{"site":{"name":"Mender","ticker":"MEND","x":"mender_fun","domain":"mendersol.fun","logo":"/img/logo.png?v=mvl57ps9","banner":"/img/banner.png?v=mvl57ps9","og":"/img/og-kit.png?v=mvl57ps9","ca":null,"v":5},"engine":{"state":"waiting","cve":"CVE-2021-41773","needUsd":0.6,"leftUsd":0.007024000000000141,"since":1792676064444,"at":1792771965500},"totals":{"fundedUsd":1.34,"fundedLamports":0,"feesLamports":0,"seedUsd":1.34,"spentUsd":1.332976,"leftUsd":0.007024000000000141,"claims":0,"cases":11,"found":11,"close":0,"done":11,"queued":98,"tokensIn":223489,"tokensOut":21951,"solUsd":104.53010260328297},"cases":[{"cve":"CVE-2014-0160","name":"Heartbleed","repo":"openssl/openssl","file":"ssl/t1_lib.c","lines":1600,"published":"2014-04-07T22:55:03.893","cvss":7.5,"severity":"high","cwe":["CWE-125"],"state":"done","result":{"score":{"result":"found","distance":0,"cwe":true},"title":"Heartbleed: missing heartbeat payload length check causes out-of-bounds read","usd":0.15898,"ms":20317,"at":1792675417706,"tokens":{"in":29765,"out":1996,"cacheRead":0,"cacheWrite":0},"refusal":null}},{"cve":"CVE-2022-0847","name":"Dirty Pipe","repo":"torvalds/linux","file":"lib/iov_iter.c","lines":2066,"published":"2022-03-10T17:44:57.283","cvss":7.8,"severity":"high","cwe":["CWE-665"],"state":"done","result":{"score":{"result":"found","distance":0,"cwe":true},"title":"Uninitialized pipe_buffer flags in copy_page_to_iter_pipe/push_pipe (Dirty Pipe)","usd":0.169452,"ms":16031,"at":1792675478739,"tokens":{"in":34793,"out":1514,"cacheRead":0,"cacheWrite":0},"refusal":null}},{"cve":"CVE-2021-4034","name":"PwnKit","repo":"polkit-org/polkit","file":"src/programs/pkexec.c","lines":1046,"published":"2022-01-28T20:15:12.193","cvss":7.8,"severity":"high","cwe":["CWE-787","CWE-125"],"state":"done","result":{"score":{"result":"found","distance":0,"cwe":true},"title":"pkexec out-of-bounds argv/envp read and write when argc == 0 (PwnKit)","usd":0.10376,"ms":18881,"at":1792675542621,"tokens":{"in":16355,"out":1917,"cacheRead":0,"cacheWrite":0},"refusal":null}},{"cve":"CVE-2021-3156","name":"Baron Samedit","repo":"sudo-project/sudo","file":"plugins/sudoers/sudoers.c","lines":1699,"published":"2021-01-26T21:15:12.987","cvss":7.8,"severity":"high","cwe":["CWE-193"],"state":"done","result":{"score":{"result":"found","distance":0,"cwe":false},"title":"Heap buffer overflow when unescaping a trailing backslash in user_args (Baron Samedit)","usd":0.163012,"ms":19867,"at":1792675607490,"tokens":{"in":30373,"out":2076,"cacheRead":0,"cacheWrite":0},"refusal":null}},{"cve":"CVE-2023-38545","name":"curl SOCKS5 overflow","repo":"curl/curl","file":"lib/socks.c","lines":1254,"published":"2023-10-18T04:15:11.077","cvss":9.8,"severity":"critical","cwe":["CWE-787"],"state":"done","result":{"score":{"result":"found","distance":0,"cwe":false},"title":"SOCKS5 heap buffer overflow with long hostname when handshake is slow (CVE-2023-38545)","usd":0.12742,"ms":17900,"at":1792675670390,"tokens":{"in":22675,"out":1836,"cacheRead":0,"cacheWrite":0},"refusal":null}},{"cve":"CVE-2016-5195","name":"Dirty COW","repo":"torvalds/linux","file":"mm/gup.c","lines":1523,"published":"2016-11-10T21:59:00.197","cvss":7,"severity":"high","cwe":["CWE-362"],"state":"done","result":{"score":{"result":"found","distance":0,"cwe":true},"title":"Dirty COW: FOLL_WRITE dropped after COW break lets forced writes reach read-only page-cache pages","usd":0.16776,"ms":31112,"at":1792675746504,"tokens":{"in":27280,"out":2932,"cacheRead":0,"cacheWrite":0},"refusal":null}},{"cve":"CVE-2023-4863","name":"the WebP zero-day","repo":"webmproject/libwebp","file":"src/utils/huffman_utils.c","lines":236,"published":"2023-09-12T15:15:24.327","cvss":8.8,"severity":"high","cwe":["CWE-787"],"state":"done","result":{"score":{"result":"found","distance":0,"cwe":true},"title":"Heap buffer overflow in BuildHuffmanTable 2nd-level tables for incomplete Huffman codes (CVE-2023-4863)","usd":0.0758,"ms":27448,"at":1792675818953,"tokens":{"in":4685,"out":2853,"cacheRead":0,"cacheWrite":0},"refusal":null}},{"cve":"CVE-2022-3602","name":"Spooky SSL","repo":"openssl/openssl","file":"crypto/punycode.c","lines":339,"published":"2022-11-01T18:15:10.983","cvss":7.5,"severity":"high","cwe":["CWE-787"],"state":"done","result":{"score":{"result":"found","distance":0,"cwe":false},"title":"Off-by-one stack buffer overflow in ossl_punycode_decode (CVE-2022-3602)","usd":0.051432,"ms":16206,"at":1792675276787,"tokens":{"in":5578,"out":1456,"cacheRead":0,"cacheWrite":0},"refusal":null}},{"cve":"CVE-2019-11043","name":"PHP-FPM underflow","repo":"php/php-src","file":"sapi/fpm/fpm/fpm_main.c","lines":2046,"published":"2019-10-28T15:15:13.863","cvss":8.7,"severity":"high","cwe":["CWE-120","CWE-787"],"state":"done","result":{"score":{"result":"found","distance":0,"cwe":true},"title":"PATH_INFO pointer underflow in init_request_info (CVE-2019-11043)","usd":0.194848,"ms":24202,"at":1792675888156,"tokens":{"in":38362,"out":2070,"cacheRead":0,"cacheWrite":0},"refusal":null}},{"cve":"CVE-2018-6789","name":"Exim base64 off-by-one","repo":"exim/exim","file":"src/src/base64.c","lines":286,"published":"2018-02-08T23:29:01.170","cvss":9.8,"severity":"critical","cwe":["CWE-120"],"state":"done","result":{"score":{"result":"found","distance":0,"cwe":false},"title":"Off-by-one heap overflow in b64decode due to undersized result buffer","usd":0.05538,"ms":16807,"at":1792675949965,"tokens":{"in":5575,"out":1654,"cacheRead":0,"cacheWrite":0},"refusal":null}},{"cve":"CVE-2019-18634","name":"sudo pwfeedback","repo":"sudo-project/sudo","file":"src/tgetpass.c","lines":452,"published":"2020-01-29T18:15:12.247","cvss":7.8,"severity":"high","cwe":["CWE-787"],"state":"done","result":{"score":{"result":"found","distance":0,"cwe":true},"title":"pwfeedback buffer overflow in getln() line-kill handling (CVE-2019-18634)","usd":0.065132,"ms":24477,"at":1792676019443,"tokens":{"in":8048,"out":1647,"cacheRead":0,"cacheWrite":0},"refusal":null}},{"cve":"CVE-2021-41773","name":"Apache path traversal","repo":"apache/httpd","file":"server/util.c","lines":1600,"published":"2021-10-05T09:15:07.593","cvss":9.8,"severity":"critical","cwe":["CWE-22"],"state":"queued","result":null},{"cve":"CVE-2022-37434","name":"zlib inflate overflow","repo":"madler/zlib","file":"inflate.c","lines":1593,"published":"2022-08-05T07:15:07.240","cvss":9.8,"severity":"critical","cwe":["CWE-787","CWE-120"],"state":"queued","result":null},{"cve":"CVE-2020-8597","name":"pppd EAP overflow","repo":"ppp-project/ppp","file":"pppd/eap.c","lines":1600,"published":"2020-02-03T23:15:11.387","cvss":9.8,"severity":"critical","cwe":["CWE-120"],"state":"queued","result":null},{"cve":"CVE-2019-14287","name":"sudo user -1","repo":"sudo-project/sudo","file":"lib/util/strtoid.c","lines":179,"published":"2019-10-17T18:15:12.330","cvss":8.8,"severity":"high","cwe":["CWE-755"],"state":"queued","result":null},{"cve":"CVE-2023-25136","name":"OpenSSH double free","repo":"openssh/openssh-portable","file":"compat.c","lines":209,"published":"2023-02-03T06:15:09.350","cvss":6.5,"severity":"medium","cwe":["CWE-415"],"state":"queued","result":null},{"cve":"CVE-2022-24999","name":"qs prototype pollution","repo":"ljharb/qs","file":"lib/parse.js","lines":264,"published":"2022-11-26T22:15:10.153","cvss":7.5,"severity":"high","cwe":["CWE-1321"],"state":"queued","result":null},{"cve":"CVE-2019-11358","name":"jQuery extend pollution","repo":"jquery/jquery","file":"src/core.js","lines":399,"published":"2019-04-20T00:29:00.247","cvss":6.1,"severity":"medium","cwe":["CWE-1321"],"state":"queued","result":null},{"cve":"CVE-2020-11022","name":"jQuery htmlPrefilter XSS","repo":"jquery/jquery","file":"src/manipulation.js","lines":453,"published":"2020-04-29T22:15:11.903","cvss":6.9,"severity":"medium","cwe":["CWE-79"],"state":"queued","result":null},{"cve":"CVE-2019-10744","name":"lodash defaultsDeep pollution","repo":"lodash/lodash","file":"lodash.js","lines":1600,"published":"2019-07-26T00:15:11.217","cvss":9.1,"severity":"critical","cwe":["CWE-1321"],"state":"queued","result":null},{"cve":"CVE-2020-7660","name":"serialize-javascript injection","repo":"yahoo/serialize-javascript","file":"index.js","lines":220,"published":"2020-06-01T15:15:14.760","cvss":8.1,"severity":"high","cwe":["CWE-502"],"state":"queued","result":null},{"cve":"CVE-2024-24576","name":"Rust BatBadBut","repo":"rust-lang/rust","file":"library/std/src/sys/pal/windows/args.rs","lines":380,"published":"2024-04-09T18:15:08.420","cvss":10,"severity":"critical","cwe":["CWE-78","CWE-88"],"state":"queued","result":null},{"cve":"CVE-2023-4911","name":"Looney Tunables","repo":"bminor/glibc","file":"elf/dl-tunables.c","lines":426,"published":"2023-10-03T18:15:10.463","cvss":7.8,"severity":"high","cwe":["CWE-122","CWE-787"],"state":"queued","result":null},{"cve":"CVE-2024-2961","name":"glibc iconv overflow","repo":"bminor/glibc","file":"iconvdata/iso-2022-cn-ext.c","lines":675,"published":"2024-04-17T18:15:15.833","cvss":7.3,"severity":"high","cwe":["CWE-787"],"state":"queued","result":null},{"cve":"CVE-2015-7547","name":"glibc getaddrinfo","repo":"bminor/glibc","file":"resolv/res_send.c","lines":1454,"published":"2016-02-18T21:59:00.120","cvss":8.1,"severity":"high","cwe":["CWE-119"],"state":"queued","result":null},{"cve":"CVE-2022-21449","name":"Psychic Signatures","repo":"openjdk/jdk","file":"src/jdk.crypto.ec/share/classes/sun/security/ec/ECDSAOperations.java","lines":264,"published":"2022-04-19T21:15:16.127","cvss":7.5,"severity":"high","cwe":[],"state":"queued","result":null},{"cve":"CVE-2022-22965","name":"Spring4Shell","repo":"spring-projects/spring-framework","file":"spring-beans/src/main/java/org/springframework/beans/CachedIntrospectionResults.java","lines":443,"published":"2022-04-01T23:15:13.870","cvss":9.8,"severity":"critical","cwe":["CWE-94"],"state":"queued","result":null},{"cve":"CVE-2021-44228","name":"Log4Shell","repo":"apache/logging-log4j2","file":"log4j-core/src/main/java/org/apache/logging/log4j/core/net/JndiManager.java","lines":194,"published":"2021-12-10T10:15:09.143","cvss":10,"severity":"critical","cwe":["CWE-20","CWE-400","CWE-502","CWE-917"],"state":"queued","result":null},{"cve":"CVE-2022-22947","name":"Spring Cloud Gateway SpEL","repo":"spring-cloud/spring-cloud-gateway","file":"spring-cloud-gateway-server/src/main/java/org/springframework/cloud/gateway/support/ShortcutConfigurable.java","lines":152,"published":"2022-03-03T22:15:08.673","cvss":10,"severity":"critical","cwe":["CWE-94","CWE-917"],"state":"queued","result":null},{"cve":"CVE-2019-0232","name":"Tomcat CGI injection","repo":"apache/tomcat","file":"java/org/apache/catalina/servlets/CGIServlet.java","lines":1917,"published":"2019-04-15T15:29:00.420","cvss":8.1,"severity":"high","cwe":["CWE-78"],"state":"queued","result":null},{"cve":"CVE-2017-7494","name":"SambaCry","repo":"samba-team/samba","file":"source3/rpc_server/srv_pipe.c","lines":1878,"published":"2017-05-30T18:29:00.190","cvss":9.8,"severity":"critical","cwe":["CWE-94"],"state":"queued","result":null},{"cve":"CVE-2017-14491","name":"dnsmasq DNS overflow","repo":"imp/dnsmasq","file":"src/rfc1035.c","lines":1920,"published":"2017-10-04T01:29:02.870","cvss":9.8,"severity":"critical","cwe":["CWE-787"],"state":"queued","result":null},{"cve":"CVE-2019-11477","name":"SACK Panic","repo":"torvalds/linux","file":"net/ipv4/tcp_input.c","lines":1600,"published":"2019-06-19T00:15:12.640","cvss":7.5,"severity":"high","cwe":["CWE-190"],"state":"queued","result":null},{"cve":"CVE-2021-33909","name":"Sequoia","repo":"torvalds/linux","file":"fs/seq_file.c","lines":1132,"published":"2021-07-20T19:15:09.747","cvss":7.8,"severity":"high","cwe":["CWE-190","CWE-787"],"state":"queued","result":null},{"cve":"CVE-2021-22555","name":"netfilter x_tables overflow","repo":"torvalds/linux","file":"net/netfilter/x_tables.c","lines":1924,"published":"2021-07-07T12:15:08.453","cvss":8.3,"severity":"high","cwe":["CWE-787"],"state":"queued","result":null},{"cve":"CVE-2022-0185","name":"fs_context underflow","repo":"torvalds/linux","file":"fs/fs_context.c","lines":718,"published":"2022-02-11T18:15:10.890","cvss":8.4,"severity":"high","cwe":["CWE-190","CWE-191"],"state":"queued","result":null},{"cve":"CVE-2016-0728","name":"keyring refcount","repo":"torvalds/linux","file":"security/keys/process_keys.c","lines":872,"published":"2016-02-08T03:59:10.887","cvss":7.8,"severity":"high","cwe":[],"state":"queued","result":null},{"cve":"CVE-2017-7308","name":"packet_set_ring overflow","repo":"torvalds/linux","file":"net/packet/af_packet.c","lines":1600,"published":"2017-03-29T20:59:00.373","cvss":7.8,"severity":"high","cwe":["CWE-681","CWE-787"],"state":"queued","result":null},{"cve":"CVE-2017-16995","name":"eBPF sign extension","repo":"torvalds/linux","file":"kernel/bpf/verifier.c","lines":1600,"published":"2017-12-27T17:08:17.670","cvss":7.8,"severity":"high","cwe":["CWE-119"],"state":"queued","result":null},{"cve":"CVE-2020-8835","name":"eBPF bounds bypass","repo":"torvalds/linux","file":"kernel/bpf/verifier.c","lines":1600,"published":"2020-04-02T18:15:18.943","cvss":7.8,"severity":"high","cwe":["CWE-125","CWE-787"],"state":"queued","result":null},{"cve":"CVE-2021-3490","name":"eBPF ALU32 bounds","repo":"torvalds/linux","file":"kernel/bpf/verifier.c","lines":1600,"published":"2021-06-04T02:15:07.150","cvss":7.8,"severity":"high","cwe":["CWE-20","CWE-787","CWE-125"],"state":"queued","result":null},{"cve":"CVE-2020-14386","name":"af_packet overflow","repo":"torvalds/linux","file":"net/packet/af_packet.c","lines":1600,"published":"2020-09-16T13:15:11.083","cvss":6.7,"severity":"medium","cwe":["CWE-250","CWE-787"],"state":"queued","result":null},{"cve":"CVE-2016-8655","name":"af_packet race","repo":"torvalds/linux","file":"net/packet/af_packet.c","lines":1600,"published":"2016-12-08T08:59:00.177","cvss":7.8,"severity":"high","cwe":["CWE-362","CWE-416"],"state":"queued","result":null},{"cve":"CVE-2018-17182","name":"vmacache overflow","repo":"torvalds/linux","file":"mm/vmacache.c","lines":157,"published":"2018-09-19T09:29:00.620","cvss":7.8,"severity":"high","cwe":["CWE-416"],"state":"queued","result":null},{"cve":"CVE-2022-2588","name":"cls_route UAF","repo":"torvalds/linux","file":"net/sched/cls_route.c","lines":684,"published":"2024-01-08T18:15:44.840","cvss":5.3,"severity":"medium","cwe":["CWE-416","CWE-415"],"state":"queued","result":null},{"cve":"CVE-2022-32250","name":"nf_tables UAF","repo":"torvalds/linux","file":"net/netfilter/nf_tables_api.c","lines":1600,"published":"2022-06-02T21:15:07.973","cvss":7.8,"severity":"high","cwe":["CWE-416"],"state":"queued","result":null},{"cve":"CVE-2023-32233","name":"nf_tables anonymous set UAF","repo":"torvalds/linux","file":"net/netfilter/nf_tables_api.c","lines":1600,"published":"2023-05-08T20:15:20.267","cvss":7.8,"severity":"high","cwe":["CWE-416"],"state":"queued","result":null},{"cve":"CVE-2023-0386","name":"OverlayFS setuid copy","repo":"torvalds/linux","file":"fs/overlayfs/copy_up.c","lines":1140,"published":"2023-03-22T21:15:18.090","cvss":7.8,"severity":"high","cwe":["CWE-282"],"state":"queued","result":null},{"cve":"CVE-2022-27666","name":"esp6 overflow","repo":"torvalds/linux","file":"net/ipv4/esp4.c","lines":1242,"published":"2022-03-23T06:15:06.717","cvss":7.8,"severity":"high","cwe":["CWE-787"],"state":"queued","result":null},{"cve":"CVE-2021-26708","name":"vsock race","repo":"torvalds/linux","file":"net/vmw_vsock/af_vsock.c","lines":1600,"published":"2021-02-05T14:15:18.780","cvss":7,"severity":"high","cwe":["CWE-667"],"state":"queued","result":null},{"cve":"CVE-2023-2008","name":"udmabuf bounds","repo":"torvalds/linux","file":"drivers/dma-buf/udmabuf.c","lines":381,"published":"2023-04-14T21:15:08.597","cvss":8.2,"severity":"high","cwe":["CWE-129"],"state":"queued","result":null},{"cve":"CVE-2024-1086","name":"nf_tables verdict UAF","repo":"torvalds/linux","file":"net/netfilter/nf_tables_api.c","lines":1600,"published":"2024-01-31T13:15:10.827","cvss":7.8,"severity":"high","cwe":["CWE-416"],"state":"queued","result":null},{"cve":"CVE-2022-34918","name":"nf_tables set overflow","repo":"torvalds/linux","file":"net/netfilter/nf_tables_api.c","lines":1600,"published":"2022-07-04T21:15:07.730","cvss":7.8,"severity":"high","cwe":["CWE-843"],"state":"queued","result":null},{"cve":"CVE-2020-25705","name":"SAD DNS","repo":"torvalds/linux","file":"net/ipv4/icmp.c","lines":1376,"published":"2020-11-17T02:15:13.427","cvss":7.4,"severity":"high","cwe":["CWE-330"],"state":"queued","result":null},{"cve":"CVE-2021-3493","name":"OverlayFS capabilities","repo":"torvalds/linux","file":"fs/xattr.c","lines":1099,"published":"2021-04-17T05:15:14.630","cvss":8.8,"severity":"high","cwe":["CWE-270","CWE-863"],"state":"queued","result":null},{"cve":"CVE-2022-25636","name":"nf_dup_netdev overflow","repo":"torvalds/linux","file":"net/netfilter/nft_immediate.c","lines":237,"published":"2022-02-24T15:15:31.993","cvss":7.8,"severity":"high","cwe":["CWE-269"],"state":"queued","result":null},{"cve":"CVE-2014-0224","name":"OpenSSL CCS injection","repo":"openssl/openssl","file":"ssl/s3_pkt.c","lines":1826,"published":"2014-06-05T21:55:07.817","cvss":7.4,"severity":"high","cwe":["CWE-326"],"state":"queued","result":null},{"cve":"CVE-2022-0778","name":"OpenSSL BN_mod_sqrt loop","repo":"openssl/openssl","file":"crypto/bn/bn_sqrt.c","lines":363,"published":"2022-03-15T17:15:08.513","cvss":7.5,"severity":"high","cwe":["CWE-835"],"state":"queued","result":null},{"cve":"CVE-2020-1967","name":"OpenSSL SSL_check_chain crash","repo":"openssl/openssl","file":"ssl/t1_lib.c","lines":1600,"published":"2020-04-21T14:15:11.287","cvss":7.5,"severity":"high","cwe":["CWE-476"],"state":"queued","result":null},{"cve":"CVE-2021-3711","name":"OpenSSL SM2 overflow","repo":"openssl/openssl","file":"crypto/sm2/sm2_crypt.c","lines":411,"published":"2021-08-24T15:15:09.133","cvss":9.8,"severity":"critical","cwe":["CWE-120"],"state":"queued","result":null},{"cve":"CVE-2016-2107","name":"OpenSSL padding oracle","repo":"openssl/openssl","file":"crypto/evp/e_aes_cbc_hmac_sha1.c","lines":1011,"published":"2016-05-05T01:59:03.200","cvss":5.9,"severity":"medium","cwe":["CWE-200","CWE-310"],"state":"queued","result":null},{"cve":"CVE-2021-3449","name":"OpenSSL renegotiation crash","repo":"openssl/openssl","file":"ssl/statem/extensions.c","lines":1672,"published":"2021-03-25T15:15:13.450","cvss":5.9,"severity":"medium","cwe":["CWE-476"],"state":"queued","result":null},{"cve":"CVE-2023-0286","name":"OpenSSL X.400 confusion","repo":"openssl/openssl","file":"crypto/x509/v3_genn.c","lines":242,"published":"2023-02-08T20:15:24.267","cvss":7.4,"severity":"high","cwe":["CWE-843"],"state":"queued","result":null},{"cve":"CVE-2017-9798","name":"Optionsbleed","repo":"apache/httpd","file":"server/core.c","lines":1600,"published":"2017-09-18T15:29:00.307","cvss":7.5,"severity":"high","cwe":["CWE-416"],"state":"queued","result":null},{"cve":"CVE-2014-3704","name":"Drupalgeddon","repo":"drupal/drupal","file":"core/lib/Drupal/Core/Database/Connection.php","lines":1274,"published":"2014-10-16T00:55:06.653","cvss":7.5,"severity":"high","cwe":["CWE-89"],"state":"queued","result":null},{"cve":"CVE-2019-19844","name":"Django password reset takeover","repo":"django/django","file":"django/contrib/auth/forms.py","lines":438,"published":"2019-12-18T19:15:11.780","cvss":9.8,"severity":"critical","cwe":["CWE-640"],"state":"queued","result":null},{"cve":"CVE-2022-28346","name":"Django annotate SQL injection","repo":"django/django","file":"django/db/models/sql/query.py","lines":1600,"published":"2022-04-12T05:15:06.927","cvss":9.8,"severity":"critical","cwe":["CWE-89"],"state":"queued","result":null},{"cve":"CVE-2020-7471","name":"Django StringAgg SQL injection","repo":"django/django","file":"django/contrib/postgres/aggregates/general.py","lines":64,"published":"2020-02-03T12:15:26.993","cvss":9.8,"severity":"critical","cwe":["CWE-89"],"state":"queued","result":null},{"cve":"CVE-2019-14234","name":"Django JSONField SQL injection","repo":"django/django","file":"django/contrib/postgres/fields/jsonb.py","lines":189,"published":"2019-08-09T13:15:11.777","cvss":9.8,"severity":"critical","cwe":["CWE-89"],"state":"queued","result":null},{"cve":"CVE-2022-34265","name":"Django Trunc SQL injection","repo":"django/django","file":"django/db/models/functions/datetime.py","lines":416,"published":"2022-07-04T16:15:09.260","cvss":9.8,"severity":"critical","cwe":["CWE-89"],"state":"queued","result":null},{"cve":"CVE-2023-30861","name":"Flask cookie leak","repo":"pallets/flask","file":"src/flask/sessions.py","lines":366,"published":"2023-05-02T18:15:52.373","cvss":7.5,"severity":"high","cwe":["CWE-539"],"state":"queued","result":null},{"cve":"CVE-2019-10906","name":"Jinja2 sandbox escape","repo":"pallets/jinja","file":"jinja2/sandbox.py","lines":476,"published":"2019-04-07T00:29:00.213","cvss":8.6,"severity":"high","cwe":[],"state":"queued","result":null},{"cve":"CVE-2021-3177","name":"Python ctypes overflow","repo":"python/cpython","file":"Modules/_ctypes/callproc.c","lines":2028,"published":"2021-01-19T06:15:12.967","cvss":9.8,"severity":"critical","cwe":["CWE-120"],"state":"queued","result":null},{"cve":"CVE-2022-0391","name":"urlparse newline bypass","repo":"python/cpython","file":"Lib/urllib/parse.py","lines":1190,"published":"2022-02-09T23:15:16.580","cvss":7.5,"severity":"high","cwe":["CWE-74"],"state":"queued","result":null},{"cve":"CVE-2023-24329","name":"urllib blank-prefix bypass","repo":"python/cpython","file":"Lib/urllib/parse.py","lines":1225,"published":"2023-02-17T15:15:12.243","cvss":7.5,"severity":"high","cwe":["CWE-20"],"state":"queued","result":null},{"cve":"CVE-2020-26116","name":"http.client CRLF injection","repo":"python/cpython","file":"Lib/http/client.py","lines":1496,"published":"2020-09-27T04:15:11.587","cvss":7.2,"severity":"high","cwe":["CWE-74"],"state":"queued","result":null},{"cve":"CVE-2021-3737","name":"http.client infinite loop","repo":"python/cpython","file":"Lib/http/client.py","lines":1516,"published":"2022-03-04T19:15:08.730","cvss":7.5,"severity":"high","cwe":["CWE-835","CWE-400"],"state":"queued","result":null},{"cve":"CVE-2019-9636","name":"urlsplit NFKC bypass","repo":"python/cpython","file":"Lib/urllib/parse.py","lines":1141,"published":"2019-03-08T21:29:00.703","cvss":9.8,"severity":"critical","cwe":["CWE-173"],"state":"queued","result":null},{"cve":"CVE-2023-22809","name":"sudoedit file bypass","repo":"sudo-project/sudo","file":"plugins/sudoers/sudoers.c","lines":1907,"published":"2023-01-18T17:15:10.353","cvss":7.8,"severity":"high","cwe":["CWE-269"],"state":"queued","result":null},{"cve":"CVE-2017-13089","name":"wget chunked overflow","repo":"mirror/wget","file":"src/http.c","lines":1600,"published":"2017-10-27T19:29:00.330","cvss":8.8,"severity":"high","cwe":["CWE-121","CWE-119"],"state":"queued","result":null},{"cve":"CVE-2022-41903","name":"git format overflow","repo":"git/git","file":"pretty.c","lines":2021,"published":"2023-01-17T23:15:15.690","cvss":9.8,"severity":"critical","cwe":["CWE-190"],"state":"queued","result":null},{"cve":"CVE-2019-3822","name":"curl NTLMv2 overflow","repo":"curl/curl","file":"lib/vauth/ntlm.c","lines":869,"published":"2019-02-06T20:29:00.353","cvss":9.8,"severity":"critical","cwe":["CWE-121","CWE-787"],"state":"queued","result":null},{"cve":"CVE-2021-22901","name":"curl TLS session UAF","repo":"curl/curl","file":"lib/vtls/openssl.c","lines":1600,"published":"2021-06-11T16:15:11.120","cvss":8.1,"severity":"high","cwe":["CWE-416"],"state":"queued","result":null},{"cve":"CVE-2017-9445","name":"systemd-resolved overflow","repo":"systemd/systemd","file":"src/resolve/resolved-dns-packet.c","lines":1600,"published":"2017-06-28T06:29:00.190","cvss":7.5,"severity":"high","cwe":["CWE-787"],"state":"queued","result":null},{"cve":"CVE-2021-23017","name":"nginx resolver off-by-one","repo":"nginx/nginx","file":"src/core/ngx_resolver.c","lines":1600,"published":"2021-06-01T13:15:07.853","cvss":7.7,"severity":"high","cwe":["CWE-193"],"state":"queued","result":null},{"cve":"CVE-2016-10033","name":"PHPMailer sender injection","repo":"PHPMailer/PHPMailer","file":"class.phpmailer.php","lines":1600,"published":"2016-12-30T19:59:00.137","cvss":9.8,"severity":"critical","cwe":["CWE-88"],"state":"queued","result":null},{"cve":"CVE-2021-3129","name":"Laravel Ignition RCE","repo":"facade/ignition","file":"src/Solutions/MakeViewVariableOptionalSolution.php","lines":106,"published":"2021-01-12T15:15:16.453","cvss":9.8,"severity":"critical","cwe":[],"state":"queued","result":null},{"cve":"CVE-2021-22204","name":"ExifTool DjVu RCE","repo":"exiftool/exiftool","file":"lib/Image/ExifTool/DjVu.pm","lines":378,"published":"2021-04-23T18:15:08.127","cvss":6.8,"severity":"medium","cwe":["CWE-94"],"state":"queued","result":null},{"cve":"CVE-2019-12735","name":"Vim modeline RCE","repo":"vim/vim","file":"src/getchar.c","lines":1600,"published":"2019-06-05T14:29:11.387","cvss":8.6,"severity":"high","cwe":["CWE-78"],"state":"queued","result":null},{"cve":"CVE-2020-8184","name":"Rack cookie forgery","repo":"rack/rack","file":"lib/rack/utils.rb","lines":614,"published":"2020-06-19T17:15:18.757","cvss":7.5,"severity":"high","cwe":["CWE-784","CWE-20"],"state":"queued","result":null},{"cve":"CVE-2022-30123","name":"Rack shell escape","repo":"rack/rack","file":"lib/rack/common_logger.rb","lines":86,"published":"2022-12-05T22:15:10.280","cvss":10,"severity":"critical","cwe":["CWE-150"],"state":"queued","result":null},{"cve":"CVE-2019-5418","name":"Rails file disclosure","repo":"rails/rails","file":"actionpack/lib/action_dispatch/http/mime_negotiation.rb","lines":173,"published":"2019-03-27T14:29:01.533","cvss":7.5,"severity":"high","cwe":["CWE-22"],"state":"queued","result":null},{"cve":"CVE-2020-25613","name":"WEBrick smuggling","repo":"ruby/webrick","file":"lib/webrick/httprequest.rb","lines":637,"published":"2020-10-06T13:15:13.823","cvss":7.5,"severity":"high","cwe":["CWE-444"],"state":"queued","result":null},{"cve":"CVE-2020-28362","name":"Go math/big panic","repo":"golang/go","file":"src/math/big/ratconv.go","lines":375,"published":"2020-11-18T17:15:11.930","cvss":7.5,"severity":"high","cwe":["CWE-295"],"state":"queued","result":null},{"cve":"CVE-2022-23806","name":"Go IsOnCurve bypass","repo":"golang/go","file":"src/crypto/elliptic/elliptic.go","lines":492,"published":"2022-02-11T01:15:07.747","cvss":9.1,"severity":"critical","cwe":["CWE-252"],"state":"queued","result":null},{"cve":"CVE-2022-24675","name":"Go PEM stack overflow","repo":"golang/go","file":"src/encoding/pem/pem.go","lines":343,"published":"2022-04-20T10:15:07.930","cvss":7.5,"severity":"high","cwe":["CWE-674"],"state":"queued","result":null},{"cve":"CVE-2021-3114","name":"Go P-224 bad math","repo":"golang/go","file":"src/crypto/elliptic/p224.go","lines":768,"published":"2021-01-26T18:16:27.567","cvss":6.5,"severity":"medium","cwe":["CWE-682"],"state":"queued","result":null},{"cve":"CVE-2018-1000810","name":"Rust str::repeat overflow","repo":"rust-lang/rust","file":"src/liballoc/slice.rs","lines":959,"published":"2018-10-08T15:29:01.227","cvss":9.8,"severity":"critical","cwe":["CWE-190"],"state":"queued","result":null},{"cve":"CVE-2022-21658","name":"Rust remove_dir_all race","repo":"rust-lang/rust","file":"library/std/src/sys/unix/fs.rs","lines":1442,"published":"2022-01-20T18:15:07.703","cvss":7.3,"severity":"high","cwe":["CWE-363","CWE-367"],"state":"queued","result":null},{"cve":"CVE-2020-7598","name":"minimist pollution","repo":"minimistjs/minimist","file":"index.js","lines":237,"published":"2020-03-11T23:15:11.917","cvss":5.6,"severity":"medium","cwe":["CWE-1321"],"state":"queued","result":null},{"cve":"CVE-2021-3807","name":"ansi-regex ReDoS","repo":"chalk/ansi-regex","file":"index.js","lines":9,"published":"2021-09-17T07:15:09.273","cvss":7.5,"severity":"high","cwe":["CWE-1333"],"state":"queued","result":null},{"cve":"CVE-2022-25883","name":"semver ReDoS","repo":"npm/node-semver","file":"classes/range.js","lines":527,"published":"2023-06-21T05:15:09.060","cvss":5.3,"severity":"medium","cwe":["CWE-1333"],"state":"queued","result":null},{"cve":"CVE-2023-26136","name":"tough-cookie pollution","repo":"salesforce/tough-cookie","file":"lib/memstore.js","lines":243,"published":"2023-07-01T05:15:16.103","cvss":6.5,"severity":"medium","cwe":["CWE-1321"],"state":"queued","result":null},{"cve":"CVE-2020-7774","name":"y18n pollution","repo":"yargs/y18n","file":"lib/index.ts","lines":228,"published":"2020-11-17T13:15:12.633","cvss":7.3,"severity":"high","cwe":["CWE-1321"],"state":"queued","result":null},{"cve":"CVE-2020-7608","name":"yargs-parser pollution","repo":"yargs/yargs-parser","file":"index.js","lines":1005,"published":"2020-03-16T20:15:12.860","cvss":5.3,"severity":"medium","cwe":["CWE-1321"],"state":"queued","result":null},{"cve":"CVE-2021-32640","name":"ws ReDoS","repo":"websockets/ws","file":"lib/websocket-server.js","lines":407,"published":"2021-05-25T19:15:07.767","cvss":5.3,"severity":"medium","cwe":["CWE-400"],"state":"queued","result":null},{"cve":"CVE-2022-31129","name":"moment ReDoS","repo":"moment/moment","file":"src/lib/create/from-string.js","lines":259,"published":"2022-07-06T18:15:19.570","cvss":7.5,"severity":"high","cwe":["CWE-400","CWE-1333"],"state":"queued","result":null},{"cve":"CVE-2019-10746","name":"mixin-deep pollution","repo":"jonschlinkert/mixin-deep","file":"index.js","lines":35,"published":"2019-08-23T17:15:13.340","cvss":9.8,"severity":"critical","cwe":["CWE-88"],"state":"queued","result":null},{"cve":"CVE-2021-23369","name":"handlebars RCE","repo":"handlebars-lang/handlebars.js","file":"lib/handlebars/runtime.js","lines":451,"published":"2021-04-12T14:15:14.383","cvss":5.6,"severity":"medium","cwe":[],"state":"queued","result":null}],"model":"claude-opus-5-5"}