Arbitrary Code Execution

webkit2gtk is vulnerable to arbitrary code execution. Successful exploitation of the vulnerability allows a remote attacker to execute arbitrary code on the host OS...

Arbitrary Code Execution

adplug is vulnerable to arbitrary code execution. A double free in the Cu6mPlayer class in u6m.h could potentailly allow an attacker to execute arbitrary code on the host OS...

Design/Logic Flaw

Jellyfin is a Free Software Media System. In Jellyfin before version 10.7.1, with certain endpoints, well crafted requests will allow arbitrary file read from a Jellyfin server's file system. This issue is more prevalent when Windows is used as the host OS. Servers that are exposed to the public...

Arbitrary Code Execution

rabbitmq-jms is vulnerable to arbitrary code execution. Untrusted objects are not filtered and passed through StreamMessage in the JMS to be deserialized before or while being given to the message listeners. An authenticated user is able to abuse the vulnerability to execute arbitrary code on the...

Arbitrary Code Execution

chromium is vulnerable to arbitrary code execution. A use after free flaw in the media component allows an attacker to execute arbitrary code on the host OS...

Arbitrary Code Execution

firefox is vulnerable to arbitrary code execution. A memory corruption bug allows an attacker to execute arbitrary code on the host OS...

Arbitrary Code Execution

unrar-free is vulnerable to arbitrary code execution. A stack-based buffer over-read in unrarlib.c related to ExtrFile and stricomp, allows an attacker to execute arbitrary code on the host OS...

Arbitrary Code Execution

chromium is vulnerable to arbitrary code execution. A use-after-free in Payments allows an attacker to execute arbitrary code on the host OS...

Arbitrary Code Execution

chromium is vulnerable to arbitrary code execution. A heap-based buffer overflow in Tab Strip allows an attacker to execute arbitrary code on the host OS...

CVE-2021-27379

An issue was discovered in Xen through 4.11.x, allowing x86 Intel HVM guest OS users to achieve unintended read/write DMA access, and possibly cause a denial of service host OS crash or gain privileges. This occurs because a backport missed a flush, and thus IOMMU updates were not always correct...

OS Command Injection

samba-client is vulnerable to OS command injection. The use of process.exec allows an attacker to inject and execute arbitrary OS commands on the host OS...

Arbitrary Code Execution

GraphicsMagick is vulnerable to arbitrary code execution. An integer overflow and heap-based buffer overflow in HuffmanDecodeImage in magick/compress.c allows an attacker to execute arbitrary code on the host OS...

Arbitrary Code Execution

tt-rss is vulnerable to arbitrary code execution. Lack of URL validation before requests are made allows an attacker to potentially obtain arbitrary code execution on the host OS...

Arbitrary Code Execution

firefox is vulnerable to arbitrary code execution. A memory corruption bug allows an attacker to execute arbitrary code on the host OS...

Arbitrary Code Execution

foundation-config is vulnerable to arbitrary code execution. An insecure and unsafe local YAML file parsing allows an attacker to execute arbitrary code on the host OS via a malicious YAML file...

Arbitrary Code Execution

chromium is vulnerable to arbitrary code execution. An use after free flaw in the Media component allows an attacker to execute arbitrary code on the host OS...

Arbitrary Code Execution

chromium is vulnerable to arbitrary code execution. A heap-based buffer overflow flaw was found in the Blink component allows an attacker to execute arbitrary code on the host OS...

Arbitrary Code Execution

golang is vulnerable to arbitrary code execution. An attacker is able to inject and execute arbitrary code on the host OS at build time using malicious symbol names...

Arbitrary Code Execution

chromium is vulnerable to arbitrary code execution. A heap-based buffer overflow in Skia allows a remote attacker to exploit a heap corruption and execute arbitrary code on the host OS via a malicious HTML page...

Arbitrary Code Execution

jasper is vulnerable to arbitrary code execution. An out-of-bounds write vulnerability in the jpc encoder allows an attacker to execute arbitrary code on the host OS via a malicious input...