Latest CVE Feed
-
5.5
MEDIUMCVE-2002-1914
dump 0.4 b10 through b29 allows local users to cause a denial of service (execution prevention) by using flock() to lock the /etc/dumpdates file.... Read more
Affected Products : dump- EPSS Score: %0.05
- Published: Dec. 31, 2002
- Modified: Apr. 03, 2025
-
5.5
MEDIUMCVE-2021-29650
An issue was discovered in the Linux kernel before 5.11.11. The netfilter subsystem allows attackers to cause a denial of service (panic) because net/netfilter/x_tables.c and include/linux/netfilter/x_tables.h lack a full memory barrier upon the assignmen... Read more
- EPSS Score: %0.02
- Published: Mar. 30, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-29648
An issue was discovered in the Linux kernel before 5.11.11. The BPF subsystem does not properly consider that resolved_ids and resolved_sizes are intentionally uninitialized in the vmlinux BPF Type Format (BTF), which can cause a system crash upon an unex... Read more
- EPSS Score: %0.05
- Published: Mar. 30, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-29646
An issue was discovered in the Linux kernel before 5.11.11. tipc_nl_retrieve_key in net/tipc/node.c does not properly validate certain data sizes, aka CID-0217ed2848e8.... Read more
- EPSS Score: %0.08
- Published: Mar. 30, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-28950
An issue was discovered in fs/fuse/fuse_i.h in the Linux kernel before 5.11.8. A "stall on CPU" can occur because a retry loop continually finds the same bad inode, aka CID-775c5033a0d1.... Read more
- EPSS Score: %0.02
- Published: Mar. 20, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-23215
An integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEXR in versions before 3.0.1. An attacker could use this flaw to crash an application compiled with OpenEXR.... Read more
- EPSS Score: %0.09
- Published: Jun. 08, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2001-1391
Off-by-one vulnerability in CPIA driver of Linux kernel before 2.2.19 allows users to modify kernel memory.... Read more
- EPSS Score: %0.09
- Published: Apr. 17, 2001
- Modified: Apr. 03, 2025
-
5.5
MEDIUMCVE-2021-20255
A stack overflow via an infinite recursion vulnerability was found in the eepro100 i8255x device emulator of QEMU. This issue occurs while processing controller commands due to a DMA reentry issue. This flaw allows a guest user or process to consume CPU c... Read more
- EPSS Score: %0.04
- Published: Mar. 09, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-20219
A denial of service vulnerability was found in n_tty_receive_char_special in drivers/tty/n_tty.c of the Linux kernel. In this flaw a local attacker with a normal user privilege could delay the loop (due to a changing ldata->read_head, and a missing sanity... Read more
Affected Products : linux_kernel- EPSS Score: %0.05
- Published: Mar. 23, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-26805
Buffer Overflow in tsMuxer 2.6.16 allows attackers to cause a Denial of Service (DoS) by running the application with a malicious WAV file.... Read more
Affected Products : tsmuxer- EPSS Score: %0.19
- Published: Apr. 14, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-20176
A divide-by-zero flaw was found in ImageMagick 6.9.11-57 and 7.0.10-57 in gem.c. This flaw allows an attacker who submits a crafted file that is processed by ImageMagick to trigger undefined behavior through a division by zero. The highest threat from thi... Read more
- EPSS Score: %0.07
- Published: Feb. 06, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-1998
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocol... Read more
Affected Products : fedora active_iq_unified_manager mysql oncommand_insight oncommand_workflow_automation snapcenter mysql_server- EPSS Score: %0.35
- Published: Jan. 20, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2000-1178
Joe text editor follows symbolic links when creating a rescue copy called DEADJOE during an abnormal exit, which allows local users to overwrite the files of other users whose joe session crashes.... Read more
- EPSS Score: %0.14
- Published: Jan. 09, 2001
- Modified: Apr. 03, 2025
-
5.5
MEDIUMCVE-2021-26254
Out of bounds read for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially enable denial of service via local access.... Read more
Affected Products : wi-fi_6_ax201_firmware wi-fi_6_ax200_firmware killer_ac_1550_firmware killer_wi-fi_6_ax1650_firmware killer_wi-fi_6e_ax1675_firmware proset_wi-fi_6e_ax210_firmware killer_wi-fi_6e_ax1690_firmware wi-fi_6e_ax411_firmware wi-fi_6e_ax211_firmware killer_wi-fi_6e_ax1675 +8 more products- EPSS Score: %0.13
- Published: Aug. 18, 2022
- Modified: May. 05, 2025
-
5.5
MEDIUMCVE-2020-36691
An issue was discovered in the Linux kernel before 5.8. lib/nlattr.c allows attackers to cause a denial of service (unbounded recursion) via a nested Netlink policy with a back reference.... Read more
Affected Products : linux_kernel- EPSS Score: %0.01
- Published: Mar. 24, 2023
- Modified: Feb. 21, 2025
-
5.5
MEDIUMCVE-2020-35534
In LibRaw, there is a memory corruption vulnerability within the "crxFreeSubbandData()" function (libraw\src\decoders\crx.cpp) when processing cr3 files.... Read more
Affected Products : libraw- EPSS Score: %0.03
- Published: Sep. 01, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2020-35507
There's a flaw in bfd_pef_parse_function_stubs of bfd/pef.c in binutils in versions prior to 2.34 which could allow an attacker who is able to submit a crafted file to be processed by objdump to cause a NULL pointer dereference. The greatest threat of thi... Read more
- EPSS Score: %0.08
- Published: Jan. 04, 2021
- Modified: Nov. 21, 2024
-
5.4
MEDIUMCVE-2017-1282
IBM Content Navigator & CMIS 2.0 and 3.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within ... Read more
Affected Products : content_navigator- EPSS Score: %0.23
- Published: May. 22, 2017
- Modified: Apr. 20, 2025
-
5.4
MEDIUMCVE-2023-48114
SmarterTools SmarterMail 8495 through 8664 before 8747 allows stored XSS by using image/svg+xml and an uploaded SVG document. This occurs because the application tries to allow youtube.com URLs, but actually allows youtube.com followed by an @ character a... Read more
Affected Products : smartermail- EPSS Score: %0.17
- Published: Dec. 21, 2023
- Modified: Nov. 21, 2024
-
5.4
MEDIUMCVE-2018-17830
The $args variable in addons/mediapool/pages/index.php in REDAXO 5.6.2 is not effectively filtered, because names are not restricted (only values are restricted). The attacker can insert XSS payloads via an index.php?page=mediapool/media&opener_input_fiel... Read more
Affected Products : redaxo- EPSS Score: %0.21
- Published: Oct. 01, 2018
- Modified: Nov. 21, 2024