Arbitrary Code Execution

Java SE and Java SE Embedded are vulnerable to arbitrary code execution attacks. A remote user can exploit a flaw in the Hotspot component to partially modify data...

Arbitrary Code Execution

Java SE is vulnerable to arbitrary code execution attacks. A remote authenticated user can exploit a flaw in the Scripting component which leads to access and modify data on the target system...

Privilege Escalation

Java SE and Java SE Embedded are vulnerable to privilege escalation. A remote user can exploit a flaw in the Libraries component to gain elevated privileges. This may allow the user with lower privileges to perform restricted actions...

Privilege Escalation

Java SE is vulnerable to arbitrary privilege escalation attacks. A remote user can exploit a flaw in the Security component to gain elevated privileges. This may allow a user with lower privilege to perform abilities they should not have...

Heap-Based Buffer Overflow

Linux kernel is vulnerable to heap-based buffer overflow vulnerability. This vulnerability occurs if 'MAXSKBFRAGS + 1' parameter and 'NETIFFFRAGLIST' feature are both used together. A remote user or process could use this flaw to potentially escalate their privilege on a system...

Denial Of Service (DoS)

Linux kernel is vulnerable to denial of service DOS attacks. This vulnerability exists in NFSv2/NFSv3 server in the nfsd subsystem in the Linux kernel. A remote user or program could use this flaw to crash the kernel, resulting in an application crash...

Spoofing Vulnerability

Firefox is vulnerable to spoofing attacks. A remote user can spoof the address bar using the onblur event.The event could be used by script to affect text display to make the loaded site appear to be different from the one actually loaded within the addressbar...

Improper Validation

Thunderbird, Firefox ESR, and Firefox are vulnerable to improper validation. A remote user can read uninitialized values when parsing application/http-index-format content leading to this flaw...

Heap-Based Buffer Overflow

Quick Emulator Qemu is vulnerable to heap-based buffer overflow. This occurs while copying VGA data via various bitblt functions. A remote user could use this flaw to crash the QEMU process or execute arbitrary code on the host which may leads to denial of service...

Buffer Overflow

Apache Tomcat JK ISAPI Connector is vulnerable to buffer overflow attacks. A remote user can send a specifically crafted URI to the target virtual host to trigger a buffer overflow in the JK ISAPI connector and potentially execute arbitrary code on the target system which may leads the applicatio...

Privilege Escalation

Firefox is vulnerable to privilege escalation attacks. The JSON viewer in the Developer Tools use insecure methods to create a communication channel for copying and viewing JSON or HTTP headers data which allows a remote user to monitor the network and obtain potentially sensitive information in...

Improper Input Validation

Firefox is vulnerable to improper input validation attacks. A remote user can spoof URLs using certain unicode glyphs for alternative hyphens and quotes which leads to disclosure of information...

Information Disclosure

Firefox is vulnerable to information disclosure attacks. While hashed codes of JavaScript objects are shared between pages a remote user can determine an object's address via shared hash codes. This may lead to disclose of sensitive information from the target system...

Privilege Escalation

Java SE, Java SE Embedded and JRockit component of Oracle Java SE are vulnerable to Privilege Escalation. A remote authenticated user can exploit this flaw in the JAAS component for unauthorized creation, deletion or modification access to critical data...

Information Disclosure

Red Hat Enterprise Linux is vulnerable to information disclosure attacks. A remote user can exploit this flaw in the default ACI Access Control Instructions. This information could be read by an anonymous user which could lead to leakage of sensitive information...

Arbitrary Code Execution

TigerVNC is vulnerable to arbitrary code execution attacks. A remote user can send a specially crafted RRE message with subrectangle outside framebuffer boundaries via the ModifiablePixelBuffer::fillRect function to trigger a buffer overflow and execute arbitrary code on the target system...

Privilege Escalation

Firefox Firefox ESR and Thunderbird are vulnerable to privilege escalation. A remote user can create a specially crafted SVG image that, when loaded by the target user, will access restricted external resources via 'data:' URLs. The affected component is SVG Image Handler...

Cross-site Scripting (XSS)

Firefox, Firefox ESR and Thunderbird are vulnerable to cross-site scripting XSS attacks. A remote user can bypass inline JavaScript Content Security Policy CSP and cause event handlers on marquee elements to be executed resulting in arbitrary code to execution. The affected component is Marquee T...

Session Hijacking

curl and libcurl are vulnerable to session hijacking. A remote user may be able to access data sent via a re-used TLS connection with the wrong or missing client certificate. The affected component is TLS Connection Handler...

Denial Of Service (DoS)

Oracle MySQL Server is vulnerable to denial of service DoS attacks. A remote authenticated user can manipulate with an unknown input,causing the application to crash. The affected component is Types...