39263 matches found
Information Disclosure
curl is vulnerable to Information Disclosure. An attacker may force the library to use an insecure clear-text HTTP step even when HTTPS is provided in the URL. The HSTS mechanism could be bypassed if the host name in the given URL first uses IDN characters that get replaced to ASCII counterparts ...
Denial Of Service (DoS)
cn.hutool:hutool-core is vulnerable to denial of service DoS attacks. A malicious user is able to cause excessive resource consumption due to improper decompression mechanisms in multiple functions of ZipUtil.java, resulting in an application crash...
Regular Expression Denial Of Service (ReDoS)
loader-utils is vulnerable to Regular Expression Denial Of Service ReDoS. The vulnerability is due to insecure regular expression in the url variable of the interpolateName function in interpolateName.js. A remote attacker can cause denial of service via malicious regex...
Denial Of Service (DoS)
libdhcp.so is vulnerable to Denial Of Service DoS. The vulnerability exists when the function optioncodehashlookup is called from addoption in option.c due to the option's refcount field which allows an attacker to crash the application via malicious input...
Denial Of Service (DoS)
libbind9.so is vulnerable to denial of service. The vulnerability exists because the DNSSEC verification code used in the library for the ECDSA algorithm leaks memory when the signature length is mismatched, allowing an attacker to cause an application crash...
Arbitrary Code Execution Via Authorization Bypass
Pebble Templates is vulnerable to arbitrary code execution via authorization bypass. The vulnerability exists in BlacklistMethodAccessValidator.java because the methods that are allowed to access by pebble are not properly handled which allows an attacker to bypass and execute arbitrary codes...
Use-After-Free
libexpat.so is vulnerable to use-after-free. The vulnerability is possible because the raw names will be pointing into the stored entity value instead of the parse buffer in doContent method of the file xmlparse.c, which doesn't release the consumed memory...
Denial Of Service (DoS)
snakeyaml is vulnerable to Denial Of Service DoS. The vulnerability exists in the Composer function of Composer.java as it does not properly restrict the nested depth limitation for collections, allowing an attacker to crash the application through the stack overflow by providing malicious yaml...
Insecure Token
An issue was found in fts5UnicodeTokenize in ext/fts5/fts5tokenize.c in Sqlite. A unicode61 tokenizer configured to treat unicode "control-characters" class Cc, was treating embedded nul characters as tokens. The issue was fixed in sqlite-3.34.0 and later...
Denial Of Service (DoS)
go is vulnerable to Denial Of Service DoS. The vulnerable exists in globWithLimit and Glob functions in glob.go because the the number of path separators allowed by an input to Glob is not separated which allows an attacker to cause an application crash...
Regular Expression Denial Of Service (ReDoS)
terser is vulnerable to regular expression denial of service. The vulnerability exists in index.js and evaluate.js because regular expressions used are not properly handled which allows an attacker to send crafted requests which causes an application crash...
Stored Cross-Site Scripting (XSS)
github.com/grafana/grafana is vulnerable to stored cross-site scripting attacks. The attack is possible because the library does not sanitize the runbookURL parameter of RuleDetailsActionButtons.tsx file, which allows remote authenticated attackers to inject and execute malicious javascript on th...
SQL Injection
django is vulnerable to SQL injection. An attacker is able to execute arbitrary SQL commands via the Trunc and Extract database functions which allows an attacker to execute arbitrary sql queries...
Use-After-Free
vim is vulnerable to use after free. The vulnerability exists in utfptr2char function in mbyte.c because the freed memory is used when searching for pattern in path which allows an attacker to cause a memory corruption causing an application crash...
Denial Of Service (DoS)
Apache HTTP Server is vulnerable to denial of service. The vulnerability exists due to a lack of sanitization with modsed in contexts where the input to modsed may be very large, modsed may make excessively large memory allocations and trigger an abort...
Denial Of Service (DoS)
MariaDB is vulnerable to denial of service. The vulnerability exists due to a mishandling of a pushdown from a HAVING clause to a WHERE clause...
Privilege Escalation
libarchive is vulnerable to privilege escalation. The vulnerability exists due to a lack of validation of the access control list ACL when extracting a maliciously crafted link...
Privilege Escalation
openjdk is vulnerable to privilege escalation. The vulnerability exists due to a lack of validation of authorization allowing an attacker to gain unauthorized access to critical data or complete access to all Oracle Java SE...
Denial Of Service (DoS)
Red Hat Product Security has rated this issue as having Moderate security impact and the issue is not currently planned to be addressed in future updates for Red Hat Enterprise Linux 6 and 7, hence, marked as Out-of-Support-Scope. For additional information, refer to the Issue Severity...
SQL Injection
moodle/moodle is vulnerable to SQL Injection. The vulnerability exists due to improper configuration in the getoptions function of awardcriteriaprofile.php which allows an attacker to inject malicious sql queries...
Improper Access Control
calibreweb is vulnerable to improper access control. The vulnerability exists because the server doesn't properly validate the user permissions when rendering HTML containing shelf name which allows an attacker to gain access to names of all private shelves...
Denial Of Service (DoS)
linux is vulnerable to denial of service. An attacker is able to crash the system by connected a maliciously crafted USB device via the drivers/net/wireless/marvell/mwifiex/usb.c...
Information Disclosure
moodle/moodle is vulnerable to information exposure. The vulnerability exists due to a lack of sanitization in output field in the lib.php file, allowing to read sensitive information in the system...
Remote Code Execution (RCE)
firefox is vulnerable to remote code execution. The vulnerability exists due to a lack of validation of access allowing and attacker to control the contents of an iframe sandboxed with allow-popups but not allow-scripts...
Denial Of Service (DoS)
Chrome is vulnerable to denial of service. The vulnerability exists due to a Use after free in Views...
Cross-Site Request Forgery (CSRF)
codeigniter4/framework is vulnerable to cross-site request forgery. When auto-routing is enabled, the library checks the request method in the controller method before processing. When auto-routing is disabled, avoid using $routes-add and instead use HTTP verbs in routes, allowing an attacker to...
Cross-site Request Forgery (CSRF)
github.com/filebrowser/filebrowser is vulnerable to cross-site request forgery. The vulnerability exists due to a lack of validation when creating a user with admin privilege allowing an attacker get access to filesystem via a maliciously crafted HTML webpage...
Privilege Escalation
linux-azure:hirsute is vulnerable to privilege escalation. aspeedlpcctrlmmap in drivers/soc/aspeed/aspeed-lpc-ctrl.c allows an attacker to access the Aspeed LPC control interface and to overwrite memory in the kernel and potentially execute privileges, aka CID-b49a0e69a7b1. This occurs because a...
Remote Code Execution (RCE)
chrome is vulnerable to remote code execution. The vulnerability exists due to an Insufficient validation of untrusted input in Intents...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. The vulnerability exists due to a use-after-free in drivers/infiniband/core/ucma.c...
Improper Input Validation
Java SE is vulnerable to improper input validation. An attacker can perform service disruption through the utility component in the oracle GraalVM enterprise edition...
Improper Input Validation
Java SE is vulnerable to improper input validation. an attacker can perform service disruption through the swing component in the oracle GraalVM enterprise edition...
Denial Of Service (DoS)
linux is vulnerable to denial of service. The vulnerability exists due to a lack of CPU resource in the Linux kernel tracing module functionality...
Denial Of Service (DoS)
python3.9 is vulnerable to denial of service. The vulnerability exists due to an improperly handled HTTP response in the HTTP client code of python which may allow a remote attacker, who controls the HTTP server, to make the client script enter an infinite loop, consuming CPU time...
Denial Of Service (DoS)
openssl is vulnerable to Denial Of Service DoS. The vulnerability exists due to the system calling the API function EVPPKEYdecrypt twice, which insecurely allocates the wrong buffer size on the second time...
Remote Code Execution (RCE)
xstream is vulnerable to remote code execution. The vulnerability exists due to the usage of an insecure default blacklist which does not cover all the excluded XStream security framework...
Denial Of Service (DoS)
firefox is vulnerable to denial of service. An exploitable crash is possible from incorrect instruction reordering during JIT optimization...
Information Disclosure
curl is vulnerable to information disclosure. The Metalink download causes credentials to be sent when downloading the metalink XML file...
Denial Of Service (DoS)
linux is vulnerable to denial of service. THe function qrtrrecvmsg in net/qrtr/qrtr.c allows attackers to obtain sensitive information from kernel memory because of a partially uninitialized data structure, aka CID-50535249f624...
Denial Of Service (DoS)
linux is vulnerable to denial of service. An issue was discovered in fs/fuse/fusei.h in the Linux kernel. A "stall on CPU" can occur because a retry loop continually finds the same bad inode, aka CID-775c5033a0d1...
Denial Of Service (DoS)
linux kernel is vulnerable to denial of service. The vulnerability exists due to a memory leak when a webcam device exists...
Access Restriction Bypass
Google Chrome is vulnerable to access restriction bypass. Insufficient policy enforcement in extensions in Google Chrome allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension...
Privilege Escalation
kernel-rt is vulnerable to privilege escalation. The vulnerability exists due to certain iSCSI data structures do not have appropriate length constraints or checks, and can exceed the PAGESIZE value which allows an unprivileged user to send a Netlink message that is associated with iSCSI, and has...
Remote Code Execution (RCE)
webkit2gtk is vulnerable to remote code execution. The vulnerability exists due to a logic issue...
Denial Of Service (DoS)
busybox is vulnerable to denial of service. The vulnerability exists due to the decompressgunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huftbuild result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data...
Directory Traversal
busybox is vulnerable to directory traversal. A remote attacker is able to perform a symlink attack to gain access to files outside of the current working directory...
Privilege Escalation
wpasupplicant is vulnerable to privilege escalation. The vulnerability exists in p2pcopyclientinfo of p2p.c, through a possible out of bounds write due to a missing bounds check...
Privilege Escalation
kernel is vulnerable to privilege escalation. An attacker may exploit a use-after-free in the ALSA driver by supplying a malicious USB Sound device with zero interfaces that is mishandled in usbaudioprobe in sound/usb/card.c...
Arbitrary File Write
django is vulnerable to arbitrary file write. The vulnerability exists through the django.utils.archive.extract function, used by startapp --template and startproject --template, to extract files with absolute paths or relative paths, out of the application root directory...
Man-in-the-Middle (MitM)
node-sass is vulnerable to man-in-the-middle attack. The certificate validation when requesting binaries is disabled even if the user does not specify an alternative download path. This allows for a man-in-the-middle attacker to intercept and modify network traffic, and potentially introduce...