39248 matches found
Authorization Bypass
JGroup is vulnerable to aurthorization bypass attacks which can lead to information disclosure and spoofing attacks. The vulnerability exists as a malicious user can bypass security restrictions when the attacker node joins the cluster. It happens as JGroup did not check for the essential headers...
Remote Code Execution (RCE)
Microsoft ChakraCore is vulnerable to remote code execution. This is due to how the scripting engine handles objects in memory, which allows a remote attacker to execute arbitrary code in the context of the user. This CVE ID is different from CVE-2018-0834, CVE-2018-0835, CVE-2018-0836,...
Cross-site Scripting (XSS)
catalina is vulnerable to cross-site scripting XSS attacks. The vulnerability exists due to the lack of sanitization on the message argument sent to the HttpServletResponse.sendError method, allowing XSS attacks...
Denial Of Service (DoS)
ImageMagick is vulnerable to denial of service DoS attacks. A malicious user can pass a malicious HDR file to the system to cause an infinite loop that can lead to the system running out of resources and crashing...
Information Disclosure
OpenSSL is vulnerable to information disclosure. The library contains a carry propagation bug during the montgomery squaring procedure. This makes it easier for a malicious user to obtain sensitive private key information from the Diffie-Hellman and Diffie-Hellman Ephemereal Ciphersuites...
Denial Of Service (DoS) Through Memory Consumption
OpenSSL is vulnerable to denial of service DoS attacks. These attacks are possible because there is a memory leak in d1srtp.c which allows remote attackers to consume all the memory through a handshake message...
Server-Side Request Forgery (SSRF)
langchain is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to improper restriction of requests in the Web Research Retriever component, allowing it to reach local addresses and enabling attackers to execute port scans, access local services, and potentially read instanc...
Denial Of Service (DoS)
org.elasticsearch:elasticsearch is vulnerable to Denial Of Service DoS. The vulnerability is due to improper handling of deeply nested pipelines during document processing which can cause the Elasticsearch node to crash, resulting in Denial Of Service...
Denial Of Service (DoS)
node-tar is vulnerable to Denial of service DoS. The vulnerability is caused by to lack of validation on the number of folders created during the folder creation process. This allows an attacker to consume excessive CPU and memory resources, potentially causing the system to become unresponsive o...
Remote Code Execution
.NET is vulnerable to Remote Code Execution RCE. The vulnerability exists in Microsoft.DiaSymReader.Native.amd64.dll when reading a corrupted PDB file which may lead to RCE...
Code Injection
nuxt is vulnerable to Code Injection. The vulnerability exists due to a lack of user input path validation in test-component-wrapper.ts which allows an attacker to inject and execute malicious code. Note that this vulnerability is only applicable if the server is ran on dev mode...
Information Disclosure
com.google.guava, guava is vulnerable to Information Disclosure. The vulnerability exits due to incorrect default file permissions in FileBackedOutputStream, which allow an attacker to access the temporary directory...
Sandbox Restrictions Bypass
github.com/opencontainers/runc is vulnerable to Privilege Escalation. The vulnerability exists because the prepareRootfs function in rootfslinux.go does not properly validate the root config, which allows an attacker to obtain the host root when spawning two containers with custom volume-mount...
Denial Of Service (DoS)
Linux kernel is vulnerable to Denial Of Service DoS. The vulnerability exists through use after free in the networking code because the schsfb enqueue function used the socket buffer SKB cb field after the same SKB had been enqueued and freed into a child qdisc, allowing an attacker to cause an...
Deserialization Of Untrusted Data
soap is vulnerable to untrusted data deserialization. The vulnerability exists due to lack of authentication in RPCRouterServlet which allows an attacker to execute arbitrary code in to the system...
Use After Free
chromium:sid is vulnerable to use after free. It allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
Information Disclosure
openssl is vulnerable to information disclosure. The vulnerability exists due to a failed AES OCB encryption which allows an attacker to gain access to sensitive information...
Denial Of Service (DoS)
aiohttp is vulnerable to denial of service. An attacker can crash the application by providing invalid IPv6 URLs to the parsemessage function of httpparser.py...
Remote Code Execution (RCE)
laravel/framework is vulnerable to remote code execution. The vulnerability exists in the destruct function in PendingBroadcast.php due to insecure deserialization of trusted data which allows an attacker to inject maliciously crafted script into the system...
Privilege Escalation
runc is vulnerable to privilege escalation. The vulnerability exists due to a bug in the runc exec --cap created processes with non-empty inheritable Linux process capabilities allowing an attacker to gain unauthorized access permissions...
Information Disclosure
netty-common is vulnerable to Information Disclosure. The vulnerability exists due to the insufficient fix for the CVE-2021-21290. When the temporary storing uploads on the disk is enabled and running on java 6, an attacker can gain sensitive information through the local system temporary directo...
Information Disclosure
xen is vulnerable to Information Disclosure. The vulnerability exists due to a shared branch history in the Branch History Buffer BHB allowing an attacker to influence mispredicted branches...
Denial Of Service (DoS)
openjdk is vulnerable to denial of service. The vulnerability exists due to a lack of validation of authentication allowing an attacker to crash the system using APIs in the specified Component...
Denial Of Service (DoS)
MariaDB is vulnerable to denial of service. It allows a setvar.cc application crash via certain uses of an UPDATE statement in conjunction with a nested subquery...
Remote Code Execution (RCE)
Icinga Web 2 is vulnerable to remote code execution. The vulnerability exists due to the lack of validation of access to the configuration which can create SSH resource files in unintended directories...
Browser Window Spoof Using Fullscreen Mode
A race condition could have allowed bypassing the fullscreen notification which could have lead to a fullscreen window spoof being unnoticed...
Information Disclosure
kernel is vulnerable to information disclosure. The vulnerability exists in the transparent inter-process communication functionality in net/tipc/crypto.c, allowing an attacker to exploit insufficient validation of user-supplied sizes for the MSGCRYPTO message type...
Improper Input Validation
Java SE is vulnerable to improper input validation. An attacker can perform service disruption through the ImageIO component in the oracle GraalVM enterprise edition...
Denial Of Service (DoS)
Kernel is vulnerable to denial of service. The vulnerability exists due to an Out-of-bounds Write Due To A Heap Buffer Overflow In hidinputchangeresolutionmultipliers Of Hid-input.c...
Denial Of Service (DoS)
crypto/tls in github.com/golang/go is vulnerable to Denial Of Service DoS. During a RSA based key exchange, the type of public key in an X.509 certificat is not validated to match the expected type, allowing a malicious TLS server to cause a TLS client to panic...
Denial Of Service (DoS)
go is vulnerable to denial of service. The vulnerability exists due to the SetString and UnmarshalText methods of math/big.Rat may cause the system to hang if it is passed with a very large exponent input...
Remote Code Execution (RCE)
com.vaadin, flow-server is vulnerable to remote code execution. An attacker is able to inject malicious code into the frontend resources during application rebuilds...
Privilege Escalation
kernel is vulnerable to privilege escalation. A use-after-free in doepollctl and eploopcheckproc of eventpoll.c allows an attacker to obtain additional execution privileges...
Denial Of Service (DoS)
kernel-rt packages is vulnerable to denial of service DoS. The vulnerability exists because sgwrite lacks an sgremoverequest call in a certain failure case causing a denial of service condition...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. A stack-based out-of-bounds write in mpolparsestr function in mm/mempolicy.c allows an attacker to crash the system or potentially execute arbitrary code...
Privilege Escalation
jetty is vulnerable to privilege escalation. The vulnerability exists on Unix like systems where the system's temporary directory is shared between all users on that system, allowing a user to observe the process of creating a temporary sub-directory in the shared temporary directory, and race to...
Carriage-Return Line-Feed (CRLF) Injection
urllib3 is vulnerable to Carriage-Return Line-Feed CRLF Injection. The vulnerability exists as it does not sufficiently check for non-token characters, allowing characters such as \r, \n to be parsed and interpreted...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. The vulnerability exists in multiple functions of drivers/net/wireless/ath/ath9k/htchst.c due to the memory consumption which allows an attacker to crash the system...
Unauthorized Reverse Proxy Connection
The Apache HTTP Server is a popular web server. It was discovered that the fix for CVE-2011-3368 did not completely address the problem. An attacker could bypass the fix and make a reverse proxy connect to an arbitrary server not directly accessible to the attacker by sending an HTTP version 0.9...
Denial Of Service (DoS)
The kernel is vulnerable to denial of service DoS.Due to flaws in the AGPGART driver implementation when handling certain IOCTL commands, it allow a local user to cause a denial of service or escalate their privileges...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists as a flaw was found in the Memory-mapped I/O MMIO instruction decoder in the Xen hypervisor implementation. An unprivileged guest user could use this flaw to trick the hypervisor into emulating a certain instruction, which...
Information Disclosure
JMX-console is vulnerable to information disclosure. The JMX Console configuration only specified an authentication requirement for requests that used the GET and POST HTTP "verbs". A remote attacker could create an HTTP request that does not specify GET or POST, causing it to be executed by the...
Spoofing Attack
firefox is vulnerable to spoofing attack. A flaw was found in the way Firefox displayed information about self-signed certificates. It was possible for a self-signed certificate to contain multiple alternate name entries, which were not all displayed to the user, allowing them to mistakenly exten...
Denial Of Service (DoS)
The kernel is vulnerable to denial of service in arch/powerpc/kernel/signal32.c and arch/powerpc/kernel/signal64.c via sigreturn system call...
Deserialization Of Untrusted Data
FasterXML jackson-databind is vulnerable to deserialization of untrusted data. It causes polymorphic typing because there are more than one association gadget types related to com.zaxxer.hikari.HikariDataSource by default. This vulnerability is different from CVE-2019-14540. A remote attacker can...
Denial Of Service (DoS) Via Ping Floods
github.com/grpc/grpc-go is vulnerable to denial of service DoS attacks. The attack can be triggered by sending a flood of pings by a HTTP/2 peer, leading to an excessive data queue and causing high CPU and resource consumption...
Out-Of-Bounds Read
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The rh-php56 packages provide a recent stable release of PHP with PEAR 1.9.5 and enhanced language features including constant expressions, variadic functions, arguments unpacking, and the interactive debuger. T...
Insecure Pseudo Random Number Generator
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The rh-php56 packages provide a recent stable release of PHP with PEAR 1.9.5 and enhanced language features including constant expressions, variadic functions, arguments unpacking, and the interactive debuger. T...
Memory Corruption
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The php55 packages provide a recent stable release of PHP with the PEAR 1.9.4, memcache 3.0.8, and mongo 1.4.5 PECL extensions, and a number of additional utilities. The php55 packages have been upgraded to...
Denial Of Service (DoS)
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The php55 packages provide a recent stable release of PHP with the PEAR 1.9.4, memcache 3.0.8, and mongo 1.4.5 PECL extensions, and a number of additional utilities. The php55 packages have been upgraded to...