Lucene search
+L
VeracodeMost viewed

38790 matches found

Veracode
Veracode
•added 2021/10/01 4:59 a.m.•51 views

Denial Of Service (DoS)

qemu:sid is vulnerable to denial of service. The vulnerability exists because the numbuffers being set after the virtqueue elem has been unmapped, allowing an attacker to crash the application through the use after free...

7.5CVSS3.1AI score0.00522EPSS
SaveExploits0References9Affected Software5
Veracode
Veracode
•added 2021/09/30 1:38 p.m.•51 views

Denial Of Service (DoS)

linux is vulnerable to denial of service. The vulnerability exists due to a lack of CPU resource in the Linux kernel tracing module functionality...

5.5CVSS3.5AI score0.00734EPSS
SaveExploits0References6Affected Software5
Veracode
Veracode
•added 2021/08/24 6:15 a.m.•51 views

Remote Code Execution (RCE)

xstream is vulnerable to remote code execution. The vulnerability exists due to the usage of an insecure default blacklist which does not cover all the excluded XStream security framework...

8.5CVSS2.8AI score0.16118EPSS
SaveExploits2References15Affected Software4
Veracode
Veracode
•added 2021/08/13 6:57 p.m.•51 views

Denial Of Service (DoS)

nodejs-current is vulnerable to Denial Of Service DoS. The vulnerability exists due to missing input validation of host names returned by Domain Name Servers in Node.js dns library which can lead to output of wrong hostnames...

9.8CVSS8AI score0.21952EPSS
SaveExploits1References10Affected Software3
Veracode
Veracode
•added 2021/05/14 4:33 a.m.•51 views

Denial Of Service (DoS)

pydantic is vulnerable to denial of service. An attacker is able to exploit the vulnerability by passing either infinity , inf or floatinf or their negatives to datetime or data fields causing the validaton to run in loops with 100% CPU usage...

7.5CVSS4AI score0.00967EPSS
SaveExploits0References9Affected Software1
Veracode
Veracode
•added 2021/05/01 10:32 a.m.•51 views

Denial Of Service (DoS)

bind9 is vulnerable to denial of service. The process terminates with a failed assertion check when receiving a malicious query for a record...

7.5CVSS2.8AI score0.11387EPSS
SaveExploits0References15Affected Software8
Veracode
Veracode
•added 2021/04/26 8:35 a.m.•51 views

Man-in-the-middle (MitM)

apache-maven is vulnerable to Man-in-the-middle MitM. The vulnerability exists because it allows downloading code from external repositories via HTTP by default, resulting in a potential risk if a malicious actor takes over that repository or is able to insert themselves into a position to preten...

9.1CVSS8.8AI score0.08691EPSS
SaveExploits2References85Affected Software4
Veracode
Veracode
•added 2021/04/25 1:28 a.m.•51 views

Remote Code Execution (RCE)

perl-image-exiftool is vulnerable to remote code execution. A lack of proper neutralization of user data in the DjVu file format in ExifTool allows an attacker to arbitrary code execution by sending a malicious image jpg, tiff, mp4 and many more...

7.8CVSS4.8AI score0.99981EPSS
SaveExploits38References21Affected Software4
Veracode
Veracode
•added 2021/02/19 7:17 p.m.•51 views

Remote Code Execution (RCE)

Mumble is vulnerable to remote code execution. The vulnerability exists when a victim navigates to a crafted URL on a server list and clicks on the Open Webpage text...

8.8CVSS3.1AI score0.03203EPSS
SaveExploits0References6Affected Software5
Veracode
Veracode
•added 2021/02/10 4:24 p.m.•51 views

Privilege Escalation

wpasupplicant is vulnerable to privilege escalation. The vulnerability exists in p2pcopyclientinfo of p2p.c, through a possible out of bounds write due to a missing bounds check...

7.5CVSS3.1AI score0.04932EPSS
SaveExploits1References11Affected Software1
Veracode
Veracode
•added 2021/02/05 3:53 a.m.•51 views

Denial Of Service (DoS)

php7 is vulnerable to denial of service. PHP will crash with a SIGSEGV whenever an XML is provided to the SoapClient query function without an existing field...

7.5CVSS3.1AI score0.03179EPSS
SaveExploits0References9Affected Software8
Veracode
Veracode
•added 2021/01/12 5:41 a.m.•51 views

Man-in-the-Middle (MitM)

node-sass is vulnerable to man-in-the-middle attack. The certificate validation when requesting binaries is disabled even if the user does not specify an alternative download path. This allows for a man-in-the-middle attacker to intercept and modify network traffic, and potentially introduce...

5.3CVSS5.1AI score0.0082EPSS
SaveExploits0References2Affected Software2
Veracode
Veracode
•added 2020/11/05 3:09 a.m.•51 views

Out-of-bounds Write

kernel is vulnerable to out-of-bounds write. It is possible due to a flaw in ext4xattrsetentry in fs/ext4/xattr.c...

6.5CVSS2.4AI score0.00692EPSS
SaveExploits1References13Affected Software2
Veracode
Veracode
•added 2020/10/25 12:34 p.m.•51 views

Heap Buffer Overflow

FreeType is vulnerable to heap-based buffer overflow due to integer truncation in LoadSBitPng...

9.6CVSS3AI score0.44303EPSS
SaveExploits2References12Affected Software4
Veracode
Veracode
•added 2020/10/21 6:30 a.m.•51 views

Remote Code Execution (RCE)

kernel is vulnerable to remote code execution RCE. The vulnerability exists through a buffer over-write in vgaconscroll...

6.6CVSS3.4AI score0.00563EPSS
SaveExploits1References13Affected Software2
Veracode
Veracode
•added 2020/10/01 3:52 a.m.•51 views

Arbitrary Code Execution

webkitgtk4 is vulnerable to arbitrary code execution. The vulnerabiltiy exists through memory errors...

8.8CVSS6.3AI score0.02583EPSS
SaveExploits0References11Affected Software28
Veracode
Veracode
•added 2020/10/01 3:52 a.m.•51 views

Arbitrary Code Execution

WebKitGTK+ is vulnerable to arbitrary code execution. An attacker can input malicious web content to lead to memory corruptions and arbitrary code execution...

8.8CVSS4.3AI score0.01797EPSS
SaveExploits0References10Affected Software1
Veracode
Veracode
•added 2020/09/21 6:18 a.m.•51 views

Denial Of Service (DoS)

linux is vulnerable to denial of service DoS. The vulnerability exists in through a malicious USB device in the drivers/usb/class/cdc-acm.c driver...

4.6CVSS2.6AI score0.00426EPSS
SaveExploits0References6Affected Software3
Veracode
Veracode
•added 2020/08/18 3:02 a.m.•51 views

Authentication Bypass

shiro-web is vulnerable to authentication bypass. An ArrayIndexOutOfBoundsException in Base64decode causes an invalid session cookie to be parsed as valid...

7.5CVSS4.2AI score0.48019EPSS
SaveExploits3References33Affected Software2
Veracode
Veracode
•added 2020/08/06 9:35 p.m.•51 views

NULL Byte Injection

PHP7 is vulnerable to NULL byte injection. While using getheaders with user-supplied URL, if the URL contains null byte \0, the URL will be silently truncated. This causes certain software to make incorrect assumptions about the target of the getheaders and potentially send confidential informati...

5.3CVSS1.9AI score0.02767EPSS
SaveExploits1References8Affected Software2
Veracode
Veracode
•added 2020/06/25 8:38 a.m.•51 views

Unrestricted File Upload

telerik.web.ui allows unrestricted file uploads. A remote attacker is able to upload arbitrary files which can result in arbitrary code execution...

9.8CVSS4.8AI score0.84175EPSS
SaveExploits8References5Affected Software2
Veracode
Veracode
•added 2020/05/15 2:12 a.m.•51 views

Privilege Escalation

kernel is vulnerable to privilege escalation. The USB monitor driver allows for a local privilege escalation due to an out-od-bounds check...

6.7CVSS3.7AI score0.00197EPSS
SaveExploits0References6Affected Software1
Veracode
Veracode
•added 2020/05/06 3:17 a.m.•51 views

Information Disclosure

kernel is vulnerable to information disclosure. An information leak bug caused by a malicious USB device in the drivers/net/can/usb/peakusb/pcanusbcore.c driver allows an attacker to obtain confidential information...

2.4CVSS2.5AI score0.00512EPSS
SaveExploits0References16Affected Software2
Veracode
Veracode
•added 2020/04/10 1:02 a.m.•51 views

Denial Of Service (DoS)

httpd is vulnerable to denial of service DoS. The vulnerability exists as a flaw was found in the way the Apache HTTP Server handled Range HTTP headers. A remote attacker could use this flaw to cause httpd to use an excessive amount of memory and CPU time via HTTP requests with a specially-crafte...

7.8CVSS2.3AI score0.98945EPSS
SaveExploits18References96Affected Software1
Veracode
Veracode
•added 2020/04/10 12:58 a.m.•51 views

Arbitrary Code Execution

thunderbird/firefox is vulnerable to arbitrary code execution. Several flaws were found in the processing of malformed HTML content. Malicious HTML content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird...

10CVSS2.9AI score0.05459EPSS
SaveExploits1References26Affected Software4
Veracode
Veracode
•added 2020/04/10 12:50 a.m.•51 views

Arbitrary Code Execution

firefox is vulnerable to arbitrary code execution. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox...

9.3CVSS4.6AI score0.03726EPSS
SaveExploits0References25Affected Software4
Veracode
Veracode
•added 2020/04/10 12:49 a.m.•51 views

Remote Code Execution (RCE)

Perl is vulnerable to Remote Code Execution RCE. The Safe module did not properly restrict the code of implicitly called methods such as DESTROY and AUTOLOAD on implicitly blessed objects returned as a result of unsafe code evaluation. These methods could have been executed unrestricted by Safe...

8.5CVSS2.3AI score0.02797EPSS
SaveExploits2References23Affected Software1
Veracode
Veracode
•added 2020/04/10 12:43 a.m.•51 views

Insecure Randomness

firefox is vulnerable to insecure randomness. The vulnerability exists as a flaw was found in the Firefox Math.random function. This function could be used to identify a browsing session and track a user across different websites...

4.9CVSS2.7AI score0.01141EPSS
SaveExploits1References31Affected Software7
Veracode
Veracode
•added 2020/04/10 12:43 a.m.•51 views

Denial Of Service (DoS)

mysql is vulnerable to denial of service. A flaw was found in the way MySQL handled SELECT statements with subqueries in the WHERE clause, that assigned results to a user variable. A remote, authenticated attacker could use this flaw to crash the MySQL server daemon mysqld. This issue only caused...

4CVSS2.5AI score0.16263EPSS
SaveExploits5References25Affected Software1
Veracode
Veracode
•added 2020/04/10 12:40 a.m.•51 views

Denial Of Service (DoS)

SeaMonkey is vulnerable to Denial Of Service DoS. Due to a flaw found in the processing of malformed web content. A web page containing malicious content could cause SeaMonkey to crash or, potentially, execute arbitrary code with the privileges of the user running SeaMonkey...

9.3CVSS5.4AI score0.03963EPSS
SaveExploits0References39Affected Software4
Veracode
Veracode
•added 2020/04/10 12:33 a.m.•51 views

Arbitrary Code Execution

seamonkey is vulnerable to arbitrary code execution. The vulnerability exists as a web page containing malicious content could cause SeaMonkey to crash or, potentially, execute arbitrary code as the user running SeaMonkey...

5CVSS4.8AI score0.01761EPSS
SaveExploits0References35Affected Software4
Veracode
Veracode
•added 2020/04/10 12:25 a.m.•51 views

Arbitrary Code Execution

seamonkey is vulnerable to arbitrary code execution. The vulnerability exists as a web page containing malicious content could cause SeaMonkey to crash or, potentially, execute arbitrary code as the user running SeaMonkey...

7.5CVSS4.8AI score0.04802EPSS
SaveExploits1References53Affected Software7
Veracode
Veracode
•added 2020/02/20 5:56 a.m.•51 views

Remote Code Execution (RCE)

pyyaml is vulnerable to remote code execution RCE attacks. The application uses the unsafe function yaml.load, allowing a malicious user to inject and execute arbitrary code by passing a yaml file. This vulnerability exists due to an incomplete fix for CVE-2017-18342...

9.8CVSS4.6AI score0.05656EPSS
SaveExploits3References6Affected Software1
Veracode
Veracode
•added 2020/01/10 3:02 a.m.•51 views

HTTP Request Smuggling

github.com/kubernetes/ingress-nginx is vulnerable to HTTP request smuggling. The library does not use a named location for authSignURL, allowing a malicious user to read unauthorized web pages in environments where NGINX is being fronted by a load balancer...

5.3CVSS0.4AI score0.14961EPSS
SaveExploits3References12Affected Software1
Veracode
Veracode
•added 2019/12/19 5:35 a.m.•51 views

Information Disclosure

rack is vulnerable to information disclosure. The vulnerability exists due to the insecure comparison of session IDs. A remote attacker is able to perform timing attacks by analyzing the response time of the server when performing the comparison of session IDs...

6.3CVSS2.9AI score0.03703EPSS
SaveExploits0References10Affected Software248
Veracode
Veracode
•added 2019/11/06 12:20 a.m.•51 views

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS. The vulnerability exists through an out-of-bound oob memory read in hsoprobe in drivers/net/usb/hso.c...

4.6CVSS3AI score0.00961EPSS
SaveExploits0References20Affected Software2
Veracode
Veracode
•added 2019/08/20 12:10 a.m.•51 views

Information Disclosure

php is vulnerable to information disclosure. An uninitialized read in the function exifprocessIFDinMAKERNOTE allows an attacker to potentially read confidential information off uninitialized memory...

7.5CVSS3.1AI score0.06677EPSS
SaveExploits1References14Affected Software2
Veracode
Veracode
•added 2019/08/20 12:10 a.m.•51 views

Buffer Under-read

PHP is vulnerable to buffer under-read. The attack is possible in phpstreamurlwraphttpex in httpfopenwrapper.c when parsing HTTP response, subsequently copying a large string...

9.8CVSS1.4AI score0.87348EPSS
SaveExploits4References15Affected Software3
Veracode
Veracode
•added 2019/08/20 12:10 a.m.•51 views

Information Disclosure

php is vulnerable to denial of service. An attacker is able to read past allocated buffer in the function exifreaddata by passing malicious EXIF data to the PHP EXIF extension. This can also potentially lead to an application crash...

9.1CVSS2.6AI score0.04068EPSS
SaveExploits1References9Affected Software2
Veracode
Veracode
•added 2019/08/05 12:16 a.m.•51 views

Denial Of Service (DoS)

kernel is vulnerable to denial of service. A NULL pointer dereference due to an anomalized NFS message sequence allows an attacker to cause a panic in the system and deny access to the NFS server...

7.5CVSS4.7AI score0.02779EPSS
SaveExploits0References16Affected Software2
Veracode
Veracode
•added 2019/07/04 3:23 a.m.•51 views

Information Disclosure

Dnn.Platform is vulnerable to information disclosure. The vulnerability is due to the incomplete fix of CVE-2018-15811 where it encrypts the input parameters using a weak encryption algorithm during the installation...

7.5CVSS7.1AI score0.74048EPSS
SaveExploits6References4Affected Software2
Veracode
Veracode
•added 2019/06/03 2:56 p.m.•51 views

Out Of Bound Reads (OOB)

lSQLite3 is vulnerable to out of boundOOB reads. The component rtree Table Handler in the function rtreenode does not properly handle invalid rtree tables, leading to OOB if the input is malicious...

9.8CVSS9.1AI score0.45426EPSS
SaveExploits0References17Affected Software3
Veracode
Veracode
•added 2019/05/02 6:02 a.m.•51 views

Buffer Overflow

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The rh-php56 packages provide a recent stable release of PHP with PEAR 1.9.5 and enhanced language features including constant expressions, variadic functions, arguments unpacking, and the interactive debuger. T...

9.8CVSS9AI score0.36974EPSS
SaveExploits79References18Affected Software3
Veracode
Veracode
•added 2019/05/02 6:02 a.m.•51 views

Denial Of Service (DoS) Through Memory Consumption

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The rh-php56 packages provide a recent stable release of PHP with PEAR 1.9.5 and enhanced language features including constant expressions, variadic functions, arguments unpacking, and the interactive debuger. T...

9.8CVSS9AI score0.36974EPSS
SaveExploits79References16Affected Software3
Veracode
Veracode
•added 2019/05/02 6:02 a.m.•51 views

Use-After-Free

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The rh-php56 packages provide a recent stable release of PHP with PEAR 1.9.5 and enhanced language features including constant expressions, variadic functions, arguments unpacking, and the interactive debuger. T...

9.8CVSS9AI score0.36974EPSS
SaveExploits79References16Affected Software3
Veracode
Veracode
•added 2019/05/02 6:02 a.m.•51 views

Denial Of Service (DoS)

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The rh-php56 packages provide a recent stable release of PHP with PEAR 1.9.5 and enhanced language features including constant expressions, variadic functions, arguments unpacking, and the interactive debuger. T...

9.8CVSS9AI score0.36974EPSS
SaveExploits79References12Affected Software3
Veracode
Veracode
•added 2019/05/02 5:51 a.m.•51 views

Denial Of Service (DoS)

The libxml2 library is a development toolbox providing the implementation of various XML standards. Several denial of service flaws were found in libxml2, a library providing support for reading, modifying, and writing XML and HTML files. A remote attacker could provide a specially crafted XML or...

7.1CVSS9.2AI score0.07151EPSS
SaveExploits2References33Affected Software1
Veracode
Veracode
•added 2019/05/02 5:39 a.m.•51 views

Memory Corruption

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The php55 packages provide a recent stable release of PHP with the PEAR 1.9.4, memcache 3.0.8, and mongo 1.4.5 PECL extensions, and a number of additional utilities. The php55 packages have been upgraded to...

7.5CVSS9.2AI score0.53166EPSS
SaveExploits33References26Affected Software6
Veracode
Veracode
•added 2019/05/02 5:39 a.m.•51 views

Out-Of-Bounds Read

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The php55 packages provide a recent stable release of PHP with the PEAR 1.9.4, memcache 3.0.8, and mongo 1.4.5 PECL extensions, and a number of additional utilities. The php55 packages have been upgraded to...

7.5CVSS9.2AI score0.53166EPSS
SaveExploits33References22Affected Software5
Veracode
Veracode
•added 2019/05/02 5:35 a.m.•51 views

Remote Command Execution

kernel-rt is vulnerable to remote command execution. The vulnerability exists as a brute-force attack can be used to retrieve a cookie which can be used to execute SysRq commands via ICMP Echo Request packets...

8.1CVSS8.3AI score0.03387EPSS
SaveExploits0References12Affected Software1
Total number of security vulnerabilities5000