601 matches found
Arbitrary Code Execution
firefox is vulnerable to arbitrary code execution. Memory corruption in the application allows an attacker to exploit the vulnerability to execute arbitrary code on the host OS...
Arbitrary Code Execution
GraphicsMagick is vulnerable to arbitrary code execution. A NULL pointer dereference in the WriteMAPImage function in coders/map.c when processing a non-colormapped image allows an attacker to execute arbitrary code on the host OS. This is different vulnerability from CVE-2017-11638...
Arbitrary Code Execution
gce-compute-image-packages is vulnerable to arbitrary code execution. Using the membership to the "lxd" group, an attacker can attach host devices and filesystems, and to attach the host OS filesystem and modify /etc/sudoers to then gain administrative privileges...
Arbitrary Code Execution
whoopsie is vulnerable to arbitrary code execution. An integer overflow in bsonensurespace allows an attacker to execute arbitrary code on the host OS...
Arbitrary Code Execution
transfig is vulnerable to arbitrary code execution. A buffer underwrite vulnerability in getline in read.c allows an attacker to write prior to the beginning of the buffer via a malicious .fig file, potentially obtaining arbitrary code execution on the host OS...
Arbitrary Code Execution
binutils is vulnerable to arbitrary code execution. A heap-based buffer overflow in bfdarchive64bitslurparmap in archive64.c allows an attacker to execute arbitrary code on the host OS...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. A NULL pointer dereference in dropsysctltable in fs/proc/procsysctl.c allows a local attacker to crash the host OS...
Arbitrary Code Execution
GPAC is vulnerable to arbitrsry code execution. A buffer overflow in the gfmediaavcreadsps function in mediatools/avparsers.c allows an attacker to execute arbitrary code on the host OS...
Arbitrry Code Execution
BusyBox is vulnerable to arbitrary code execution. A buffer overflow vulnerability in Busybox wget allows an attacker to execute arbitrary code on the host OS...
Arbitrary Code Execution
gce-compute-image-packages is vulnerable to arbitrary code execution. The vulnerability exists through a privilege escalation flaw where a user with membership to the "docker" group is able to run docker and mount the host OS, and to modify /etc/groups to gain administrative privileges...
Arbitrary Code Execution
GraphicsMagick is vulnerable to arbitrary code execution. A memory leak in the PersistCache function in magick/pixelcache.c during writing of Magick Persistent Cache MPC files allows an attacker to execute arbitrary code on the host OS...
Arbitrary Code Execution
GraphicsMagick is vulnerable to arbitrary code execution. A heap overflow in the WriteCMYKImage function in coders/cmyk.c during processing of multiple frames that have non-identical widths allows an attacker to execute arbitrary code on the host OS...
Arbitrary Code Execution
GraphicsMagick is vulnerable to arbitrary code execution. A heap-based buffer over-read in ReadOneJNGImage in coders/png.c allows an attacker to execute arbitrary code on the host OS...
Arbitrary Code Execution
github.com/helm/helm is vulnerable to arbitrary code execution. Duplicate plugin entries allows an attacker to compromise a plugin's install hooks, via a man-in-the-middle attack, and possibly execute arbitrary code on the host OS...
Arbitrary Code Execution
webkit2gtk3 is vulnerable to arbitrary code execution. An attacker is able to execute arbitrary code on the host OS by providing malicious web content which will result in memory corruption...
Arbitrary Code Execution
libxml2.so is vulnerable to arbitrary code execution. An integer overflow occurs when comparing schema dates. This could potentially result in arbitrary code execution on the host OS...
Remote Code Execution
An attacker is able to inject and execute arbitrary code on the host OS if the response can be manipulated for a request being made by the CachingHttpClient...
OS Command Injection
bestzip is vulnerable to OS command injection. A remote attacker is able to inject and execute arbitrary OS commands on the host OS via the destination parameter...