1949 matches found
Open Redirect
clearance has open redirect vulnerability. An attacker is able to exploit the vulnerability by injecting the value of session:returnto with multiple leading slashes...
Denial Of Service(DoS)
libtiff.so is vulnerable to denial of service. An attacker is able to send a malicious input to the "invertImage" function in the component "tiffcrop" to crash the application...
OPENSUSE-SU-2021:2292-1 Security update for dbus-1
This update for dbus-1 fixes the following issues: - CVE-2020-35512: Fixed a use-after-free or potential undefined behaviour caused by shared UID's bsc1187105...
Denial Of Service (DoS)
puma is vulnerable to denial of service DoS. The vulnerability exists as it was possible to monopolize a thread if the client does not reset and keeps requesting. This CVE exists due to an incomplete fix for CVE-2019-16770...
Denial Of Service (DoS)
rust is vulnerable to denial of service. The vulnerability exists due to a double free in theVec::fromiter function...
Arbitrary Code Execution
adplug is vulnerable to arbitrary code execution. A double free in the Cu6mPlayer class in u6m.h could potentailly allow an attacker to execute arbitrary code on the host OS...
CVE-2020-36205
An issue was discovered in the xcb crate through 2020-12-10 for Rust. base::Error does not have soundness. Because of the public ptr field, a use-after-free or double-free can occur...
OPENSUSE-SU-2020:2367-1 Security update for groovy
This update for groovy fixes the following issues: - groovy was updated to 2.4.21 - CVE-2020-17521: Fixed an information disclosure vulnerability bsc1179729. This update was imported from the SUSE:SLE-15-SP2:Update update project...
Denial Of Service (DoS)
mp3gain is vulnerable to denial of service. The vulnerability exist because of a buffer overflow...
Arbitrary Code Execution
chromium is vulnerable to arbitrary code execution. The vulnerability exists through a heap buffer overflow in WebRTC...
Heap Buffer Overflow
tigervnc is vulnerable to heap buffer overflow. It is possible because of heap buffer overflow in TightDecoder::FilterGradient...
CVE-2020-6568
Insufficient policy enforcement in intent handling in Google Chrome on Android prior to 85.0.4183.83 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...
Denial Of Service (DoS)
graphicsmagick is vulnerable to denial of service DoS. The vulnerability exists through a NULL pointer dereference vulnerability in the function ReadCINEONImage in coders/cineon.c...
Denial Of Service (DoS)
binutils:bionic is vulnerable to denial of service DoS. An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils. There is a heap-based buffer over-read in bfddoprnt in bfd.c because elfobjectp in elfcode.h mishandles an eshstrndx section of typ...
Arbtirary Code Execution
GIMP is vulnerable to arbitrary code execution. A heap-based buffer over-read in the function readcreatorblock in plug-ins/common/file-psp.c allows an attacker to execute arbitrary code on the host OS...
Cross-site Scripting (XSS)
semantic-ui-search is vulnerable to cross-site scripting XSS. The vulnerability exists through the lack of sanitization in several dropdown values in modules/dropdown.js...
CVE-2020-15778
scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that they intentionally omit validation of "anomalous argument transfers" because that could "stand a...
CVE-2019-20914
An issue was discovered in GNU LibreDWG through 0.9.3. There is a NULL pointer dereference in the function dwgencodecommonentityhandledata in commonentityhandledata.spec...
Information Disclosure
docker is vulnerable to information disclosure. A security regression of CVE-2016-9962 due to inclusion of vulnerable runc allows an attacker to obtain confidential information...