Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
developer tools vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2023-2253
A flaw was found in the `/v2/_catalog` endpoint in distribution/distribution, which accepts a parameter to control the maximum number of records returned (query string: `n`). This vulnerability allows a malicious user to submit an unreasonably large value for `n,` causing the all...
Redhat Openshift Container Platform 4.0
Redhat Openshift Developer Tools And Services -
Redhat Openshift Api For Data Protection -
4.3
CVSSv2
CVE-2019-9741
An issue exists in net/http in Go 1.11.5. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the second argument to http.NewRequest with \r\n followed by an HTTP header or a Redis command.
Golang Go 1.11.5
Debian Debian Linux 8.0
Debian Debian Linux 9.0
Fedoraproject Fedora 29
Redhat Enterprise Linux 8.0
Redhat Developer Tools 1.0
5
CVSSv2
CVE-2019-16276
Go prior to 1.12.10 and 1.13.x prior to 1.13.1 allow HTTP Request Smuggling.
Golang Go
Debian Debian Linux 9.0
Opensuse Leap 15.0
Opensuse Leap 15.1
Fedoraproject Fedora 29
Fedoraproject Fedora 30
Fedoraproject Fedora 31
Redhat Openshift Container Platform 4.2
Redhat Enterprise Linux 8.0
Redhat Developer Tools 1.0
Redhat Enterprise Linux Eus 8.1
Netapp Cloud Insights Telegraf Agent -
1 Github repository
10
CVSSv2
CVE-2006-1884
Unspecified vulnerability in the Oracle Thesaurus Management System component in Oracle E-Business Suite and OPA 4.5.2 Applications has unknown impact and attack vectors, aka Vuln# OPA01.
Oracle Application Server 10.1.2.0.0
Oracle Application Server 10.1.2.0.1
Oracle Collaboration Suite 10g Release 1 10.1.1
Oracle Collaboration Suite 10g Release 1 10.1.2.0
Oracle Database Server 8.1.7.4
Oracle Database Server 9.0.1.4
Oracle E-business Suite 11.5.1
Oracle E-business Suite 11.5.10
Oracle Peoplesoft Enterprise Tools 8.46
Oracle Peoplesoft Enterprise Tools 8.47.04
Jdedwards Enterpriseone Tools 8.95
Oracle Application Server 10.1.2.0.2
Oracle Application Server 10.1.2.1.0
Oracle Collaboration Suite 10g Release 1 10.1.2.1
Oracle Database Server 10.2.0.1
Oracle Database Server 9.0.1.5
Oracle Database Server 9.2.0.6
Oracle E-business Suite 11.5.10.1
Oracle E-business Suite 11.5.10.2
Oracle Peoplesoft Enterprise Tools 8.47
Oracle Pharmaceutical 4.5.0
Oneworld Oneworld Tools 8.95.j1
5
CVSSv2
CVE-2019-17596
Go prior to 1.12.11 and 1.3.x prior to 1.13.2 can panic upon an attempt to process network traffic containing an invalid DSA public key. There are several attack scenarios, such as traffic from a client to a server that verifies client certificates.
Golang Go
Debian Debian Linux 9.0
Debian Debian Linux 10.0
Fedoraproject Fedora 30
Fedoraproject Fedora 31
Redhat Enterprise Linux 8.0
Redhat Developer Tools 1.0
Redhat Enterprise Linux Server 8.1
Opensuse Leap 15.0
Opensuse Leap 15.1
Arista Mos
Arista Eos
Arista Cloudvision Portal 2019.1.2
Arista Cloudvision Portal 2019.1.1
Arista Cloudvision Portal 2019.1.0
Arista Cloudvision Portal
Arista Terminattr
1 Github repository
7.5
CVSSv2
CVE-2021-20587
Heap-based buffer overflow vulnerability in Mitsubishi Electric FA Engineering Software (CPU Module Logging Configuration Tool versions 1.112R and prior, CW Configurator versions 1.011M and prior, Data Transfer versions 3.44W and prior, EZSocket versions 5.4 and prior, FR Configu...
Mitsubishielectric Melfa-works
Mitsubishielectric Rt Toolbox2
Mitsubishielectric Ezsocket
Mitsubishielectric Fr Configurator
Mitsubishielectric Fr Configurator Sw3
Mitsubishielectric Gx Configurator-dp
Mitsubishielectric Gx Configurator-qp
Mitsubishielectric Gx Explorer
Mitsubishielectric Gx Iec Developer
Mitsubishielectric Gx Works2
Mitsubishielectric Gx Works3
Mitsubishielectric M Commdtm-hart
Mitsubishielectric M Commdtm-io-link
Mitsubishielectric Melsec Wincpu Setting Utility
Mitsubishielectric Melsoft Em Software Development Kit
Mitsubishielectric Mi Configurator
Mitsubishielectric Network Interface Board Cc Ie Control Utility
Mitsubishielectric Network Interface Board Cc Ie Field Utility
Mitsubishielectric Network Interface Board Mneth Utility
Mitsubishielectric Setting\\/monitoring Tools For The C Controller Module
Mitsubishielectric C Controller Module Setting And Monitoring Tool
Mitsubishielectric Gx Remoteservice-i
7.5
CVSSv2
CVE-2021-20588
Improper handling of length parameter inconsistency vulnerability in Mitsubishi Electric FA Engineering Software(CPU Module Logging Configuration Tool versions 1.112R and prior, CW Configurator versions 1.011M and prior, Data Transfer versions 3.44W and prior, EZSocket versions 5...
Mitsubishielectric Melfa-works
Mitsubishielectric Rt Toolbox2
Mitsubishielectric Ezsocket
Mitsubishielectric Fr Configurator
Mitsubishielectric Fr Configurator Sw3
Mitsubishielectric Gx Configurator-dp
Mitsubishielectric Gx Configurator-qp
Mitsubishielectric Gx Explorer
Mitsubishielectric Gx Iec Developer
Mitsubishielectric Gx Works2
Mitsubishielectric Gx Works3
Mitsubishielectric M Commdtm-hart
Mitsubishielectric M Commdtm-io-link
Mitsubishielectric Melsec Wincpu Setting Utility
Mitsubishielectric Melsoft Em Software Development Kit
Mitsubishielectric Mi Configurator
Mitsubishielectric Network Interface Board Cc Ie Control Utility
Mitsubishielectric Network Interface Board Cc Ie Field Utility
Mitsubishielectric Network Interface Board Mneth Utility
Mitsubishielectric Setting\\/monitoring Tools For The C Controller Module
Mitsubishielectric C Controller Module Setting And Monitoring Tool
Mitsubishielectric Gx Remoteservice-i
NA
CVE-2022-43410
Jenkins Mercurial Plugin 1251.va_b_121f184902 and previous versions provides information about which jobs were triggered or scheduled for polling through its webhook endpoint, including jobs the user has no permission to access.
Jenkins Mercurial
5
CVSSv2
CVE-2018-16871
A flaw was found in the Linux kernel's NFS implementation, all versions 3.x and all versions 4.x up to 4.20. An attacker, who is able to mount an exported NFS filesystem, is able to trigger a null pointer dereference by using an invalid NFS sequence. This can panic the machi...
Linux Linux Kernel
Redhat Enterprise Linux Desktop 7.0
Redhat Enterprise Linux Workstation 7.0
Redhat Enterprise Linux 7.0
Redhat Enterprise Linux Server 7.0
Redhat Enterprise Linux Server Aus 7.4
Redhat Enterprise Linux Server Tus 7.4
Redhat Enterprise Linux Eus 7.4
Redhat Enterprise Linux Server Tus 7.6
Redhat Enterprise Linux Server Eus 7.6
Redhat Enterprise Linux Server Aus 7.6
Redhat Mrg Realtime 2.0
Redhat Developer Tools 1.0
Netapp Cloud Backup -
Netapp H410c Firmware -
Netapp H300s Firmware -
Netapp H500s Firmware -
Netapp H700s Firmware -
Netapp H300e Firmware -
Netapp H500e Firmware -
Netapp H700e Firmware -
Netapp H410s Firmware -
6.8
CVSSv2
CVE-2022-1227
A privilege escalation flaw was found in Podman. This flaw allows an malicious user to publish a malicious image to a public registry. Once this image is downloaded by a potential victim, the vulnerability is triggered after a user runs the 'podman top' command. This ac...
Podman Project Podman
Psgo Project Psgo
Redhat Enterprise Linux Workstation 7.0
Redhat Enterprise Linux 7.0
Redhat Enterprise Linux Server 7.0
Redhat Enterprise Linux For Power Little Endian 7.0
Redhat Enterprise Linux For Ibm Z Systems 7.0
Redhat Enterprise Linux 8.0
Redhat Developer Tools 1.0
Redhat Quay 3.0.0
Redhat Openshift Container Platform 4.0
Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions 8.6
Redhat Enterprise Linux For Ibm Z Systems 8.6
Redhat Enterprise Linux Server Aus 8.6
Redhat Enterprise Linux Server Tus 8.6
Redhat Enterprise Linux Eus 8.6
Redhat Enterprise Linux For Power Little Endian 8.6
Redhat Enterprise Linux Server Update Services For Sap Solutions 8.6
Fedoraproject Fedora 34
Fedoraproject Fedora 35
1 Github repository
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-5324
path traversal
CVE-2024-4743
CVE-2024-5184
TCP
CVE-2024-27822
code injection
CVE-2024-28995
CVE-2023-20938
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
4
5
NEXT »