CVE Finder & Vulnerability Intelligence
Search CVE records by CVE ID, product or keyword and filter by severity and vendor. CVSS scores, CISA KEV status and fixes, every entry linked to its official source.
Linux Linux Kernel >= 2.6.38, < 5.10.245
Linux Kernel Race Condition Vulnerability
In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg – Disallow concurrent writes in af_alg_sendmsg Issuing two writes to the same af_alg socket is bogus as the data will…
Linux Linux Kernel >= 6.0, < 6.1.149
Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability
In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rx_list Each recvmsg() call must process either – only contiguous DATA records (any number…
Tukaani Xz 5.6.0
Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. Through a series of complex obfuscations, the liblzma build process extracts a prebuilt object file from a disguised…
Strapi Strapi >= 3.2.1, < 4.8.0
Strapi Cleartext Storage of Sensitive Information Vulnerability
Strapi through 4.5.5 allows attackers (with access to the admin panel) to discover sensitive user details by exploiting the query filter. The attacker can filter users by columns that contain sensitive information…
Onlyoffice Document Server < 5.6.3
ONLYOFFICE Docs Server Path Traversal Vulnerability
Directory traversal with remote code execution can occur in /upload in ONLYOFFICE Document Server before 5.6.3, when JWT is used, via a /.. sequence in an image upload parameter.
Huawei Agile Controller-campus Firmware v100r002c00
Apache Struts Command Injection Vulnerability
Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attackers to execute arbitrary code via method: prefix, related to chained expressions.
Juniper Junos < 12.1
ISC BIND Data Processing Errors Vulnerability
named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.
Fedoraproject Fedora 20
ProFTPD Improper Access Control Vulnerability
The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands.