SQL Injection

moodle/moodle is vulnerable to SQL Injection. The vulnerability is due to improper SQL sanitization in lib.php, allowing an authenticated attacker to inject and execute malicious SQL queries when viewing a users recent courses, leading to Information Disclosure...

Timing Attack

openssl is vulnerable to Timing Attack. The vulnerability exists in rsa/rsaossl.c because an attacker can recover ciphertext with a Bleichenbacher style attack by sending a large number of trial messages...

Privilege Escalation

device-mapper-multipath is vulnerable to privilege escalation. The library allows local users to obtain root access, exploited alone or in conjunction with CVE-2022-41973. Local users that are able to write to UNIX domain sockets can bypass access controls and manipulate the multipath setup. This...

Denial Of Service (DoS)

cn.hutool:hutool-core is vulnerable to denial of service DoS attacks. A malicious user is able to cause excessive resource consumption due to improper decompression mechanisms in multiple functions of ZipUtil.java, resulting in an application crash...

Information Disclosure

github.com/grafana/grafana is vulnerable to information disclosure. The vulnerability is due to the SendResetPasswordEmail function in password.go exposing if a user does not exist in the database by an error message...

Signature Verification Bypass

github.com/grafana/grafana is vulnerable to signature verification bypass. A local attacker is able to convince a server admin to download and successfully run a malicious plugin even though unsigned plugins are not allowed, due to the improper verification of plugin signature...

Path Traversal

twig/twig is vulnerable to path traversal. The vulnerability exists in findTemplate function of FilesystemLoader.php because the template loading directories are not properly configured which allows an attacker to load templates outside the configured directory...

Denial Of Service (DoS)

Jettison is vulnerable to denial of service. The vulnerability exists in nextValue function in JSONTokener.java where the attacker may supply content that causes the parser to crash by out of memory if the parser is running on user supplied input...

Arbitrary Code Execution Via Authorization Bypass

Pebble Templates is vulnerable to arbitrary code execution via authorization bypass. The vulnerability exists in BlacklistMethodAccessValidator.java because the methods that are allowed to access by pebble are not properly handled which allows an attacker to bypass and execute arbitrary codes...

Deserialization Of Untrusted Data

apache-geode is vulnerable to deserialization of untrusted data. The vulnerability exists because the serialization filtering is not properly configured for JMX/RMI which allows an attacker to to inject and execute arbitrary code through the untrusted data...

Privilege Escalation

librpm.so is vulnerable to privilege escalation. A local unauthenticated user who owns another ancestor directory is able to potentially gain root privileges of the system due to the lack of sanitizations in lib/fsm.c during symlink validations. This vulnerability exists due to incomplete fixes f...

Out-of-bounds Write

vim:sid is vulnerable to Out-of-bounds Write. It causes a memory access error when substitute expression changes window...

Heap Buffer Overflow

chromium is vulnerable to a Heap Buffer Overflow. The vulnerability allows an attacker to crash the system through potentially exploit heap corruption via a crafted HTML page...

Command Injection

openssl is vulnerable to command injection. The vulnerability exists in crehash script which allows an attacker to inject and execute malicious commands...

Incorrect Logic

x86 pv is using an incorrect logic. The vulnerability exists due to insufficient care with non-coherent mappings which allows an attacker to perform unwanted actions...

Remote Code Execution

laravel/laravel is vulnerable to remote code execution. Improper deserialization in destruct in GuzzleHttp\Cookie\FileCookieJar.php allows an attacker to upload and execute malicious code via an unserialized pop chain...

Buffer Overflows

linux is vulnerable to buffer overflows. st21nfcaconnectivityeventreceived in drivers/nfc/st21nfca/se.c has EVTTRANSACTION buffer overflows because of untrusted length parameters...

Time-of-check To Time-of-Use (TOCTOU)

grunt is vulnerable to Time-of-check To Time-of-Use TOCTOU. The vulnerability exists in file.copy function in file.js because the permissions are not properly handled in both source and destination directories which allows an attacker to access and write arbitrary files...

Privilege Escalation

openjdk is vulnerable to privilege escalation. The vulnerability exists due to a lack of validation of authorization allowing an attacker to gain unauthorized access to critical data or complete access to all Oracle Java SE...

Sensitive Information Disclosure

Jenkins Pipeline is vulnerable to sensitive information disclosure. It allows attackers with Item/Read permission to retrieve the default password parameter value from jobs. A flaw was found in Jenkins pipeline-build-step where it revealed password parameter default values when generating a...

Memory Corruption

firefox is vulnerable to memory corruption. The application crashes when a compromised content process sent an unexpected number of WebAuthN extensions in a register command to the parent process...

SQL Injection

moodle/moodle is vulnerable to SQL Injection. The vulnerability exists due to improper configuration in the getoptions function of awardcriteriaprofile.php which allows an attacker to inject malicious sql queries...

Denial Of Service (DoS)

zlib is vulnerable to Denial Of Service DoS. The vulnerability exists due to a memory corruption when deflating if the input has many distant matches which will results in corrupted output due to invalid distances, which leads to out-of-bound access, corrupting the memory and potentially crashing...

Privilege Escalation

MariaDB is vulnerable to Privilege Escalation. The vulnerability exists due to a lack of sanitization of a user-supplied string before using it as a format specifier...

Remote Code Execution (RCE)

firefox is vulnerable to remote code execution. The vulnerability exists due to a lack of validation of access allowing and attacker to control the contents of an iframe sandboxed with allow-popups but not allow-scripts...

Denial Of Service (DoS)

openjdk17 is vulnerable to denial of service. Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Hotspot. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle...

Buffer Overflow

There is a heap-based buffer over-read in the fmtentry function in tinfo/comphash.c in the terminfo library in ncurses before 6.1-20191012...

Man-In-The-Middle Attack (MitM)

curl is vulnerable to Man in the middle attack. The vulnerability exists due to a lack of clearing of previous cached responses, treating them as valid and authenticated...

Denial Of Service (DoS)

openssl is vulnerable to Denial Of Service DoS. The vulnerability exists due to the system calling the API function EVPPKEYdecrypt twice, which insecurely allocates the wrong buffer size on the second time...

Denial Of Service (DoS)

firefox is vulnerable to denial of service. An exploitable crash is possible from incorrect instruction reordering during JIT optimization...

Protection Bypass

The Linux kernel is vulnerable to Protection Bypass. It does not properly enforce the Secure Boot Forbidden Signature Database aka dbx protection mechanism. This affects certs/blacklist.c and certs/systemkeyring.c. A flaw was found in the Linux kernel in certs/blacklist.c, When signature entries...

Denial Of Service (DoS)

wireshark is vulnerable to denial of service. The vulnerability exists due to excessive memory consumption in MS-WSP dissector...

Denial Of Service (DoS)

linux is vulnerable to denial of service. THe function qrtrrecvmsg in net/qrtr/qrtr.c allows attackers to obtain sensitive information from kernel memory because of a partially uninitialized data structure, aka CID-50535249f624...

Denial Of Service (DoS)

linux-firmware is vulnerable to denial of service. Linux kernel allows a privileged user to potentially enable an escalation of privilege via local access. A flaw was found in the Linux kernel. An integer overflow in the firmware for some IntelR Graphics Drivers may allow a privileged user to...

Server-side Request Forgery (SSRF)

yoast-seo-for-typo3/yoastseo is vulnerable to server side request forgery. Failing to restrict analyzed URLs to domains managed by the current TYPO3 website allows a logged in TYPO3 backend user to make HTTP requests to arbitrary domains including the webserver itself or other internally managed...

Padding Oracle Attack

jose is vulnerable to padding oracle attack. A possible observable difference in timing when padding error occurs while decrypting the ciphertext allows an attacker to obtain the plaintext data without knowledge of the decryption key...

Privilege Escalation

kernel-rt is vulnerable to privilege escalation. The vulnerability exists due to certain iSCSI data structures do not have appropriate length constraints or checks, and can exceed the PAGESIZE value which allows an unprivileged user to send a Netlink message that is associated with iSCSI, and has...

Remote Code Execution (RCE)

webkit2gtk is vulnerable to remote code execution. The vulnerability exists due to a logic issue...

OS Command Injection

salt is vulnerable to OS command injection. An attacker is able to inject and execute arbitrary OS commands via a malicious process name through the restartcheck function...

Arbitrary File Write

django is vulnerable to arbitrary file write. The vulnerability exists through the django.utils.archive.extract function, used by startapp --template and startproject --template, to extract files with absolute paths or relative paths, out of the application root directory...

Privilege Escalation

chromium is vulnerable to privilege escalation. The vulnerability exists because of insufficient policy enforcement in Cryptohome...

HTTP Request Smuggling

nginx is vulnerable to HTTP request smuggling. A remote attacker is able to smuggle HTTP requests via the ngx.location.capture API...

Denial Of Service (DoS)

firefox is vulnerable to denial of service DoS. The vulnerability exists when the Compact method was called on an nsTArray, allowing the array to be reallocated without updating other pointers...

Cache Poisoning

find-my-way is vulnerable to web cache poisoning. The vulnerability exists when it accepts the Accept-Version header by default, and if the versioned routes are not used, it leads to a denial of serviceDoS...

Arbitrary Code Execution

spamassassin is vulnerable to arbitrary code execution. An attacker can send malicious configuration files to run system commands without any output or errors...

Denial Of Service (DoS)

kernel is vulnerable denial of service DoS. It mishandles invalid descriptors in drivers/media/usb/gspca/xirlinkcit.c...

Cross-site Scripting (XSS)

github.com/grafana/grafana is vulnerable to cross-site scripting XSS. The vulnerability exists when specifying series alias such as test data or elastic search, which allows special characters, caused by the bs-typeahead directive that evals the select options passed to it...

Remote Code Execution (RCE)

github.com/gogs/gogs is vulnerable to remote code execution RCE. The vulnerability exists through git hooks which are enabled by default...

Information Disclosure

linux is vulnerable to information disclosure. The vulnerability exists as through the internal state of the network RNG via drivers/char/random.c and kernel/time/timer.c...

Denial Of Service (DoS)

clamav is vulnerable to denial of service DoS. The vulnerability exists through a null pointer dereference. An attacker could exploit this vulnerability by sending a crafted EGG file to an affected device...