39248 matches found
SQL Injection
prestashop/blockwishlist is vulnerable to SQL injection. The vulnerability exists in getProductsOrCount function in WishListProductSearchProvider.php because order by and order way statements are not properly validated which allows an attacker to inject SQL queries...
Information Disclosure
kernel is vulnerable to information disclosure. The vulnerability exists due to a flaw in hw, allowing an attacker to exploit the execution window of AMD LFENCE/JMP and expose sensitive information...
Information Disclosure
intel-microcode, sid is vulnerable to information disclosure. An incomplete cleanup in specific special register write operations for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...
Improper Access Control
github.com/awake1t/linglong is vulnerable to access control bypass. The vulnerability exists in the jwt.go due to the hard coded jwt token which allows an attacker to craft a malicious cookie and gain access to the system...
Denial Of Service (DoS)
org.apache.tika, tika is susceptible to denial of service. This vulnerability exists in the extractMetadata function in BPGParser.java due to invalid memory allocation which allows an attacker to crash the system via a crafted file...
Remote Code Execution
laravel/laravel is vulnerable to remote code execution. Improper deserialization in destruct in GuzzleHttp\Cookie\FileCookieJar.php allows an attacker to upload and execute malicious code via an unserialized pop chain...
Authentication Bypass
curl is vulnerable to authentication bypass. The vulnerability exists because curl can reuse a previously created connection even when a TLS or SSH-related option is changed that should be prohibited to reuse...
Denial Of Service (DoS)
curl is vulnerable to denial of service. The vulnerability exists due to the never-ending busy-loop in erroneous function, allowing an attacker to cause an application crash by sending a HTTP request...
SQL Injection
django is vulnerable to SQL injection. The library directly passes the user input directly to the QuerySet.annotate, aggregate, and extra methods, allowing an attacker to inject malicious SQL query in column aliases via a malicious dictionary as the passed kwargs...
Information Disclosure
phpmyadmin/phpmyadmin is vulnerable to information disclosure. An attacker can gain sensitive information through the lang parameter,pmaparameter, and the cookie section by providing malicious invalid requests...
Remote Code Execution (RCE)
firefox is vulnerable to remote code execution. The vulnerability exists due to a lack of validation of the boundaries of same-origin policy, allowing an attacker to use XSL transform to serve a user an XSL with maliciously crafted javascript...
Denial Of Service (DoS)
qemu is vulnerable to Denial Of Service DoS. The vulnerability exists due to a heap buffer overflow was found in the floppy disk emulator of QEMU in fdctrltransferhandler in hw/block/fdc.c while processing DMA read data transfers from the floppy drive to the guest system...
Heap Corruption
chrome is vulnerable to heap corruption. The vulnerability exists due to a use after free in V8 in Google Chrome prior to 95.0.4638.54 allowed a remote attacker who had convinced a user to allow for connection to debugger to potentially exploit heap corruption via a crafted HTML page...
Improper Input Validation
Java SE is vulnerable to improper input validation. An attacker can perform service disruption through the JSSE component in the oracle GraalVM enterprise edition...
Man-in-the-middle (MITM)
bluez is vulnerable to Man-in-the-middle MITM. The vulnerability exists in smpcmdpublickey function of bluetooth/smp.c due to the failure of both remote and local non-debug public keys which allows an attacker to identify the Passkey used during pairing...
Denial Of Service (DoS)
bind9 is vulnerable to denial of service. The process terminates with a failed assertion check when receiving a malicious query for a record...
Man-in-the-middle (MitM)
apache-maven is vulnerable to Man-in-the-middle MitM. The vulnerability exists because it allows downloading code from external repositories via HTTP by default, resulting in a potential risk if a malicious actor takes over that repository or is able to insert themselves into a position to preten...
Information Disclosure
jetty-server is vulnerable to information disclosure. The URI normalisation in default compliance mode does not escape % encoded characters in the request metadata by common Servlet implementations, allowing access to sensitive resources within the WEB-INF directory via the use of URI with %2e or...
Privilege Escalation
kernel is vulnerable to arbitrary code execution. An out-of-bounds memory access via mmio ring buffer allows an attacker to escalate privilege or crash the system...
Denial Of Service (DoS)
glibc is vulnerable to denial of service. It was found that the glibc addmntent function, used by various mount helper utilities, did not handle certain errors correctly when updating the mtab mounted file systems table file. If such utilities had the setuid bit set, a local attacker could use th...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists as a flaw was found in the way CIFS shares with DFS referrals at their root were handled. An attacker on the local network who is able to deploy a malicious CIFS server could create a CIFS network share that, when mounted,...
Information Disclosure
httpd is vulnerable to information disclosure. The vulnerability exists as it was discovered that the Apache HTTP Server did not properly validate the request URI for proxied requests. In certain configurations, if a reverse proxy used the ProxyPassMatch directive, or if it used the RewriteRule...
Arbitrary Code Execution
firefox is vulnerable to arbitrary code execution. It was found that the fix for CVE-2010-0179 was incomplete when the Firebug add-on was used. If a user visited a website containing malicious JavaScript while the Firebug add-on was enabled, it could cause Firefox to execute arbitrary JavaScript...
Privilege Escalation
kernel is vulnerable to privilege escalation. A buffer overflow flaw was found in the ecryptfsuidhash function in the Linux kernel eCryptfs implementation. On systems that have the eCryptfs netlink transport Red Hat Enterprise Linux 5 does or where the "/dev/ecryptfs" file has world writable...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists as a divide-by-zero flaw was found in the azxpositionok function in the driver for Intel High Definition Audio, snd-hda-intel. A local, unprivileged user could trigger this flaw to cause a kernel crash...
Information Disclosure
kernel is vulnerable to information disclosure. The vulnerability exists as the sockgetsockopt function in the Linux kernel did not properly initialize a data structure that can be directly returned to user-space when the getsockopt function is called with SOBSDCOMPAT optname set...
Unauthorized Access
libreoffice allows unauthorized access to application functions. The remote resources protection module is not applied to bullet graphics, allowing any user to enable stealth mode to retrieve remote resources...
Denial Of Service (DoS)
nimbus-jose-jwt is vulnerable to denial of service. Uncaught exceptions while parsing a JWT allow an attacker to submit a malicious JWT which could result in an application crash, potentially disclosing confidential information or a potential authentication bypass...
Denial Of Service (DoS) Via Reset Signal Floods
github.com/grpc/grpc-go is vulnerable to denial of service DoS attacks. The attack can be triggered by sending a flood of reset signals by a HTTP/2 peer, leading to an excessive data queue and causing high CPU and resource consumption...
Remote Code Execution (RCE)
jackson-databind is vulnerable to remote code execution RCE. The attack is possible due to lack of proper handling of gadget type conversion when ehcache is used...
Out Of Bound Reads (OOB)
lSQLite3 is vulnerable to out of boundOOB reads. The component rtree Table Handler in the function rtreenode does not properly handle invalid rtree tables, leading to OOB if the input is malicious...
Arbitrary Code Execution
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The php54 packages provide a recent stable release of PHP with the PEAR 1.9.4, APC 3.1.15, and memcache 3.0.8 PECL extensions, and a number of additional utilities. The php54 packages have been upgraded to...
Arbitrary File Read
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The php54 packages provide a recent stable release of PHP with the PEAR 1.9.4, APC 3.1.15, and memcache 3.0.8 PECL extensions, and a number of additional utilities. The php54 packages have been upgraded to...
Remote Code Execution (RCE) Via Memory Corruption
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The php55 packages provide a recent stable release of PHP with the PEAR 1.9.4, memcache 3.0.8, and mongo 1.4.5 PECL extensions, and a number of additional utilities. The php55 packages have been upgraded to...
Arbitrary Code Execution
java is vulnerable to arbitrary code execution. The vulnerability exists through Libraries...
Denial Of Service (DoS)
The kernel-rt packages contain the Linux kernel, the core of any Linux operating system. A race condition leading to a use-after-free flaw was found in the way the Linux kernel's TCP/IP protocol suite implementation handled the addition of fragments to the LRU Last-Recently Used list under certai...
Denial Of Service (DoS)
Quagga is a TCP/IP based routing software suite. The Quagga bgpd daemon implements the BGP Border Gateway Protocol routing protocol. The Quagga ospfd and ospf6d daemons implement the OSPF Open Shortest Path First routing protocol. A heap-based buffer overflow flaw was found in the way the bgpd...
Remote Code Execution (RCE)
kibana is vulnerable to arbitrary code execution attacks. The vulnerability exists in the Timelion visualizer when running unflatten, allowing an attacker to send a malicious request that will attempt to execute Javascript code, leading to arbitrary command execution on the host system...
TCP Session Hijack
kernel-rt is vulnerable to TCP session hijack attacks. The vulnerability exists as net/ipv4/tcpinput.c in the Linux kernel before 4.7 does not properly determine the rate of challenge ACK segments, which makes it easier for remote attackers to hijack TCP sessions via a blind in-window attack...
Protection Mechanism Bypass
OpenSSL is vulnerable to protection mechanism bypass. This is because OpenSSL accepts several variations of certificate signature algorithms and signature encodings. It doesn't then enforce a match between the signature algorithm between the signed and unsigned portions of the certificate. This...
Cross-site Scripting (XSS)
notebook is vulnerable to a cross-site scripting XSS attack. The library does not properly sanitize URLs passed through a directory name, allowing a malicious user to inject and execute arbitrary Javascript...
Remote Code Execution (RCE)
jackson-databind is vulnerable to remote code execution RCE attacks. The vulnerability exists because it does not prevent the deserialization of certain gadget types from the JDBC driver which could be used to perform remote code execution attacks through deserialization...
Cross-site Scripting (XSS)
bootstrap is vulnerable to cross-site scripting XSS attacks. The library does not properly sanitize the data-container variable in tooltip.js, allowing a malicious user to inject and execute arbitrary Javascript...
Information Disclosure
tomcat-coyote is vulnerable to information disclosure. The library contains a bug during the handling of pipelined requests when sending files. This can result in the response being sent for the wrong request. A malicious user can use this to allow the system to wrongly sent responses to them...
Denial Of Service (DoS)
OpenSSL is vulnerable to denial of service DoS attacks. A malicious user can pass a malicious Diffie-Hellman ServerKeyExchange message to the system to cause a segmentation fault that can lead to the system crashing...
Man-in-the-Middle (MitM)
OpenSSL is vulnerable to man in the middle MitM attacks. These attacks are possible through the ssl23getclienthello function in s23srvr.c. It can be triggered by a ClientHello message fragment which forces OpenSSL to negotiate using the TLS 1.0 protocol insteadl of a higher, more secure version...
Weak Cryptographic Protection Mechanisms
OpenSSL has weak cryptographic protection mechanism. The way that the BNsqr function in OpenSSL is implemented is incorrect. It doesn't not calculate the square of a BIGNUM value making it easier for attackers to get past the protection mechanism...
Class Loader Manipulation With CookieInterceptor
Struts 2 Core is vulnerable to class loader manipulation vulnerability. The vulnerability exists because the getClass method does not properly restrict access to cookies as it accepts all cookie names when "\" is used to configure cookiesName parameter which allows remote attackers to manipulate...
Improper Access Control
github.com/mattermost/mattermost-server is vulnerable to Improper Access Control. The vulnerability is caused due to a failure to properly enforce permissions which allows a user with systems manager role with read-only access to teams to perform write operations on teams...
Improper Access Control
github.com/grafana/grafana is vulnerable to Improper Access Control. The vulnerability is caused by an improper authorization in the access control for plugin data sources protected by the ReqActions json field of the plugin.json. This authorization can be bypassed if the user or service account ...