38839 matches found
SQL Injection
django is vulnerable to SQL injection. An attacker is able to execute arbitrary SQL commands via the Trunc and Extract database functions which allows an attacker to execute arbitrary sql queries...
Use-After-Free
vim is vulnerable to use after free. The vulnerability exists in utfptr2char function in mbyte.c because the freed memory is used when searching for pattern in path which allows an attacker to cause a memory corruption causing an application crash...
Integer Overflow
kernel-rt is vulnerable to integer overflow. No code depends on this integer overflow so it is unlikely that the vulnerability can be used for anything apart from crashing the system. An issue was discovered in the Linux kernel 4.4 through 5.7.1. drivers/tty/vt/keyboard.c has an integer overflow ...
Denial Of Service (DoS)
MariaDB is vulnerable to denial of service. The vulnerability exists due to an incorrect handling of withwindowfunc=true for a subquery...
Use-after-Free
WebKitGTK is vulnerable to a use-after-free. The vulnerability is in WebCore::TextureMapperLayer::setContentsLayer in WebCore/platform/graphics/texmap/TextureMapperLayer.cpp...
Heap-Based Buffer Overflow
An issue was discovered in the Linux kernel before 5.16.12. drivers/net/usb/sr9700.c allows attackers to obtain sensitive information from heap memory via crafted frame lengths from a device...
Token Validation Bypass
Google OAuth Client is vulnerable to token validation bypass. The function IdTokenVerifier validate any token with custom payload as valid token if the token is properly signed...
Authentication Bypass
ngxhttpluamodule is vulnerable to authentication bypass. The vulnerability exists because it doesn't properly restrict the user inputs which allows an attacker to insert unsafe characters in an argument when using the API to mutate a URI, or a request or response header...
Denial Of Service (DoS)
Red Hat Product Security has rated this issue as having Moderate security impact and the issue is not currently planned to be addressed in future updates for Red Hat Enterprise Linux 6 and 7, hence, marked as Out-of-Support-Scope. For additional information, refer to the Issue Severity...
Improper Access Control
calibreweb is vulnerable to improper access control. The vulnerability exists because the server doesn't properly validate the user permissions when rendering HTML containing shelf name which allows an attacker to gain access to names of all private shelves...
Privilege Escalation
linux is vulnerable to privilege escalation. The vulnerability exists due to a lack of sanitization of the namespace isolation...
Remote Code Execution (RCE)
gerapy is vulnerable to remote code execution. An attacker can inject and execute malicious commands through the projectconfigure function of views.py...
Cross-Site Request Forgery (CSRF)
codeigniter4/framework is vulnerable to cross-site request forgery. When auto-routing is enabled, the library checks the request method in the controller method before processing. When auto-routing is disabled, avoid using $routes-add and instead use HTTP verbs in routes, allowing an attacker to...
Denial Of Service (DoS)
vim is vulnerable to denial of service. The vulnerability exists due to a heap-based buffer overflow which allows an attacker to cause an application crash...
Use After Free
chrome is vulnerable to use-after free. The vulnerability exists in v8 allowed a remote attacker to potentially crash via a crafted HTML page...
Remote Code Execution (RCE)
thunderbird and firefox are vulnerable to remote code execution. The vulnerability exists due to a lack of sanitization of the sandbox's script allowing embedding of additional content...
Remote Code Execution (RCE)
qt5-qtwebengine is vulnerable to remote code execution. The vulnerability exists due to a lack of sanitization which allows an attacker to execute arbitrary code inside a sandbox via a crafted HTML page...
Remote Code Execution (RCE)
GNU is vulnerable to Remote Code Execution RCE. The vulnerability exists due to an integer overflow that triggers an out-of-bounds heap write...
Denial Of Service (DoS)
glib2 is vulnerable to denial of service. When gbytearraynewtake is called with a buffer of 4GB or more on a 64-bit platform, an integer overflow occurs as the length would be a truncated modulo 232, causing unintended length truncation...
Insecure SSL Configuration
curl uses insecure SSL configurations. The curlsslconfigmatches attempts to compare whether two SSL connections have identical SSL security options and could potentially reuse a connection that is less secure or uses different security options such as capath, cainfo or certificate/issuer pinning...
Information Disclosure
curl is vulnerable to information disclosure. The Metalink download causes credentials to be sent when downloading the metalink XML file...
Insecure TLS Configuration
maven uses insecure TLS configurations. Non-SSL repository references are allowed by default and would potentially allow for man-in-the-middle attacks...
Denial Of Service (DoS)
openexr is vulnerable to denial of service. An integer overflow in OpenEXR/IlmImf/ImfHuf.cpp allows an attacker to crash the application...
Information Disclosure
jetty-http is vulnerable to information disclosure. Insecure parsing of encoded characters allow an attacker to bypass security constraints and potentially access private files within the WEB-INF directory...
Privilege Escalation
kernel is vulnerable to privilege escalation. A use-after-free in cipsov4genopt in net/ipv4/cipsoipv4.c due to the CIPSO and CALIPSO refcounting for the DOI definitions are mishandled, leading to writing of an arbitrary value...
Denial Of Service (DoS)
linux is vulnerable to denial of service. An issue was discovered in fs/fuse/fusei.h in the Linux kernel. A "stall on CPU" can occur because a retry loop continually finds the same bad inode, aka CID-775c5033a0d1...
Denial Of Service (DoS)
linux kernel is vulnerable to denial of service. The vulnerability exists due to a memory leak when a webcam device exists...
Denial Of Service (DoS)
unbound is vulnerable to denial of service. Unbound allows an out-of-bounds write in sldnsbgettokenpar...
Access Restriction Bypass
Google Chrome is vulnerable to access restriction bypass. Insufficient policy enforcement in extensions in Google Chrome allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension...
Use After Free
chromium:sid is vulnerable to use after free...
Information Disclosure
kernel is vulnerable to denial of service. A kernel pointer leak allows an attacker to determine the address of the iscsitransport structure due to the way access to sessions and handles is handled in the iSCSI driver...
Denial Of Service (DoS)
busybox is vulnerable to denial of service. The vulnerability exists due to the decompressgunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huftbuild result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data...
Information Disclosure
containerd is vulnerable to information disclosure. The vulnerability exists through containerd's CRI implementation through Kubernetes, crictl, or any other pod/container client that uses the containerd CRI service that share the same image may receive incorrect environment variables, including...
Information Disclosure
postgresql-13 is vulnerable to information disclosure. An attacker may be able to acquire denied-column values from an error message...
Arbitrary Code Execution
jackson-databind is vulnerable to remote code execution RCE. The vulnerability exists through the lack of sanitization of the org.apache.tomcat.dbcp.dbcp.cpdsadapter.DriverAdapterCPD class through deserialization...
NULL Pointer Dereference
SQLite is vulnerable to NULL pointer dereference. An attacker, interleaving reads and writes in a single transaction with an fts5 virtual table could cause denial of service conditions...
Unintended Write Access
An issue was discovered in splithugepmd in mm/hugememory.c in the Linux kernel before 5.7.5. The copy-on-write implementation can grant unintended write access because of a race condition in a THP mapcount check, aka CID-c444eb564fb1...
Malicious Code Execution
postgresql is vulnerable to malicious code execution. An attacker having permission to create non-temporary objects in at least one schema can execute arbitrary SQL functions under the identity of a superuser. The highest threat from this vulnerability is to data confidentiality and integrity as...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. It is possible due to uninitialized kernel data leak in userspace coredumps...
Use-after-free
kernel is vulnerable to use-after-free. Unprivileged users are able to create RAW sockets in AFIEEE802154 network protocol...
Information Leakage
FreeRADIUS is vulnerable to Information leak. It is possible due to aborting when needing more than 10 iterations...
Cross-site Scripting (XSS)
WebKitGTK+ is vulnerable to cross-site scripting XSS. Processing maliciously crafted web content may lead to a cross site scripting attack...
Cross-site Scripting (XSS)
WebKitGTK+ is vulnerable to cross site scripting. Processing maliciously crafted web content may lead to universal cross site scripting...
Privilege Escalation
Qt is vulnerable to Privilege Escalation. Files placed by attacker can influence the working directory and lead to malicious code execution...
Arbitrary Code Execution
SQLite is vulnerable to arbitrary code execution. A stack-based buffer overflow and integer overflow in the sqlite3VXPrintf function in printf.c allows an attacker to execute arbitrary code on the host OS due to improperly handling of precision and width values during floating-point conversions...
Arbitrary Code Execution
gdb is vulnerable to arbitrary code execution. The vulnerability exists through a stack buffer overflow when printing bad bytes in Intel Hex objects...
Denial Of Service (DoS)
MySQL is vulnerable to denial of service DoS due to flaws in managing Privileges...
SQL Injection
Apache SkyWalking is vulnerable to SQL injection. The function getLinearIntValues in H2MetricsQueryDAO.java does not sanitize the user-provided ID parameter to the SQL query StringBuilder when H2/MySQL/TiDB is used as storage, allowing an attacker to provide arbitrary string to construct maliciou...
Man-in-the-Middle (MitM)
httpd is vulnerable to man-in-the-middle MiTM. The vulnerability exists as it was discovered that the fix for CVE-2011-3368 released via RHSA-2011:1391 did not completely address the problem. An attacker could bypass the fix and make a reverse proxy connect to an arbitrary server not directly...
Arbitrary Code Execution
httpha-invoker is vulnerable to arbitrary code execution. The vulnerability exists as it was found that the invoker servlets, deployed by default via httpha-invoker, only performed access control on the HTTP GET and POST methods, allowing remote attackers to make unauthenticated requests by using...