Lucene search
+L
VeracodeMost viewed

38505 matches found

Veracode
Veracode
•added 2022/05/23 3:36 a.m.•49 views

Symlink Attack

github.com/argoproj/argo-cd is vulnerable to symlink attack. The vulnerability exists due to a lack of sufficient check if the application target directory contains plain Kubernetes YAML manifests allowing out-of-bound manifests and JSON files to leak from Argo CD repo-server...

4.3CVSS5.3AI score0.01074EPSS
Exploits0References4Affected Software1
Veracode
Veracode
•added 2022/04/28 9:29 a.m.•49 views

Information Disclosure

xen is vulnerable to Information Disclosure. The vulnerability exists due to a shared branch history in the Branch History Buffer BHB allowing an attacker to influence mispredicted branches...

5.6CVSS6.6AI score0.00495EPSS
Exploits0References6Affected Software2
Veracode
Veracode
•added 2022/03/27 12:20 a.m.•49 views

Denial Of Service (DoS)

kernel is vulnerable to denial of service. The vulnerability exists due to a read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain socket file handlers...

7CVSS3.8AI score0.0031EPSS
Exploits0References9Affected Software3
Veracode
Veracode
•added 2022/03/07 12:11 a.m.•49 views

Denial Of Service (DoS)

Chrome is vulnerable to denial of service. The vulnerability exists due to a Use after free in Views...

8.8CVSS2.3AI score0.00737EPSS
Exploits1References4Affected Software2
Veracode
Veracode
•added 2022/02/11 6:10 a.m.•49 views

Remote Code Execution (RCE)

gnuplot is vulnerable to remote code execution.An attacker is able to exploit the vulnerability by injecting maliciously crafted script via shell metacharacters in Gnuplot commands...

9.8CVSS5.5AI score0.01776EPSS
Exploits0References4Affected Software1
Veracode
Veracode
•added 2021/11/05 3:36 a.m.•49 views

Information Disclosure

firefox is vulnerable to information disclosure. The vulnerability exists due to a lack of sanitization which allows a Javascript alert dialog with arbitrary contents to be displayed over top an uncontrolled webpage...

4.3CVSS1.8AI score0.01622EPSS
Exploits0References11Affected Software7
Veracode
Veracode
•added 2021/10/26 9:55 p.m.•49 views

Improper Input Validation

Java SE is vulnerable to improper input validation. An attacker can perform service disruption through the JSSE component in the oracle GraalVM enterprise edition...

5.3CVSS3.1AI score0.06218EPSS
Exploits0References17Affected Software6
Veracode
Veracode
•added 2021/06/06 10:24 a.m.•49 views

Denial Of Service (DoS)

linux is vulnerable to a memory leak in Linux kernel in llcpsockconnect...

7.5CVSS2.5AI score0.03259EPSS
Exploits0References12Affected Software4
Veracode
Veracode
•added 2021/03/30 9:42 p.m.•49 views

Remote Code Execution (RCE)

webkit2gtk is vulnerable to remote code execution. The vulnerability exists due to a type confusion when processing maliciously crafted web content...

8.8CVSS3.1AI score0.14542EPSS
Exploits0References11Affected Software17
Veracode
Veracode
•added 2021/02/19 7:17 p.m.•49 views

Remote Code Execution (RCE)

Mumble is vulnerable to remote code execution. The vulnerability exists when a victim navigates to a crafted URL on a server list and clicks on the Open Webpage text...

8.8CVSS3.1AI score0.03203EPSS
Exploits0References6Affected Software5
Veracode
Veracode
•added 2020/10/23 8:58 a.m.•49 views

Authorization Bypass

OpenJDK is vulnerable to authorization bypass. The vulnerability exists through incomplete check for invalid characters in URI to path conversion...

3.7CVSS4.4AI score0.02196EPSS
Exploits0References8Affected Software5
Veracode
Veracode
•added 2020/10/01 3:52 a.m.•49 views

Denial Of Service (DoS)

kernel-rt is vulnerable to denial of service. The vulnerability exists because of an incorrect way of handling connection tracking functionality on ipv6 port 1720, allowing an attacker to cause an application crash through the out-of-bounds memory write...

8.1CVSS7.6AI score0.05114EPSS
Exploits1References9Affected Software2
Veracode
Veracode
•added 2020/08/18 8:23 a.m.•49 views

Information Disclosure

libvirt is vulnerable to information disclosure. A file descriptor for /dev/mapper/control is leaked into the QEMU process. This file descriptor allows for privileged operations to be made against device mapper on the host...

8.8CVSS2.1AI score0.00416EPSS
Exploits0References4Affected Software1
Veracode
Veracode
•added 2020/07/22 3:54 a.m.•49 views

Information Disclosure

kernel is vulnerable to information disclosure. A logic bug was found in the Linux kernels implementation of SSBD. A bug in the logic handling can allow an attacker with a local account to disable SSBD protection during a context switch when additional speculative execution mitigations are in pla...

5.5CVSS1.5AI score0.00463EPSS
Exploits0References4Affected Software2
Veracode
Veracode
•added 2020/07/08 3:23 a.m.•49 views

Privilege Escalation

kernel is vulnerable to arbitrary code execution. An out-of-bounds memory access via mmio ring buffer allows an attacker to escalate privilege or crash the system...

8.8CVSS6.5AI score0.00763EPSS
Exploits0References36Affected Software1
Veracode
Veracode
•added 2020/07/08 3:21 a.m.•49 views

Privilege Escalation

kernel is vulnerable to privilege escalation. A buffer overflow in the mwifiexcmdappendvsietlv function in drivers/net/wireless/marvell/mwifiex/scan.c allows an attacker to gain higher privileges or cause a denial of service condition...

7.8CVSS5AI score0.00435EPSS
Exploits0References13Affected Software4
Veracode
Veracode
•added 2020/06/23 3:3 a.m.•49 views

Cross-Site Scripting (XSS)

github.com/astaxie/beego/issues is vulnerable to cross-site scripting XSS. A remote attacker is able to inject and execute arbitrary Javascript in a user's browser via the Router Pattern...

4.4AI score
Exploits0
Veracode
Veracode
•added 2020/05/15 5:27 a.m.•49 views

Insecure Deserialization

camel-netty is vulnerable to insecure deserialization. If no codec is specified, it allows objects deserialization using java serialization and deserialization by default rather than restricting only to Strings...

9.8CVSS3.4AI score0.06592EPSS
Exploits0References8Affected Software1
Veracode
Veracode
•added 2020/05/06 3:17 a.m.•49 views

Information Disclosure

kernel is vulnerable to information disclosure. An information leak bug caused by a malicious USB device in the drivers/net/can/usb/peakusb/pcanusbcore.c driver allows an attacker to obtain confidential information...

2.4CVSS2.5AI score0.00512EPSS
Exploits0References16Affected Software2
Veracode
Veracode
•added 2020/04/10 1:3 a.m.•49 views

Authorization Bypass

kernel is vulnerable to authorization bypass. In KVM Kernel-based Virtual Machine environments using raw format virtio disks backed by a partition or LVM volume, a privileged guest user could bypass intended restrictions and issue read and write requests and other SCSI commands on the host, and...

4.6CVSS1.1AI score0.00566EPSS
Exploits2References19Affected Software2
Veracode
Veracode
•added 2020/04/10 1:1 a.m.•49 views

Arbitrary Code Execution

firefox is vulnerable to arbitrary code execution. The vulnerability exists as it was found that a malicious web page could execute arbitrary code with the privileges of the user running Firefox if the user dropped a tab onto the malicious web page...

10CVSS3.6AI score0.03558EPSS
Exploits1References13Affected Software2
Veracode
Veracode
•added 2020/04/10 12:56 a.m.•49 views

Arbitrary Code Execution

thunderbird is vulnerable to arbitrary code execution. The vulnerability exists as a double free flaw was found in the way Thunderbird handled "application/http-index-format" documents. A malformed HTTP response could cause Thunderbird to execute arbitrary code with the privileges of the user...

10CVSS1.4AI score0.06858EPSS
Exploits1References13Affected Software3
Veracode
Veracode
•added 2020/04/10 12:43 a.m.•49 views

Integer Overflows

Mozilla Firefox is vulnerable to Integer Overflows. Flaws in the way of processing of malformed web content allows a web page to contain malicious content, causing Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox...

9.3CVSS5.4AI score0.04879EPSS
Exploits0References33Affected Software7
Veracode
Veracode
•added 2020/04/10 12:43 a.m.•49 views

Denial Of Service (DoS)

mysql is vulnerable to denial of service. A flaw was found in the way MySQL handled SELECT statements with subqueries in the WHERE clause, that assigned results to a user variable. A remote, authenticated attacker could use this flaw to crash the MySQL server daemon mysqld. This issue only caused...

4CVSS2.5AI score0.16263EPSS
Exploits3References25Affected Software1
Veracode
Veracode
•added 2020/04/10 12:35 a.m.•49 views

Authentication Bypass

java is vulnerable to authentication bypass. A flaw was found in the way the XML Digital Signature implementation in the JRE handled HMAC-based XML signatures. An attacker could use this flaw to create a crafted signature that could allow them to bypass authentication, or trick a user, applet, or...

5CVSS2.1AI score0.06348EPSS
Exploits0References89Affected Software21
Veracode
Veracode
•added 2019/12/23 3:1 a.m.•49 views

CRLF Injection

waitress is vulnerable to CRLF injection. The vulnerability exists due to the different ways in which carriage returns and line feed characters are parsed in the server and the client. This cab potentially lead to HTTP request smuggling and splitting vulnerabilities...

7.5CVSS2AI score0.02714EPSS
Exploits1References10Affected Software3
Veracode
Veracode
•added 2019/10/24 7:13 a.m.•49 views

XML External Entity (XXE)

Apache Poi is vulnerable to XML external entity XXE. During the use of XSSFExportToXml tool to convert user-provided Microsoft Excel documents, it is possible for an attacker to parse a malicious Microsoft Excel document containing a reference to an external entity and perform requests on behalf ...

5.5CVSS3.7AI score0.0099EPSS
Exploits0References19Affected Software1
Veracode
Veracode
•added 2019/10/16 12:21 a.m.•49 views

Denial Of Service (DoS)

The kernel is vulnerable to denial of service. The attack exists because it causes heap-based buffer overflow in the function mwifiexuapparsetailies in drivers/net/wireless/marvell/mwifiex/ie.c, leading to a memory corruption and other consequences...

9.8CVSS9.5AI score0.06821EPSS
Exploits0References31Affected Software2
Veracode
Veracode
•added 2019/09/13 12:40 a.m.•49 views

Denial Of Service (DoS)

nginx HTTP/2 is vulnerable to denial of service DoS. The attack is possible because it cannot control an attacker from sending a large amount of data request by manipulating window size and stream priority to force server to queue the data in 1-byte chunks, exhausting CPU and/or memory...

7.5CVSS3.5AI score0.59547EPSS
Exploits0References55Affected Software46
Veracode
Veracode
•added 2019/08/20 12:10 a.m.•49 views

Information Disclosure

php is vulnerable to denial of service. An attacker is able to read past allocated buffer in the function exifreaddata by passing malicious EXIF data to the PHP EXIF extension. This can also potentially lead to an application crash...

9.1CVSS2.6AI score0.04068EPSS
Exploits1References9Affected Software2
Veracode
Veracode
•added 2019/08/08 12:7 a.m.•50 views

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS. The vulnerability exists through a fix race condition between mmgetnotzero/gettaskmm and core dumping...

7CVSS2.9AI score0.00989EPSS
Exploits3References61Affected Software2
Veracode
Veracode
•added 2019/07/25 7:17 a.m.•49 views

Command Injection

github.com/moby/moby is vulnerable to Command Injection. Misintepretation of the git ref command as a flag allows an attacker to execute arbitrary code remotely if there is control over the build path issued to the docker build...

8.4CVSS8.2AI score0.02025EPSS
Exploits1References10Affected Software2
Veracode
Veracode
•added 2019/05/16 1:48 a.m.•49 views

Key Reinstallation Attack (KRACK)

WPA and WPA2 are vulnerable to key reinstallation attacks KRACK. A remote attacker within Wi-Fi range could exploit this attack to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by reinstalling a previously used group key GTK during a group key handshake...

5.3CVSS7AI score0.02285EPSS
Exploits0References44Affected Software3
Veracode
Veracode
•added 2019/05/02 6:2 a.m.•49 views

Denial Of Service (DoS) Through Memory Consumption

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The rh-php56 packages provide a recent stable release of PHP with PEAR 1.9.5 and enhanced language features including constant expressions, variadic functions, arguments unpacking, and the interactive debuger. T...

9.8CVSS9AI score0.36974EPSS
Exploits78References16Affected Software3
Veracode
Veracode
•added 2019/05/02 6:2 a.m.•49 views

Buffer Overflow

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The rh-php56 packages provide a recent stable release of PHP with PEAR 1.9.5 and enhanced language features including constant expressions, variadic functions, arguments unpacking, and the interactive debuger. T...

9.8CVSS9AI score0.36974EPSS
Exploits78References18Affected Software3
Veracode
Veracode
•added 2019/05/02 6:2 a.m.•49 views

Use-After-Free

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The rh-php56 packages provide a recent stable release of PHP with PEAR 1.9.5 and enhanced language features including constant expressions, variadic functions, arguments unpacking, and the interactive debuger. T...

9.8CVSS9AI score0.36974EPSS
Exploits78References16Affected Software3
Veracode
Veracode
•added 2019/05/02 5:51 a.m.•49 views

Denial Of Service (DoS)

Linux kernel is vulnerable to denial of serviceDoS attacks. A race condition flaw occurs in the ioctlsendfib function in the Linux kernel's aacraid implementation. This allows a local user to cause out-of-bound access and crash the system by changing a certain size value...

5.1CVSS5.6AI score0.00404EPSS
Exploits0References21Affected Software1
Veracode
Veracode
•added 2019/05/02 5:50 a.m.•49 views

Denial Of Service (DoS)

Linux kernel is vulnerable to denial of service attacks. An attacker can cause a crash by triggering the use of GRO path for packets with tunnel stacking...

7.5CVSS7AI score0.047EPSS
Exploits0References16Affected Software1
Veracode
Veracode
•added 2019/05/02 5:39 a.m.•49 views

Cross-Site Scripting (XSS)

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The php54 packages provide a recent stable release of PHP with the PEAR 1.9.4, APC 3.1.15, and memcache 3.0.8 PECL extensions, and a number of additional utilities. The php54 packages have been upgraded to...

6.1CVSS9.3AI score0.53166EPSS
Exploits43References20Affected Software6
Veracode
Veracode
•added 2019/05/02 5:39 a.m.•49 views

Information Disclosure

IBM Java SE is vulnerable to information disclosure. The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the...

5CVSS4.4AI score0.73851EPSS
Exploits0References105Affected Software4
Veracode
Veracode
•added 2019/05/02 5:19 a.m.•49 views

Cross-site Request Forgery (CSRF)

Red Hat JBoss Enterprise Application Platform 6 is a platform for Java applications based on JBoss Application Server 7. It was discovered that sending requests containing large headers to the Web Console produced a Java OutOfMemoryError in the HTTP management interface. An attacker could use thi...

6.8CVSS9.1AI score0.02978EPSS
Exploits0References37Affected Software77
Veracode
Veracode
•added 2019/05/02 5:17 a.m.•49 views

Denial Of Service (DoS)

CUPS provides a portable printing layer for Linux, UNIX, and similar operating systems. A string reference count bug was found in cupsd, causing premature freeing of string objects. An attacker can submit a malicious print job that exploits this flaw to dismantle ACLs protecting privileged...

10CVSS6.4AI score0.29913EPSS
Exploits9References19Affected Software1
Veracode
Veracode
•added 2019/05/02 5:13 a.m.•49 views

Memory Corruption And Code Execution

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. A buffer overflow flaw was found in the Exif extension. A specially crafted JPEG or TIFF file could cause a PHP application using the exifthumbnail function to crash or, possibly, execute arbitrary code with the...

7.5CVSS7.7AI score0.28862EPSS
Exploits3References11Affected Software1
Veracode
Veracode
•added 2019/05/02 5:2 a.m.•49 views

Denial Of Service (DoS) By An Infinite Loop Causing CPU Consumption

Red Hat CloudForms Management Engine delivers the insight, control, and automation needed to address the challenges of managing virtual environments. CloudForms Management Engine is built on Ruby on Rails, a model-view-controller MVC framework for web application development. Action Pack implemen...

7.5CVSS6.3AI score0.53703EPSS
Exploits2References6Affected Software2
Veracode
Veracode
•added 2019/05/02 4:58 a.m.•49 views

Sandbox Restrictions Bypass

IBM Java SE version 6 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update fixes several vulnerabilities in the IBM Java Runtime Environment and the IBM Java Software Development Kit. Detailed vulnerability descriptions are linked from the IBM Security...

10CVSS6.6AI score0.17606EPSS
Exploits0References19Affected Software1
Veracode
Veracode
•added 2019/05/02 4:52 a.m.•49 views

Carriage Return And Line Feed (CRLF) Injection

Red Hat OpenShift Enterprise is a cloud computing Platform-as-a-Service PaaS solution designed for on-premise or private cloud deployments. Refer to the Red Hat OpenShift Enterprise 1.1 Release Notes for information about the changes in this release. The Release Notes will be available shortly fr...

7.5CVSS6.7AI score0.04458EPSS
Exploits2References42Affected Software20
Veracode
Veracode
•added 2019/05/02 4:52 a.m.•49 views

Denial Of Service (DoS)

The kernel-rt packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues: A heap-based buffer overflow flaw was found in the Linux kernel's iSCSI target subsystem. A remote attacker could use a specially-crafted iSCSI request to caus...

7.9CVSS6.3AI score0.07313EPSS
Exploits11References21Affected Software1
Veracode
Veracode
•added 2019/05/02 4:45 a.m.•49 views

Out-Of-Bounds Read

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...

10CVSS6.6AI score0.73364EPSS
Exploits18References16Affected Software3
Veracode
Veracode
•added 2019/05/02 4:44 a.m.•49 views

Improper Access Control

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon mysqld and many client programs and libraries. This update fixes several vulnerabilities in the MySQL database server. Information about these flaws can be found on the Oracle Critical Patch Update...

6.5CVSS5.9AI score0.13175EPSS
Exploits2References11Affected Software1
Veracode
Veracode
•added 2019/01/15 9:21 a.m.•49 views

Remote Code Execution (RCE)

kernel is vulnerable to remote code execution RCE attacks. The vulnerability exists as the Linux kernel version 3.3-rc1 and later is affected by a vulnerability lies in the processing of incoming L2CAP commands - ConfigRequest, and ConfigResponse messages. This info leak is a result of...

8CVSS8.3AI score0.84172EPSS
Exploits15References19Affected Software2
Total number of security vulnerabilities5000