Arbitrary Code Execution

gpac is vulnerable to arbitrary code execution. An invalid pointer dereference in the function SetupWriters in isomedia/isomstore.c allows an attacker to execute arbitrary code on the host OS...

Arbitrary Code Execution

unbound is vulnerable to arbitrary code execution. An integer overflow in the regional allocator via the ALIGNUP macro allows an attacker to execute arbitrary code on the host OS...

Arbitrary Code Execution

glibc is vulnerable to arbitrary code execution. A heap-based buffer over-read in proceednextnode in posix/regexec.c allows an attacker to execute arbitrary code on the host OS via an attempted case-insensitive regular-expression match...

Arbitrary Code Execution

rxvt-unicode is vulneralbe to arbitrary code execution. Improper handling of certain escape sequences allows an attacker to execute arbitrary code on the host OS...

Arbitrary Code Execution

chromium is vulnerable to arbitrary code execution. A heap buffer overflow in the History component allows an attacker to execute arbitrary code on the host OS...

Arbitrary Code Execution

chromium is vulnerable to arbitrary code execution. A heap buffer overflow in Media Feeds allows an attacker to execute arbitrary code on the host OS...

OS Command Injection

git-parse is vulnerable to OS command injection. Untrusted input in gitDiff is passed into an exec function without validation, allowing an attacker to execute arbitrary OS commands on the host OS...

Arbitrary Code Execution

exim4 is vulnerable to arbitrary code execution. A heap out-of-bounds write in parsefixphrase allows an attacker to execute arbitrary code on the host OS...

Arbitrary Code Execution

exim4 is vulnerable to arbitrary code execution . Line truncation and injection in spoolreadheader could potentially allow an attacker to execute arbitrary code on the host OS...

Arbitrary Code Execution

u-boot is vulnerable to arbitrary ry code execution. The boot loader in Das U-Boot mishandles a modified FIT and allows an attacker to execute arbitrary code on the host OS...

Denial Of Service (DoS)

podofo is vulnerable to denial of service. A NULL pointer dereference vulnerability exists in the function PdfTranslator::setTarget in pdftranslator.cpp while creating the PdfXObject.The vulnerability can potentially result in arbitrary code execution on the host OS...

Arbitrary Code Execution

NetHack is vulmnerable to arbitrary code execution. A buffer overflow vulnerability when reading very long lines from configuration files allows an attacker to exploit the vulnerability to obtain arbitrary code execution on the host OS...

Arbitrary Code Execution

jhead is vulnerable to arbitrary code execution. A heap-based buffer overflow in Get16u in exif.c allows an attacker to execute arbitrary code on the host OS via a malicious file...

Arbitrary Code Execution

firefox is vulnerable to arbitrary code execution.An attacker is able to execute arbitrary code on the host OS via font cache...

Arbitrary Code Execution

chromium is vulnerable to arbitrary code execution. A use-after-free in permissions allows an attacker to execute arbitrary code on the host OS...

Arbitrary Code Execution

chromium is vulnerable to arbitrary code execution. A use-after-free in IndexedDB allows an attacker to execute arbitrary code on the host OS...

Arbitrary Command Execution

ffmpegdotjs is vulnerable to arbitrary command execution. Untrusted user input is passed into the trimvideo function and subsequently parsed in exec function. This allows an attacker to execute arbitrary commands on the host OS...

Remote Code Execution

system.text.encodings.web is vulnerable to remote code execution. A buffer overrun allows an attacker to remotely execute arbitrary code on the host OS...

OS Command Injection

@prisma/sdk is vulnerable to OS command injection. An attacker is able to inject and execute arbitrary code on the host OS by sending a malicious command via the function getPackedPackage...

CVE-2021-29657

arch/x86/kvm/svm/nested.c in the Linux kernel before 5.11.12 has a use-after-free in which an AMD KVM guest can bypass access control on host OS MSRs when there are nested guests, aka CID-a58d9166a756. This occurs because of a TOCTOU race condition associated with a VMCB12 double fetch in...