Path Traversal

twig/twig is vulnerable to path traversal. The vulnerability exists in findTemplate function of FilesystemLoader.php because the template loading directories are not properly configured which allows an attacker to load templates outside the configured directory...

Improper Certificate Validation

Apache Pulsar is vulnerable to improper certificate validation. The vulnerability exists due to man in the middle attacks in intra-cluster connections and geo-replication connections which allows an attacker to take control of a machine between the client and the server...

Arbitrary Code Execution Via Authorization Bypass

Pebble Templates is vulnerable to arbitrary code execution via authorization bypass. The vulnerability exists in BlacklistMethodAccessValidator.java because the methods that are allowed to access by pebble are not properly handled which allows an attacker to bypass and execute arbitrary codes...

Information Disclosure

github.com/containers/buildah is vulnerable to information disclosure. The vulnerability exists in configureUIDGID function in runcommon.go due to improper handling of the supplementary groups in the Buildah container engine which allows an attacker to gain access to containers and perform...

Denial Of Service (DoS)

kernal is vulnerable to denial of service.The vulnerability exists due to memory leak and application crash in pfkeyregister function in afkey.c, which allows an attacker to crash the application by providing a malicious input...

Privilege Escalation

librpm.so is vulnerable to privilege escalation. A local unauthenticated user who owns another ancestor directory is able to potentially gain root privileges of the system due to the lack of sanitizations in lib/fsm.c during symlink validations. This vulnerability exists due to incomplete fixes f...

Command Injection

openssl is vulnerable to command injection. The vulnerability exists in crehash script which allows an attacker to inject and execute malicious commands...

Privilege Escalation

logrotate is vulnerable to privilege escalation. The vulnerability exists due to a lack of verification of the permission of a state file which creates a world-readable permission file when it doesn't exists allowing an attacker to lock the state file and prevent any rotation...

Denial Of Service (DoS)

MariaDB is vulnerable to denial of service. The vulnerability exists due to an incorrect handling of withwindowfunc=true for a subquery...

Improper Access Control

github.com/awake1t/linglong is vulnerable to access control bypass. The vulnerability exists in the jwt.go due to the hard coded jwt token which allows an attacker to craft a malicious cookie and gain access to the system...

Buffer Overflows

linux is vulnerable to buffer overflows. st21nfcaconnectivityeventreceived in drivers/nfc/st21nfca/se.c has EVTTRANSACTION buffer overflows because of untrusted length parameters...

XML External Entity (XXE) Injection

WSO2 Identity Application Management Component is vulnerable to XML external entity attacks. The vulnerability exists in unmarshalSP function in ApplicationManagementServiceImpl.java because the SP file content is not parsed securely during unmarshalling which allows an attacker to gain access to...

Privilege Escalation

openjdk is vulnerable to privilege escalation. The vulnerability exists due to a lack of validation of authorization allowing an attacker to gain unauthorized access to critical data or complete access to all Oracle Java SE...

Arbitrary File Upload

express-fileupload is vulnerable to arbitrary file upload. It does not restrict an attacker from uploading a malicious PHP file to execute arbitrary code...

Denial Of Service (DoS)

Chrome is vulnerable to denial of service. The vulnerability exists due to a Type Confusion in V8 which allows an attacker to cause an application crash...

Denial Of Service (DoS)

zlib is vulnerable to Denial Of Service DoS. The vulnerability exists due to a memory corruption when deflating if the input has many distant matches which will results in corrupted output due to invalid distances, which leads to out-of-bound access, corrupting the memory and potentially crashing...

Privilege Escalation

linux is vulnerable to privilege escalation. The vulnerability exists due to a lack of sanitization of the namespace isolation...

Cross-Site Request Forgery (CSRF)

codeigniter4/framework is vulnerable to cross-site request forgery. When auto-routing is enabled, the library checks the request method in the controller method before processing. When auto-routing is disabled, avoid using $routes-add and instead use HTTP verbs in routes, allowing an attacker to...

Cross-site Scripting (XSS)

python-django is vulnerable to cross-site scripting. The % debug % template tag in the library does not properly encode the current context, allowing an attacker to inject and execute malicious javascript...

Denial Of Service (DoS)

openjdk17 is vulnerable to denial of service. Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Hotspot. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle...

Packet Injection

kernel is vulnerable to packet injection. The vulnerability exists due to the WEP, WPA, WPA2, and WPA3 implementations accept second or subsequent broadcast fragments even when sent in plaintext and process them as full unfragmented frames...

Man-In-The-Middle Attack (MitM)

curl is vulnerable to Man in the middle attack. The vulnerability exists due to a lack of clearing of previous cached responses, treating them as valid and authenticated...

Denial Of Service (DoS)

ntfs-3g:sid is vulnerable to denial of service. When a specially crafted NTFS inode pathname is supplied in an NTFS image, a heap buffer overflow can occur resulting in memory disclosure, denial of service and even code execution...

Denial Of Service (DoS)

openssl is vulnerable to Denial Of Service DoS. The vulnerability exists due to the system calling the API function EVPPKEYdecrypt twice, which insecurely allocates the wrong buffer size on the second time...

Insecure Session ID

org.eclipse.jetty, jetty-server has Insecure Session ID. The vulnerability exists due the SessionListenersessionDestroyed not validating the session ID if an exception is thrown...

Arbitrary Code Execution

libcurl before version 7.77.0 can be tricked into using already freed memory when a new TLS session is negotiated or a client certificate is requested on an existing connection. For example, this can happen when a TLS server requests a client certificate on a connection that was established witho...

Information Disclosure

curl is vulnerable to information disclosure. The vulnerability exists in -t command line in CURLOPTTELNETOPTIONS because the option parser for sending NEWENV variables, libcurl could be made to pass on uninitialized data from a stack based buffer to the server which allows an attacker to...

Billion Laugh Attack

libxml2:sid is vulnerable to billion laugh attack via parameter entities expansion and following the line of the billion laugh attack...

Padding Oracle Attack

jose is vulnerable to padding oracle attack. A possible observable difference in timing when padding error occurs while decrypting the ciphertext allows an attacker to obtain the plaintext data without knowledge of the decryption key...

Unauthorised Data Deletion

webkit2gtk is vulnerable to unauthorised data deletion. A user may be unable to fully delete browsing history. “Clear History and Website Data” did not clear the history in some circumstances...

Information Disclosure

containerd is vulnerable to information disclosure. The vulnerability exists through containerd's CRI implementation through Kubernetes, crictl, or any other pod/container client that uses the containerd CRI service that share the same image may receive incorrect environment variables, including...

OS Command Injection

salt is vulnerable to OS command injection. An attacker is able to inject and execute arbitrary OS commands via a malicious process name through the restartcheck function...

Directory Traversal

busybox is vulnerable to directory traversal. A remote attacker is able to perform a symlink attack to gain access to files outside of the current working directory...

Arbitrary File Write

django is vulnerable to arbitrary file write. The vulnerability exists through the django.utils.archive.extract function, used by startapp --template and startproject --template, to extract files with absolute paths or relative paths, out of the application root directory...

Privilege Escalation

chromium is vulnerable to privilege escalation. The vulnerability exists because of insufficient policy enforcement in Cryptohome...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. A buffer over-read in the function cryptoauthencextractkeys when a payload longer than 4 bytes is not aligned causes a system crash...

Denial Of Service (DoS)

kernel is vulnerable denial of service DoS. It mishandles invalid descriptors in drivers/media/usb/gspca/xirlinkcit.c...

Out-Of-Bounds Write

Linux kernel is vulnerable to an out-of-bounds write. Crafted keycode table in drivers/input/input.c enables the possibility of an attack...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. The vulnerability exists due to a memory leak in af9005identifystate function in dvb-usb/af9005.c which allows an attacker to cause an application crash...

Cross-site Scripting (XSS)

github.com/grafana/grafana is vulnerable to cross-site scripting XSS. The vulnerability exists when specifying series alias such as test data or elastic search, which allows special characters, caused by the bs-typeahead directive that evals the select options passed to it...

Privilege Escalation

libvirt is vulnerable to arbitrary code execution. A double free memory issue affects the polkit access control driver and allows clients connecting to the read-write socket with limited ACL permissions to exploit the vulnerability to crash the libvirt daemon or potentially escalate their...

Information Disclosure

linux is vulnerable to information disclosure. The vulnerability exists as through the internal state of the network RNG via drivers/char/random.c and kernel/time/timer.c...

Use-after-free

samba is vulnerable to a use-after-free flaw. Due to a flaw in all samba LDAP server used in a AC DC configuration, a user can lead to an application crash...

Denial Of Service (DoS)

busybox is vulnerable to denial of service. The recvandprocessclientpkt function in networking/ntpd.c allows remote attackers to cause a excessive CPU and bandwidth consumption via a malicious NTP packet, which triggers a communication loop...

Denial Of Service (DoS)

openjdk is vulnerable to denial of service. Unexpected exception raised by DerInputStream results in a partial denial of service condition which results in an application crash...

Privilege Escalation

kernel is vulnerable to privilege escalation. A buffer overflow in the mwifiexcmdappendvsietlv function in drivers/net/wireless/marvell/mwifiex/scan.c allows an attacker to gain higher privileges or cause a denial of service condition...

Server Side Request Forgery (SSRF)

github.com/kubernetes/kubernetes is vulnerable to Server Side Request Forgery SSRF. An attacker with a privilege to create a pod with certain built-in Volume types GlusterFS, Quobyte, StorageFS, ScaleIO or to create a StorageClass can cause an authenticated user to leak the resources from the...

Denial Of Service (DoS)

jbossweb is vulnerable to denial of service DoS. The vulnerability exists as a flaw was found in the way JBoss Web handled UTF-8 surrogate pair characters. If JBoss Web was hosting an application with UTF-8 character encoding enabled, or that included user-supplied UTF-8 strings in a response, a...

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS. The vulnerability exists as an integer signedness error in nextpidmap could allow a local, unprivileged user to cause a denial of service...

Denial Of Service (DoS)

php is vulnerable to denial of service DoS. The vulnerability exists as an insufficient input validation flaw, leading to a buffer over-read, was found in the PHP exif extension. A specially-crafted image file could cause the PHP interpreter to crash when a PHP script tries to extract Exchangeabl...