Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 183

CVE-2019-0220

httpd: URL normalization inconsistency

A vulnerability was found in Apache HTTP Server 2.4.0 to 2.4.38. When the path component of a request URL contains multiple consecutive slashes ('/'), directives such as LocationMatch and RewriteRule must account for duplicates in regular expressions while other aspects of the servers processing will implicitly collapse them.

CVSS 3.0 · 5.3 Medium EPSS 17.9% KEV · Not listed
Vendors
Apache Canonical Debian and 3 more
Products
Http Server Ubuntu Linux Debian Linux and 5 more
CVE-2018-6112

chromium-browser: Incorrect URL handling in DevTools

Making URLs clickable and allowing them to be styled in DevTools in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.

CVSS 3.0 · 4.3 Medium EPSS 1.6% KEV · Not listed
Vendors
Debian Google Redhat
Products
Debian Linux Chrome Enterprise Linux Desktop and 3 more
CVE-2018-12020

gnupg2: Improper sanitization of filenames allows for the display of fake status messages and the bypass of signature verification

mainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and verification actions, which allows remote attackers to spoof the output that GnuPG sends on file descriptor 2 to other programs that use the "--status-fd 2" option. For example, the OpenPGP data might represent an original filename that contains line feed characters in conjunction with GOODSIG or VALIDSIG status codes.

CVSS 3.1 · 7.5 High EPSS 8.2% KEV · Not listed
Vendors
Canonical Debian Gnupg and 1 more
Products
Ubuntu Linux Debian Linux Gnupg and 7 more