38790 matches found
Privilege Escalation
An attacker is able to intercept certain requests to the Kubelet and send a redirect response that may be followed by a client using the credentials from the original request. This can lead to compromise of other nodes...
Denial Of Service (DoS)
firefox is vulnerable to denial of service. Memory corruption due to missing sign-extension for ValueTags on ARM64 allows an attacker to crash the application...
Cross-Site Scripting (XSS)
jspdf is vulnerable to cross-site scripting. An attacker is able to inject and execute arbitrary Javascript in a user's browser by bypassing the filtering regex using...
Denial Of Service (DoS)
tomcat-coyote is vulnerable to denial of service DoS. The vulnerability is caused due to lack of proper handling of sequence of HTTP/2 requests, leading to a high CUP consumption and an application crash...
Information Disclosure
docker is vulnerable to information disclosure. A security regression of CVE-2016-9962 due to inclusion of vulnerable runc allows an attacker to obtain confidential information...
Privilege Escalation
wordpress is vulnerable to privilege escalation. The vulnerability exists as it allows arbitrary user meta fields to be saved through the set-screen-option filter's return value...
Improper Input Validation
resteasy-jaxrs is vulnerble to improper input validation. The attack exists because it does not properly handle the response headers in MediaTypeHeaderDelegate.java, leading to a return of an illegal header to be integrated in the server's response...
Insecure Defaults
Apache Camel RabbitMQ uses an insecure default. The Java deserialization is enabled by default and allows an attacker to execute arbitrary code via a deserialization vulnerability...
Open Redirection
httpd is vulnerable to open redirection. The modrewrite configurations is vulnerable to open redirect due to lack of validation in the URL...
Denial Of Service (DoS)
imagemagick6 is vulnerable to denial of service DoS. The vulnerability exists as a memory leak vulnerability in the function ReadPSImage in coders/ps.c...
Denial Of Service (DoS)
ffmpeg is vulnerable to denial of service DoS. The vulnerability exists as the ffamfgetfieldvalue function in libavformat/rtmppkt.c in FFmpeg 3.3.2 allows remote RTMP servers to cause a denial of service Segmentation Violation and application crash via a crafted stream...
Denial Of Service (DoS)
memcached is vulnerable to denial of service DoS. The vulnerability exists as the tryreadcommand function in memcached.c in memcached before 1.4.39 allows remote attackers to cause a denial of service segmentation fault via a request to add/set a key, which makes a comparison between signed and...
Arbitrary Code Execution
faad2 is vulnerable to arbitrary code execution. A heap-based buffer overflow in the function excludedchannels in libfaad/syntax.c allows an attacker to execute arbitrary code on the system...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. The vulnerability exists when cpu.cfsquotaus is used which allows attackers to cause a denial of service against non-cpu-bound applications...
Information Disclosure
doorkeeper is susceptible to information disclosure. If it enables the Doorkeeper::Application attributes using the GET /oauth/authorizedapplications.json, an authorized application user can access the model attribute values including secrets...
Denial Of Service (DoS)
gnutls is vulnerable to denial of service. A boundary error was found in the gnutlssessiongetdata function. A malicious TLS/SSL server could use this flaw to crash a TLS/SSL client or, possibly, execute arbitrary code as the client, if the client passed a fixed-sized buffer to gnutlssessiongetdat...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. The RHSA-2011:1530 kernel update introduced an integer overflow flaw in the Linux kernel. On PowerPC systems, a local, unprivileged user could use this flaw to cause a denial of service...
Privilege Escalation
openjdk is vulnerable to privilege escalation. The vulnerability exists as the AtomicReferenceArray class implementation did not properly check if the array was of the expected Object type. A malicious Java application or applet could use this flaw to bypass Java sandbox restrictions...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. A flaw was found in the Linux kernel's Journaling Block Device JBD. A local attacker could use this flaw to crash the system by mounting a specially-crafted ext3 or ext4 disk...
Arbitrary Code Execution
kernel is vulnerable to arbitrary code execution. A buffer overflow flaw was found in the way the Linux kernel's XFS file system implementation handled links with overly long path names. A local, unprivileged user could use this flaw to cause a denial of service or escalate their privileges by...
Phishing Attack
firefox is vulnerable to phishing attack. The vulnerability exists as it was found that by using the DOM fullscreen API, untrusted content could bypass the mozRequestFullscreen security protections. A web page containing malicious web content could exploit this API flaw to cause user interface...
CRL Validation Bypass
OpenSSL is vulnerable to CRL validation bypass. An uninitialized variable use flaw was found in OpenSSL. This flaw could cause anapplication using the OpenSSL Certificate Revocation List CRL checking functionality to incorrectly accept a CRL that has a nextUpdate date in the past...
Denial Of Service (DoS)
subversion is vulnerable to denial of service. An infinite loop flaw was found in the way the moddavsvn module processed certain data sets. If the SVNPathAuthz directive was set to "shortcircuit", and path-based access control for files and directories was enabled, a malicious, remote user could...
Denial Of Service (DoS)
subversion is vulnerable to denial of service DoS. The vulnerability exists as a NULL pointer dereference flaw was found in the way the moddavsvn module processed requests submitted against the URL of a baselined resource. A malicious, remote user could use this flaw to cause the httpd process...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. A flaw allowed the tcfillqdisc function in the Linux kernel's packet scheduler API implementation to be called on built-in qdisc structures. A local, unprivileged user could use this flaw to trigger a NULL pointer dereference, resulting in a denial of...
Arbitrary Code Execution
thunderbird/firefox is vulnerable to arbitrary code execution. Several flaws were found in the processing of malformed HTML content. Malicious HTML content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. A divide-by-zero flaw was found in the tcpselectinitialwindow function in the Linux kernel's TCP/IP protocol suite implementation. A local, unprivileged user could use this flaw to trigger a denial of service by calling setsockopt with certain options...
Arbitrary Code Execution
thunderbird/firefox is vulnerable to arbitrary code execution. Several flaws were found in the processing of malformed HTML content. Malicious HTML content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird...
Denial Of Service (DoS)
IBM Java 2 Runtime Environment is vulnerable to denial of service DoS. It allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Swing...
Denial Of Service (DoS)
avahi is vulnerable to denial of service DoS. The vulnerability exists as a flaw was found in the way the Avahi daemon avahi-daemon processed multicast DNS mDNS packets with an empty payload. An attacker on the local network could use this flaw to cause avahi-daemon on a target system to enter an...
Denial Of Service (DoS)
kernel is vulnearble to denial of service. A flaw was found in the Linux kernel execve system call implementation. A local, unprivileged user could cause large amounts of memory to be allocated but not visible to the OOM Out of Memory killer, triggering a denial of service...
Arbitrary Code Execution
glibc is vulnerable to arbitrary code execution. It was discovered that the glibc fnmatch function did not properly restrict the use of alloca. If the function was called on sufficiently large inputs, it could cause an application using fnmatch to crash or, possibly, execute arbitrary code with t...
Privilege Escalation
firefox is vulnerable to privilege escalation. The vulnerability exists as a flaw was found in the way Firefox handled dialog boxes. An attacker could use this flaw to create a malicious web page that would present a blank dialog box that has non-functioning buttons. If a user closes the dialog b...
Denial Of Service (DoS)
mysql is vulnerable to denial of service DoS. The vulnerability exists as a flaw in the way MySQL processed SQL queries containing IN or CASE statements, when a NULL argument was provided as one of the arguments to the query, could allow a remote, authenticated attacker to crash mysqld...
Use-after-free
WebKitGTK+ is vulnerable to use-after-free. It is possible for a remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving text editing...
Arbitrary Code Execution
python is vulnerable to arbitrary code execution. It was found that many applications embedding the Python interpreter did not specify a valid full path to the script or application when calling the PySysSetArgv API function, which could result in the addition of the current working directory to...
Arbitrary Code Execution
firefox is vulnerable to arbitrary code execution. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox...
Denial Of Service (DoS)
wireshark is vulnerable to denial of service DoS. The vulnerability exists as wireshark could crash or stop responding if it read a malformed packet off a network, or opened a malicious dump file...
Denial Of Service (DoS)
Samba vulnerable to Denial Of Service DoS. Due to an input sanitization flaw in the way Samba parsed client data, a malicious client could send a specially-crafted SMB packet to the Samba server, resulting in arbitrary code execution with the privileges of the Samba server smbd...
Information Disclosure
Pluggable Authentication Modules PAM is vulnerable to Information Disclosure. It was discovered that the pammail module used root privileges while accessing users' files. In certain configurations, a local, unprivileged user could use this flaw to obtain limited information about files or...
Privilege Escalation
kernel is vulnerable to privilege escalation. The vulnerability exists when an application has a stack overflow, the stack could silently overwrite another memory mapped area instead of a segmentation fault occurring, which could cause an application to execute arbitrary code, possibly leading to...
Denial Of Service (DoS)
The kernel packages is vulnerable to Denial of Service DoS. The attack is possible because a flaw was found in the CIFSSMBWrite function in the Linux kernel Common Internet File System CIFS implementation. A remote attacker could send a specially-crafted SMB response packet to a target CIFS clien...
Denial Of Service (DoS)
IBM Java 2 Runtime Environment and the IBM Java 2 Software Development Kit is vulnerable to Denial of Service DoS. The attack exists because it does not prevent remote attackers to affect confidentiality, integrity, and availability via unknown vectors...
Arbitrary JavaScript Code Execution
firefox is vulnerable to arbitrary javascript code execution. The vulnerability exists as a flaw was found in Firefox that could allow an applet to generate a drag and drop action from a mouse click. Such an action could be used to execute arbitrary JavaScript with the privileges of the user...
Authorization Bypass
firefox is vulnerable to authorization bypass. The vulnerability exists as an attacker could use these flaws to create a malicious web page that could bypass the same-origin policy, or possibly run untrusted JavaScript...
Use-after-Free
Mozilla Firefox is vulnerable to use-after-free vulnerability. As it allows the processing of malformed web content, a web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox...
Denial Of Service (DoS)
The kernel package is vulnerable to Denial Of Service DoS. A divide-by-zero flaw was found in the ext4 file system code. A local attacker could use this flaw to cause a denial of service by mounting a specially-crafted ext4 file system...
Denial Of Service (DoS)
OpenSSL is vulnerable to denial of service flaw. Flaws in OpenSSL's DTLS implementation allows a remote attacker to cause a DTLS server to use excessive amounts of memory, or crash on an invalid memory access or NULL pointer dereference...
Authorization Bypass
java is vulnerable to authorization bypass. The vulnerability exists in the IBM Java 2 Runtime Environment and the IBM Java 2 Software Development Kit...
Denial Of Service (DoS)
The kernel vulnerable to denial of service DoS. The Parallels Virtuozzo Containers team reported the RHSA-2009:1243 update introduced two flaws in the routing implementation. If an attacker was able to cause a large enough number of collisions in the routing hash table via specially-crafted packe...