38839 matches found
Remote Code Execution (RCE)
xstream is vulnerable to remote code execution. The vulnerability exists due to the usage of an insecure default blacklist which does not cover all the excluded XStream security framework...
Denial Of Service (DoS)
nodejs-current is vulnerable to Denial Of Service DoS. The vulnerability exists due to missing input validation of host names returned by Domain Name Servers in Node.js dns library which can lead to output of wrong hostnames...
Insecure Session ID
org.eclipse.jetty, jetty-server has Insecure Session ID. The vulnerability exists due the SessionListenersessionDestroyed not validating the session ID if an exception is thrown...
Arbitrary Code Execution
libcurl before version 7.77.0 can be tricked into using already freed memory when a new TLS session is negotiated or a client certificate is requested on an existing connection. For example, this can happen when a TLS server requests a client certificate on a connection that was established witho...
Billion Laugh Attack
libxml2:sid is vulnerable to billion laugh attack via parameter entities expansion and following the line of the billion laugh attack...
Denial Of Service (DoS)
pydantic is vulnerable to denial of service. An attacker is able to exploit the vulnerability by passing either infinity , inf or floatinf or their negatives to datetime or data fields causing the validaton to run in loops with 100% CPU usage...
Denial Of Service (DoS)
bind9 is vulnerable to denial of service. The process terminates with a failed assertion check when receiving a malicious query for a record...
Unauthorised Data Deletion
webkit2gtk is vulnerable to unauthorised data deletion. A user may be unable to fully delete browsing history. “Clear History and Website Data” did not clear the history in some circumstances...
Remote Code Execution (RCE)
Mumble is vulnerable to remote code execution. The vulnerability exists when a victim navigates to a crafted URL on a server list and clicks on the Open Webpage text...
Directory Traversal
busybox is vulnerable to directory traversal. A remote attacker is able to perform a symlink attack to gain access to files outside of the current working directory...
Privilege Escalation
wpasupplicant is vulnerable to privilege escalation. The vulnerability exists in p2pcopyclientinfo of p2p.c, through a possible out of bounds write due to a missing bounds check...
Denial Of Service (DoS)
QEMU is vulnerable to denial of service. An out-of-bounds read in ideatapicmdreplyend in hw/ide/atapi.c allows an attacker to crash the application...
Information Disclosure
netty-codec-http is vulnerable to information disclosure. When netty's multipart decoders are used, local files containing confidential information can be accessed via the local system temporary directory if temporary storing uploads on the disk is enabled...
Denial Of Service (DoS)
php7 is vulnerable to denial of service. PHP will crash with a SIGSEGV whenever an XML is provided to the SoapClient query function without an existing field...
Man-in-the-Middle (MitM)
node-sass is vulnerable to man-in-the-middle attack. The certificate validation when requesting binaries is disabled even if the user does not specify an alternative download path. This allows for a man-in-the-middle attacker to intercept and modify network traffic, and potentially introduce...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. A buffer over-read in the function cryptoauthencextractkeys when a payload longer than 4 bytes is not aligned causes a system crash...
Out-of-bounds Write
kernel is vulnerable to out-of-bounds write. It is possible due to a flaw in ext4xattrsetentry in fs/ext4/xattr.c...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. The vulnerability exists due to a memory leak in af9005identifystate function in dvb-usb/af9005.c which allows an attacker to cause an application crash...
Use-after-free
kernel is vulnerable to use-after-free vulnerability. It is possible due to a flaw in the function mdiobusregister in drivers/net/phy/mdiobus.c...
Remote Code Execution (RCE)
kernel is vulnerable to remote code execution RCE. The vulnerability exists through a buffer over-write in vgaconscroll...
Privilege Escalation
libvirt is vulnerable to arbitrary code execution. A double free memory issue affects the polkit access control driver and allows clients connecting to the read-write socket with limited ACL permissions to exploit the vulnerability to crash the libvirt daemon or potentially escalate their...
Arbitrary Code Execution
webkitgtk4 is vulnerable to arbitrary code execution. The vulnerability exists through memory corruption...
Arbitrary Code Execution
webkitgtk4 is vulnerable to arbitrary code execution. The vulnerabiltiy exists through memory errors...
Information Disclosure
webkitgtk4 is vulnerable to information disclosure. The vulnerability exists through the drawing of web page elements that causes browsing history to be revealed...
Sweet32 Attack
OpenVPN is vulnerable to Sweet32 Attack. When using a 64-bit block cipher, it is easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTP-over-OpenVPN session using Blowfish in CBC mode, aka a "Sweet32" attack...
Authentication Bypass
shiro-web is vulnerable to authentication bypass. An ArrayIndexOutOfBoundsException in Base64decode causes an invalid session cookie to be parsed as valid...
Denial Of Service (DoS)
busybox is vulnerable to denial of service. The recvandprocessclientpkt function in networking/ntpd.c allows remote attackers to cause a excessive CPU and bandwidth consumption via a malicious NTP packet, which triggers a communication loop...
Unrestricted File Upload
telerik.web.ui allows unrestricted file uploads. A remote attacker is able to upload arbitrary files which can result in arbitrary code execution...
Privilege Escalation
kernel is vulnerable to privilege escalation. The USB monitor driver allows for a local privilege escalation due to an out-od-bounds check...
Denial Of Service (DoS)
Mozilla Firefox is vulnerable to denial of service attacks. It happens due to memory safety bugs fixed in Firefox...
Denial Of Service (DoS)
httpd is vulnerable to denial of service DoS. The vulnerability exists as a flaw was found in the way the Apache HTTP Server handled Range HTTP headers. A remote attacker could use this flaw to cause httpd to use an excessive amount of memory and CPU time via HTTP requests with a specially-crafte...
Arbitrary Code Execution
thunderbird/firefox is vulnerable to arbitrary code execution. Several flaws were found in the processing of malformed HTML content. Malicious HTML content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird...
Arbitrary Code Execution
thunderbird is vulnerable to arbitrary code execution. The vulnerability exists as a double free flaw was found in the way Thunderbird handled "application/http-index-format" documents. A malformed HTTP response could cause Thunderbird to execute arbitrary code with the privileges of the user...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. A flaw was found in the Linux kernel's garbage collector for AFUNIX sockets. A local, unprivileged user could use this flaw to trigger a denial of service out-of-memory condition...
Remote Code Execution (RCE)
Perl is vulnerable to Remote Code Execution RCE. The Safe module did not properly restrict the code of implicitly called methods such as DESTROY and AUTOLOAD on implicitly blessed objects returned as a result of unsafe code evaluation. These methods could have been executed unrestricted by Safe...
Denial Of Service (DoS)
mysql is vulnerable to denial of service. A flaw was found in the way MySQL handled SELECT statements with subqueries in the WHERE clause, that assigned results to a user variable. A remote, authenticated attacker could use this flaw to crash the MySQL server daemon mysqld. This issue only caused...
Denial Of Service (DoS)
The kernel is vulnerable to Denial of Service DoS.Due to a NULL pointer dereference flaw was found in each of the following functions in the Linux kernel: pipereadopen, pipewriteopen, and piperdwropen. When the mutex lock is not held, the ipipe pointer could be released by other processes before ...
Man-in-the-Middle (MitM)
openssh is vulnerable to man-in-the-middle attack. A flaw was found in the SSH protocol. An attacker able to perform a man-in-the-middle attack may be able to obtain a portion of plain text from an arbitrary ciphertext block when a CBC mode cipher was used to encrypt SSH communication. This updat...
Privilege Escalation
JRE unpack200 is vulnerable to privilege escalation. An integer overflow flaw was found in the JRE unpack200 functionality. An untrusted applet or application could extend its privileges, allowing it to read and write local files, as well as to execute local applications with the privileges of th...
Arbitrary Code Execution
seamonkey is vulnerable to arbitrary code execution. The vulnerability exists as a web page containing malicious content could cause SeaMonkey to crash or, potentially, execute arbitrary code as the user running SeaMonkey...
Same-Origin Policy Bypass
seamonkey is vulnerable to same-origin policy bypass. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause SeaMonkey to crash or, potentially, execute arbitrary code as the user running SeaMonkey...
Arbitrary Code Execution
seamonkey is vulnerable to arbitrary code execution. The vulnerability exists as a web page containing malicious content could cause SeaMonkey to crash or, potentially, execute arbitrary code as the user running SeaMonkey...
Denial Of Service (DoS)
Mozilla is vulnerable to denial of service. The vulnerability exists through a use-after-free issue while running the nsDocShell destructor...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists due to an incomplete fix for race condition between mmgetnotzero/gettaskmm, and core dumping in CVE-2019-11599...
HTTP Request Smuggling
github.com/kubernetes/ingress-nginx is vulnerable to HTTP request smuggling. The library does not use a named location for authSignURL, allowing a malicious user to read unauthorized web pages in environments where NGINX is being fronted by a load balancer...
Information Disclosure
rack is vulnerable to information disclosure. The vulnerability exists due to the insecure comparison of session IDs. A remote attacker is able to perform timing attacks by analyzing the response time of the server when performing the comparison of session IDs...
XML External Entity (XXE)
Apache Poi is vulnerable to XML external entity XXE. During the use of XSSFExportToXml tool to convert user-provided Microsoft Excel documents, it is possible for an attacker to parse a malicious Microsoft Excel document containing a reference to an external entity and perform requests on behalf ...
Insecure Encryption Key
Dnn.Platform uses an insecure encryption key. The vulnerability exists as it does not actually use an encrypted key as its key...
Denial Of Service (DoS)
Apache HTTP Server is vulnerable to denial of service DoS attacks. A remote user can send specially crafted HTTP/2 requests to cause worker processes to be allocated for 60 seconds longer than required, consuming excessive worker resources casing a worker exhaustion and an application crash...
Information Disclosure
Oracle Java SE is vulnerable to information disclosure attacks. This is because the JGSS component of OpenJDK ignores the value of the javax.security.auth.useSubjectCredsOnly property when using HTTP/SPNEGO authentication and always uses global credentials. A local attacker could possibly use thi...