38505 matches found
Use After Free
chromium:sid is vulnerable to use after free...
Remote Code Execution (RCE)
webkit2gtk is vulnerable to remote code execution. The vulnerability exists due to a logic issue...
Denial Of Service (DoS)
busybox is vulnerable to denial of service. The vulnerability exists due to the decompressgunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huftbuild result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data...
Denial Of Service (DoS)
pillow is vulnerable to denial of service DoS. The vulnerability exists through a heap-based buffer overflow during the decoding of a malicious YCbCr file in RGBA mode. This CVE is due to an incomplete fix for CVE-2020-35654...
Denial Of Service (DoS)
openssl is vulnerable to denial of service. Calls to EVPCipherUpdate, EVPEncryptUpdate and EVPDecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from t...
Privilege Escalation
Linux kerne is vulnerable to a local privilege escalation. Due to a wrong locking in net/vmwvsock/afvsock.c,the race conditions were implicitly introduced in the commits that added VSOCK multi-transport support...
Denial Of Service (DoS)
php7 is vulnerable to denial of service. PHP will crash with a SIGSEGV whenever an XML is provided to the SoapClient query function without an existing field...
Arbitrary Code Execution
jackson-databind is vulnerable to remote code execution RCE. The vulnerability exists through the lack of sanitization of the org.apache.tomcat.dbcp.dbcp.cpdsadapter.DriverAdapterCPD class through deserialization...
Malicious Code Execution
postgresql is vulnerable to malicious code execution. An attacker having permission to create non-temporary objects in at least one schema can execute arbitrary SQL functions under the identity of a superuser. The highest threat from this vulnerability is to data confidentiality and integrity as...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. It is possible due to Red Hat only CVE-2020-12351 regression, allowing a remote attacker in an adjacent range to crash the system...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. It is possible due to uninitialized kernel data leak in userspace coredumps...
Out-Of-Bounds Write
Linux kernel is vulnerable to an out-of-bounds write. Crafted keycode table in drivers/input/input.c enables the possibility of an attack...
Remote Code Execution (RCE)
kernel is vulnerable to remote code execution RCE. The vulnerability exists through a buffer over-write in vgaconscroll...
Privilege Escalation
libvirt is vulnerable to arbitrary code execution. A double free memory issue affects the polkit access control driver and allows clients connecting to the read-write socket with limited ACL permissions to exploit the vulnerability to crash the libvirt daemon or potentially escalate their...
Arbitrary Code Execution
webkitgtk4 is vulnerable to arbitrary code execution. The vulnerability exists through memory corruption...
Information Disclosure
linux is vulnerable to information disclosure. The vulnerability exists as through the internal state of the network RNG via drivers/char/random.c and kernel/time/timer.c...
Denial Of Service (DoS)
MySQL is vulnerable to denial of service DoS due to flaws in managing Privileges...
Denial Of Service (DoS)
busybox is vulnerable to denial of service. The recvandprocessclientpkt function in networking/ntpd.c allows remote attackers to cause a excessive CPU and bandwidth consumption via a malicious NTP packet, which triggers a communication loop...
Denial Of Service (DoS)
mariadb is vulnerable to denial of service DoS. The vulnerability exists through high privileged attacker with network access via multiple protocols to compromise MySQL Server...
Unrestricted File Upload
telerik.web.ui allows unrestricted file uploads. A remote attacker is able to upload arbitrary files which can result in arbitrary code execution...
Privilege Escalation
kernel is vulnerable to privilege escalation. The USB monitor driver allows for a local privilege escalation due to an out-od-bounds check...
Information Disclosure
kernel is vulnerable to information disclosure. An L2 guest may trick the L0 hypervisor to access confidential L1 resources...
Denial Of Service
kernel is vulnerable to denial of service. It was found that the kvmvmioctlassigndevice function in the KVM subsystem of a Linux kernel did not check if the user requesting device assignment was privileged or not. A member of the kvm group on the host could assign unused PCI devices, or even...
Denial Of Service (DoS)
jbossweb is vulnerable to denial of service DoS. The vulnerability exists as a flaw was found in the way JBoss Web handled UTF-8 surrogate pair characters. If JBoss Web was hosting an application with UTF-8 character encoding enabled, or that included user-supplied UTF-8 strings in a response, a...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists as the Linux kernel in the way splitting two extents in ext4extconverttoinitialized worked. A local, unprivileged user with access to mount and unmount ext4 file systems could use this flaw to cause a denial of service...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists as an integer signedness error in nextpidmap could allow a local, unprivileged user to cause a denial of service...
Denial Of Service (DoS)
httpd is vulnerable to denial of service DoS. The vulnerability exists as a flaw was found in the way the Apache HTTP Server handled Range HTTP headers. A remote attacker could use this flaw to cause httpd to use an excessive amount of memory and CPU time via HTTP requests with a specially-crafte...
Arbitrary Code Execution
thunderbird/firefox is vulnerable to arbitrary code execution. Several flaws were found in the processing of malformed HTML content. Malicious HTML content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. Missing sanity checks were found in setupargpages in the Linux kernel. When making the size of the argument and environment area on the stack very large, it could trigger a BUGON, resulting in a local denial of service...
Denial Of Service (DoS)
apache http server is vulnerable to denial of service. A flaw was found in the way the moddav module of the Apache HTTP Server handled certain requests. If a remote attacker were to send a carefully crafted request to the server, it could cause the httpd child process to crash...
Arbitrary Code Execution
thunderbird is vulnerable to arbitrary code execution. Several flaws were found in the processing of malformed HTML mail content. An HTML mail message containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running...
Information Disclosure
libpng is vulnerable to information disclosure. The vulnerability exists through the libpng library processed 1-bit interlaced PNG images. An attacker could create a specially-crafted PNG image that could cause an application using libpng to disclose uninitialized memory...
Information Disclosure
jboss EAP is vulnerable to information disclosure. The RHSA-2008:0826 update fixed an issue CVE-2008-3273 where unauthenticated users were able to access the status servlet; however, a bug fix included in the RHSA-2009:0347 update re-introduced the issue. A remote attacker could use this flaw to...
Denial Of Service (DoS)
The kernel is vulnerable to Denial of Service DoS.Due to a NULL pointer dereference flaw was found in each of the following functions in the Linux kernel: pipereadopen, pipewriteopen, and piperdwropen. When the mutex lock is not held, the ipipe pointer could be released by other processes before ...
Privilege Escalation
kernel is vulnerable to privilege escalation. The vulnerability exists as the NFSv4 client was missing a file permission check for the execute bit in some situations. This could allow local, unprivileged users to run non-executable files on NFSv4 mounted file systems...
Privilege Escalation
kernel is vulnerable to privilege escalation. The vulnerability exists as the exitnotify function in the Linux kernel did not properly reset the exit signal if a process executed a set user ID setuid application before exiting. This could allow a local, unprivileged user to elevate their privileg...
Arbitrary Code Execution
php is vulnerable to arbitrary code execution. A heap-based buffer overflow flaw was found in PHP's mbstring extension. A remote attacker able to pass arbitrary input to a PHP script using mbstring conversion functions could cause the PHP interpreter to crash or, possibly, execute arbitrary code...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. A deficiency was found in the libATA implementation. This could, potentially, lead to a denial of service. By default, the /dev/sg devices are accessible only to the root user...
Denial Of Service (DoS)
Mozilla is vulnerable to denial of service. The vulnerability exists through a use-after-free issue while running the nsDocShell destructor...
Arbitrary Code Execution
kernel is vulnerable to arbitrary code execution. The vulnerability exists through an ASLR bypass for setuid binaries due to late installexeccreds...
Sandbox Restrictions Bypass
github.com/opencontainers/runc is vulnerable to sandbox restrictions bypass. An attacker who controls the container image for two containers that share a volume will be able to mount arbitrary volumes in a race condition during container initialization via a symlink that is added to the rootfs...
Remote Code Execution (RCE)
firefox is vulnerable to arbitrary code execution. Multiple critical memory safety bugs allow a remote attacker to execute arbtirary code on the system...
Denial Of Service (DoS)
nimbus-jose-jwt is vulnerable to denial of service. Uncaught exceptions while parsing a JWT allow an attacker to submit a malicious JWT which could result in an application crash, potentially disclosing confidential information or a potential authentication bypass...
Access Control Bypass
Automattic Mongoose is vulnerable to access control bypass. If an attacker injects a bsontype attribute to a query object, Mongoose ignores the query object, allowing an attacker to log into other users account or bypassing the token verification during a password reset...
Remote Code Execution (RCE) Through Deserialization
jackson-databind is vulnerable to remote code execution RCE attacks. This is due to a polymorphic typing issue when Default Typing is enabled. An attacker can craft a malicious JSON to invoke com.mysql.cj.jdbc.admin.MiniAdmin class, allowing the attacker to host a MySQL server or read arbitrary...
Denial Of Service (DoS)
Apache HTTP Server is vulnerable to denial of service DoS attacks. The vulnerability exists due to an out of bound read while preparing data to be cached in shared memory in an unknown functionality of the component modcachesocache. An attacker could cause a denial of service condition by sending...
Denial Of Service (DoS)
Apache HTTP Server is vulnerable to denial of service DoS attacks. A remote user can send specially crafted HTTP/2 requests to cause worker processes to be allocated for 60 seconds longer than required, consuming excessive worker resources casing a worker exhaustion and an application crash...
Arbitrary Code Execution
dnsmasq is vulnerable to stack buffer overflows. A remote attacker on the local network could send a crafted DHCPv6 request to dnsmasq which would cause a denial of service crash or execute arbitrary code...
Memory Corruption
Firefox is vulnerable to memory corruption attacks. A remote user can exploit a flaw in the JIT code allocation allowing a bypass of ASLR and DEP protection. This leads to obtain potentially sensitive information on the target system...
Out-Of-Bounds Write
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The rh-php56 packages provide a recent stable release of PHP with PEAR 1.9.5 and enhanced language features including constant expressions, variadic functions, arguments unpacking, and the interactive debuger. T...