| CVE-2024-28219 |
In _imagingcms.c in Pillow before 10.3.0, a buffer overflow exists because strcpy is used instead of strncpy
|
6.7
Moyenne
|
3 avr. 2024 |
| CVE-2024-1553 |
Memory safety bugs present in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7
|
8.1
Élevée
|
20 févr. 2024 |
| CVE-2023-7101 |
Exploitée
Spreadsheet::ParseExcel Remote Code Execution Vulnerability
|
7.8
Élevée
|
24 déc. 2023 |
| CVE-2023-43770 |
Exploitée
Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability
|
6.1
Moyenne
|
22 sept. 2023 |
| CVE-2023-41993 |
Exploitée
Apple Multiple Products WebKit Code Execution Vulnerability
|
8.8
Élevée
|
21 sept. 2023 |
| CVE-2023-4762 |
Exploitée
Google Chromium V8 Type Confusion Vulnerability
|
8.8
Élevée
|
5 sept. 2023 |
| CVE-2023-36053 |
In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a…
|
7.5
Élevée
|
3 juil. 2023 |
| CVE-2023-32067 |
c-ares is an asynchronous resolver library
|
7.5
Élevée
|
25 mai 2023 |
| CVE-2023-21930 |
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE)
|
7.4
Élevée
|
18 avr. 2023 |
| CVE-2023-1989 |
A use-after-free flaw was found in btsdio_remove in drivers\bluetooth\btsdio.c in the Linux Kernel
|
7.0
Élevée
|
11 avr. 2023 |
| CVE-2022-21797 |
The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the pre_dispatch flag in…
|
7.3
Élevée
|
26 sept. 2022 |
| CVE-2022-2097 |
AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety…
|
Non notée
|
5 juil. 2022 |
| CVE-2021-4043 |
NULL Pointer Dereference in gpac/gpac
|
5.8
Moyenne
|
4 févr. 2022 |
| CVE-2021-35564 |
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Keytool)
|
5.3
Moyenne
|
20 oct. 2021 |
| CVE-2021-41133 |
Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux
|
8.8
Élevée
|
8 oct. 2021 |
| CVE-2020-36179 |
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing,…
|
8.8
Élevée
|
6 janv. 2021 |
| CVE-2020-36180 |
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing,…
|
8.8
Élevée
|
6 janv. 2021 |
| CVE-2020-36182 |
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing,…
|
8.8
Élevée
|
6 janv. 2021 |
| CVE-2020-36184 |
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing,…
|
8.8
Élevée
|
6 janv. 2021 |
| CVE-2020-36181 |
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing,…
|
8.8
Élevée
|
6 janv. 2021 |
| CVE-2020-11111 |
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing,…
|
8.8
Élevée
|
31 mars 2020 |
| CVE-2020-11112 |
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing,…
|
8.8
Élevée
|
31 mars 2020 |
| CVE-2020-11113 |
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing,…
|
8.8
Élevée
|
31 mars 2020 |
| CVE-2020-10968 |
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing,…
|
8.8
Élevée
|
26 mars 2020 |
| CVE-2020-10969 |
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing,…
|
8.8
Élevée
|
26 mars 2020 |