Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 24 h
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2018-25032exploit ×3 | 7.5 high | 52.0% | nokogiri, python, zlib | zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches. | 14 Oct |
| CVE-2022-37434exploit ×2 | 9.8 critical | 19.0% | zlib, fedoraproject, fedora, debian_linux | zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference). | 14 Oct |
| CVE-2020-15778exploit ×4 | 7.4 high | 14.0% | openbsd, netapp, openssh, a700s_firmware, active_iq_unified_manager | scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that they intentionally omit validation of "anomalous argument transfers" because that could "stand a great chance of breaking existing workflows." | 14 Oct |
| CVE-2022-36946exploit ×2 | 7.5 high | 9.0% | linux, debian, linux_kernel, debian_linux, active_iq_unified_manager | nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a denial of service (panic) because, in the case of an nf_queue verdict with a one-byte nfta_payload attribute, an skb_pull can encounter a negative skb->len. | 14 Oct |
| CVE-2022-43680exploit ×2 | 7.5 high | 3.0% | libexpat_project, debian, libexpat, debian_linux, fedora | In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate in out-of-memory situations. | 14 Oct |
| CVE-2024-50602exploit | 5.9 medium | 1.0% | netapp, debian, active_iq_unified_manager, solidfire_\&_hci_management_node, solidfire_\&_hci_storage_node | An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser. | 15 Oct |
| CVE-2021-22901 | 8.1 high | 64.0% | haxx, oracle, curl, communications_cloud_native_core_binding_support_function, communications_cloud_native_core_network_function_cloud_native_environment | curl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed memory being used when a TLS 1.3 session ticket arrives over a connection. A malicious server can use this in rare unfortunate circumstances to potentially reach remote code execution in the client. When libcurl at run-time sets up support for TLS 1.3 session tickets on a connection using OpenSSL, it stores pointers to the transfer in-memory object for later retrieval when a session ticket arrives. If the connection is used by multiple transfers (like with a reused HTTP/1.1 connection or multiplexed HTTP/2 connection) that first transfer object might be freed before the new session is established on that connection and then the function will access a memory buffer that might be freed. When using that memory, libcurl might even call a function pointer in the object, making it possible for a remote code execution if the server could somehow manage to get crafted memory content into the correct place in memory. | 14 Oct |
| CVE-2022-0391 | 7.5 high | 9.0% | python, netapp, active_iq_unified_manager, hci | A flaw was found in Python, specifically within the urllib.parse module. This module helps break Uniform Resource Locator (URL) strings into components. The issue involves how the urlparse method does not sanitize input and allows characters like '\r' and '\n' in the URL path. This flaw allows an attacker to input a crafted URL, leading to injection attacks. This flaw affects Python versions prior to 3.10.0b1, 3.9.5, 3.8.11, 3.7.11 and 3.6.14. | 14 Oct |
| CVE-2021-3733 | 6.5 medium | 5.0% | python, redhat, codeready_linux_builder, codeready_linux_builder_for_ibm_z_systems | There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client (such as web browser) connects to, could trigger a Regular Expression Denial of Service (ReDOS) during an authentication request with a specially crafted payload that is sent by the server to the client. The greatest threat that this flaw poses is to application availability. | 14 Oct |
| CVE-2021-22876 | 5.3 medium | 5.0% | haxx, fedoraproject, libcurl, fedora, hci_management_node | curl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information to an Unauthorized Actor" by leaking credentials in the HTTP Referer: header. libcurl does not strip off user credentials from the URL when automatically populating the Referer: HTTP request header field in outgoing HTTP requests, and therefore risks leaking sensitive data to the server that is the target of the second HTTP request. | 14 Oct |
| CVE-2022-27778 | 8.1 high | 4.0% | haxx, netapp, curl, active_iq_unified_manager, clustered_data_ontap | A use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when `--no-clobber` is used together with `--remove-on-error`. | 14 Oct |
| CVE-2021-28041 | 7.1 high | 4.0% | openbsd, fedoraproject, openssh, fedora, cloud_backup | ssh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few less-common scenarios, such as unconstrained agent-socket access on a legacy operating system, or the forwarding of an agent to an attacker-controlled host. | 14 Oct |
| CVE-2021-22897 | 5.3 medium | 4.0% | haxx, oracle, curl, communications_cloud_native_core_binding_support_function, communications_cloud_native_core_network_function_cloud_native_environment | curl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a mistake in the code for CURLOPT_SSL_CIPHER_LIST when libcurl is built to use the Schannel TLS library. The selected cipher set was stored in a single "static" variable in the library, which has the surprising side-effect that if an application sets up multiple concurrent transfers, the last one that sets the ciphers will accidentally control the set used by all transfers. In a worst-case scenario, this weakens transport security significantly. | 14 Oct |
| CVE-2022-27781 | 7.5 high | 3.0% | haxx, debian, curl, debian_linux, hci_bootstrap_os | libcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be returned about a server's certificate chain.Due to an erroneous function, a malicious server could make libcurl built withNSS get stuck in a never-ending busy-loop when trying to retrieve thatinformation. | 14 Oct |
| CVE-2020-14145 | 5.9 medium | 3.0% | openbsd, netapp, openssh, aff_a700s_firmware, active_iq_unified_manager | The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows man-in-the-middle attackers to target initial connection attempts (where no host key for the server has been cached by the client). NOTE: some reports state that 8.5 and 8.6 are also affected. | 14 Oct |
| CVE-2022-27779 | 5.3 medium | 3.0% | haxx, netapp, curl, hci_bootstrap_os, clustered_data_ontap | libcurl wrongly allows cookies to be set for Top Level Domains (TLDs) if thehost name is provided with a trailing dot.curl can be told to receive and send cookies. curl's "cookie engine" can bebuilt with or without [Public Suffix List](https://publicsuffix.org/)awareness. If PSL support not provided, a more rudimentary check exists to atleast prevent cookies from being set on TLDs. This check was broken if thehost name in the URL uses a trailing dot.This can allow arbitrary sites to set cookies that then would get sent to adifferent and unrelated site or domain. | 14 Oct |
| CVE-2020-13630 | 7.0 high | 1.0% | sqlite, fedoraproject, fedora, ubuntu_linux | ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature. | 14 Oct |
| CVE-2019-5188 | 6.7 medium | 1.0% | e2fsprogs_project, fedoraproject, e2fsprogs, fedora, debian_linux | A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4 directory can cause an out-of-bounds write on the stack, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability. | 14 Oct |
| CVE-2020-35494 | 6.1 medium | 1.0% | gnu, fedoraproject, binutils, fedora, cloud_backup | There's a flaw in binutils /opcodes/tic4x-dis.c. An attacker who is able to submit a crafted input file to be processed by binutils could cause usage of uninitialized memory. The highest threat is to application availability with a lower threat to data confidentiality. This flaw affects binutils versions prior to 2.34. | 8 Oct |
| CVE-2020-13632 | 5.5 medium | 1.0% | sqlite, fedoraproject, fedora, ubuntu_linux | ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query. | 14 Oct |
| CVE-2020-13631 | 5.5 medium | 1.0% | sqlite, fedoraproject, fedora, ubuntu_linux | SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c. | 14 Oct |
| CVE-2020-35507 | 5.5 medium | 1.0% | gnu, redhat, binutils, enterprise_linux, hci_compute_node_firmware | There's a flaw in bfd_pef_parse_function_stubs of bfd/pef.c in binutils in versions prior to 2.34 which could allow an attacker who is able to submit a crafted file to be processed by objdump to cause a NULL pointer dereference. The greatest threat of this flaw is to application availability. | 8 Oct |
| CVE-2020-35496 | 5.5 medium | 1.0% | gnu, fedoraproject, binutils, fedora, cloud_backup | There's a flaw in bfd_pef_scan_start_address() of bfd/pef.c in binutils which could allow an attacker who is able to submit a crafted file to be processed by objdump to cause a NULL pointer dereference. The greatest threat of this flaw is to application availability. This flaw affects binutils versions prior to 2.34. | 8 Oct |
| CVE-2020-35495 | 5.5 medium | 1.0% | gnu, fedoraproject, binutils, fedora, cloud_backup | There's a flaw in binutils /bfd/pef.c. An attacker who is able to submit a crafted input file to be processed by the objdump program could cause a null pointer dereference. The greatest threat from this flaw is to application availability. This flaw affects binutils versions prior to 2.34. | 8 Oct |
| CVE-2020-35493 | 5.5 medium | 1.0% | gnu, fedoraproject, binutils, fedora, cloud_backup | A flaw exists in binutils in bfd/pef.c. An attacker who is able to submit a crafted PEF file to be parsed by objdump could cause a heap buffer overflow -> out-of-bounds read that could lead to an impact to application availability. This flaw affects binutils versions prior to 2.34. | 8 Oct |
| CVE-2020-12769 | 5.5 medium | 1.0% | linux, debian, linux_kernel, debian_linux, ubuntu_linux | An issue was discovered in the Linux kernel before 5.4.17. drivers/spi/spi-dw.c allows attackers to cause a panic via concurrent calls to dw_spi_irq and dw_spi_transfer_one, aka CID-19b61392c5a8. | 8 Oct |
| CVE-2020-8700 | 6.7 medium | 0.00% | intel, netapp, bios, cloud_backup, aff_bios | Improper input validation in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. | 8 Oct |
| CVE-2020-12357 | 6.7 medium | 0.00% | intel, netapp, bios, cloud_backup, aff_bios | Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. | 8 Oct |
| CVE-2020-24511 | 6.5 medium | 0.00% | intel, debian, microcode, debian_linux, fas\/aff_bios | Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. | 8 Oct |
| CVE-2020-8670 | 6.4 medium | 0.00% | intel, siemens, bios, simatic_field_pg_m6_firmware, simatic_ipc427e_firmware | Race condition in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. | 8 Oct |
| CVE-2020-24486 | 5.5 medium | 0.00% | intel, netapp, bios, cloud_backup, aff_bios | Improper input validation in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable denial of service via local access. | 8 Oct |
| CVE-2019-19462 | 5.5 medium | 0.00% | linux, netapp, linux_kernel, active_iq_unified_manager, hci_management_node | relay_open in kernel/relay.c in the Linux kernel through 5.4.1 allows local users to cause a denial of service (such as relay blockage) by triggering a NULL alloc_percpu result. | 8 Oct |
| CVE-2019-19054 | 4.7 medium | 0.00% | linux, canonical, linux_kernel, ubuntu_linux, fedora | A memory leak in the cx23888_ir_probe() function in drivers/media/pci/cx23885/cx23888-ir.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering kfifo_alloc() failures, aka CID-a7b2df76b42b. | 8 Oct |
| CVE-2020-12358 | 4.4 medium | 0.00% | intel, siemens, bios, simatic_ipc547g_firmware, cloud_backup | Out of bounds write in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable denial of service via local access. | 8 Oct |
| CVE-2020-29374 | 3.6 low | 0.00% | linux, debian, linux_kernel, debian_linux, 500f_firmware | An issue was discovered in the Linux kernel before 5.7.3, related to mm/gup.c and mm/huge_memory.c. The get_user_pages (aka gup) implementation, when used for a copy-on-write page, does not properly consider the semantics of read operations and therefore can grant unintended write access, aka CID-17839856fd58. | 8 Oct |
| CVE-2020-24512 | 3.3 low | 0.00% | intel, debian, microcode, debian_linux, fas\/aff_bios | Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. | 8 Oct |
36 of 36
Download these 36 as CSV · subscribe to this list.
EPSS scores: 2026-10-27. NVD cursor: 2026-10-28 22:21. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.