38790 matches found
Denial Of Service (DoS)
RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...
Denial Of Service (DoS)
linux is vulnerable to denial of service. The vulnerability exists due to a memory leak in the ccprunaesgcmcmd function in drivers/crypto/ccp/ccp-ops.c...
Man-in-the-Middle (MitM)
postgresql is vulnerable to man-in-the-middle attacks. A man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first created when the server is configured to use trust authentication with a 'clientcert' requirement or to utilize 'cert' authentication...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. The vulnerability exists due to a use-after-free in drivers/infiniband/core/ucma.c...
Information Disclosure
firefox is vulnerable to information disclosure. The vulnerability exists due to a lack of sanitization which allows a Javascript alert dialog with arbitrary contents to be displayed over top an uncontrolled webpage...
Spoofing Attack
firefox is vulnerable to spoofing attack. The vulnerability exists due to the system entering fullscreen mode without notification or warning to the user...
Denial Of Service (DoS)
Linux is vulnerable to denial of service. An attacker is able to exploit the vulnerability by triggering destruction of a large SEV VM...
Remote Code Execution (RCE)
Oracle Java SE is vulnerable to remote code execution. A flaw was found in the way the Library component of OpenJDK handled JAR files containing multiple MANIFEST.MF files. Such JAR files could cause signature verification process to return an incorrect result, possibly allowing tampering with...
Denial Of Service (DoS)
linux is vulnerable to a memory leak in Linux kernel in llcpsockconnect...
Arbitrary Code Execution
unbound is vulnerable to arbitrary code execution. The vulnerability exists through an integer overflow in a size calculation in respip/respip.c. A flaw was found in unbound. An integer overflow in ubpackedrrsetkey function may lead to a buffer overflow of the allocated buffer if the size can be...
Remote Code Execution (RCE)
gsoap is vulnerable to remote code execution. An attacker can send a malicious SOAP HTTP that can lead to a remote code execution...
Type Confusion
chromium is vulnerable to type confusion. The vulnerability is triggered by performing integer data type conversion, creating an out-of-bounds condition that could cause arbitrary memory read/write primitive...
Remote Code Execution (RCE)
webkit2gtk is vulnerable to remote code execution. The vulnerability exists due to a type confusion when processing maliciously crafted web content...
Denial Of Service (DoS)
openssl is vulnerable to denial of service. Calls to EVPCipherUpdate, EVPEncryptUpdate and EVPDecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from t...
Denial Of Service (DoS)
QEMU is vulnerable to denial of service. An out-of-bounds read in ideatapicmdreplyend in hw/ide/atapi.c allows an attacker to crash the application...
Denial Of Service (DoS)
linux is vulnerable to denial of service DoS. The vulnerability exists through a memory leak if PERFEVENTIOCSETFILTER is used...
Denial Of Service (DoS)
Xen is vulnerable to denial of service. A stack overflow due to recursive function calls allows an attacker to crash the application...
Prototype Pollution
ini is vulnerable to prototype pollution. An attacker is able to inject properties into existing construct prototypes and modify attributes such as proto, constructor and prototype...
Denial Of Service (DoS)
openldap is vulnerable to denial of service. An assertion in certificateListValidate function in servers/slapd/schemainit.c allows an attacker to crash the application with malicious input...
Denial Of Service (DoS)
kernel-rt is vulnerable to denial of service. The vulnerability exists because of an incorrect way of handling connection tracking functionality on ipv6 port 1720, allowing an attacker to cause an application crash through the out-of-bounds memory write...
Privilege Escalation
kernel is vulnerable to arbitrary code execution. An out-of-bounds memory access via mmio ring buffer allows an attacker to escalate privilege or crash the system...
Insecure Deserialization
camel-netty is vulnerable to insecure deserialization. If no codec is specified, it allows objects deserialization using java serialization and deserialization by default rather than restricting only to Strings...
Authorization Bypass
kernel is vulnerable to authorization bypass. In KVM Kernel-based Virtual Machine environments using raw format virtio disks backed by a partition or LVM volume, a privileged guest user could bypass intended restrictions and issue read and write requests and other SCSI commands on the host, and...
Arbitrary Code Execution
openoffice.org is vulnerable to arbitrary code execution. The vulnerability exists as an array index error and an integer signedness error were found in the way OpenOffice.org parsed certain Rich Text Format RTF files. An attacker could use these flaws to create a specially-crafted RTF file that,...
Arbitrary Code Execution
thunderbird is vulnerable to arbitrary code execution. The vulnerability exists as a double free flaw was found in the way Thunderbird handled "application/http-index-format" documents. A malformed HTTP response could cause Thunderbird to execute arbitrary code with the privileges of the user...
Information Disclosure
kernel is vulnerable to information disclosure. Missing initialization flaws in the Linux kernel could lead to information leaks...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. A flaw was found in the Linux kernel's garbage collector for AFUNIX sockets. A local, unprivileged user could use this flaw to trigger a denial of service out-of-memory condition...
Man-in-the-Middle (MitM)
httpd is vulnerable to man-in-the-middle MitM. The vulnerability exists as a flaw was found in the way the TLS/SSL Transport Layer Security/Secure Sockets Layer protocols handle session renegotiation. A man-in-the-middle attacker could use this flaw to prefix arbitrary plain text to a client's...
Deserialization Of Untrusted Object
jackson-databind is vulnerable to deserialization of untrusted data. It was possible for an untrusted class, org.springframework.aop.config.MethodLocatingFactoryBean, and org.springframework.beans.factory.config.BeanReferenceFactoryBean, to be used as a serialization gadget through polymorphic...
Remote Code Execution (RCE)
jackson-databind is vulnerable to remote code execution RCE through deserialization of untrusted data. It is possible because the untrusted class, com.caucho.config.types.ResourceRef , was not filtered by default from the interaction between serialization gadgets and polymorphinc typing...
Denial Of Service (DoS)
libxml2.so is vulnerable to denial of service DoS. When ctxt-schema is NULL, it causes xmlSchemaValidateStream memory leak in xmlSchemaPreRun in xmlschemas.c...
Cross-site Scripting (XSS)
hibernate-validator is vulnerable to cross-site scripting XSS. The vulnerability exists as the SafeHtml annotation from SafeHtmlValidator does not properly sanitize payloads in HTML comments...
Arbitrary Code Execution
handlebars is vulnerable to arbitrary code execution. The lookup helper does not properly validate templates, allowing the execution of JavaScript code in templates. This vulnerability exists due to an incomplete fix for...
Denial Of Service (DoS)
github.com/apache/thrift is vulnerable to denial of service DoS. The vulnerability exists as an Apache Thrift server implemented in Go using TJSONProtocol or TSimpleJSONProtocol may panic when it parses invalid input data that causes lena to be less than 0...
Denial Of Service (DoS)
nginx HTTP/2 is vulnerable to denial of service DoS. The attack is possible because it cannot control an attacker from sending a large amount of data request by manipulating window size and stream priority to force server to queue the data in 1-byte chunks, exhausting CPU and/or memory...
Denial Of Service (DoS) Via Reset Signal Floods
github.com/grpc/grpc-go is vulnerable to denial of service DoS attacks. The attack can be triggered by sending a flood of reset signals by a HTTP/2 peer, leading to an excessive data queue and causing high CPU and resource consumption...
Authorization Bypass
httpd is vulnerable to authorization bypass. The vulnerability exists through URL normalization inconsistency...
Authorization Bypass
openjdk is vulnerable to authorization bypass. An input validation flaw was found in the URL class implementation in the Networking component of OpenJDK which allows a remote attacker to perform unauthorized read, update, insert or delete actions...
Command Injection
github.com/moby/moby is vulnerable to Command Injection. Misintepretation of the git ref command as a flag allows an attacker to execute arbitrary code remotely if there is control over the build path issued to the docker build...
Wrong And Predictable Encryption
github.com/golang/crypto is vulnerable to predictable encryption. In the keystream generation of more than 256 GiB in the amd64 implementation of golang.org/x/crypto/salsa20 and golang.org/x/crypto/salsa20/salsa, it can first generate incorrect output and finally cycling back to the previously...
Path Traversal
Red Hat JBoss Core Services is a set of supplementary software for Red Hat JBoss middleware products. This software, such as Apache HTTP Server, is common to multiple JBoss middleware products, and is packaged under Red Hat JBoss Core Services to allow for faster distribution of updates, and for ...
Arbitrary Code Execution
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The rh-php56 packages provide a recent stable release of PHP with PEAR 1.9.5 and enhanced language features including constant expressions, variadic functions, arguments unpacking, and the interactive debuger. T...
Denial Of Service (DoS)
Linux kernel is vulnerable to denial of service attacks. An attacker can cause a crash by triggering the use of GRO path for packets with tunnel stacking...
Remote Command Execution
kernel-rt is vulnerable to remote command execution. The vulnerability exists as a brute-force attack can be used to retrieve a cookie which can be used to execute SysRq commands via ICMP Echo Request packets...
Privilege Escalation
openssh is vulnerable to privilege escalation. A use-after-free flaw allows an attacker to fully compromise a non-privileged pre-authentication process using a different flaw could possibly cause sshd to crash or execute arbitrary code with root privileges...
Arbitrary Code Execution
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Multiple flaws were discovered in the way PHP performed object unserialization. Specially crafted input processed by the unserialize function could cause a PHP application to crash or, possibly, execute arbitrar...
Out-Of-Bounds Read
Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...
Authorization Bypass
jenkins is vulnerable to authorization bypass. The vulnerability exists as remotely authenticated users with Job/CONFIGURE permission can bypass intended restrictions to create or destroy arbitrary jobs...
Cross Site Scripting (XSS)
Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...
Information Disclosure
IBM Java SE version 6 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update fixes several vulnerabilities in the IBM Java Runtime Environment and the IBM Java Software Development Kit. Detailed vulnerability descriptions are linked from the IBM Security...