion":242,"severity":257,"isKev":4,"epssScore":627,"cisaVulnName":628,"cisaDateAdded":621,"cisaShortDescription":629,"cisaRequiredAction":359},"CVE-2020-16846","An issue was discovered in SaltStack Salt through 3002. Sending crafted web requests to the Salt API, with the SSH client enabled, can result in shell injection.","2020-11-06",0.99585,"SaltStack Salt Shell Injection Vulnerability","SaltStack Salt allows an unauthenticated user with network access to the Salt API to use shell injections to run code on the Salt API using the SSH client. This vulnerability affects any users running the Salt API.",{"cveId":631,"description":632,"publishedDate":633,"cvssScore":634,"cvssVersion":242,"severity":257,"isKev":4,"epssScore":635,"cisaVulnName":636,"cisaDateAdded":621,"cisaShortDescription":637,"cisaRequiredAction":359},"CVE-2020-15999","Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.","2020-11-03",9.6,0.5063,"Google Chrome FreeType Heap Buffer Overflow Vulnerability","Google Chrome uses FreeType, an open-source software library to render fonts, which contains a heap buffer overflow vulnerability in the function Load_SBit_Png when processing PNG images embedded into fonts. This vulnerability is part of an exploit chain with CVE-2020-17087 on Windows and CVE-2020-16010 on Android.",{"cveId":639,"description":640,"publishedDate":633,"cvssScore":285,"cvssVersion":242,"severity":251,"isKev":4,"epssScore":641,"cisaVulnName":642,"cisaDateAdded":621,"cisaShortDescription":643,"cisaRequiredAction":359},"CVE-2020-16009","Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",0.48574,"Google Chromium V8 Type Confusion Vulnerability","Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":645,"description":646,"publishedDate":647,"cvssScore":291,"cvssVersion":242,"severity":251,"isKev":4,"epssScore":648,"cisaVulnName":649,"cisaDateAdded":621,"cisaShortDescription":650,"cisaRequiredAction":359},"CVE-2019-0211","In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute arbitrary code with the privileges of the parent process (usually root) by manipulating the scoreboard. Non-Unix systems are not affected.","2019-04-08",0.65005,"Apache HTTP Server Privilege Escalation Vulnerability","Apache HTTP Server, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute code with the privileges of the parent process (usually root) by manipulating the scoreboard.",{"cveId":652,"description":653,"publishedDate":618,"cvssScore":597,"cvssVersion":242,"severity":269,"isKev":4,"epssScore":654,"cisaVulnName":655,"cisaDateAdded":621,"cisaShortDescription":656,"cisaRequiredAction":359},"CVE-2020-11652","An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class allows access to some methods that improperly sanitize paths. These methods allow arbitrary directory access to authenticated users.",0.86063,"SaltStack Salt Path Traversal Vulnerability","SaltStack Salt contains a path traversal vulnerability in the salt-master process ClearFuncs which allows directory access to authenticated users. Salt users who follow fundamental internet security guidelines and best practices are not affected by this vulnerability.",{"cveId":658,"description":659,"publishedDate":660,"cvssScore":661,"cvssVersion":242,"severity":269,"isKev":4,"epssScore":662,"cisaVulnName":663,"cisaDateAdded":621,"cisaShortDescription":664,"cisaRequiredAction":359},"CVE-2020-1472","An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protocol (MS-NRPC). An attacker who successfully exploited the vulnerability could run a specially crafted application on a device on the network.\nTo exploit the vulnerability, an unauthenticated attacker would be required to use MS-NRPC to connect to a domain controller to obtain domain administrator access.\nMicrosoft is addressing the vulnerability in a phased two-part rollout. These updates address the vulnerability by modifying how Netlogon handles the usage of Netlogon secure channels.\nFor guidelines on how to manage the changes required for this vulnerability and more information on the phased rollout, see  How to manage the changes in Netlogon secure channel connections associated with CVE-2020-1472 (updated September 28, 2020).\nWhen the second phase of Windows updates become available in Q1 2021, customers will be notified via a revision to this security vulnerability. If you wish to be notified when these updates are released, we recommend that you register for the security notifications mailer to be alerted of content changes to this advisory. See Microsoft Technical Security Notifications.\n","2020-08-17",5.5,0.99512,"Microsoft Netlogon Privilege Escalation Vulnerability","Microsoft's Netlogon Remote Protocol (MS-NRPC) contains a privilege escalation vulnerability when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller. An attacker who successfully exploits the vulnerability could run a specially crafted application on a device on the network. The vulnerability is also known under the moniker of Zerologon.",{"cveId":666,"description":667,"publishedDate":344,"cvssScore":661,"cvssVersion":242,"severity":269,"isKev":4,"epssScore":668,"cisaVulnName":669,"cisaDateAdded":621,"cisaShortDescription":670,"cisaRequiredAction":359},"CVE-2016-3718","The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image.",0.76897,"ImageMagick Server-Side Request Forgery (SSRF) Vulnerability","ImageMagick contains an unspecified vulnerability that allows attackers to perform server-side request forgery (SSRF) via a crafted image.",{"cveId":672,"description":673,"publishedDate":344,"cvssScore":661,"cvssVersion":242,"severity":269,"isKev":4,"epssScore":674,"cisaVulnName":675,"cisaDateAdded":621,"cisaShortDescription":676,"cisaRequiredAction":359},"CVE-2016-3715","The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.",0.75383,"ImageMagick Arbitrary File Deletion Vulnerability","ImageMagick contains an unspecified vulnerability that could allow users to delete files by using ImageMagick's 'ephemeral' pseudo protocol, which deletes files after reading.",[678,679,680,681,682,683,684,685,686,687],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":21,"last_cve_update":13},{"id":23,"product_name":8,"version_count":24,"cve_count":25,"kev_count":26,"last_cve_update":27},{"id":29,"product_name":30,"version_count":31,"cve_count":32,"kev_count":33,"last_cve_update":34},{"id":36,"product_name":37,"version_count":31,"cve_count":38,"kev_count":39,"last_cve_update":40},{"id":42,"product_name":43,"version_count":31,"cve_count":26,"kev_count":44,"last_cve_update":45},{"id":47,"product_name":48,"version_count":39,"cve_count":49,"kev_count":39,"last_cve_update":50},{"id":52,"product_name":53,"version_count":54,"cve_count":55,"kev_count":39,"last_cve_update":56},{"id":58,"product_name":59,"version_count":11,"cve_count":60,"kev_count":39,"last_cve_update":61},{"id":63,"product_name":64,"version_count":65,"cve_count":66,"kev_count":39,"last_cve_update":67},{"id":69,"product_name":70,"version_count":71,"cve_count":72,"kev_count":39,"last_cve_update":73},{"title":689,"metaDescription":690,"keywords":691,"structuredData":692},"Opensuse - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Opensuse covering 51 products with 3288 tracked vulnerabilities including 23 critical and 27 high-severity issues and 57 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Opensuse vulnerabilities, Opensuse security, Opensuse CVE, Opensuse threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking, Opensuse KEV, Opensuse exploited vulnerabilities",{"@context":693,"@type":694,"name":695,"description":690,"url":696},"https:\u002F\u002Fschema.org","Organization","Opensuse","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fopensuse",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":698,"apiVersion":699},"2026-10-28T14:24:11.005Z","3.0"]