39640 matches found
Denial Of Service (DoS)
curl is vulnerable to denial of service attacks. A malicious user is able to cause an application crash via serving excessive amounts of set-cookie headers in a HTTP response to curl...
Information Disclosure
curl is vulnerable to information disclosure. The vulnerability exists due to improper security validations which allows an attacker to gain access to credentials of other servers...
Improper Input Validation
httpx is vulnerable to improper input validation. The vulnerability exists in copywith function because the user inputs are not properly validated which allows an attacker to bypass url with wrong information...
Denial Of Service (DoS)
openjdk is vulnerable to denial of service. The vulnerability exists due to a lack of validation of authentication allowing an attacker to crash the system using APIs in the specified Component...
Path Traversal
moment is vulnerable to Path Traversal. An attacker is able to access files outside the expected directory especially when a user-provided locale string is directly used to switch moment locale...
Remote Code Execution (RCE)
Icinga Web 2 is vulnerable to remote code execution. The vulnerability exists due to the lack of validation of access to the configuration which can create SSH resource files in unintended directories...
Packet Injection
kernel is vulnerable to packet injection. The vulnerability exists due to a flaw in Linux kernel's WiFi implementation which allows an attacker within the wireless range to abuse a logic flaw in the WiFi implementation by reassembling packets from multiple fragments under different keys, treating...
Denial Of Service (DoS)
crypto/tls in github.com/golang/go is vulnerable to Denial Of Service DoS. During a RSA based key exchange, the type of public key in an X.509 certificat is not validated to match the expected type, allowing a malicious TLS server to cause a TLS client to panic...
Denial Of Service (DoS)
postgresql is vulnerable to denial of service DoS. The vulnerability exists through the lack of bounds check during the modification of certain SQL array values, allowing authenticated database users write arbitrary bytes to a wide area of server memory...
Denial Of Service (DoS)
jetty-io is vulnerable to denial of service. An attacker is able to send a large TLS frame with data length of more than 17408, resulting in high CPU consumption and a potential application crash...
Denial Of Service (DoS)
asterisk is vulnerable to denial of service. A buffer overflow in respjsipdiversion.c in allows a remote attacker to crash the application by misusing SIP 181 responses...
Command Injection
lodash is vulnerable to Command Injection. The vulnerability exists through the unsanitized values of template...
Denial Of Service (DoS)
dnsmasq is vulnerable to denial of service. A heap-based buffer overflow in the rfc1035.c:extractname function allows an attacker to crash the application...
Information Disclosure
PHP is vulnerable to Information Disclosure. Reading past the allocated buffer is possible when using certain mbstring functions to convert multi-byte encodings...
Integer Overflow
Linux kernel is vulnerable to Integer Overflow. A child process could send arbitrary signals to a privileged suidroot parent process which interferes with donotifyparent protection mechanism...
Use-after-free
kernel is vulnerable to use-after-free. It is possible due to a flaw in ext4putsuper...
Remote Code Execution (RCE)
github.com/go-gitea/gitea is vulnerable to remote code execution RCE. The vulnerability exists through git hooks which are enabled by default...
Denial Of Service (DoS)
linux is vulnerable to denial of service.The vulnerability exists in the ccprunshacmd function in drivers/crypto/ccp/ccp-ops.c due to the memory consumption which allows an attacker to crash the application via malicious input...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists as in vfio, access to disabled MMIO space of some devices may lead to DoS scenario...
Unauthorized Reverse Proxy Connection
The Apache HTTP Server is a popular web server. It was discovered that the fix for CVE-2011-3368 did not completely address the problem. An attacker could bypass the fix and make a reverse proxy connect to an arbitrary server not directly accessible to the attacker by sending an HTTP version 0.9...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists as a flaw was found in the Memory-mapped I/O MMIO instruction decoder in the Xen hypervisor implementation. An unprivileged guest user could use this flaw to trick the hypervisor into emulating a certain instruction, which...
Information Disclosure
JMX-console is vulnerable to information disclosure. The JMX Console configuration only specified an authentication requirement for requests that used the GET and POST HTTP "verbs". A remote attacker could create an HTTP request that does not specify GET or POST, causing it to be executed by the...
Denial Of Service (DoS)
The Network Time Protocol NTP is vulnerable to Denial Of Service DoS. Robin Park and Dmitri Vinokurov discovered a flaw in the way ntpd handled certain malformed NTP packets. ntpd logged information about all such packets and replied with an NTP packet that was treated as malformed when received ...
Stack-based Buffer Overflow
The Network Time Protocol NTP is vulnerable to Stack-based Buffer Overflow. A buffer overflow flaw was found in the ntpq diagnostic command. A malicious, remote server could send a specially-crafted reply to an ntpq request that could crash ntpq or, potentially, execute arbitrary code with the...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. A deficiency in the clone system call when called with the CLONEPARENT flag permits the caller the parent process to indicate an arbitrary signal it wants to receive when its child process exits. This could lead to a denial of service of the parent proce...
Spoofing Attack
firefox is vulnerable to spoofing attack. A flaw was found in the way Firefox displayed information about self-signed certificates. It was possible for a self-signed certificate to contain multiple alternate name entries, which were not all displayed to the user, allowing them to mistakenly exten...
Prototype Pollution
dojo causes prototype pollution. The vulnerability exists as it allows the value proto to be passed through the deepCopy method...
Remote Code Execution
jackson-databind is vulnerable to remote code execution. The vulnerability exists because it does not restrict the data sources for the org.apache.xbean.propertyeditor.JndiConverter object type, leading to deserialisation of arbitrary data from external untrusted sources which would allow an...
Denial Of Service (DoS)
OpenJDK is vulnerable to denial of service DoS. It is due to an incomplete enforcement of maxDatagramSockets limit in DatagramChannelImpl...
Remote Code Execution (RCE)
jackson-databind is vulnerable to remote code execution RCE. The vulnerability exists as it does not stop classes from the p6spy package from being used as deserialization gadgets...
Arbitrary Code Execution
php is vulnerable to arbitrary code execution. A heap-based buffer overflow in the function gdImageColorMatch in gdcolormatch.c allows an attacker to execute arbitrary code on the system...
CRLF Injection
Python is vulnerable to CRLF Injection. Remote unauthenticated attacker could exploit the flaw by controling a url parameter, as demonstrated by the first argument to urllib.request.urlopen with \r\n specifically in the path component of a URL that lacks a ? character followed by an HTTP header o...
Denial Of Service (DoS)
IBM Java SE version 8 is vulnerable to denial of service DoS fixed by slow conversion of BigDecimal to long...
Arbitrary Code Execution
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The rh-php56 packages provide a recent stable release of PHP with PEAR 1.9.5 and enhanced language features including constant expressions, variadic functions, arguments unpacking, and the interactive debuger. T...
Insecure Pseudo Random Number Generator
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The rh-php56 packages provide a recent stable release of PHP with PEAR 1.9.5 and enhanced language features including constant expressions, variadic functions, arguments unpacking, and the interactive debuger. T...
Denial Of Service (DoS)
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The php55 packages provide a recent stable release of PHP with the PEAR 1.9.4, memcache 3.0.8, and mongo 1.4.5 PECL extensions, and a number of additional utilities. The php55 packages have been upgraded to...
Use-After-Free
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The php55 packages provide a recent stable release of PHP with the PEAR 1.9.4, memcache 3.0.8, and mongo 1.4.5 PECL extensions, and a number of additional utilities. The php55 packages have been upgraded to...
Denial Of Service (DoS)
HTTPS NIO Connector is vulnerable to Denial Of Service DoS attacks. The component Socket Handler's functionality is affected by opening a socket and not sending an SSL handshake which results in a read-timeout vulnerability...
Cross-Site Scripting (XSS)
OpenShift Enterprise by Red Hat is the company's cloud computing Platform-as-a-Service PaaS solution designed for on-premise or private cloud deployments. The following security issues are addressed with this release: An authorization flaw was discovered in Kubernetes; the API server did not...
Buffer Overflows
A race condition flaw, leading to heap-based buffer overflows, was found in the way the Linux kernel's NTTY line discipline LDISC implementation handled concurrent processing of echo output and TTY write operations originating from user space when the underlying TTY driver was PTY. An unprivilege...
Improper Access Control
A flaw was found in the way the Linux kernel's floppy driver handled user space provided data in certain error code paths while processing FDRAWCMD IOCTL commands. A local user with write access to /dev/fdX could use this flaw to free using the kfree function arbitrary kernel memory...
Authentication Bypass
The sudo superuser do utility allows system administrators to give certain users the ability to run commands as root. A flaw was found in the way sudo handled time stamp files. An attacker able to run code as a local user and with the ability to control the system clock could possibly gain...
Use-after-free
Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...
Remote Code Execution
jackson-databind is vulnerable to remote code execution. The vulnerability exists because it does not restrict the data sources for the Jodd-db object type, leading to deserialisation of arbitrary data from external untrusted sources which would allow an attacker to execute arbitrary code...
Information Disclosure
keycloak-saml-core is vulnerable to sensitive information disclosure. The attack exists because SAML messages are being parsed by replacing the string to obtain the attribute values with the system property in StaxParserUtil class. Therefore, attacker can just parse the chosen system property nam...
Remote Code Execution (RCE)
log4j is vulnerable to remote code execution RCE. A malicious user can pass a malicious binary to the system that when deserialized, executes arbitrary code. This only affects applications that are using the TCP socket server or the UDP socket server to receive log events from another application...
Arbitrary Code Execution
glibc is vulnerable to arbitrary code execution. A flaw was found in the way memory was being allocated on the stack for user space binaries. If heap or different memory region and stack memory regions were adjacent to each other, an attacker could use this flaw to jump over the stack guard gap,...
Remote Code Execution (RCE)
Microsoft ChakraCore is vulnerable to remote code execution. This is due to how the scripting engine handles objects in memory, which allows a remote attacker to execute arbitrary code in the context of the user. This CVE ID is different from CVE-2018-0834, CVE-2018-0835, CVE-2018-0836,...
Remote Code Execution (RCE)
jackson-databind is vulnerable to remote code execution RCE attacks. The vulnerability exists due to the availability of an allowed gadget type that could be used to perform remote code execution attacks through deserialization...
Remote Code Execution (RCE)
tomcat-catalina is vulnerable to remote code execution RCE attacks. On a Windows system with HTTP PUTs enabled a malicious user can upload a JSP file to the server which would then be executed...