[UNKNOWN] vulnerabilities

CVEs per yearBy the year they were published

1. 2018121
2. 201842
3. 201810
4. 202018
5. 202048

Known exploitedNewest addition to KEV first

• CVE-2018-14667

  The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resource. A remote, unauthenticated attacker…

  [UNKNOWN] · RichFaces

  ExploitedCritical9.8

Newest CVEs

• CVE-2020-10773

  A stack information leak flaw was found in s390/s390x in the Linux kernel’s memory manager functionality, where it incorrectly writes to the…

  [UNKNOWN] · kernel

  Medium4.4
• CVE-2019-19338

  A flaw was found in the fix for CVE-2019-11135, in the Linux upstream kernel versions before 5.5 where, the way Intel CPUs handle speculative execution of…

  [UNKNOWN] · Linux Kernel

  Medium5.5
• CVE-2019-14894

  A flaw was found in the CloudForms management engine version 5.10 and CloudForms management version 5.11, which triggered remote code execution through NFS…

  [UNKNOWN] · CloudForms

  High8.0
• CVE-2019-3865

  A vulnerability was found in quay-2, where a stored XSS vulnerability has been found in the super user function of quay. Attackers are able to use the name…

  [UNKNOWN] · quay

  Medium4.7
• CVE-2020-10736

  An authorization bypass vulnerability was found in Ceph versions 15.2.0 before 15.2.2, where the ceph-mon and ceph-mgr daemons do not properly restrict access,…

  [UNKNOWN] · ceph

  High8.0
• CVE-2020-1727

  A vulnerability was found in Keycloak before 9.0.2, where every Authorization URL that points to an IDP server lacks proper input validation as it allows a…

  [UNKNOWN] · keycloak

  Medium6.4
• CVE-2020-10740

  A vulnerability was found in Wildfly in versions before 20.0.0.Final, where a remote deserialization attack is possible in the Enterprise Application…

  [UNKNOWN] · wildfly

  Medium6.6
• CVE-2020-10738

  A flaw was found in Moodle versions 3.8 before 3.8.3, 3.7 before 3.7.6, 3.6 before 3.6.10, 3.5 before 3.5.12 and earlier unsupported versions. It was possible…

  [UNKNOWN] · moodle

  High7.5
• CVE-2020-10725

  A flaw was found in DPDK version 19.11 and above that allows a malicious guest to cause a segmentation fault of the vhost-user backend application running on…

  [UNKNOWN] · dpdk

  High7.7
• CVE-2020-10726

  A vulnerability was found in DPDK versions 19.11 and above. A malicious container that has direct access to the vhost-user socket can keep sending…

  [UNKNOWN] · dpdk

  Medium6.0