38838 matches found
Arbitrary Code Execution
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The rh-php56 packages provide a recent stable release of PHP with PEAR 1.9.5 and enhanced language features including constant expressions, variadic functions, arguments unpacking, and the interactive debuger. T...
Denial Of Service (DoS)
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The rh-php56 packages provide a recent stable release of PHP with PEAR 1.9.5 and enhanced language features including constant expressions, variadic functions, arguments unpacking, and the interactive debuger. T...
Insecure Pseudo Random Number Generator
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The rh-php56 packages provide a recent stable release of PHP with PEAR 1.9.5 and enhanced language features including constant expressions, variadic functions, arguments unpacking, and the interactive debuger. T...
Arbitrary File Write
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. A flaw was found in the way the PHP module for the Apache httpd web server handled pipelined requests. A remote attacker could use this flaw to trigger the execution of a PHP script in a deinitialized interprete...
Improper Input Validation
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. A flaw was found in the way the PHP module for the Apache httpd web server handled pipelined requests. A remote attacker could use this flaw to trigger the execution of a PHP script in a deinitialized interprete...
Denial Of Service (DoS)
HTTPS NIO Connector is vulnerable to Denial Of Service DoS attacks. The component Socket Handler's functionality is affected by opening a socket and not sending an SSL handshake which results in a read-timeout vulnerability...
Denial Of Service (DoS)
MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon mysqld and many client programs and libraries. This update fixes several vulnerabilities in the MySQL database server. Information about these flaws can be found on the Oracle Critical Patch Update...
Improper Access Control
A flaw was found in the way the Linux kernel's floppy driver handled user space provided data in certain error code paths while processing FDRAWCMD IOCTL commands. A local user with write access to /dev/fdX could use this flaw to free using the kfree function arbitrary kernel memory...
Authentication Bypass
The sudo superuser do utility allows system administrators to give certain users the ability to run commands as root. A flaw was found in the way sudo handled time stamp files. An attacker able to run code as a local user and with the ability to control the system clock could possibly gain...
Remote Code Execution
jackson-databind is vulnerable to remote code execution. The vulnerability exists because it does not restrict the data sources for the Jodd-db object type, leading to deserialisation of arbitrary data from external untrusted sources which would allow an attacker to execute arbitrary code...
Information Disclosure
rh-nginx110-nginx is vulnerable to information disclosure attacks. The vulnerability exists as nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by...
Remote Code Execution (RCE)
microsoft.chakracore is vulnerable to remote code execution. It exists because the CreateLabel function in IRBuilderAsmJs.cpp, does not properly check instrPrevparameter, causing memory corruption which allows attacker to trigger RCE. This CVE ID is different from CVE-2017-11886, CVE-2017-11889,...
Remote Code Execution (RCE)
Jackson-databind is vulnerable to remote code execution RCE attacks. Attackers can exploit an incomplete fix of CVE-2017-7525 to bypass the blacklist when Spring libraries are available on the class path. In order to be vulnerable to this attack, either the use of @JsonTypeInfouse =...
Information Disclosure
Zabbix is vulnerable to an information disclosure. The vulnerability is due to the reuse of JavaScript Duktape contexts in Zabbix Server/Proxy, which allows a regular non-super administrator to leak sensitive data from hosts they are not authorized to access through shared global JavaScript...
Relative Path Traversal
Apache Tomcat is vulnerable to Path Traversal. The vulnerability is due to the rewritten URL being normalized before it was decoded. This allows an attackers to manipulate the request URI and, if PUT is enabled, upload malicious files to bypass security constraints protecting /WEB-INF/ and...
Server-Side Request Forgery (SSRF)
langchain is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to improper restriction of requests in the Web Research Retriever component, allowing it to reach local addresses and enabling attackers to execute port scans, access local services, and potentially read instanc...
Open Redirect
org.springframework: spring-web is vulnerable Open Redirect. The vulnerability is caused due to improper validation checks on the host of the parsed URL, which could lead to potential SSRF attacks if the URL is utilized post-validation...
Denial Of Service (DoS)
org.elasticsearch:elasticsearch is vulnerable to Denial Of Service DoS. The vulnerability is due to improper handling of deeply nested pipelines during document processing which can cause the Elasticsearch node to crash, resulting in Denial Of Service...
Improper Authentication
OpenSSH is vulnerable to Improper Authentication. The vulnerability is due to destination constraints being incompletely applied due to their limitation to the first key when a PKCS11 token returns multiple keys, even though these constraints are specified during the addition of PKCS11-hosted...
SQL Injection
Nocodb is vulnerable to SQL Injection. The vulnerability is due to improper sanitation or parameterization of sql queries in the triggerList function in the SqliteClient.ts file. This can potentially lead to Information Disclosure...
Information Disclosure
com.google.guava, guava is vulnerable to Information Disclosure. The vulnerability exits due to incorrect default file permissions in FileBackedOutputStream, which allow an attacker to access the temporary directory...
Use-After-Free
linux-lts is vulnerable to Use-After-Free. The vulnerability occurs within the netfilter 'nftables' when processing batch requests. This can be abused and used to perform arbitrary read and write operations on to the kernel memory...
Sandbox Restrictions Bypass
github.com/opencontainers/runc is vulnerable to Privilege Escalation. The vulnerability exists because the prepareRootfs function in rootfslinux.go does not properly validate the root config, which allows an attacker to obtain the host root when spawning two containers with custom volume-mount...
Denial Of Service (DoS)
node-jose is vulnerable to Denial Of Service DoS. The vulnerability exists due to an infinite loop in the internal calculation for some ECC operations when using the library's non-default "fallback" crypto back-end, when either WebCrypto or the crypto module is unavailable, which allows an attack...
Cross-site Scripting (XSS)
react-admin is vulnerable to Cross-site Scripting XSS. The vulnerability exists because the dangerouslySetInnerHTML attribute in RichTextField.tsx does not sanitize on the client side. If the data isn't sanitized server-side, the RichTextField attribute allows an attacker to inject and execute...
Denial Of Service (DoS)
openssl is vulnerable to Denial Of Service DoS. The vulnerability exists because if a recipe cms recipient public key is invalid, the new filter bio is freed and the function returns a NULL result indicating a failure The public API function BIOnewNDEF is a helper function used for streaming ASN....
Remote Code Execution (RCE)
SnakeYaml is vulnerable to Remote Code Execution RCE. The vulnerability is due to deserializing unrestricted types in the Constructor method leading to Remote Code execution through classpath injection...
Improper Access Cotrol
dropbear is vulnerable to improper access control. The vulnerability exists due to a non-RFC-compliant check of the available authentication methods in the client-side SSH code which allows an attacker to abuse a forwarded agent for logging on to another server...
CRLF Injection
Undici is is vulnerable to CRLF injection. The vulnerability is due to improper request header content-type sanitization in lib/core/request.js. An attacker can exploit this vulnerability to preform two requests in a single API call...
Session Fixation
passport is vulnerable to session fixation. A remote unauthenticated attacker is able to gain access to guest sessions because when a user logs in or logs out, the session is regenerated instead of being closed...
Denial Of Service (DoS)
mariaDB is vulnerable to denial of service. The vulnerability exists due to an issue in the component Usedtablesandconstcache::usedtablesandconstcachejoin allowing an attackers to crash the system via specially crafted SQL statements...
Authorization Bypass
Spring Security is vulnerable to authorization bypass. The vulnerability exists in getRequestMatcherPrivilegeEvaluatorsEntry function in WebSecurity.java due to misconfiguration of privilege evaluation which allows an attacker to gain access to the system and perform unauthorized actions...
Authentication Bypass
curl is vulnerable to authentication bypass. A remote attacker is able to reuse OAUTH2-authenticated connections due to improper verification of credentials during a transfer, which allows the attacker to impersonate another user on the system...
Denial Of Service (DoS)
libexpat.so is vulnerable to denial of service. when using the default configuration, an attacker can crash the application through the integer overflow in the storeRawNames function of xmlparse.c...
Remote Code Execution (RCE)
samba is vulnerable to remote code execution. The vulnerability exists due to an Out-of-Bounds OOB Heap Read/Write allowing an attacker to inject maliciously crafted script into the system...
Packet Injection
kernel is vulnerable to packet injection. The vulnerability exists due to the lack of sanitization of the authenticity of the Message Integrity Check allowing an attacker to inject and possibly decrypt packets in WPA or WPA2 networks that support the TKIP data-confidentiality protocol...
Packet Injection
kernel is vulnerable to packet injection. The vulnerability exists due to a flaw in Linux kernel's WiFi implementation which allows an attacker within the wireless range to abuse a logic flaw in the WiFi implementation by reassembling packets from multiple fragments under different keys, treating...
Denial Of Service (DoS)
apache2 is vulnerable to denial of service. The vulnerability exists due to a null pointer dereference during HTTP/2 request processing...
Denial Of Service (DoS)
linux is vulnerable to denial of service. The vulnerability exists due to an incorrect connection-setup ordering in fs/nfs/nfs4client.c...
Denial Of Service (DoS)
crypto/tls in github.com/golang/go is vulnerable to Denial Of Service DoS. During a RSA based key exchange, the type of public key in an X.509 certificat is not validated to match the expected type, allowing a malicious TLS server to cause a TLS client to panic...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. A race condition getoldroot in fs/btrfs/ctree.c allows attackers to cause a denial of service due to the lack of locking on an extent buffer before a cloning operation...
Denial Of Service (DoS)
jetty-io is vulnerable to denial of service. An attacker is able to send a large TLS frame with data length of more than 17408, resulting in high CPU consumption and a potential application crash...
Information Disclosure
curl is vulnerable to information disclosure. The libcurl does not strip off user credentials from the URL when automatically populating the HTTP request header field in outgoing HTTP requests, allowing a malicious user to retrieve sensitive data from the server in second HTTP request...
Remote Code Execution (RCE)
webkit2gtk is vulnerable to remote code execution. Maliciously crafted web content may violate iframe sandboxing policy. This issue was addressed with improved iframe sandbox enforcement...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists by triggering AP to send IAPP location updates for stations before the required authentication process has completed...
Arbitrary Code Execution
chromium is vulnerable to arbitrary code execution. A heap-based buffer overflow in V8 allows a remote attacker to execute arbitrary code on the host OS via a heap corruption via a malicious HTML page...
Prototype Pollution
iniparserjs is vulnerable to prototype pollution. An attacker can inject arbitrary properties into existing construct prototypes via concatenation of array in iniparser.js to modify attributes such as proto, constructor and prototype...
Use-after-free
kernel is vulnerable to use-after-free. It is possible due to a flaw in ext4putsuper...
Denial Of Service (DoS)
linux is vulnerable to denial of service DoS. The vulnerability exists as a memory leak in the cx23888irprobe function in drivers/media/pci/cx23885/cx23888-ir.c can be triggered through kfifoalloc failures...
Information Disclosure
curl is vulnerable to information disclosure. The vulnerability exists as a part of a password may be prepended to the host name before the host name is resolved, leading to a leak of the partial password over the network and to DNS servers...