Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 24 h
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2022-0391 | 7.5 high | 9.0% | python, netapp, active_iq_unified_manager, hci | A flaw was found in Python, specifically within the urllib.parse module. This module helps break Uniform Resource Locator (URL) strings into components. The issue involves how the urlparse method does not sanitize input and allows characters like '\r' and '\n' in the URL path. This flaw allows an attacker to input a crafted URL, leading to injection attacks. This flaw affects Python versions prior to 3.10.0b1, 3.9.5, 3.8.11, 3.7.11 and 3.6.14. | 14 Oct |
| CVE-2021-33910 | 5.5 medium | 9.0% | systemd_project, fedoraproject, systemd, fedora, debian_linux | basic/unit-name.c in systemd prior to 246.15, 247.8, 248.5, and 249.1 has a Memory Allocation with an Excessive Size Value (involving strdupa and alloca for a pathname controlled by a local attacker) that results in an operating system crash. | 14 Oct |
| CVE-2020-13956 | 5.3 medium | 9.0% | apache, quarkus, httpclient, data_integrator | Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution. | 8 Oct |
| CVE-2020-1935 | 4.8 medium | 9.0% | apache, debian, tomcat, debian_linux, ubuntu_linux | In Apache Tomcat 9.0.0.M1 to 9.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99 the HTTP header parsing code used an approach to end-of-line parsing that allowed some invalid HTTP headers to be parsed as valid. This led to a possibility of HTTP Request Smuggling if Tomcat was located behind a reverse proxy that incorrectly handled the invalid Transfer-Encoding header in a particular manner. Such a reverse proxy is considered unlikely. | 8 Oct |
| CVE-2017-15095 | 9.8 critical | 8.0% | fasterxml, debian, jackson-databind, debian_linux, openshift_container_platform | A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper. This issue extends the previous flaw CVE-2017-7525 by blacklisting more classes that could be used maliciously. | 8 Oct |
| CVE-2016-9841 | 9.8 critical | 8.0% | zlib, opensuse, leap | inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic. | 8 Oct |
| CVE-2019-14379 | 9.8 critical | 8.0% | fasterxml, debian, jackson-databind, debian_linux, active_iq_unified_manager | SubTypeValidator.java in FasterXML jackson-databind before 2.9.9.2 mishandles default typing when ehcache is used (because of net.sf.ehcache.transaction.manager.DefaultTransactionManagerLookup), leading to remote code execution. | 8 Oct |
| CVE-2019-3862 | 9.1 critical | 8.0% | libssh2, fedoraproject, fedora, debian_linux | An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit status message and no payload are parsed. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory. | 14 Oct |
| CVE-2020-35491 | 8.1 high | 8.0% | fasterxml, netapp, jackson-databind, service_level_manager, debian_linux | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.SharedPoolDataSource. | 8 Oct |
| CVE-2020-14062 | 8.1 high | 8.0% | fasterxml, netapp, jackson-databind, active_iq_unified_manager, steelstore_cloud_integrated_storage | FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool (aka xalan2). | 8 Oct |
| CVE-2020-7595 | 7.5 high | 8.0% | xmlsoft, fedoraproject, libxml2, fedora, ubuntu_linux | xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation. | 14 Oct |
| CVE-2019-19926 | 7.5 high | 8.0% | sqlite, siemens, sinec_infrastructure_network_services, mysql_workbench | multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite() calls. NOTE: this vulnerability exists because of an incomplete fix for CVE-2019-19880. | 14 Oct |
| CVE-2016-6797 | 7.5 high | 8.0% | apache, oracle, tomcat, tekelec_platform_distribution, debian_linux | The ResourceLinkFactory implementation in Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 did not limit web application access to global JNDI resources to those resources explicitly linked to the web application. Therefore, it was possible for a web application to access any global JNDI resource whether an explicit ResourceLink had been configured or not. | 8 Oct |
| CVE-2016-6796 | 7.5 high | 8.0% | apache, debian, tomcat, debian_linux, oncommand_insight | A malicious web application running on Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 was able to bypass a configured SecurityManager via manipulation of the configuration parameters for the JSP Servlet. | 8 Oct |
| CVE-2022-32208 | 5.9 medium | 8.0% | haxx, fedoraproject, curl, fedora, debian_linux | When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures wrongly. This flaw makes it possible for a Man-In-The-Middle attack to go unnoticed and even allows it to inject data to the client. | 14 Oct |
| CVE-2016-0762 | 5.9 medium | 8.0% | apache, canonical, tomcat, ubuntu_linux, debian_linux | The Realm implementations in Apache Tomcat versions 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 did not process the supplied password if the supplied user name did not exist. This made a timing attack possible to determine valid user names. Note that the default configuration includes the LockOutRealm which makes exploitation of this vulnerability harder. | 8 Oct |
| CVE-2019-19646 | 9.8 critical | 7.0% | sqlite, siemens, sinec_infrastructure_network_services, tenable.sc | pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated columns. | 14 Oct |
| CVE-2019-5481 | 9.8 critical | 7.0% | haxx, fedoraproject, curl, fedora, cloud_backup | Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3. | 14 Oct |
| CVE-2021-22945 | 9.1 critical | 7.0% | haxx, fedoraproject, libcurl, fedora, cloud_backup | When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointer to an already freed memory area and both use that again in a subsequent call to send data and also free it *again*. | 14 Oct |
| CVE-2018-5968 | 8.1 high | 7.0% | fasterxml, debian, jackson-databind, debian_linux, openshift_container_platform | FasterXML jackson-databind through 2.8.11 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 and CVE-2017-17485 deserialization flaws. This is exploitable via two different gadgets that bypass a blacklist. | 8 Oct |
| CVE-2019-19925 | 7.5 high | 7.0% | sqlite, siemens, sinec_infrastructure_network_services, mysql_workbench | zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive. | 14 Oct |
| CVE-2019-19923 | 7.5 high | 7.0% | sqlite, siemens, sinec_infrastructure_network_services, mysql_workbench | flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. This can cause a NULL pointer dereference (or incorrect results). | 14 Oct |
| CVE-2019-19880 | 7.5 high | 7.0% | sqlite, netapp, cloud_backup, debian_linux | exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definitions are mishandled. | 14 Oct |
| CVE-2021-41079 | 7.5 high | 7.0% | apache, debian, tomcat, debian_linux, management_services_for_element_software_and_netapp_hci | Apache Tomcat 8.5.0 to 8.5.63, 9.0.0-M1 to 9.0.43 and 10.0.0-M1 to 10.0.2 did not properly validate incoming TLS packets. When Tomcat was configured to use NIO+OpenSSL or NIO2+OpenSSL for TLS, a specially crafted packet could be used to trigger an infinite loop resulting in a denial of service. | 8 Oct |
| CVE-2021-37137 | 7.5 high | 7.0% | netty, oracle, banking_apis, banking_digital_experience | The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage. Beside this it also may buffer reserved skippable chunks until the whole chunk was received which may lead to excessive memory usage as well. This vulnerability can be triggered by supplying malicious input that decompresses to a very big size (via a network stream or a file) or by sending a huge skippable chunk. | 8 Oct |
| CVE-2021-37714 | 7.5 high | 7.0% | jsoup, quarkus, banking_trade_finance | jsoup is a Java library for working with HTML. Those using jsoup versions prior to 1.14.2 to parse untrusted HTML or XML may be vulnerable to DOS attacks. If the parser is run on user supplied input, an attacker may supply content that causes the parser to get stuck (loop indefinitely until cancelled), to complete more slowly than usual, or to throw an unexpected exception. This effect may support a denial of service attack. The issue is patched in version 1.14.2. There are a few available workarounds. Users may rate limit input parsing, limit the size of inputs based on system resources, and/or implement thread watchdogs to cap and timeout parse runtimes. | 8 Oct |
| CVE-2016-6794 | 5.3 medium | 7.0% | apache, debian, tomcat, debian_linux, jboss_enterprise_web_server | When a SecurityManager is configured, a web application's ability to read system properties should be controlled by the SecurityManager. In Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70, 6.0.0 to 6.0.45 the system property replacement feature for configuration files could be used by a malicious web application to bypass the SecurityManager and read system properties that should not be visible. | 15 Oct |
| CVE-2019-16942 | 9.8 critical | 6.0% | fasterxml, debian, jackson-databind, debian_linux, fedora | A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the commons-dbcp (1.4) jar in the classpath, and an attacker can find an RMI service endpoint to access, it is possible to make the service execute a malicious payload. This issue exists because of org.apache.commons.dbcp.datasources.SharedPoolDataSource and org.apache.commons.dbcp.datasources.PerUserPoolDataSource mishandling. | 8 Oct |
| CVE-2019-3859 | 9.1 critical | 6.0% | libssh2, fedoraproject, fedora, debian_linux | An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the _libssh2_packet_require and _libssh2_packet_requirev functions. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory. | 14 Oct |
| CVE-2019-3858 | 9.1 critical | 6.0% | libssh2, fedoraproject, fedora, debian_linux | An out of bounds read flaw was discovered in libssh2 before 1.8.1 when a specially crafted SFTP packet is received from the server. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory. | 14 Oct |
| CVE-2019-3857 | 8.8 high | 6.0% | libssh2, debian, debian_linux, ontap_select_deploy_administration_utility | An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit signal are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server. | 14 Oct |
| CVE-2019-3856 | 8.8 high | 6.0% | libssh2, debian, debian_linux, ontap_select_deploy_administration_utility | An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the way keyboard prompt requests are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server. | 14 Oct |
| CVE-2020-35490 | 8.1 high | 6.0% | fasterxml, netapp, jackson-databind, service_level_manager, debian_linux | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.PerUserPoolDataSource. | 8 Oct |
| CVE-2020-11620 | 8.1 high | 6.0% | fasterxml, debian, jackson-databind, debian_linux, active_iq_unified_manager | FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.jelly.impl.Embedded (aka commons-jelly). | 8 Oct |
| CVE-2022-40304 | 7.8 high | 6.0% | xmlsoft, netapp, libxml2, active_iq_unified_manager, clustered_data_ontap | An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logic errors. In one case, a double-free can be provoked. | 14 Oct |
| CVE-2020-12723 | 7.5 high | 6.0% | perl, netapp, oncommand_workflow_automation, snap_creator_framework | regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls. | 14 Oct |
| CVE-2019-19956 | 7.5 high | 6.0% | xmlsoft, debian, libxml2, debian_linux, real_user_experience_insight | xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc->oldNs. | 14 Oct |
| CVE-2019-9674 | 7.5 high | 6.0% | python, canonical, ubuntu_linux, active_iq_unified_manager | Lib/zipfile.py in Python through 3.7.2 allows remote attackers to cause a denial of service (resource consumption) via a ZIP bomb. | 14 Oct |
| CVE-2021-37136 | 7.5 high | 6.0% | netty, quarkus, banking_apis | The Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data (which affects the allocation size used during decompression). All users of Bzip2Decoder are affected. The malicious input can trigger an OOME and so a DoS attack | 8 Oct |
| CVE-2020-26116 | 7.2 high | 6.0% | python, fedoraproject, fedora, ubuntu_linux | http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x before 3.8.5 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of HTTPConnection.request. | 14 Oct |
| CVE-2022-32221 | 9.8 critical | 5.0% | haxx, netapp, curl, clustered_data_ontap, h300s_firmware | When doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been set, if the same handle previously was used to issue a `PUT` request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the subsequent `POST` request. The problem exists in the logic for a reused handle when it is changed from a PUT to a POST. | 14 Oct |
| CVE-2019-19317 | 9.8 critical | 5.0% | sqlite, netapp, cloud_backup, ontap_select_deploy_administration_utility | lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a generated column, which allows attackers to cause a denial of service or possibly have unspecified other impact. | 14 Oct |
| CVE-2019-9169 | 9.8 critical | 5.0% | gnu, netapp, glibc, cloud_backup, ontap_select_deploy_administration_utility | In the GNU C Library (aka glibc or libc6) through 2.29, proceed_next_node in posix/regexec.c has a heap-based buffer over-read via an attempted case-insensitive regular-expression match. | 14 Oct |
| CVE-2019-10160 | 9.8 critical | 5.0% | python, redhat, enterprise_linux_desktop, enterprise_linux_eus | A security regression of CVE-2019-9636 was discovered in python since commit d537ab0ff9767ef024f26246899728f0116b1ec3 affecting versions 2.7, 3.5, 3.6, 3.7 and from v3.8.0a4 through v3.8.0b1, which still allows an attacker to exploit CVE-2019-9636 by abusing the user and password parts of a URL. When an application parses user-supplied URLs to store cookies, authentication credentials, or other kind of information, it is possible for an attacker to provide specially crafted URLs to make the application locate host-related information (e.g. cookies, authentication data) and send them to a different host than where it should, unlike if the URLs had been correctly parsed. The result of an attack may vary based on the application. | 14 Oct |
| CVE-2019-17531 | 9.8 critical | 5.0% | fasterxml, debian, jackson-databind, debian_linux, jboss_enterprise_application_platform | A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the apache-log4j-extra (version 1.2.x) jar in the classpath, and an attacker can provide a JNDI service to access, it is possible to make the service execute a malicious payload. | 8 Oct |
| CVE-2019-16335 | 9.8 critical | 5.0% | fasterxml, fedoraproject, jackson-databind, fedora, debian_linux | A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariDataSource. This is a different vulnerability than CVE-2019-14540. | 8 Oct |
| CVE-2019-3861 | 9.1 critical | 5.0% | libssh2, debian, debian_linux, ontap_select_deploy_administration_utility | An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH packets with a padding length value greater than the packet length are parsed. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory. | 14 Oct |
| CVE-2019-3860 | 9.1 critical | 5.0% | libssh2, debian, debian_linux, ontap_select_deploy_administration_utility | An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SFTP packets with empty payloads are parsed. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory. | 14 Oct |
| CVE-2020-10878 | 8.6 high | 5.0% | perl, fedoraproject, fedora, leap | Perl before 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)] == NOTHING" situation. A crafted regular expression could lead to malformed bytecode with a possibility of instruction injection. | 14 Oct |
| CVE-2020-36183 | 8.1 high | 5.0% | fasterxml, netapp, jackson-databind, cloud_backup, service_level_manager | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.docx4j.org.apache.xalan.lib.sql.JNDIConnectionPool. | 8 Oct |
Download these 338 as CSV · subscribe to this list.
EPSS scores: 2026-10-28. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.