Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2015-3246 KEV |
|
libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the...
libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the...
|
| CVE-2026-31431 KEV |
|
[KEV] Vulnerability in Linux redhat (CVE-2026-31431)
vulnerability in Linux redhat (CVE-2026-31431). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2019-11050 |
|
Out-of-Bounds Read in canonical (CVE-2019-11050)
vulnerability in canonical (CVE-2019-11050). Risk of unauthorized operations or information disclosure.
|
| CVE-2019-11046 |
|
Out-of-Bounds Read in debian (CVE-2019-11046)
vulnerability in debian (CVE-2019-11046). Risk of unauthorized operations or information disclosure.
|
| CVE-2019-11045 |
|
Vulnerability in fedoraproject (CVE-2019-11045)
vulnerability in fedoraproject (CVE-2019-11045). Risk of unauthorized operations or information disclosure.
|
| CVE-2015-2808 |
|
Vulnerability in oracle (CVE-2015-2808)
vulnerability in oracle (CVE-2015-2808). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-1938 KEV |
|
[KEV] Privilege Escalation in org.apache.tomcat.embed:tomcat-embed-core (CVE-2020-1938)
vulnerability in org.apache.tomcat.embed:tomcat-embed-core (CVE-2020-1938). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `7.0.100` or later.
|
| CVE-2020-13935 |
|
Vulnerability in org.apache.tomcat:tomcat (CVE-2020-13935)
vulnerability in org.apache.tomcat:tomcat (CVE-2020-13935). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.0.105` or later.
|
| CVE-2020-13934 |
|
Vulnerability in org.apache.tomcat:tomcat (CVE-2020-13934)
vulnerability in org.apache.tomcat:tomcat (CVE-2020-13934). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.5.56` or later.
|
| CVE-2017-14491 |
|
Out-of-Bounds Write in platform/external/dnsmasq (CVE-2017-14491)
out-of-bounds write in platform/external/dnsmasq (CVE-2017-14491). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `11:2021-03-01` or later.
|
| CVE-2020-9484 |
|
Unsafe Deserialization in org.apache.tomcat:tomcat-catalina (CVE-2020-9484)
vulnerability in org.apache.tomcat:tomcat-catalina (CVE-2020-9484). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `7.0.104` or later.
|
| CVE-2020-10683 |
|
XXE (XML External Entity) in dom4j-project (CVE-2020-10683)
vulnerability in dom4j-project (CVE-2020-10683). Successful exploitation can lead to full system takeover.
|
| CVE-2019-17569 |
|
Vulnerability in apache (CVE-2019-17569)
vulnerability in apache (CVE-2019-17569). Risk of unauthorized operations or information disclosure.
|
| CVE-2019-17571 |
|
Unsafe Deserialization in log4j:log4j (CVE-2019-17571)
vulnerability in log4j:log4j (CVE-2019-17571). Successful exploitation can lead to full system takeover.
|
| CVE-2019-11135 |
|
Vulnerability in opensuse (CVE-2019-11135)
vulnerability in opensuse (CVE-2019-11135). Confidential information can be exposed externally.
|
| CVE-2019-10086 |
|
Unsafe Deserialization in apache (CVE-2019-10086)
vulnerability in apache (CVE-2019-10086). Risk of unauthorized operations or information disclosure.
|
| CVE-2019-15213 |
|
Use-After-Free in c (CVE-2019-15213)
vulnerability in c (CVE-2019-15213). Risk of unauthorized operations or information disclosure.
|
| CVE-2019-13118 |
|
Vulnerability in nokogiri (CVE-2019-13118)
vulnerability in nokogiri (CVE-2019-13118). Confidential information can be exposed externally. Exploitable via ``numbers.c``. Mitigation: upgrade to `1.10.5` or later.
|
| CVE-2019-13117 |
|
Vulnerability in nokogiri (CVE-2019-13117)
vulnerability in nokogiri (CVE-2019-13117). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.10.5` or later.
|
| CVE-2019-11068 |
|
Vulnerability in nokogiri (CVE-2019-11068)
vulnerability in nokogiri (CVE-2019-11068). Successful exploitation can lead to full system takeover. Exploitable via ``xsltCheckRead``. Mitigation: upgrade to `1.10.3` or later.
|
| CVE-2019-7317 |
|
Use-After-Free in c (CVE-2019-7317)
vulnerability in c (CVE-2019-7317). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-5753 |
|
Vulnerability in intel (CVE-2017-5753)
vulnerability in intel (CVE-2017-5753). Confidential information can be exposed externally.
|
| CVE-2017-17806 |
|
Out-of-Bounds Write in c (CVE-2017-17806)
out-of-bounds write in c (CVE-2017-17806). Successful exploitation can lead to full system takeover.
|
| CVE-2017-17805 |
|
Vulnerability in c (CVE-2017-17805)
vulnerability in c (CVE-2017-17805). Successful exploitation can lead to full system takeover.
|
| CVE-2017-17740 |
|
Buffer Overflow in c (CVE-2017-17740)
vulnerability in c (CVE-2017-17740). Risk of unauthorized operations or information disclosure.
|
| CVE-2015-5219 |
|
Vulnerability in dos (CVE-2015-5219)
vulnerability in dos (CVE-2015-5219). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-1000366 |
|
Buffer Overflow in redhat (CVE-2017-1000366)
vulnerability in redhat (CVE-2017-1000366). Successful exploitation can lead to full system takeover.
|
| CVE-2017-8386 |
|
Vulnerability in git (CVE-2017-8386)
vulnerability in git (CVE-2017-8386). Successful exploitation can lead to full system takeover.
|
| CVE-2016-9841 |
|
Vulnerability in c (CVE-2016-9841)
vulnerability in c (CVE-2016-9841). Successful exploitation can lead to full system takeover.
|
| CVE-2016-9843 |
|
Vulnerability in c (CVE-2016-9843)
vulnerability in c (CVE-2016-9843). Successful exploitation can lead to full system takeover.
|
| CVE-2016-9842 |
|
Vulnerability in c (CVE-2016-9842)
vulnerability in c (CVE-2016-9842). Successful exploitation can lead to full system takeover.
|
| CVE-2016-9840 |
|
Vulnerability in c (CVE-2016-9840)
vulnerability in c (CVE-2016-9840). Successful exploitation can lead to full system takeover.
|
| CVE-2016-5178 |
|
Vulnerability in dos (CVE-2016-5178)
vulnerability in dos (CVE-2016-5178). Successful exploitation can lead to full system takeover.
|
| CVE-2016-5177 |
|
Use-After-Free in dos (CVE-2016-5177)
vulnerability in dos (CVE-2016-5177). Successful exploitation can lead to full system takeover.
|
| CVE-2016-4068 |
|
Cross-Site Scripting (XSS) in opensuse (CVE-2016-4068)
cross-site scripting in opensuse (CVE-2016-4068). Risk of unauthorized operations or information disclosure.
|
| CVE-2015-8864 |
|
Cross-Site Scripting (XSS) in opensuse (CVE-2015-8864)
cross-site scripting in opensuse (CVE-2015-8864). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-5337 |
|
Buffer Overflow in opensuse (CVE-2017-5337)
vulnerability in opensuse (CVE-2017-5337). Successful exploitation can lead to full system takeover.
|
| CVE-2017-5336 |
|
Buffer Overflow in c (CVE-2017-5336)
vulnerability in c (CVE-2017-5336). Successful exploitation can lead to full system takeover.
|
| CVE-2017-5335 |
|
Out-of-Bounds Read in c (CVE-2017-5335)
vulnerability in c (CVE-2017-5335). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-5334 |
|
Vulnerability in opensuse (CVE-2017-5334)
vulnerability in opensuse (CVE-2017-5334). Successful exploitation can lead to full system takeover.
|
| CVE-2016-10051 |
|
Use-After-Free in c (CVE-2016-10051)
vulnerability in c (CVE-2016-10051). Successful exploitation can lead to full system takeover.
|
| CVE-2016-10050 |
|
Buffer Overflow in c (CVE-2016-10050)
vulnerability in c (CVE-2016-10050). Successful exploitation can lead to full system takeover.
|
| CVE-2017-5930 |
|
Vulnerability in opensuse (CVE-2017-5930)
vulnerability in opensuse (CVE-2017-5930). Risk of unauthorized operations or information disclosure.
|
| CVE-2014-9849 |
|
The png coder in ImageMagick allows remote attackers to cause a denial of service (crash).
The png coder in ImageMagick allows remote attackers to cause a denial of service (crash).
|
| CVE-2014-9847 |
|
The jng decoder in ImageMagick 6.8.9.9 allows remote attackers to have an unspecified impact.
The jng decoder in ImageMagick 6.8.9.9 allows remote attackers to have an unspecified impact.
|
| CVE-2014-9848 |
|
Vulnerability in dos (CVE-2014-9848)
vulnerability in dos (CVE-2014-9848). Risk of unauthorized operations or information disclosure.
|
| CVE-2014-9850 |
|
Vulnerability in dos (CVE-2014-9850)
vulnerability in dos (CVE-2014-9850). Risk of unauthorized operations or information disclosure.
|
| CVE-2014-9851 |
|
ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (application crash).
ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (application crash).
|
| CVE-2014-9846 |
|
Buffer Overflow in c (CVE-2014-9846)
vulnerability in c (CVE-2014-9846). Successful exploitation can lead to full system takeover.
|
| CVE-2014-9845 |
|
Buffer Overflow in c (CVE-2014-9845)
vulnerability in c (CVE-2014-9845). Risk of unauthorized operations or information disclosure.
|