Lucene search
+L
VeracodeMost viewed

38790 matches found

Veracode
Veracode
•added 2022/04/23 10:08 a.m.•51 views

Denial Of Service (DoS)

openjdk is vulnerable to denial of service attacks. The vulnerability exists in Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code which allows unauthenticated attacker with network access via multiple...

3.7CVSS3.9AI score0.02729EPSS
SaveExploits0References8Affected Software8
Veracode
Veracode
•added 2022/04/13 9:11 a.m.•51 views

SQL Injection

django is vulnerable to SQL injection. The library directly passes the user input directly to the QuerySet.annotate, aggregate, and extra methods, allowing an attacker to inject malicious SQL query in column aliases via a malicious dictionary as the passed kwargs...

9.8CVSS4.9AI score0.18661EPSS
SaveExploits3References14Affected Software8
Veracode
Veracode
•added 2022/03/15 10:12 a.m.•51 views

Integer Overflow

apache2 is vulnerable to Integer Overflow. The vulnerability exists in httpd where it incorrectly limits the value of LimitXMLRequestBody option which can lead to an integer overflow and later causes an out-of-bounds write...

9.1CVSS1.6AI score0.41861EPSS
SaveExploits0References20Affected Software18
Veracode
Veracode
•added 2022/03/10 4:23 a.m.•51 views

Remote Code Execution (RCE)

firefox is vulnerable to remote code execution. The vulnerability exists due to a lack of validation of access allowing and attacker to control the contents of an iframe sandboxed with allow-popups but not allow-scripts...

9.6CVSS4.7AI score0.00931EPSS
SaveExploits1References6Affected Software6
Veracode
Veracode
•added 2022/02/22 7:54 a.m.•51 views

Denial Of Service (DoS)

libsolv.so is vulnerable to denial of service DoS attacks. A remote attacker is able to cause heap-based buffer overflow in resolveweak function in src/solver.c resulting in a system crash...

5AI score
SaveExploits0References4Affected Software1
Veracode
Veracode
•added 2022/02/18 1:09 p.m.•51 views

Authorization Bypass

url-parse is vulnerable to authorization bypass. The use of User-Controlled Key allows an attacker to transform original invalid URL into a valid one with url.pathname as host...

5.3CVSS2.9AI score0.01535EPSS
SaveExploits1References5Affected Software2
Veracode
Veracode
•added 2022/01/15 10:10 p.m.•51 views

Heap-based Buffer Overflow

vim.so is vulnerable to heap-based buffer overflow. The lack of sanitization causes a heap-based buffer overflow which could result in an application crash...

7.8CVSS3.3AI score0.01669EPSS
SaveExploits1References10Affected Software3
Veracode
Veracode
•added 2021/12/12 11:37 p.m.•51 views

Information Disclosure

kernel is vulnerable to information disclosure. The vulnerability exists due to undesirable speculative loads, leading to disclosure of stack content via side-channel attacks...

5.5CVSS2.6AI score0.00313EPSS
SaveExploits0References13Affected Software2
Veracode
Veracode
•added 2021/11/17 10:37 p.m.•51 views

Network Packet Injection

kernel-rt is vulnerable to network package injection. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext A-MSDU frames as long as the first 8 bytes correspond to a valid RFC1042 i.e., LLC/SNAP header for EAPOL. An adversary can abuse this to inject arbitrary network packets independent...

6.5CVSS2.8AI score0.04913EPSS
SaveExploits0References10Affected Software2
Veracode
Veracode
•added 2021/11/12 8:49 a.m.•51 views

Denial Of Service (DoS)

busybox is vulnerable to denial of service. The vulnerability exists because it does not properly sanitize while processing a crafted awk pattern in the clrvar function which causes an application crash...

7.2CVSS2.6AI score0.02579EPSS
SaveExploits0References8Affected Software5
Veracode
Veracode
•added 2021/11/09 3:14 p.m.•51 views

Remote Code Execution (RCE)

chrome is vulnerable to remote code execution. The vulnerability exists due to an Insufficient validation of untrusted input in Intents...

6.1CVSS3.8AI score0.04653EPSS
SaveExploits1References6Affected Software2
Veracode
Veracode
•added 2021/10/01 4:59 a.m.•51 views

Denial Of Service (DoS)

qemu:sid is vulnerable to denial of service. The vulnerability exists because the numbuffers being set after the virtqueue elem has been unmapped, allowing an attacker to crash the application through the use after free...

7.5CVSS3.1AI score0.00522EPSS
SaveExploits0References9Affected Software5
Veracode
Veracode
•added 2021/09/30 1:38 p.m.•51 views

Denial Of Service (DoS)

linux is vulnerable to denial of service. The vulnerability exists due to a lack of CPU resource in the Linux kernel tracing module functionality...

5.5CVSS3.5AI score0.00734EPSS
SaveExploits0References6Affected Software5
Veracode
Veracode
•added 2021/08/24 6:15 a.m.•51 views

Remote Code Execution (RCE)

xstream is vulnerable to remote code execution. The vulnerability exists due to the usage of an insecure default blacklist which does not cover all the excluded XStream security framework...

8.5CVSS2.8AI score0.16118EPSS
SaveExploits2References15Affected Software4
Veracode
Veracode
•added 2021/08/13 6:57 p.m.•51 views

Denial Of Service (DoS)

nodejs-current is vulnerable to Denial Of Service DoS. The vulnerability exists due to missing input validation of host names returned by Domain Name Servers in Node.js dns library which can lead to output of wrong hostnames...

9.8CVSS8AI score0.21952EPSS
SaveExploits1References10Affected Software3
Veracode
Veracode
•added 2021/05/14 4:33 a.m.•51 views

Denial Of Service (DoS)

pydantic is vulnerable to denial of service. An attacker is able to exploit the vulnerability by passing either infinity , inf or floatinf or their negatives to datetime or data fields causing the validaton to run in loops with 100% CPU usage...

7.5CVSS4AI score0.00967EPSS
SaveExploits0References9Affected Software1
Veracode
Veracode
•added 2021/05/01 10:32 a.m.•51 views

Denial Of Service (DoS)

bind9 is vulnerable to denial of service. The process terminates with a failed assertion check when receiving a malicious query for a record...

7.5CVSS2.8AI score0.11387EPSS
SaveExploits0References15Affected Software8
Veracode
Veracode
•added 2021/04/26 8:35 a.m.•51 views

Man-in-the-middle (MitM)

apache-maven is vulnerable to Man-in-the-middle MitM. The vulnerability exists because it allows downloading code from external repositories via HTTP by default, resulting in a potential risk if a malicious actor takes over that repository or is able to insert themselves into a position to preten...

9.1CVSS8.8AI score0.08691EPSS
SaveExploits2References85Affected Software4
Veracode
Veracode
•added 2021/04/25 1:28 a.m.•51 views

Remote Code Execution (RCE)

perl-image-exiftool is vulnerable to remote code execution. A lack of proper neutralization of user data in the DjVu file format in ExifTool allows an attacker to arbitrary code execution by sending a malicious image jpg, tiff, mp4 and many more...

7.8CVSS4.8AI score0.99981EPSS
SaveExploits38References21Affected Software4
Veracode
Veracode
•added 2021/02/19 7:17 p.m.•51 views

Remote Code Execution (RCE)

Mumble is vulnerable to remote code execution. The vulnerability exists when a victim navigates to a crafted URL on a server list and clicks on the Open Webpage text...

8.8CVSS3.1AI score0.03203EPSS
SaveExploits0References6Affected Software5
Veracode
Veracode
•added 2021/02/10 4:24 p.m.•51 views

Privilege Escalation

wpasupplicant is vulnerable to privilege escalation. The vulnerability exists in p2pcopyclientinfo of p2p.c, through a possible out of bounds write due to a missing bounds check...

7.5CVSS3.1AI score0.04932EPSS
SaveExploits1References11Affected Software1
Veracode
Veracode
•added 2021/02/05 3:53 a.m.•51 views

Denial Of Service (DoS)

php7 is vulnerable to denial of service. PHP will crash with a SIGSEGV whenever an XML is provided to the SoapClient query function without an existing field...

7.5CVSS3.1AI score0.03179EPSS
SaveExploits0References9Affected Software8
Veracode
Veracode
•added 2021/01/12 5:41 a.m.•51 views

Man-in-the-Middle (MitM)

node-sass is vulnerable to man-in-the-middle attack. The certificate validation when requesting binaries is disabled even if the user does not specify an alternative download path. This allows for a man-in-the-middle attacker to intercept and modify network traffic, and potentially introduce...

5.3CVSS5.1AI score0.0082EPSS
SaveExploits0References2Affected Software2
Veracode
Veracode
•added 2020/11/05 3:09 a.m.•51 views

Out-of-bounds Write

kernel is vulnerable to out-of-bounds write. It is possible due to a flaw in ext4xattrsetentry in fs/ext4/xattr.c...

6.5CVSS2.4AI score0.00692EPSS
SaveExploits1References13Affected Software2
Veracode
Veracode
•added 2020/10/25 12:34 p.m.•51 views

Heap Buffer Overflow

FreeType is vulnerable to heap-based buffer overflow due to integer truncation in LoadSBitPng...

9.6CVSS3AI score0.44303EPSS
SaveExploits2References12Affected Software4
Veracode
Veracode
•added 2020/10/21 6:30 a.m.•51 views

Remote Code Execution (RCE)

kernel is vulnerable to remote code execution RCE. The vulnerability exists through a buffer over-write in vgaconscroll...

6.6CVSS3.4AI score0.00563EPSS
SaveExploits1References13Affected Software2
Veracode
Veracode
•added 2020/10/19 7:31 a.m.•51 views

Remote Code Execution (RCE)

github.com/gogs/gogs is vulnerable to remote code execution RCE. The vulnerability exists through git hooks which are enabled by default...

7.2CVSS2.5AI score0.87416EPSS
SaveExploits3References2Affected Software1
Veracode
Veracode
•added 2020/10/01 3:52 a.m.•51 views

Arbitrary Code Execution

webkitgtk4 is vulnerable to arbitrary code execution. The vulnerabiltiy exists through memory errors...

8.8CVSS6.3AI score0.02583EPSS
SaveExploits0References11Affected Software28
Veracode
Veracode
•added 2020/10/01 3:52 a.m.•51 views

Arbitrary Code Execution

WebKitGTK+ is vulnerable to arbitrary code execution. An attacker can input malicious web content to lead to memory corruptions and arbitrary code execution...

8.8CVSS4.3AI score0.01797EPSS
SaveExploits0References10Affected Software1
Veracode
Veracode
•added 2020/09/21 6:18 a.m.•51 views

Denial Of Service (DoS)

linux is vulnerable to denial of service DoS. The vulnerability exists in through a malicious USB device in the drivers/usb/class/cdc-acm.c driver...

4.6CVSS2.6AI score0.00426EPSS
SaveExploits0References6Affected Software3
Veracode
Veracode
•added 2020/08/18 3:02 a.m.•51 views

Authentication Bypass

shiro-web is vulnerable to authentication bypass. An ArrayIndexOutOfBoundsException in Base64decode causes an invalid session cookie to be parsed as valid...

7.5CVSS4.2AI score0.48019EPSS
SaveExploits3References33Affected Software2
Veracode
Veracode
•added 2020/08/06 9:35 p.m.•51 views

NULL Byte Injection

PHP7 is vulnerable to NULL byte injection. While using getheaders with user-supplied URL, if the URL contains null byte \0, the URL will be silently truncated. This causes certain software to make incorrect assumptions about the target of the getheaders and potentially send confidential informati...

5.3CVSS1.9AI score0.02767EPSS
SaveExploits1References8Affected Software2
Veracode
Veracode
•added 2020/06/25 8:38 a.m.•51 views

Unrestricted File Upload

telerik.web.ui allows unrestricted file uploads. A remote attacker is able to upload arbitrary files which can result in arbitrary code execution...

9.8CVSS4.8AI score0.84175EPSS
SaveExploits8References5Affected Software2
Veracode
Veracode
•added 2020/05/15 2:12 a.m.•51 views

Privilege Escalation

kernel is vulnerable to privilege escalation. The USB monitor driver allows for a local privilege escalation due to an out-od-bounds check...

6.7CVSS3.7AI score0.00197EPSS
SaveExploits0References6Affected Software1
Veracode
Veracode
•added 2020/05/06 3:17 a.m.•51 views

Information Disclosure

kernel is vulnerable to information disclosure. An information leak bug caused by a malicious USB device in the drivers/net/can/usb/peakusb/pcanusbcore.c driver allows an attacker to obtain confidential information...

2.4CVSS2.5AI score0.00512EPSS
SaveExploits0References16Affected Software2
Veracode
Veracode
•added 2020/04/10 1:02 a.m.•51 views

Denial Of Service (DoS)

httpd is vulnerable to denial of service DoS. The vulnerability exists as a flaw was found in the way the Apache HTTP Server handled Range HTTP headers. A remote attacker could use this flaw to cause httpd to use an excessive amount of memory and CPU time via HTTP requests with a specially-crafte...

7.8CVSS2.3AI score0.98945EPSS
SaveExploits18References96Affected Software1
Veracode
Veracode
•added 2020/04/10 12:58 a.m.•51 views

Arbitrary Code Execution

thunderbird/firefox is vulnerable to arbitrary code execution. Several flaws were found in the processing of malformed HTML content. Malicious HTML content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird...

10CVSS2.9AI score0.05459EPSS
SaveExploits1References26Affected Software4
Veracode
Veracode
•added 2020/04/10 12:50 a.m.•51 views

Arbitrary Code Execution

firefox is vulnerable to arbitrary code execution. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox...

9.3CVSS4.6AI score0.03726EPSS
SaveExploits0References25Affected Software4
Veracode
Veracode
•added 2020/04/10 12:49 a.m.•51 views

Remote Code Execution (RCE)

Perl is vulnerable to Remote Code Execution RCE. The Safe module did not properly restrict the code of implicitly called methods such as DESTROY and AUTOLOAD on implicitly blessed objects returned as a result of unsafe code evaluation. These methods could have been executed unrestricted by Safe...

8.5CVSS2.3AI score0.02797EPSS
SaveExploits2References23Affected Software1
Veracode
Veracode
•added 2020/04/10 12:43 a.m.•51 views

Insecure Randomness

firefox is vulnerable to insecure randomness. The vulnerability exists as a flaw was found in the Firefox Math.random function. This function could be used to identify a browsing session and track a user across different websites...

4.9CVSS2.7AI score0.01141EPSS
SaveExploits1References31Affected Software7
Veracode
Veracode
•added 2020/04/10 12:43 a.m.•51 views

Denial Of Service (DoS)

mysql is vulnerable to denial of service. A flaw was found in the way MySQL handled SELECT statements with subqueries in the WHERE clause, that assigned results to a user variable. A remote, authenticated attacker could use this flaw to crash the MySQL server daemon mysqld. This issue only caused...

4CVSS2.5AI score0.16263EPSS
SaveExploits5References25Affected Software1
Veracode
Veracode
•added 2020/04/10 12:41 a.m.•51 views

Denial Of Service (DoS)

The kernel is vulnerable to denial of service DoS. A flaw was found in each of the following Intel PRO/1000 Linux drivers in the Linux kernel: e1000 and e1000e. A remote attacker using packets larger than the MTU could bypass the existing fragment check, resulting in partial, invalid frames being...

10CVSS4.1AI score0.0838EPSS
SaveExploits1References32Affected Software2
Veracode
Veracode
•added 2020/04/10 12:40 a.m.•51 views

Denial Of Service (DoS)

SeaMonkey is vulnerable to Denial Of Service DoS. Due to a flaw found in the processing of malformed web content. A web page containing malicious content could cause SeaMonkey to crash or, potentially, execute arbitrary code with the privileges of the user running SeaMonkey...

9.3CVSS5.4AI score0.03963EPSS
SaveExploits0References39Affected Software4
Veracode
Veracode
•added 2020/04/10 12:33 a.m.•51 views

Arbitrary Code Execution

seamonkey is vulnerable to arbitrary code execution. The vulnerability exists as a web page containing malicious content could cause SeaMonkey to crash or, potentially, execute arbitrary code as the user running SeaMonkey...

5CVSS4.8AI score0.01761EPSS
SaveExploits0References35Affected Software4
Veracode
Veracode
•added 2020/04/10 12:25 a.m.•51 views

Arbitrary Code Execution

seamonkey is vulnerable to arbitrary code execution. The vulnerability exists as a web page containing malicious content could cause SeaMonkey to crash or, potentially, execute arbitrary code as the user running SeaMonkey...

7.5CVSS4.8AI score0.04802EPSS
SaveExploits1References53Affected Software7
Veracode
Veracode
•added 2020/02/20 5:56 a.m.•51 views

Remote Code Execution (RCE)

pyyaml is vulnerable to remote code execution RCE attacks. The application uses the unsafe function yaml.load, allowing a malicious user to inject and execute arbitrary code by passing a yaml file. This vulnerability exists due to an incomplete fix for CVE-2017-18342...

9.8CVSS4.6AI score0.05656EPSS
SaveExploits3References6Affected Software1
Veracode
Veracode
•added 2020/01/10 3:02 a.m.•51 views

HTTP Request Smuggling

github.com/kubernetes/ingress-nginx is vulnerable to HTTP request smuggling. The library does not use a named location for authSignURL, allowing a malicious user to read unauthorized web pages in environments where NGINX is being fronted by a load balancer...

5.3CVSS0.4AI score0.14961EPSS
SaveExploits3References12Affected Software1
Veracode
Veracode
•added 2019/12/19 5:35 a.m.•51 views

Information Disclosure

rack is vulnerable to information disclosure. The vulnerability exists due to the insecure comparison of session IDs. A remote attacker is able to perform timing attacks by analyzing the response time of the server when performing the comparison of session IDs...

6.3CVSS2.9AI score0.03703EPSS
SaveExploits0References10Affected Software248
Veracode
Veracode
•added 2019/11/06 12:20 a.m.•51 views

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS. The vulnerability exists through an out-of-bound oob memory read in hsoprobe in drivers/net/usb/hso.c...

4.6CVSS3AI score0.00961EPSS
SaveExploits0References20Affected Software2
Veracode
Veracode
•added 2019/08/20 12:10 a.m.•51 views

Buffer Under-read

PHP is vulnerable to buffer under-read. The attack is possible in phpstreamurlwraphttpex in httpfopenwrapper.c when parsing HTTP response, subsequently copying a large string...

9.8CVSS1.4AI score0.87348EPSS
SaveExploits4References15Affected Software3
Total number of security vulnerabilities5000