38790 matches found
Information Disclosure
tomcat-coyote is vulnerable to information disclosure. The library contains a bug during the handling of pipelined requests when sending files. This can result in the response being sent for the wrong request. A malicious user can use this to allow the system to wrongly sent responses to them...
Directory Traversal
Apache Solr is vulnerable to directory traversal attacks. The vulnerability exists because a replication handler provided by Apache Solr supports an HTTP API which does not validate the user supplied filename parameter. Therefore, attackers can pull index files from a master/leader node using thi...
Denial Of Service (DoS)
OpenSSL is vulnerable to denial of service DoS attacks. A malicious user can pass a malicious Diffie-Hellman ServerKeyExchange message to the system to cause a segmentation fault that can lead to the system crashing...
Denial Of Service (DoS) Through Null Pointer Dereference
OpenSSL is vulnerable to denial of service DoS attacks through a null pointer dereference. This can be triggered at remote DTLS servers by a handshake message where the ciphersuite is specified as a 1 anonymous DH or 2 anonymous ECDH ciphersuite...
Man-in-the-Middle (MitM)
OpenSSL is vulnerable to man in the middle MitM attacks. These attacks are possible through the ssl23getclienthello function in s23srvr.c. It can be triggered by a ClientHello message fragment which forces OpenSSL to negotiate using the TLS 1.0 protocol insteadl of a higher, more secure version...
Regular Expression Denial Of Service (ReDoS)
Wagtail is vulnerable to Regular Expression Denial of Service ReDoS. The vulnerability is due to inefficient regular expression handling in the parsequerystring process for long query strings without spaces, allowing attackers to submit crafted queries that consume excessive server resources and...
OS Command Injection
php81 is vulnerable to OS Command Injection. The vulnerability is due to misinterpretation of characters in the command line by the PHP CGI module when using certain code pages on Windows. This may allow a malicious user to pass options to the PHP binary, potentially revealing source code, runnin...
Memory Exhaustion
nghttp2 is vulnerable to a memory exhaustion issue. The vulnerability is due to temporary buffering of HTTP/2 incoming headers exceeding the limit, which is intended to generate an informative HTTP 413 response. However, if a client continues to send headers without stopping, it leads to memory...
Denial Of Service (DoS)
XNIO API is vulnerable to Denial of Service DoS. The vulnerability is caused due to the problematic accumulation of notifier states within the chain. When this chain grows to be excessively large, it can lead to a StackOverflowException, overwhelming the stack and potentially causing Denial of...
Authentication Bypass
OpenMetadata is vulnerable to Authentication Bypass. The vulnerability is caused due to improper path validation in the JwtFilter, allowing attackers to bypass authentication mechanisms by exploiting the presence of path parameters in requests...
Regular Expression Denial Of Service (ReDoS)
Django is vulnerable to Regular Expression Denial Of Service. The vulnerability is due to the chars and words functions in text.py as there is no proper limiting or optimization while using regular expressions to parse and truncate input text. This allows an attacker to craft very long or...
Missing Authorization Checks
matrixsynapse is vulnerable to Improper Authentication. The vulnerability is due to the completelogin function as It fails to verify the deactivated status of users during login. This only applies if any of the following are true: 1. JSON Web Tokens are enabled for login via the jwtconfig.enabled...
Arbitrary Code Execution
langchain is vulnerable to Arbitrary Code Execution. The vulnerability exists in the frommathprompt function at langchain.chains.PALChain which allows an attacker to execute arbitrary codes through prompt injection...
Remote Code Execution (RCE)
gitlab is vulnerable to Remote Code Execution RCE. The vulnerability exists due to the lack of an authorization mechanism in the library, which allows an attacker to import maliciously crafted projects, injecting and executing malicious code...
Denial Of Service (DoS)
redis is vulnerable to Denial of Service DoS attacks. This vulnerability occurs when a replica sends a specially crafted message to the master. If the message is valid, the master could be tricked into entering an infinite loop. This could prevent the master from serving requests from other...
LDAP Injection
org.bouncycastle is vulnerable to LDAP injection. The vulnerability exists because the engineGetCRLs function in X509LDAPCertStoreSpi.java does not properly validate the X.509 certificates, allowing an attacker to insert malicious certificate's subject name with special characters such as...
Authentication Bypass
Grafana is vulnerable to authentication bypass vulnerability. The vulnerability is specififc to Grafana deployments configured to use Azure AD OAuth for user authentication with a multi-tenant Azure application and without restrictions on which user groups can authenticate via the 'allowedgroups'...
Denial Of Service (DoS)
github.com/golang/go is vulnerable to Denial of Service DoS attacks. Unusual patterns of input data cause the upcomingHeaderNewlines function to parse HTTP and MIME headers which allocates more memory than required, causing the application to crash via memory exhaustion...
Authentication Bypass
PHP is vulnerable to Authentication Bypass. The vulnerability exists because the Passwordverify function always returns true with some hashes, allowing an attacker to modify password hashes...
Denial Of Service (DoS)
istio is vulnerable to denial of service. The vulnerability is due to the Kubernetes validating or mutating webhook service being exposed to the public, allowing a malicious attacker to send a specially crafted oversized message resulting in a crash to the control plane...
Non-Responsive Delegation Attack' (NRDelegation Attack)
unbound:edge is vulnerable to non-responsive delegation attack. The attacker can cause a resolver to spend a lot of time/resources resolving records under a malicious delegation point where a considerable number of unresponsive NS records reside...
Information Leak
Linux Kernel is vulnerable to information leak. It is possible due to a flaw in the scsiioctl function in drivers/scsi/scsiioctl.c in the Linux kernel, allowing a local attacker with a special user privilege CAPSYSADMIN or CAPSYSRAWIO to create issues with confidentiality...
Denial Of Service (DoS)
org.springframework.security:spring-security-oauth2-client is vulnerable to denial of service DoS attacks. An attacker is able to cause resource exhaustion via sending multiple requests initiating the authorization request for the authorization code grant using a single session or multiple...
Denial Of Service (DoS)
Apache HTTP Server is vulnerable to denial of service. The vulnerability exists due to a lack of sanitization allowing an attacker to crash the system via an out of bounds read in apstrcmpmatch when provided with an extremely large input buffer...
Cross-site Scripting (XSS)
mautic/core is vulnerable to cross-site scriptingXSS attacks. Insufficient sanitizations for the user inputs in InstallService.php allow remote authenticated attackers to inject and execute malicious javascript...
Cross-domain Cookie Leakage
guzzlehttp/guzzle is vulnerable to cross-domain cookie leakage. The library does not check if the cookie domain equals the domain of the server which sets the cookie via the Set-Cookie header, which allows an attacker to set malicious domains and redirect the victim to harmful third party servers...
Remote Code Execution (RCE)
graphql-upload is vulnerable to remote code execution. The vulnerability exists due to a lack of sanitization of file name via the upload function...
Authentication Bypass
curl is vulnerable to authentication bypass. The vulnerability exists because curl can reuse a previously created connection even when a TLS or SSH-related option is changed that should be prohibited to reuse...
Improper Input Validation
httpx is vulnerable to improper input validation. The vulnerability exists in copywith function because the user inputs are not properly validated which allows an attacker to bypass url with wrong information...
Sandbox Bypass
Jenkins Pipeline is vulnerable to sandbox bypass. It uses the names of Pipeline libraries to create cache directories without any sanitization, allowing attackers with Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM using specially crafted library...
Cross Site Scripting (XSS)
busybox is vulnerable to Cross Site Scripting XSS. The vulnerability exists due to arbitrary code execution which allows an attacker to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal...
Information Disclosure
phpmyadmin/phpmyadmin is vulnerable to information disclosure. An attacker can gain sensitive information through the lang parameter,pmaparameter, and the cookie section by providing malicious invalid requests...
Information Disclosure
Linux kernel is vulnerable to information disclosure. The vulnerability exists in net/ipv4/route.c due to the very small hash table, allowing an attacker to gain sensitive information through the IPv4 implementation...
Packet Injection
kernel is vulnerable to packet injection. The vulnerability exists due to a flaw was found in the Linux kernels wifi implementation which allows an attacker within wireless broadcast range to inject custom data into the wireless communication circumventing checks on the data...
Heap Corruption
chrome is vulnerable to heap corruption. The vulnerability exists due to a use after free in V8 in Google Chrome prior to 95.0.4638.54 allowed a remote attacker who had convinced a user to allow for connection to debugger to potentially exploit heap corruption via a crafted HTML page...
Improper Input Validation
Java SE is vulnerable to improper input validation. An attacker can perform service disruption through the JSSE component in the oracle GraalVM enterprise edition...
Denial Of Service (DoS)
Linux is vulnerable to denial of service. The vulnerability exists due to an out-of-bounds memory write flaw was found in the Linux kernel's joystick devices subsystem...
Server-Side Forgery Request
xstream is vulnerable to Server-Side Forgery Request. An attacker can manipulate the processed input stream and replace or inject objects, that result in a server-side forgery request...
Symlink Attack
tar is vulnerable to Symlink Attack. An attacker is able to write files to arbitrary locations on the file system via a malicious tar file...
Denial Of Service (DoS)
unbound is vulnerable to denial of service. There is no available reproducer or proof of concept for this issue, nor it was ever proven the integer overflow can lead to a buffer overflow in practice...
Information Disclosure
jetty-server is vulnerable to information disclosure. The URI normalisation in default compliance mode does not escape % encoded characters in the request metadata by common Servlet implementations, allowing access to sensitive resources within the WEB-INF directory via the use of URI with %2e or...
Remote Code Execution
bind9 is vulnerable to remote code execution. A buffer overflow in GSSAPI security policy negotiation can result in remote code execution...
Remote Code Execution
struts2-core is vulnerable to remote code execution. Tag attributes can be used to perform a double evaluation when forced OGNL evaluation is applied, by using the %... syntax. This can lead to remote code execution when an attacker provides a malicious input to be evaluated...
Denial Of Service
krb5is vulnerable to denial of service. The vulnerability exists because lib/krb5/asn.1/asn1encode.c support for indefinite length allows for an unbounded recursion...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. An invalid read location in vgaconinvertregion allows an attacker to crash the kernel and potentially obtain confidential information...
Out Of Bound Reads (OOB)
kernel-rt is vulnerable to out-of-bound OOB reads. The vulnerability exists in the vcdoresize function in drivers/tty/vt/vt.c allowing an attacker to perform a UAF read...
Denial Of Service (DoS)
linux is vulnerable to denial of service DoS. The vulnerability exists through a failure of the file system metadata validator in XFS, causing an inode with a valid, user-creatable extended attribute to be flagged as corrupt...
Arbitrary Code Execution
kernel is vulnerable to arbitrary code execution. The vulnerability exists through an out of bounds write in i2c driver leads to local escalation of privilege...
Information Disclosure
Apache HTTP server is vulnerable to modproxyuwsgi info disclosure and possible RCE...
Privilege Escalation
kernel is vulnerable to privilege escalation. The DAX hugepages not considered during mremap, allowing a local attacker to obtain higher privileges on the system...