CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 16/06/2023 |
| CVE-2023-34153 | ALTO7.8 | A vulnerability was found in ImageMagick. This security flaw causes a shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding. | 30/05/2023 |
| CVE-2023-34152 | CRÍTICO9.8 | A vulnerability was found in ImageMagick. This security flaw cause a remote code execution vulnerability in OpenBlob with --enable-pipes configured. | 30/05/2023 |
| CVE-2023-34151 | MEDIO5.5 | A vulnerability was found in ImageMagick. This security flaw ouccers as an undefined behaviors of casting double to size_t in svg, mvg and other coders (recurring bugs of CVE-2022-32546). | 30/05/2023 |
| CVE-2023-30944 | ALTO7.3 | The vulnerability was found Moodle which exists due to insufficient sanitization of user-supplied data in external Wiki method for listing pages. A remote attacker can send a specially crafted request to the affected application and execute limited SQL commands within the application database. | 02/05/2023 |
| CVE-2023-30943 | MEDIO5.3 | The vulnerability was found Moodle which exists because the application allows a user to control path of the older to create in TinyMCE loaders. A remote user can send a specially crafted HTTP request and create arbitrary folders on the system. | 02/05/2023 |
| CVE-2023-1906 | MEDIO5.5 | A heap-based buffer overflow issue was discovered in ImageMagick's ImportMultiSpectralQuantum() function in MagickCore/quantum-import.c. An attacker could pass specially crafted file to convert, triggering an out-of-bounds read error, allowing an application to crash, resulting in a denial of service. | 12/04/2023 |
| CVE-2023-0056 | MEDIO6.5 | An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash the service. This issue could allow an authenticated remote attacker to run a specially crafted malicious server in an OpenShift cluster. The biggest impact is to availability. | 23/03/2023 |
| CVE-2023-1289 | MEDIO5.5 | A vulnerability was discovered in ImageMagick where a specially created SVG file loads itself and causes a segmentation fault. This flaw allows a remote attacker to pass a specially crafted SVG file that leads to a segmentation fault, generating many trash files in "/tmp," resulting in a denial of service. When ImageMa | 23/03/2023 |
| CVE-2022-4254 | ALTO8.8 | sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters | 01/02/2023 |
| CVE-2022-4170 | CRÍTICO9.8 | The rxvt-unicode package is vulnerable to a remote code execution, in the Perl background extension, when an attacker can control the data written to the user's terminal and certain options are set. | 09/12/2022 |
| CVE-2022-4144 | MEDIO6.5 | An out-of-bounds read flaw was found in the QXL display device emulation in QEMU. The qxl_phys2virt() function does not check the size of the structure pointed to by the guest physical address, potentially reading past the end of the bar space into adjacent pages. A malicious guest user could use this flaw to crash the | 29/11/2022 |
| CVE-2022-45152 | CRÍTICO9.1 | A blind Server-Side Request Forgery (SSRF) vulnerability was found in Moodle. This flaw exists due to insufficient validation of user-supplied input in LTI provider library. The library does not utilise Moodle's inbuilt cURL helper, which resulted in a blind SSRF risk. An attacker can send a specially crafted HTTP requ | 25/11/2022 |
| CVE-2022-40316 | MEDIO4.3 | The H5P activity attempts report did not filter by groups, which in separate groups mode could reveal information to non-editing teachers about attempts/users in groups they should not have access to. | 30/09/2022 |
| CVE-2022-40315 | CRÍTICO9.8 | A limited SQL injection risk was identified in the "browse list of users" site administration page. | 30/09/2022 |
| CVE-2022-40313 | ALTO7.1 | Recursive rendering of Mustache template helpers containing user input could, in some cases, result in an XSS risk or a page failing to load. | 30/09/2022 |
| CVE-2022-3213 | MEDIO5.5 | A heap buffer overflow issue was found in ImageMagick. When an application processes a malformed TIFF file, it could lead to undefined behavior or a crash causing a denial of service. | 19/09/2022 |
| CVE-2022-0367 | ALTO7.8 | A heap-based buffer overflow flaw was found in libmodbus in function modbus_reply() in src/modbus.c. | 29/08/2022 |