Wed, Nov 17 · 08:15 PM CSTCVE-2021-41277
10.0/10 · Must read/watchNVDvuln
Summary
Metabase is an open source data analytics platform. In affected versions a security issue has been discovered with the custom GeoJSON map (`admin->settings->maps->custom maps->add a map`) support and potential local file inclusion (including environment variables). URLs were not validated prior to being loaded. This is
CVECVE-2021-41277
SeverityCRITICAL
TypeUPDATED
PublishedWed, Nov 17 · 08:15 PM CST
ModifiedThu, Oct 08 · 10:34 AM CDT
CVE-2015-6420
9.8/10 · Must read/watchNVDvuln
Summary
Serialized-object interfaces in certain Cisco Collaboration and Social Media; Endpoint Clients and Client Software; Network Application, Service, and Acceleration; Network and Content Security Devices; Network Management and Provisioning; Routing and Switching - Enterprise and Service Provider; Unified Computing; Voice
CVECVE-2015-6420
SeverityCRITICAL
TypeUPDATED
PublishedTue, Dec 15 · 05:59 AM CST
ModifiedWed, Oct 07 · 06:17 PM CDT
CVE-2016-1000027
9.8/10 · Must read/watchNVDvuln
Summary
Pivotal Spring Framework through 5.3.16 suffers from a potential remote code execution (RCE) issue if used for Java deserialization of untrusted data. Depending on how the library is implemented within a product, this issue may or not occur, and authentication may be required. NOTE: the vendor's position is that untrus
CVECVE-2016-1000027
SeverityCRITICAL
TypeUPDATED
PublishedThu, Jan 02 · 11:15 PM CST
ModifiedWed, Oct 07 · 07:17 PM CDT
CVE-2016-1000031
9.8/10 · Must read/watchNVDvuln
Summary
Apache Commons FileUpload before 1.3.3 DiskFileItem File Manipulation Remote Code Execution
CVECVE-2016-1000031
SeverityCRITICAL
TypeUPDATED
PublishedTue, Oct 25 · 02:29 PM CDT
ModifiedWed, Oct 07 · 07:17 PM CDT
CVE-2017-12149
9.8/10 · Must read/watchNVDvuln
Summary
In Jboss Application Server as shipped with Red Hat Enterprise Application Platform 5.2, it was found that the doFilter method in the ReadOnlyAccessFilter of the HTTP Invoker does not restrict classes for which it performs deserialization and thus allowing an attacker to execute arbitrary code via crafted serialized da
CVECVE-2017-12149
SeverityCRITICAL
TypeUPDATED
PublishedWed, Oct 04 · 09:01 PM CDT
ModifiedWed, Oct 07 · 05:58 PM CDT
CVE-2019-10160
9.8/10 · Must read/watchNVDvuln
Summary
A security regression of CVE-2019-9636 was discovered in python since commit d537ab0ff9767ef024f26246899728f0116b1ec3 affecting versions 2.7, 3.5, 3.6, 3.7 and from v3.8.0a4 through v3.8.0b1, which still allows an attacker to exploit CVE-2019-9636 by abusing the user and password parts of a URL. When an application par
CVECVE-2019-10160
SeverityCRITICAL
TypeUPDATED
PublishedFri, Jun 07 · 06:29 PM CDT
ModifiedWed, Oct 07 · 07:17 PM CDT
CVE-2019-16943
9.8/10 · Must read/watchNVDvuln
Summary
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the p6spy (3.8.6) jar in the classpath, and an attacker can find an RMI service endpoint t
CVECVE-2019-16943
SeverityCRITICAL
TypeUPDATED
PublishedTue, Oct 01 · 05:15 PM CDT
ModifiedWed, Oct 07 · 09:17 PM CDT
CVE-2019-17267
9.8/10 · Must read/watchNVDvuln
Summary
A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to net.sf.ehcache.hibernate.EhcacheJtaTransactionManagerLookup.
CVECVE-2019-17267
SeverityCRITICAL
TypeUPDATED
PublishedMon, Oct 07 · 12:15 AM CDT
ModifiedWed, Oct 07 · 07:17 PM CDT
CVE-2019-9636
9.8/10 · Must read/watchNVDvuln
Summary
Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode Encoding (with an incorrect netloc) during NFKC normalization. The impact is: Information disclosure (credentials, cookies, etc. that are cached against a given hostname). The components are: urllib.parse.urlsplit, urllib.par
CVECVE-2019-9636
SeverityCRITICAL
TypeUPDATED
PublishedFri, Mar 08 · 09:29 PM CST
ModifiedWed, Oct 07 · 07:17 PM CDT
CVE-2020-9054
9.8/10 · Must read/watchNVDvuln
Summary
Multiple ZyXEL network-attached storage (NAS) devices running firmware version 5.21 contain a pre-authentication command injection vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable device. ZyXEL NAS devices achieve authentication by using the weblogin.cgi CGI ex
CVECVE-2020-9054
SeverityCRITICAL
TypeUPDATED
PublishedWed, Mar 04 · 08:15 PM CST
ModifiedWed, Oct 07 · 06:17 PM CDT
CVE-2020-9493
9.8/10 · Must read/watchNVDvuln
Summary
A deserialization flaw was found in Apache Chainsaw versions prior to 2.1.0 which could lead to malicious code execution.
CVECVE-2020-9493
SeverityCRITICAL
TypeUPDATED
PublishedWed, Jun 16 · 08:15 AM CDT
ModifiedWed, Oct 07 · 04:17 PM CDT
CVE-2020-9546
9.8/10 · Must read/watchNVDvuln
Summary
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.hadoop.shaded.com.zaxxer.hikari.HikariConfig (aka shaded hikari-config).
CVECVE-2020-9546
SeverityCRITICAL
TypeUPDATED
PublishedMon, Mar 02 · 04:15 AM CST
ModifiedWed, Oct 07 · 09:17 PM CDT
CVE-2020-9547
9.8/10 · Must read/watchNVDvuln
Summary
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig (aka ibatis-sqlmap).
CVECVE-2020-9547
SeverityCRITICAL
TypeUPDATED
PublishedMon, Mar 02 · 04:15 AM CST
ModifiedWed, Oct 07 · 10:16 PM CDT
CVE-2024-50623
9.8/10 · Must read/watchNVDvuln
Summary
In Cleo Harmony before 5.8.0.21, VLTrader before 5.8.0.21, and LexiCom before 5.8.0.21, there is an unrestricted file upload and download that could lead to remote code execution.
CVECVE-2024-50623
SeverityCRITICAL
TypeUPDATED
PublishedMon, Oct 28 · 12:15 AM CDT
ModifiedThu, Oct 08 · 10:35 AM CDT
CVE-2025-39682
9.8/10 · Must read/watchNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rx_list Each recvmsg() call must process either - only contiguous DATA records (any number of them) - one non-DATA record If the next record has different type than what has already been processed we brea
CVECVE-2025-39682
SeverityCRITICAL
TypeUPDATED
PublishedFri, Sep 05 · 06:15 PM CDT
ModifiedWed, Oct 07 · 06:17 PM CDT
CVE-2019-9948
9.1/10 · Must read/watchNVDvuln
Summary
urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for remote attackers to bypass protection mechanisms that blacklist file: URIs, as demonstrated by triggering a urllib.urlopen('local_file:///etc/passwd') call.
CVECVE-2019-9948
SeverityCRITICAL
TypeUPDATED
PublishedSat, Mar 23 · 06:29 PM CDT
ModifiedWed, Oct 07 · 07:17 PM CDT
CVE-2019-8720
8.8/10 · Worth your timeNVDvuln
Summary
A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved memory handling addresses the multiple memory corruption issues.
CVECVE-2019-8720
SeverityHIGH
TypeUPDATED
PublishedMon, Mar 06 · 11:15 PM CST
ModifiedThu, Oct 08 · 10:35 AM CDT
CVE-2021-39297
8.8/10 · Worth your timeNVDvuln
Summary
Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution.
CVECVE-2021-39297
SeverityHIGH
TypeUPDATED
PublishedWed, Feb 16 · 05:15 PM CST
ModifiedWed, Oct 07 · 07:17 PM CDT
CVE-2021-39298
8.8/10 · Worth your timeNVDvuln
Summary
A potential vulnerability in AMD System Management Mode (SMM) interrupt handler may allow an attacker with high privileges to access the SMM resulting in arbitrary code execution which could be used by malicious actors to bypass security mechanisms provided in the UEFI firmware.
CVECVE-2021-39298
SeverityHIGH
TypeUPDATED
PublishedWed, Feb 16 · 05:15 PM CST
ModifiedWed, Oct 07 · 07:17 PM CDT
CVE-2021-39299
8.8/10 · Worth your timeNVDvuln
Summary
Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution.
CVECVE-2021-39299
SeverityHIGH
TypeUPDATED
PublishedWed, Feb 16 · 05:15 PM CST
ModifiedWed, Oct 07 · 07:17 PM CDT
CVE-2021-39300
8.8/10 · Worth your timeNVDvuln
Summary
Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution.
CVECVE-2021-39300
SeverityHIGH
TypeUPDATED
PublishedWed, Feb 16 · 05:15 PM CST
ModifiedWed, Oct 07 · 07:17 PM CDT
CVE-2021-39301
8.8/10 · Worth your timeNVDvuln
Summary
Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution.
CVECVE-2021-39301
SeverityHIGH
TypeUPDATED
PublishedWed, Feb 16 · 05:15 PM CST
ModifiedWed, Oct 07 · 07:17 PM CDT
CVE-2022-31673
8.8/10 · Worth your timeNVDvuln
Summary
VMware vRealize Operations contains an information disclosure vulnerability. A low-privileged malicious actor with network access can create and leak hex dumps, leading to information disclosure. Successful exploitation can lead to a remote code execution.
CVECVE-2022-31673
SeverityHIGH
TypeUPDATED
PublishedWed, Aug 10 · 08:15 PM CDT
ModifiedThu, Oct 08 · 01:16 AM CDT
CVE-2023-35311
8.8/10 · Worth your timeNVDvuln
Summary
Microsoft Outlook Security Feature Bypass Vulnerability
CVECVE-2023-35311
SeverityHIGH
TypeUPDATED
PublishedTue, Jul 11 · 06:15 PM CDT
ModifiedThu, Oct 08 · 10:35 AM CDT
CVE-2023-41074
8.8/10 · Worth your timeNVDvuln
Summary
The issue was addressed with improved checks. This issue is fixed in tvOS 17, Safari 17, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may lead to arbitrary code execution.
CVECVE-2023-41074
SeverityHIGH
TypeUPDATED
PublishedWed, Sep 27 · 03:19 PM CDT
ModifiedWed, Oct 07 · 05:16 PM CDT
