Denial Of Service (DoS)

org.springframework: spring-web is vulnerable to Denial Of Service DoS. The vulnerability is due to a lack of validation for HTTP methods in DefaultServerRequestObservationConvention.java. This allows an attacker to inject specially crafted HTTP requests that may cause Denial of Service. Note tha...

Obfusticated Email Address Exfiltration

moq is vulnerable to Email Address Exfiltration. The vulnerability is due to including the SponsorLink.dll in version 4.20.0, which secretly exfiltrates the email address set in the user.email config parameter of git. This email address is hashed and sent to devlooped.com over TLS. The hidden...

NULL Pointer Dereference

openssl is vulnerable to null point dereference. The vulnerability exists because there is a missing check for the return value from the initialization function which later leads to invalid usage of the digest api most likely leading to a crash...

Regular Expression Denial Of Service

luxon is vulnerable to Regular Expression Denial of Service ReDoS. The vulnerability exists via the replace parameter in regexParser.js, which does not properly handle user-untrusted data allowing the attacker to supply arbitrary input to the function, resulting in a system crash...

Prototype Pollution

flat is vulnerable to prototype pollution. The vulnerability exists in the unflatten function of index.js, due to the improper checks for the key1 variable which allows an attacker to modify object prototype attributes...

Out-of-bounds Write

kernel is vulnerable to Out-of-bounds Write. Given a sufficiently large number of actions, while copying and reserving memory for a new action of a new flow, the reservesfasize function does not return -EMSGSIZE as expected, potentially leading to an out-of-bounds write access which allows a loca...

Information Disclosure

curl is vulnerable to Information Disclosure. An attacker may force the library to use an insecure clear-text HTTP step even when HTTPS is provided in the URL. The HSTS mechanism could be bypassed if the host name in the given URL first uses IDN characters that get replaced to ASCII counterparts ...

Regular Expression Denial Of Service (ReDoS)

loofah is vulnerable to regular expression denial of service. The vulnerability exists due to the insecure regex pattern used for the attrnode.value attribute in the scrubattributes function of scrub.rb, allowing an attacker to crash the application by providing malicious SVG attributes...

Denial Of Service (DoS)

@fastify/websocket and fastify-websocket are vulnerable to denial of service. The vulnerability is due to the fastifyWebsocket function in index.js which crashes the application on an uncaught exception when processing a malformed packet...

Information Disclosure

grafana is vulnerable to information disclosure. The vulnerability is due to the proxy endpoints leaking sensitive authentication tokens to some destination plugins which allows an attacker to gain access to HTTP header information...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. The vulnerability exists in fbcongetfont function in fbcon.c due to bound check failure allowing an attacker to crash the application by providing malicious input...

Path Traversal

github.com/minio/minio is vulnerable to path traversal. The vulnerability exists in downloadReleaseURL function in update.go because the admin:ServiceUpdate is not properly handled which allows an attacker to get access to the file system...

Arbitrary File Read

ruby-mysql is vulnerable to arbitrary file read. A malicious MySQL server can request local file content from a client without explicit authorization from the user if the filename specified by the server does not match with OPTLOADDATALOCALDIR...

Information Disclosure

intel-microcode, sid is vulnerable to information disclosure. An incomplete cleanup in specific special register write operations for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

Incorrect Logic

x86 pv is using an incorrect logic. The vulnerability exists due to insufficient care with non-coherent mappings which allows an attacker to perform unwanted actions...

Integer Overflow

kernel-rt is vulnerable to integer overflow. No code depends on this integer overflow so it is unlikely that the vulnerability can be used for anything apart from crashing the system. An issue was discovered in the Linux kernel 4.4 through 5.7.1. drivers/tty/vt/keyboard.c has an integer overflow ...

Improper Access Control

github.com/awake1t/linglong is vulnerable to access control bypass. The vulnerability exists in the jwt.go due to the hard coded jwt token which allows an attacker to craft a malicious cookie and gain access to the system...

Denial Of Service (DoS)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE: 7u321, 8u311; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthenticated...

Remote Code Execution (RCE)

firefox is vulnerable to remote code execution. The vulnerability exists due to a lack of validation of the boundaries of same-origin policy, allowing an attacker to use XSL transform to serve a user an XSL with maliciously crafted javascript...

Remote Code Execution (RCE)

gnuplot is vulnerable to remote code execution.An attacker is able to exploit the vulnerability by injecting maliciously crafted script via shell metacharacters in Gnuplot commands...

Packet Injection

kernel is vulnerable to packet injection. The vulnerability exists due to the WEP, WPA, WPA2, and WPA3 implementations accept second or subsequent broadcast fragments even when sent in plaintext and process them as full unfragmented frames...

Man-in-the-Middle (MitM)

postgresql is vulnerable to man-in-the-middle attacks. A man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first created when the server is configured to use trust authentication with a 'clientcert' requirement or to utilize 'cert' authentication...

Buffer Overflow

There is a heap-based buffer over-read in the fmtentry function in tinfo/comphash.c in the terminfo library in ncurses before 6.1-20191012...

Heap Corruption

chrome is vulnerable to heap corruption. The vulnerability exists due to a use after free in V8 in Google Chrome prior to 95.0.4638.54 allowed a remote attacker who had convinced a user to allow for connection to debugger to potentially exploit heap corruption via a crafted HTML page...

Remote Code Execution (RCE)

ntfs-3g is vulnerable to Remote Code Execution RCE. The vulnerability exists due to a stack buffer overflow...

Remote Code Execution (RCE)

GNU is vulnerable to Remote Code Execution RCE. The vulnerability exists due to an integer overflow that triggers an out-of-bounds heap write...

Denial Of Service (DoS)

bind9 is vulnerable to denial of service. The process terminates with a failed assertion check when receiving a malicious query for a record...

Authorization Bypass

grafana is vulnerable to authorization bypass. The team sync HTTP API allows any authenticated user to add external groups to existing teams. This vulnearbilitycan be abused to grant a user team arbitrary permissions...

Man-in-the-middle (MitM)

apache-maven is vulnerable to Man-in-the-middle MitM. The vulnerability exists because it allows downloading code from external repositories via HTTP by default, resulting in a potential risk if a malicious actor takes over that repository or is able to insert themselves into a position to preten...

Remote Code Execution (RCE)

webkit2gtk is vulnerable to remote code execution. The vulnerability exists due to a type confusion when processing maliciously crafted web content...

Unauthorised Data Deletion

webkit2gtk is vulnerable to unauthorised data deletion. A user may be unable to fully delete browsing history. “Clear History and Website Data” did not clear the history in some circumstances...

Remote Code Execution

bind9 is vulnerable to remote code execution. A buffer overflow in GSSAPI security policy negotiation can result in remote code execution...

Information Disclosure

kernel is vulnerable to information disclosure. The vulnerability exists in fs/cifs/smb2pdu.c through a use-after-free...

Denial Of Service(DoS)

chromium, sid is vulnerable to Denial of ServiceDoS. Inappropriate implementation in V8 in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. An invalid read location in vgaconinvertregion allows an attacker to crash the kernel and potentially obtain confidential information...

Sweet32 Attack

OpenVPN is vulnerable to Sweet32 Attack. When using a 64-bit block cipher, it is easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTP-over-OpenVPN session using Blowfish in CBC mode, aka a "Sweet32" attack...

Arbitrary Code Execution

squid3 is vulnerable to arbitrary code execution. The vulnerability exists as squid by default comes with rules to block access to the Cache Manager, which serves detailed server information meant for the maintainer, that allows encoded URLs to bypass the urlregex check...

Use-after-free

samba is vulnerable to a use-after-free flaw. Due to a flaw in all samba LDAP server used in a AC DC configuration, a user can lead to an application crash...

Information Disclosure

Apache HTTP server is vulnerable to modproxyuwsgi info disclosure and possible RCE...

Privilege Escalation

kernel is vulnerable to privilege escalation. A buffer overflow in the mwifiexcmdappendvsietlv function in drivers/net/wireless/marvell/mwifiex/scan.c allows an attacker to gain higher privileges or cause a denial of service condition...

Privilege Escalation

kernel is vulnerable to privilege escalation. The USB monitor driver allows for a local privilege escalation due to an out-od-bounds check...

Denial Of Service

kernel is vulnerable to denial of service. It was found that the kvmvmioctlassigndevice function in the KVM subsystem of a Linux kernel did not check if the user requesting device assignment was privileged or not. A member of the kvm group on the host could assign unused PCI devices, or even...

Denial Of Service (DoS)

httpd is vulnerable to denial of service DoS. The vulnerability exists as a flaw was found in the way the Apache HTTP Server handled Range HTTP headers. A remote attacker could use this flaw to cause httpd to use an excessive amount of memory and CPU time via HTTP requests with a specially-crafte...

Information Disclosure

Kernel is vulnerable to information disclosure. The attack is possible because a flaw in the dccprcvstateprocess function could allow a remote attacker to cause a denial of service, even when the socket was already closed...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. A flaw was found in the Linux kernel's garbage collector for AFUNIX sockets. A local, unprivileged user could use this flaw to trigger a denial of service out-of-memory condition...

Information Disclosure

firefox is vulnerable to information disclosure. A flaw was found in the Firefox XMLHttpRequest object. A remote site could use this flaw to gather information about servers on an internal private network...

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS. The vulnerability exists as a divide-by-zero flaw was found in the azxpositionok function in the driver for Intel High Definition Audio, snd-hda-intel. A local, unprivileged user could trigger this flaw to cause a kernel crash...

Cross-site Scripting (XSS)

Mozilla Firefox is vulnerable to cross-site scripting XSS. It happens due to the way Firefox handled the "Content-Disposition: attachment" HTTP header when the "Content-Type: multipart" HTTP header was also present. A website that allows arbitrary uploads and relies on the "Content-Disposition:...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. A NULL pointer dereference flaws were found in the r128 driver in the Linux kernel. Checks to test if the Concurrent Command Engine state was initialized were missing in private IOCTL functions. An attacker could use these flaws to cause a local denial o...

Privilege Escalation

kernel is vulnerable to privilege escalation. The vulnerability exists as a flaw was found in the aacraid SCSI driver. This allowed a local user to make ioctl calls to the driver which should otherwise be restricted to privileged users...