Vulnerability index

Browse CVEs

3,919 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Debian Linux MEDIUM 5.5
CVE-2020-27760

In `GammaImage()` of /MagickCore/enhance.c, depending on the `gamma` value, it's possible to trigger a divide-by-zero condition when a crafted input …

Fix: 6.9.10-68 / 7.0.8-68+
Fix from $1,600 2020-12-03
Debian Linux MEDIUM 5.5
CVE-2020-27762

A flaw was found in ImageMagick in coders/hdr.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined beha…

Fix: 6.9.10-68 / 7.0.8-68+
Fix from $1,600 2020-12-03
Debian Linux HIGH 7.4
CVE-2020-25638

A flaw was found in hibernate-core in versions prior to and including 5.4.23.Final. A SQL injection in the implementation of the JPA Criteria API can…

Fix: 5.3.20 / 5.4.24+
Fix from $1,950 2020-12-02
Debian Linux HIGH 7.5
CVE-2020-27813

An integer overflow vulnerability exists with the length of websocket frames received via a websocket connection. An attacker would use this flaw to …

Fix: 1.4.1+
Fix from $1,950 2020-12-02
Debian Linux HIGH 7.8
CVE-2020-29394

A buffer overflow in the dlt_filter_load function in dlt_common.c from dlt-daemon through 2.18.5 (GENIVI Diagnostic Log and Trace) allows arbitrary c…

Fix: after 2.18.5
Fix from $1,950 2020-11-30
Debian Linux CRITICAL 9.8
CVE-2020-28926EPSS 13%

ReadyMedia (aka MiniDLNA) before versions 1.3.0 allows remote code execution. Sending a malicious UPnP HTTP request to the miniDLNA service using HTT…

Fix: 1.3.0+
Fix from $2,300 2020-11-30
Debian Linux MEDIUM 5.0
CVE-2020-25624

hw/usb/hcd-ohci.c in QEMU 5.0.0 has a stack-based buffer over-read via values obtained from the host controller driver.

Patch available
Fix from $1,600 2020-11-30
Debian Linux CRITICAL 9.8
CVE-2020-27745

Slurm before 19.05.8 and 20.x before 20.02.6 has an RPC Buffer Overflow in the PMIx MPI plugin.

Fix: 19.05.8 / 20.02.6+
Fix from $2,300 2020-11-27
Debian Linux MEDIUM 6.4
CVE-2020-25651

A flaw was found in the SPICE file transfer protocol. File data from the host system can end up in full or in parts in the client connection of an il…

Fix: after 0.20.0
Fix from $1,600 2020-11-26
Debian Linux MEDIUM 6.3
CVE-2020-25653

A race condition vulnerability was found in the way the spice-vdagentd daemon handled new client connections. This flaw may allow an unprivileged loc…

Fix: after 0.20.0
Fix from $1,600 2020-11-26
Debian Linux MEDIUM 5.5
CVE-2020-25652

A flaw was found in the spice-vdagentd daemon, where it did not properly handle client connections that can be established via the UNIX domain socket…

Fix: after 0.20.0
Fix from $1,600 2020-11-26
Debian Linux MEDIUM 5.5
CVE-2020-25650

A flaw was found in the way the spice-vdagentd daemon handled file transfers from the host system to the virtual machine. Any unprivileged local gues…

Fix: after 0.20.0
Fix from $1,600 2020-11-25
Debian Linux HIGH 8.7
CVE-2020-26237

Highlight.js is a syntax highlighter written in JavaScript. Highlight.js versions before 9.18.2 and 10.1.2 are vulnerable to Prototype Pollution. A m…

Fix: 9.18.2 / 10.1.2+
Fix from $1,950 2020-11-24
Debian Linux HIGH 7.2
CVE-2020-25654

An ACL bypass flaw was found in pacemaker. An attacker having a local account on the cluster and in the haclient group could use IPC communication wi…

Fix: 1.1.23 / 2.0.3+
Fix from $1,950 2020-11-24
Debian Linux MEDIUM 5.5
CVE-2020-28928

In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by a…

Fix: after 1.2.1
Fix from $1,600 2020-11-24
Debian Linux CRITICAL 9.8
CVE-2020-28984

prive/formulaires/configurer_preferences.php in SPIP before 3.2.8 does not properly validate the couleur, display, display_navigation, display_outils…

Fix: 3.2.8+
Fix from $2,300 2020-11-23
Debian Linux MEDIUM 5.3
CVE-2020-28896

Mutt before 2.0.2 and NeoMutt before 2020-11-20 did not ensure that $ssl_force_tls was processed if an IMAP server's initial server response was inva…

Fix: 2.0.2 / 2020-11-20+
Fix from $1,600 2020-11-23
Debian Linux HIGH 8.0
CVE-2019-14586

Use after free vulnerability in EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or d…

Mitigation only
Fix from $1,950 2020-11-23
Debian Linux MEDIUM 6.5
CVE-2019-14587

Logic issue EDK II may allow an unauthenticated user to potentially enable denial of service via adjacent access.

No fix yet
Fix from $1,600 2020-11-23
Debian Linux MEDIUM 5.7
CVE-2020-0569

Out of bounds write in Intel(R) PROSet/Wireless WiFi products on Windows 10 may allow an authenticated user to potentially enable denial of service v…

Fix: 21.70+
Fix from $1,600 2020-11-23
Debian Linux HIGH 7.8
CVE-2019-14563

Integer truncation in EDK II may allow an authenticated user to potentially enable escalation of privilege via local access.

Mitigation only
Fix from $1,950 2020-11-23
Debian Linux HIGH 7.8
CVE-2019-14575

Logic issue in DxeImageVerificationHandler() for EDK II may allow an authenticated user to potentially enable escalation of privilege via local acces…

Mitigation only
Fix from $1,950 2020-11-23
Debian Linux MEDIUM 5.5
CVE-2019-14562

Integer overflow in DxeImageVerificationHandler() EDK II may allow an authenticated user to potentially enable denial of service via local access.

Mitigation only
Fix from $1,600 2020-11-23
Debian Linux HIGH 7.8
CVE-2020-20740

PDFResurrect before 0.20 lack of header validation checks causes heap-buffer-overflow in pdf_get_version().

Fix: 0.20+
Fix from $1,950 2020-11-20
Debian Linux MEDIUM 5.3
CVE-2020-20739

im_vips2dz in /libvips/libvips/deprecated/im_vips2dz.c in libvips before 8.8.2 has an uninitialized variable which may cause the leakage of remote se…

Fix: 8.8.2+
Fix from $1,600 2020-11-20
Debian Linux HIGH 7.8
CVE-2020-19667

Stack-based buffer overflow and unconditional jump in ReadXPMImage in coders/xpm.c in ImageMagick 7.0.10-7.

No fix yet
Fix from $1,950 2020-11-20
Debian Linux CRITICAL 9.8
CVE-2019-20933EPSS 31%

InfluxDB before 1.7.6 has an authentication bypass vulnerability in the authenticate function in services/httpd/handler.go because a JWT token may ha…

Fix: 1.7.6+
Fix from $2,300 2020-11-19
Debian Linux MEDIUM 6.1
CVE-2020-26215

Jupyter Notebook before version 6.1.5 has an Open redirect vulnerability. A maliciously crafted link to a notebook server could redirect the browser …

Fix: 6.1.5+
Fix from $1,600 2020-11-18
Debian Linux HIGH 8.8
CVE-2020-26217EPSS 85%

XStream before version 1.4.14 is vulnerable to Remote Code Execution.The vulnerability may allow a remote attacker to run arbitrary shell commands on…

Fix: 1.4.14 / 5.15.14+
Fix from $1,950 2020-11-16
Debian Linux MEDIUM 6.1
CVE-2020-25706

A cross-site scripting (XSS) vulnerability exists in templates_import.php (Cacti 1.2.13) due to Improper escaping of error message during template im…

Patch available
Fix from $1,600 2020-11-12