39640 matches found
Cross-site Scripting (XSS)
python-django is vulnerable to cross-site scripting. The % debug % template tag in the library does not properly encode the current context, allowing an attacker to inject and execute malicious javascript...
Information Disclosure
Linux kernel is vulnerable to information disclosure. The vulnerability exists in net/ipv4/route.c due to the very small hash table, allowing an attacker to gain sensitive information through the IPv4 implementation...
Denial Of Service (DoS)
qemu is vulnerable to Denial Of Service DoS. The vulnerability exists in the floppy disk emulator of QEMU allows privileged user to crash the QEMU...
Information Disclosure
kernel is vulnerable to information disclosure. The vulnerability exists due to undesirable speculative loads, leading to disclosure of stack content via side-channel attacks...
Packet Injection
kernel is vulnerable to packet injection. The vulnerability exists due to a flaw was found in the Linux kernels wifi implementation which allows an attacker within wireless broadcast range to inject custom data into the wireless communication circumventing checks on the data...
Denial Of Service (DoS)
apache2 is vulnerable to denial of service. The vulnerability exists due to a null pointer dereference during HTTP/2 request processing...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. A race condition getoldroot in fs/btrfs/ctree.c allows attackers to cause a denial of service due to the lack of locking on an extent buffer before a cloning operation...
Denial Of Service (DoS)
puma is vulnerable to denial of service DoS. The vulnerability exists as it was possible to monopolize a thread if the client does not reset and keeps requesting. This CVE exists due to an incomplete fix for CVE-2019-16770...
Remote Code Execution (RCE)
perl-image-exiftool is vulnerable to remote code execution. A lack of proper neutralization of user data in the DjVu file format in ExifTool allows an attacker to arbitrary code execution by sending a malicious image jpg, tiff, mp4 and many more...
Remote Code Execution (RCE)
chromium is vulnerable to remote code execution. The vulnerability is caused by insufficient validation of untrusted input in V8 for x8664, Googles high-performance JavaScript and WebAssembly engine that interprets code embedded in web pages...
Information Disclosure
curl is vulnerable to information disclosure. The libcurl does not strip off user credentials from the URL when automatically populating the HTTP request header field in outgoing HTTP requests, allowing a malicious user to retrieve sensitive data from the server in second HTTP request...
HTTP Request Smuggling
netty-codec-http2 is vulnerable to HTTP request smuggling. The vulnerability exists through an incomplete fix in CVE-2021-21295 where the content-length header is not properly validated if the request uses a single Http2HeaderFrame, and with endStream set to true...
Server-Side Request Forgery (SSRF)
netmask is vulnerable to server-side request forgery SSRF. The package is not able to differentiate private IP addresses as external IP addresses, and would allow an attacker to trick the application into parsing an IP address incorrectly. Successful exploitation of the vulnerability depends on h...
Server-Side Request Forgery (SSRF)
xstream is vulnerable to Server-Side Forgery Request. The processed stream at unmarshalling time contains information to recreate the formerly written objects, allowing an attacker to manipulate data streams referencing a resource in an intranet or the local host...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. It is possible due to uninitialized kernel data leak in userspace coredumps...
Arbitrary Code Execution
kernel is vulnerable to arbitrary code execution. The vulnerability exists through an out of bounds write in i2c driver leads to local escalation of privilege...
Denial Of Service (DoS)
QEMU is vulnerable to denial of service. A use after free vulnerability in ipreass in ipinput.c of libslirp allows an attacker to crash the application using malicious packets...
NULL Byte Injection
PHP7 is vulnerable to NULL byte injection. While using getheaders with user-supplied URL, if the URL contains null byte \0, the URL will be silently truncated. This causes certain software to make incorrect assumptions about the target of the getheaders and potentially send confidential informati...
Privilege Escalation
kernel is vulnerable to privilege escalation. The DAX hugepages not considered during mremap, allowing a local attacker to obtain higher privileges on the system...
Remote Code Execution (RCE)
ICU is vulnerable to remote code execution RCE. The vulnerability exists through an integer overflow in UnicodeString::doAppend...
Denial Of Service (DoS)
glibc is vulnerable to denial of service. It was found that the glibc addmntent function, used by various mount helper utilities, did not handle certain errors correctly when updating the mtab mounted file systems table file. If such utilities had the setuid bit set, a local attacker could use th...
Arbitrary Code Execution
firefox is vulnerable to arbitrary code execution. The vulnerability exists as it was found that a malicious web page could execute arbitrary code with the privileges of the user running Firefox if the user dropped a tab onto the malicious web page...
Arbitrary Code Execution
thunderbird is vulnerable to arbitrary code execution. Several flaws were found in the processing of malformed HTML mail content. An HTML mail message containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running...
Denial Of Service (DoS)
kernel-rt is vulnerable to denial of service. An off-by-two error was found in the setselection function of the Linux kernel. This could allow a local, unprivileged user to cause a denial of service when making a selection of characters in a UTF-8 console. Note: physical console access is require...
Remote Code Execution (RCE)
jackson-databind is vulnerable to remote code execution RCE through deserialization of untrusted data. It is possible because the untrusted class, com.caucho.config.types.ResourceRef , was not filtered by default from the interaction between serialization gadgets and polymorphinc typing...
Information Disclosure
Kernel is vulenrable to information disclosure. The vulnerability exists in KVM through exporting MSRIA32TSXCTRL to guest. This issue exists due to the an incomplete fix for TAA, CVE-2019-11135...
SQL Injection
phpmyadmin/phpmyadmin is vulnerable to SQL injection. An authenticated user is able to inject and execute arbitrary SQL via the username parameter...
CRLF Injection
waitress is vulnerable to CRLF injection. The vulnerability exists due to the different ways in which carriage returns and line feed characters are parsed in the server and the client. This cab potentially lead to HTTP request smuggling and splitting vulnerabilities...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists through an out-of-bound oob memory read in hsoprobe in drivers/net/usb/hso.c...
Denial Of Service (DoS)
nimbus-jose-jwt is vulnerable to denial of service. Uncaught exceptions while parsing a JWT allow an attacker to submit a malicious JWT which could result in an application crash, potentially disclosing confidential information or a potential authentication bypass...
Arbitrary Code Execution
codehaus is vulnerable to arbitrary code execution. An incomplete fix for unsafe deserialization in jackson-databind allows an attacker to inject malicious objects and execute arbitrary code...
Denial Of Service (DoS)
Linux kernel is vulnerable to denial of service vulnerability. The vulnerability exists in Linux kernel built with KVM virtualisationCONFIGKVM support with Virtual Function I/O feature CONFIGVFIO enabled. A malicious guest device could send a virtual interrupt guest IRQ with a larger 1024 index...
Denial Of Service (DoS)
Linux kernel is vulnerable to denial of service attacks. An attacker can cause a crash by triggering the use of GRO path for packets with tunnel stacking...
Buffer Overflow
Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...
Cross-Site Scripting (XSS)
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The php54 packages provide a recent stable release of PHP with the PEAR 1.9.4, APC 3.1.15, and memcache 3.0.8 PECL extensions, and a number of additional utilities. The php54 packages have been upgraded to...
Remote Command Execution
kernel-rt is vulnerable to remote command execution. The vulnerability exists as a brute-force attack can be used to retrieve a cookie which can be used to execute SysRq commands via ICMP Echo Request packets...
Path Traversal
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Multiple flaws were discovered in the way PHP performed object unserialization. Specially crafted input processed by the unserialize function could cause a PHP application to crash or, possibly, execute arbitrar...
Arbitrary Code Execution
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Multiple flaws were discovered in the way PHP performed object unserialization. Specially crafted input processed by the unserialize function could cause a PHP application to crash or, possibly, execute arbitrar...
Denial Of Service (DoS)
The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. A race condition flaw, leading to heap-based buffer overflows, was found in the modstatus httpd module. A remote attacker able to access a status page served by modstatus on a server using a...
Denial Of Service (DoS)
The kernel-rt packages contain the Linux kernel, the core of any Linux operating system. A race condition leading to a use-after-free flaw was found in the way the Linux kernel's TCP/IP protocol suite implementation handled the addition of fragments to the LRU Last-Recently Used list under certai...
Denial Of Service (DoS)
The kernel-rt packages contain the Linux kernel, the core of any Linux operating system. A flaw was found in the way IP packets with an Internet Header Length ihl of zero were processed in the skbflowdissect function in the Linux kernel. A remote attacker could use this flaw to trigger an infinit...
Privilege Escalation
An attack technique against the W3C XML Encryption Standard when block ciphers were used in CBC mode could allow a remote attacker to conduct chosen-ciphertext attacks, leading to the recovery of the entire plain text of a particular cryptogram. CVE-2011-1096 JBoss Web Services leaked side-channe...
Input Validation Bypass
Red Hat Subscription Asset Manager acts as a proxy for handling subscription information and software updates on client machines. The latest packages for Subscription Asset Manager include a number of security fixes: When a Subscription Asset Manager instance is created, its configuration script...
Cross Site Scripting (XSS)
JBoss Enterprise Application Platform 6 is a platform for Java applications based on JBoss Application Server 7. This release serves as a replacement for JBoss Enterprise Application Platform 6.0.0, and includes bug fixes and enhancements. Refer to the 6.0.1 Release Notes for information on the...
Memory Corruption
The IBM Java SE version 6 release includes the IBM Java 6 Runtime Environment and the IBM Java 6 Software Development Kit. This update fixes several vulnerabilities in the IBM Java 6 Runtime Environment and the IBM Java 6 Software Development Kit. Detailed vulnerability descriptions are linked fr...
Remote Code Execution (RCE)
kernel is vulnerable to remote code execution RCE attacks. The vulnerability exists as the Linux kernel version 3.3-rc1 and later is affected by a vulnerability lies in the processing of incoming L2CAP commands - ConfigRequest, and ConfigResponse messages. This info leak is a result of...
Authorization Bypass
Linux kernel is vulnerable to authorization bypass. When creating audit records for parameters to executed children processes, an attacker can convince the Linux kernel audit subsystem can create corrupt records which may allow an attacker to misrepresent or evade logging of executing commands...
Denial Of Service (DoS)
openpsa/midcom is vulnerable to denial of service Dos attacks. The library uses a vulnerable version of PHP and calls the insecure method xmlparseintostruct. This can allow a malicious user to upload an XML file with the RSS Upload feature to cause a buffer under read or segmentation fault that c...
Cross-Site Request Forgery(CSRF)
Wordpress is vulnerable to cross-site request forgery CSRF attacks. The attacks can be launched because wp-admin/includes/class-wp-screen.php and wp-admin/widgets.php have flaws, allowing the widget-access action requests to be hijacked by the attackers...
Denial Of Service (DoS) Through Infinite Loop
Expat is vulnerable to denial of service DoS attacks. A malicious user can cause the parser to enter an infinite loop by passing an XML document with in it...