| CVE-2024-28219 |
In _imagingcms.c in Pillow before 10.3.0, a buffer overflow exists because strcpy is used instead of strncpy
|
6.7
Medium
|
Apr 3, 2024 |
| CVE-2024-1553 |
Memory safety bugs present in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7
|
8.1
High
|
Feb 20, 2024 |
| CVE-2023-7101 |
Exploited
Spreadsheet::ParseExcel Remote Code Execution Vulnerability
|
7.8
High
|
Dec 24, 2023 |
| CVE-2023-43770 |
Exploited
Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability
|
6.1
Medium
|
Sep 22, 2023 |
| CVE-2023-41993 |
Exploited
Apple Multiple Products WebKit Code Execution Vulnerability
|
8.8
High
|
Sep 21, 2023 |
| CVE-2023-4762 |
Exploited
Google Chromium V8 Type Confusion Vulnerability
|
8.8
High
|
Sep 5, 2023 |
| CVE-2023-36053 |
In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a…
|
7.5
High
|
Jul 3, 2023 |
| CVE-2023-32067 |
c-ares is an asynchronous resolver library
|
7.5
High
|
May 25, 2023 |
| CVE-2023-21930 |
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE)
|
7.4
High
|
Apr 18, 2023 |
| CVE-2023-1989 |
A use-after-free flaw was found in btsdio_remove in drivers\bluetooth\btsdio.c in the Linux Kernel
|
7.0
High
|
Apr 11, 2023 |
| CVE-2022-21797 |
The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the pre_dispatch flag in…
|
7.3
High
|
Sep 26, 2022 |
| CVE-2022-2097 |
AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety…
|
Not rated
|
Jul 5, 2022 |
| CVE-2021-4043 |
NULL Pointer Dereference in gpac/gpac
|
5.8
Medium
|
Feb 4, 2022 |
| CVE-2021-35564 |
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Keytool)
|
5.3
Medium
|
Oct 20, 2021 |
| CVE-2021-41133 |
Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux
|
8.8
High
|
Oct 8, 2021 |
| CVE-2020-36179 |
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing,…
|
8.8
High
|
Jan 6, 2021 |
| CVE-2020-36180 |
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing,…
|
8.8
High
|
Jan 6, 2021 |
| CVE-2020-36182 |
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing,…
|
8.8
High
|
Jan 6, 2021 |
| CVE-2020-36184 |
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing,…
|
8.8
High
|
Jan 6, 2021 |
| CVE-2020-36181 |
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing,…
|
8.8
High
|
Jan 6, 2021 |
| CVE-2020-11111 |
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing,…
|
8.8
High
|
Mar 31, 2020 |
| CVE-2020-11112 |
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing,…
|
8.8
High
|
Mar 31, 2020 |
| CVE-2020-11113 |
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing,…
|
8.8
High
|
Mar 31, 2020 |
| CVE-2020-10968 |
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing,…
|
8.8
High
|
Mar 26, 2020 |
| CVE-2020-10969 |
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing,…
|
8.8
High
|
Mar 26, 2020 |