38683 matches found
Cross-site Scripting (XSS)
catalina is vulnerable to cross-site scripting XSS attacks. The vulnerability exists due to the lack of sanitization on the message argument sent to the HttpServletResponse.sendError method, allowing XSS attacks...
Cross-site Scripting (XSS)
sinatra is vulnerable to cross-site scripting XSS attacks. The library fails to properly escape the e.message variable in a bad request page, allowing a malicious user to inject and execute arbitrary Javascript...
Information Disclosure
OpenSSL is vulnerable to information disclosure. The library contains a carry propagation bug during the montgomery squaring procedure. This makes it easier for a malicious user to obtain sensitive private key information from the Diffie-Hellman and Diffie-Hellman Ephemereal Ciphersuites...
Sandbox Bypass
org.jenkins-ci.plugins, script-security is vulnerable to sandbox bypass. The vulnerability is due to improper handling of default parameter expressions in constructors, which allows an attacker to execute arbitrary code through crafted sandboxed scripts...
Protection Mechanism Failure
dotnet is vulnerable to Protection Mechanism Failure. The vulnerability is due to improper validation of X.509 certificates, allowing an attacker to submit a certificate containing a malformed signature which returns an incorrect failure code. While the certificate will be correctly rejected, an...
Remote Code Execution (RCE)
Microsoft.NET.Build.Containers is vulnerable to Remote Code Execution RCE. The vulnerability exists when some dotnet commands are used in directories with weaker permissions, which allows an attacker to inject and execute malicious code...
Information Disclosure
umbracocms.identityextensions is vulnerable to Information Disclosure. A remote unauthenticated attacker is able to gain access to unauthorized endpoints because access tokens directly returns in the URL fragments, resulting in disclosure of sensitive information...
Code Injection
nuxt is vulnerable to Code Injection. The vulnerability exists due to a lack of user input path validation in test-component-wrapper.ts which allows an attacker to inject and execute malicious code. Note that this vulnerability is only applicable if the server is ran on dev mode...
Information Disclosure
postgresql is vulnerable to Information Disclosure. The vulnerability relates to a issue in function inlining where role specific policies can be executed other roles resulting in an incorrect policy which may permit a user to complete otherwise-forbidden reads and modifications...
Use After Free
libcurl.so is vulnerable to Use After Free. Even when the CURLOPTPOSTFIELDS option is enabled, libcurl may mistakenly use the read callback CURLOPTREADFUNCTION while performing HTTPS transfers to request data to send. The application might misbehave and send the incorrect data or use memory that ...
Integer Overflow
linux is vulnerable to Integer Overflows. A local authenticated attacker is able to cause integer overflows in rndisqueryoid of drivers/net/wireless/rndiswlan.c...
Denial Of Service (DoS)
Linux kernel is vulnerable to Denial Of Service DoS. The vulnerability exists because the null pointer dereferences occur while the slip driver is in progress to detach in the sltxtimeout of the slip.c, allowing an attacker to cause an application crash...
Spoofing Attack
kernel is vulnerable to Spoofing Attack. The mixed IPID assignment method with the hash-based IPID assignment policy allows an off-path attacker to inject data into a victim's TCP session or terminate that session, where a Man-in-the-Middle Attack MITM performs an IP fragmentation attack and an...
Regular Expression Denial Of Service (ReDoS)
ua-parser-js is vulnerable to Regular Expression Denial Of Service ReDoS. The vulnerability exists due to an insecure Regex pattern used for the str attribute in the trim function of ua-parser.js, which allows an attacker to crash the application by providing a maliciously crafted string...
Use After Free
chromium:sid is vulnerable to use after free. It allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
Remote Code Execution
font-converter is vulnerable to remote code execution. The vulnerability exists due to the missing sanitizations of user input passed to the exec function, which allows remote attackers to inject and execute malicious code...
Remote Code Execution (RCE)
openjdk is vulnerable to remote code execution.The vulnerability exists because the sandbox security is not properly handled which allows an attacker to access, create and delete critical data of the system...
Remote Code Execution (RCE)
org.grails, grails-databinding is vulnerable to remote code execution. The vulnerability exists in the isOkToBind function of SimpleDataBinder.groovy, allowing an attacker to execute code by gaining access to the class loader...
Denial Of Service (DoS)
mbedtls is vulnerable to denial of service. The vulnerability exists through a buffer overread when the dtls server with MBEDTLSSSLDTLSCLIENTPORTREUSE in use receives a ClientHello message with a cookie whose declared length exceeds the end of the allocated buffer which allows an attacker to caus...
Information Disclosure
openssl is vulnerable to information disclosure. The vulnerability exists due to a failed AES OCB encryption which allows an attacker to gain access to sensitive information...
Denial Of Service (DoS)
.NET and Visual Studio are vulnerable to Denial Of Service DoS. The vulnerability exists due to a flaw in dotnet allowing an attacker to crash the system by sending MyCookie=chunks-2147483647 without the actual cookie chunks, causing large allocations, exceptions, and excess CPU utilization on th...
Privilege Escalation
openjdk is vulnerable to privilege escalation. The vulnerability exists due to a lack of validation of authorization allowing an attacker to gain unauthorized access to critical data or complete access to all Oracle Java SE...
Integer Overflow
MariaDB before 10.6.5 has a sqllex.cc integer overflow, leading to an application crash...
Denial Of Service (DoS)
MariaDB is vulnerable to denial of service. It allows a setvar.cc application crash via certain uses of an UPDATE statement in conjunction with a nested subquery...
Out-of-bounds Write
apache2 is vulnerable to out-of-bounds write. The vulnerability exists due to the heap memory corruption, which allows an attacker to overwrite heap memory via malicious input...
Buffer Overflow
The BPF subsystem in the Linux kernel is vulnerable to buffer overflow. The vulnerability exists in kernel/bpf/core.c and kernel/bpf/core.c because of mishandling situations with a long jump over an instruction sequence where inner instructions require substantial expansions into multiple BPF...
Denial Of Service (DoS)
libexpat.so is vulnerable to denial of service. when using the default configuration, an attacker can crash the application through the integer overflow in the storeRawNames function of xmlparse.c...
Denial Of Service (DoS)
apache2 is vulnerable to denial of service. An attacker is able to crash the system by sending a maliciously crafted URI sent to httpd configured as a forward proxy ProxyRequests on...
Remote Procedure Calls
linux kernel is vulnerable to remote procedure calls. The vulnerabilities exists due to fastrpcinternalinvoke in drivers/misc/fastrpc.c does not prevent user applications from sending kernel RPC messages...
Dependency Confusion
Bundler is vulnerable to dependency confusion. The way of choosing a dependency source based on the highest gem version number by the package installer results in pulling a malicious gem from a public repository instead of its intended private gem even if it is a dependency of another private gem...
Privilege Escalation
kernel is vulnerable to privilege escalation. A use-after-free in doepollctl and eploopcheckproc of eventpoll.c allows an attacker to obtain additional execution privileges...
Sandbox Escape
webkitgtk is vulnerable to sandbox escape. Maliciously crafted web content may violate iframe sandboxing policy...
Remote Code Execution
tomcat-catalina is vulnerable to remote code execution. If a remote attacker knows and is able to control the contents and name of a file, remote code execution can be achieved if the server is configured to use PersistenceManager with a FileStore and the PersistenceManager is configured with the...
Denial Of Service (DoS)
asterisk is vulnerable to denial of service. A buffer overflow in respjsipdiversion.c in allows a remote attacker to crash the application by misusing SIP 181 responses...
Privilege Escalation
moodle/moodle is vulnerable to privilege escalation. The vulnerability exists when an enrollment method that did not exist, or was disabled, would be enabled if it was deleted, allowing unintended users access to the course...
Integer Overflow
Linux kernel is vulnerable to Integer Overflow. A child process could send arbitrary signals to a privileged suidroot parent process which interferes with donotifyparent protection mechanism...
Denial Of Service (DoS)
kernel-rt packages is vulnerable to denial of service DoS. The vulnerability exists because sgwrite lacks an sgremoverequest call in a certain failure case causing a denial of service condition...
Unauthorized Read
Openjdk 7 is vulnerable to unauthorised read. It is difficult to exploit vulnerability but it allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker...
Denial Of Service (DoS)
mariadb is vulnerable to denial of service. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Client. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatabl...
Cross-Site Scripting (XSS)
python2 is vulnerable to cross-site scripting. A remote attacker is able to inject and execute arbitrary Javascript via in a user's browser via the servertitle field...
Information Disclosure
firefox is vulnerable to information disclosure. The vulnerability exists as an attacker could create a malicious web page that, when viewed by a victim, could steal private data from a different website the victim has loaded with Firefox...
Remote Code Execution (RCE)
jackson-databind is vulnerable to remote code execution RCE. The vulnerability exists as it does not stop classes from the p6spy package from being used as deserialization gadgets...
Information Disclosure
kernel is vulnerablbe to information disclosure. The vulnerability exists as fs/ext4/extents.c leads to information disclosure...
CRLF Injection
Python is vulnerable to CRLF Injection. Remote unauthenticated attacker could exploit the flaw by controling a url parameter, as demonstrated by the first argument to urllib.request.urlopen with \r\n specifically in the path component of a URL that lacks a ? character followed by an HTTP header o...
Denial Of Service (DoS)
IBM Java SE version 8 is vulnerable to denial of service DoS fixed by slow conversion of BigDecimal to long...
Denial Of Service (DoS)
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The rh-php56 packages provide a recent stable release of PHP with PEAR 1.9.5 and enhanced language features including constant expressions, variadic functions, arguments unpacking, and the interactive debuger. T...
Denial Of Service (DoS)
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The rh-php56 packages provide a recent stable release of PHP with PEAR 1.9.5 and enhanced language features including constant expressions, variadic functions, arguments unpacking, and the interactive debuger. T...
Buffer Overflow
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The php54 packages provide a recent stable release of PHP with the PEAR 1.9.4, APC 3.1.15, and memcache 3.0.8 PECL extensions, and a number of additional utilities. The php54 packages have been upgraded to...
Authentication Bypass
The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Multiple flaws were discovered in the CORBA, Libraries, RMI, Serialization, and 2D components in OpenJDK. An untrusted Java application or applet could use these flaws t...
Denial Of Service (DoS)
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. A buffer overflow flaw was found in the Exif extension. A specially crafted JPEG or TIFF file could cause a PHP application using the exifthumbnail function to crash or, possibly, execute arbitrary code...