38683 matches found
Denial Of Service (DoS)
linux-lts is vulnerable to denial of service. The vulnerability exists in ieee80211bssinfoupdate function of net/mac80211/scan.c due to a buffer overflow which allows an attacker to crash the application via WLAN frames...
Information Disclosure
grafana is vulnerable to information disclosure. The vulnerability exists in multiple functions due to forwarding login cookies in outgoing requests resulting in an attacker gaining access to cookies required to perform unauthorized actions...
Arbitrary Code Execution
hermes-engine is vulnerable to arbitrary code execution. The vulnerability exists due to a write-what-where condition caused by an integer overflow in growAndRehash function of CodeBlock.h which allows an attacker to potentially execute arbitrary code via crafted javascript...
Denial Of Service (DoS)
lighttpd is vulnerable to denial of service. The vulnerability exists in gwbackend.c where there is a resource leak which will lead to a connection slot exhaustion after a large amount of anomalous TCP behavior causing an application crash...
Authorization Bypass
modsecurity-crs:sid is vulnerable to authorization bypass. The vulnerability exists due to repeated payloads with a HTTP range header field, allowing an attacker to do a response body bypass by accessing to restricted resources...
Arbitrary File Write
postgresql-jdbc is vulnerable to arbitrary file writes. The vulnerability exists because the connection properties for configuring a pgjdbc connection are exposed which allows an attacker to specify arbitrary connection properties could lead to a compromise of a system...
Denial Of Service (DoS)
rpm is vulnerable to denial of service. An attacker can bypass the checks introduced in response to CVE-2017-7500 and CVE-2017-7501, potentially gaining root privileges and causing an application crash...
Remote Code Execution (RCE)
dompdf/dompdf is vulnerable to remote code execution. The vulnerability exists because the registerFont function of FontMetrics.php does not properly halt the font registration when URI validation fails, such as through the @font-face rule, allowing an attacker to inject and execute maliciously...
Denial Of Service (DOS)
Bind9 is vulnerable to denial of service. The vulnerability is due to malformed EdDSA signatures, which result in memory leaks. An attacker can continuously spoof the target resolver, leading to denial of service...
Use After Free
chromium is vulnerable to use after free. The vulnerability exists in tab strip in google chrome which allows a remote attacker who convinced an user to engage in specific UI interactions...
Hostname Spoofing
parse-url is vulnerable to hostname spoofing. The vulnerability exists because the parseUrl function of index.js does not properly identify the custom user in ssh url and hostname, allowing an attacker to gain sensitive information by redirecting to the malicious urls...
HTTP Request Smuggling
py3-werkzeug is vulnerable to http request smuggling. The vulnerability exists in .pre-commit-config.yaml because of missing dependents which allows an attacker to perform HTTP Request Smuggling using a crafted HTTP request...
Denial Of Service (DoS)
libsox.so is vulnerable to denial of service. The vulnerability exists due to a floating point exception in startread function in wav.c which allows an attacker to send a crafted wav file causing an application crash...
Denial Of Service (DoS)
vim/vim is vulnerable to denial of service. The vulnerability exists due to a null pointer dereference when deleting buffers in diff mode which allows an attacker to cause an application crash...
Remote Code Execution (RCE)
chrome is vulnerable to remote code execution. The vulnerability exists due to Insufficient policy enforcement in Cookies allowing an attacker to inject maliciously crafted code into the system...
Denial Of Service (DoS)
vim is vulnerable to denial of service. The vulnerability exists in vimregsubboth function of regexp.c due to substitute overwrites allocated buffer which allows an attacker to crash the application via malicious input...
Heap-based Buffer Overflow
vim is vulnerable to heap-based buffer overflow. An out-of-bounds write vulnerability in vimregsubboth function in the src/regexp.c file allows remote attackers to cause an application crash, possibly reading and modifying some amount of memory contents...
Cross-site Scripting (XSS)
libxml2.so is vulnerable to cross-site scripting. The vulnerability exists in the htmlAttrDumpOutput function in HTMLtree.c due to a lack of sanitization in the escaped variable which allows an attacker to inject and execute malicious javascript...
Out-Of-Bounds Write
net-snmp is vulnerable to out of bounds write. The vulnerability exists due to a boundary error in a SET request to SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable. A remote user is able to pass a malformed OID in a SET request, trigger an out-of-bounds write and execute arbitrary code on the target...
Remote Code Execution
flysystem is vulnerable to remote code execution. An attacker is able to upload and execute malicious code on the system under attack via the component File Handler...
Arbitrary Code Execution
io.fabric8:kubernetes-client is vulnerable to arbitrary code execution. Misconfigured YAML parsing in unmarshalYaml function allows local authenticated attackers to execute arbitrary code on the target machine via a maliciously crafted YAML string...
Command Injection
python is vulnerable to command injection. The vulnerability exist due to mailcap module does not add escape characters into commands discovered in the system mailcap file. This may allow attackers to inject shell commands into applications that call mailcap.findmatch with untrusted input...
Sensitive Information Disclosure
Xen is vulnerable to Sensitive Information Disclosure. Linux block table does not zero memory regions before sharing with the backend, leading to information disclosure. Additionally, the grant table only shares 4k pages, leading to unrelated data from different backends residing in the same page...
Information Disclosure
guzzlehttp/guzzle is vulnerable to information disclosure. The vulnerability exists because the checkRedirect function of RedirectMiddleware.php does not properly clear the CURLOPTHTTPAUTH option on a change of origin, allowing an attacker to get sensitive information through the Authorization...
Information Disclosure
kgexplore is vulnerable to information disclosure. An attacker can inject and execute malicious code through the request package and gain access to sensitive user information and digital currency keys...
Type Confusion
chromium is vulnerable to type confusion. A remote attacker is able to cause type confusion attacks through heap corruption in v8 module via a crafted HTML page...
Denial Of Service (DoS)
eap7 is vulnerable to denial of service. The vulnerability exists due to a flaw that was found in Undertow which allows an attacker to cause an application crash...
Information Disclosure
intel-microcode is vulnerable to information disclosure. Incomplete cleanup of microarchitectural fill buffers allow an authenticated attacker to potentially enable information disclosure via local access...
Denial Of Service (DoS)
grub2 is vulnerable to denial of service. The vulnerability exists due to out-of-bounds write when handling split HTTP headers which allows an attacker to crash the application via malicious input...
Use-After-Free
vim is vulnerable to Use After Free. The vulnerability exists due to a memory corruption in the system which allows an attacker to cause an application crash...
Validation Bypass
bottle is vulnerable to validation bypass. The library mishandles errors in handle function during early request binding, allowing an attacker to compromise the target system...
Heap-based Buffer Overflow
pillow is vulnerable to a heap buffer overflow. The vulnerability exists in the ImagingTgaRleDecode of TgaRleDecode.c due to a lack of input validation which allows an attacker to inject maliciously crafted tga image and crash the system...
OS Command Injection
maven-shared-utils is vulnerable to OS command injection. The vulnerability exists due to the use of double-quoted strings without proper escaping which allows an attacker to execute shell commands...
User Impersonation Via Anonymous Access
github.com/argoproj/argo-cd is vulnerable to user impersonation. An attacker is able to send an invalid JSON Web Token JWT along with a request if anonymous access to the Argo CD instance is enabled, allowing an unauthenticated user to get access with same privilege, create, manipulate and delete...
Denial Of Service (DoS)
chromium is vulnerable to denial of service. The vulnerability exists due to use after free in Performance APIs which allows an attacker to crash the application via malicious input...
Use After Free
chromium is vulnerable to use after free. The vulnerability exists in ANGLE which causes a memory corruption allowing a malicious attacker to cause a denial of service...
SQL Injection
mediawiki/core is vulnerable to sql injection. The vulnerability exists due to insecure quote handling in the getAllOrValues function in SDAppliedFilter.php allows an attacker to inject arbitrary queries...
Insecure Defaults
github.com/cri-o/cri-o is vulnerable to insecure defaults. The vulnerability exists because its containers started incorrectly with non-empty inheritable Linux process capabilities, allowing an unprivileged user to gain inheritable file capabilities up to the container's bounding set...
SQL Injection
blazer is vulnerable to sql injection attacks. The library does not properly sanitize user input which allows an attacker to inject malicious sql queries and modify system data...
Denial Of Service (DoS)
subversion is vulnerable to denial of service. The vulnerability exists due to a use after free memory corruption...
Denial Of Service (DoS)
nekohtml is vulnerable to denial of service. The vulnerability exists due to a memory corruption allowing an attacker to crash the system via a maliciously crafted HTML markup...
Arbitrary File Write
libarchive is vulnerable to arbitrary file write. An improper link resolution flaw can occur while extracting an archive leading to changing modes, times, access control lists, and flags of a file outside of the archive. An attacker may provide a malicious archive to a victim user, who would...
Remote Code Execution (RCE)
Dompdf is vulnerable to remote code execution. The vulnerability exists due to a lack of sanitization of the font type via a .php file in the src:url field of an @font-face Cascading Style Sheets CSS statement within an HTML input file...
HTTP Request Smuggling
puma is vulnerable to HTTP request smuggling. When using the library behind a proxy that does not properly validate the incoming HTTP requests with the RFC7230 standard, puma and the frontend proxy contradict on where one request starts and where it ends, resulting in requests to be smuggled via...
Cross-Site Scripting (XSS)
pimcore/pimcore is vulnerable to stored cross-site scripting. The vulnerability exists in the parameter Name when saving Grid Options because a content security policy is not handled properly which allows a malicious attacker to inject and execute arbitrary javascript...
Denial Of Service (DoS)
vim is vulnerable to denial of service. The vulnerability exists due to an Out-of-bounds Read...
Denial Of Service (DoS)
389-ds-base is vulnerable to denial of service. The vulnerability exists due to a double-free found in the way 389-ds-base handles virtual attributes context in persistent searches allowing an attacker to crash the system by sending a series of search requests...
Buffer Overflow
pjproject is vulnerable to buffer overflow. The vulnerability exists due to a stack overflow in PJSUA API when calling pjsuaplayercreate...
Buffer Overflow
vim is vulnerable to buffer overflow. The vulnerability exists due to the use of Out-of-range Pointer Offset...
Denial Of Service (DoS)
php is vulnerable to denial of service. The vulnerability exists due to a lack of sanitization of changes to string objects in the zendstringextend function in Zend/zendstring.h...