39640 matches found
Heap-based Buffer Overflow
wireshark is vulnerable to Heap-based Buffer Overflow. The vulnerability is caused due to a component NetScreen file parser which could crash. An attacker can crash Wireshark by injecting a malformed packet onto the wire or making a user to read a malformed packet trace file...
Denial Of Service (DoS)
gitlab is vulnerable to Denial of Service DoS. This vulnerability allows an attacker to exhaust worker resources in the server by opening an HTTP/2 connection with an initial window size of 0...
Remote Code Execution (RCE)
nilsteampassnet/teampass is vulnerable to Remote Code Execution RCE. The vulnerability exists due to lack of restrictions of certain input fields which are directly inserted into a tp.config.php which allows an attacker to inject and execute malicious PHP code...
Denial Of Service (DoS)
openssl is vulnerable to Denial of Service DoS. The vulnerability causes applications using 'OBJobj2txt' directly, or use any OpenSSL subsystem with no message size limit to experience notable to very long delays when processing those messages, which may lead to a Denial of Service...
Path Traversal
starlette is vulnerable to Path Traversal. A remote attacker is able to gain access to sensitive files when the file or directory is exposed via StaticFiles. The vulnerability is exploitable if the file or directory starts with the same name as the StaticFiles directory...
Authentication Bypass
github.com/GoogleCloudPlatform/esp-v2 is vulnerable to Authentication Bypass. The vulnerability exists because the library does not properly filter the malicious HTTP headers, which allows an attacker to send maliciously crafted X-HTTP-Method-Override header values to bypass JWT authentication in...
Denial Of Service (DoS)
net.minidev, json-smart is vulnerable to Denial Of Service DoS. The vulnerability exists because there is no nested depth checks for deeply nested JSON arrays or objects, which allows an attacker to crash the application via a malicious array with deeply nested elements...
Authentication Bypass
curl is vulnerable to Authentication Bypass. The library would reuse a previously created connection even if the GSS delegation CURLOPTGSSAPIDELEGATION option had been changed, but this setting was left out from configuration match checks, affecting krb5/kerberos/negotiate/GSSAPI transfers...
User Impersonation
keycloak-services is vulnerable to User Impersonation. The vulnerability is due to the OpenID Connect user authentication because the session UUID is not properly bound to the user session, allowing an attacker to obtain a certain piece of information from a user request in the same realm and...
Type Confusion
sequelize is vulnerable to Type Confusion. A remote attacker is able to inject malicious content due to improper parameter filtering, which results in type confusion, leading to code injection...
Out-of-bounds Write
kernel is vulnerable to Out-of-bounds Write. The vulnerability exists because the kernel debugger could be used to bypass UEFI Secure Boot restrictions. An attacker with access to a serial port could trigger the debugger and allow read and write access...
Use-after-free
kernel is vulnerable to Use-after-free. A user is able to trigger concurrent calls of PCM hwparams and hwfree ioctls causing race condition to happen inside ALSA PCM for other ioctls. This flaw allows a local user to crash or potentially escalate their privileges on the system...
Privilege Escalation
device-mapper-multipath is vulnerable to privilege escalation. The library allows local users to obtain root access, exploited alone or in conjunction with CVE-2022-41973. Local users that are able to write to UNIX domain sockets can bypass access controls and manipulate the multipath setup. This...
Denial Of Service (DoS)
woodstox-core is vulnerable to Denial Of Service DoS. The vulnerability exists because the FullDTDReader.java does not properly limit the recursion limit for DTD parsing, allowing an attacker to cause an application crash through StackOverflow by passing a malicious input if DTD support is enable...
Information Disclosure
github.com/grafana/grafana is vulnerable to information disclosure. The vulnerability is due to the SendResetPasswordEmail function in password.go exposing if a user does not exist in the database by an error message...
Man In The Middle (MitM)
samba:xenial is vulnerable to man-in-the-middle. A flaw was found in samba's Heimdal KDC implementation, versions 4.8.x up to when used in AD DC mode. A man in the middle attacker could use this flaw to intercept the request to the KDC and replace the user name principal in the request with any...
Path Traversal
twig/twig is vulnerable to path traversal. The vulnerability exists in findTemplate function of FilesystemLoader.php because the template loading directories are not properly configured which allows an attacker to load templates outside the configured directory...
Denial Of Service (DoS)
Jettison is vulnerable to denial of service. The vulnerability exists in nextValue function in JSONTokener.java where the attacker may supply content that causes the parser to crash by out of memory if the parser is running on user supplied input...
Privilege Escalation
linux is vulnerable to Privilege Escalation. The vulnerability exists in nftablesapi.c function in nftables cross-table in the linux kernel which will allow a local privileged attacker to cause a use-after-free problem at the time of table deletion...
Use-After-Free
libexpat.so is vulnerable to use-after-free. The vulnerability is possible because the raw names will be pointing into the stored entity value instead of the parse buffer in doContent method of the file xmlparse.c, which doesn't release the consumed memory...
Cross-site Scripting (XSS)
keycloak-core is vulnerable to cross-site scripting. An attacker can inject and execute malicious javascript through the SAML protocol mapper when the UPLOADSCRIPTS feature is disabled...
Denial Of Service (DoS)
go is vulnerable to Denial Of Service DoS. The vulnerable exists in globWithLimit and Glob functions in glob.go because the the number of path separators allowed by an input to Glob is not separated which allows an attacker to cause an application crash...
Stored Cross-Site Scripting (XSS)
github.com/grafana/grafana is vulnerable to stored cross-site scripting attacks. The attack is possible because the library does not sanitize the runbookURL parameter of RuleDetailsActionButtons.tsx file, which allows remote authenticated attackers to inject and execute malicious javascript on th...
Insecure Cryptography
ujson is vulnerable to insecure cryptography. The vulnerability exists in a JSON string contains escaped surrogate characters which are not part of a proper surrogate pair, the library may decode those characters incorrectly which allows remote attackers to cause unintended behavior in the...
Man-in-the-Middle (MitM)
curl is vulnerable to man-in-the-middle attacks. The vulnerability exists due to the lack of message verification in krb5, allowing an attacker to inject data to the client...
Use-After-Free
vim is vulnerable to use after free. The vulnerability exists in utfptr2char function in mbyte.c because the freed memory is used when searching for pattern in path which allows an attacker to cause a memory corruption causing an application crash...
Log Injection
org.apache.sling:org.apache.sling.api and org.apache.sling:org.apache.sling.commons.log is vulnerable to log injection. A remote attacker with privileges to forge logs, is able to inject fake logs and potentially corrupt log files, causing unintended behavior in the the system...
Denial Of Service (DoS)
MariaDB is vulnerable to denial of service. The vulnerability exists due to an incorrect handling of withwindowfunc=true for a subquery...
Use-after-Free
WebKitGTK is vulnerable to a use-after-free. The vulnerability is in WebCore::TextureMapperLayer::setContentsLayer in WebCore/platform/graphics/texmap/TextureMapperLayer.cpp...
Heap-Based Buffer Overflow
An issue was discovered in the Linux kernel before 5.16.12. drivers/net/usb/sr9700.c allows attackers to obtain sensitive information from heap memory via crafted frame lengths from a device...
Denial Of Service (DoS)
linux is vulnerable to denial of service. The vulnerability exists in the drivers/usb/gadget/composite.c due to the lack of validation in the interface OS descriptor requests, allowing an attacker to cause an application crash...
Token Validation Bypass
Google OAuth Client is vulnerable to token validation bypass. The function IdTokenVerifier validate any token with custom payload as valid token if the token is properly signed...
Denial Of Service (DoS)
openjdk is vulnerable to denial of service attacks. The vulnerability exists in Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code which allows unauthenticated attacker with network access via multiple...
Memory Corruption
firefox is vulnerable to memory corruption. The application crashes when a compromised content process sent an unexpected number of WebAuthN extensions in a register command to the parent process...
Denial Of Service (DoS)
linux is vulnerable to denial of service. An attacker is able to crash the system by connected a maliciously crafted USB device via the drivers/net/wireless/marvell/mwifiex/usb.c...
Remote Code Execution (RCE)
rh-dotnet is vulnerable to Remote Code Execution Vulnerability...
Privilege Escalation
MariaDB is vulnerable to Privilege Escalation. The vulnerability exists due to a lack of sanitization of a user-supplied string before using it as a format specifier...
Denial Of Service (DoS)
libsolv.so is vulnerable to denial of service DoS attacks. A remote attacker is able to cause heap-based buffer overflow in resolveweak function in src/solver.c resulting in a system crash...
Cross-site Scripting (XSS)
WordPress is vulnerable to cross site scripting. The vulnerability exists due to an Inappropriate implementation allowed a remote privileged authenticated users to abuse content security policy...
Denial Of Service (DoS)
numpy is vulnerable to denial of service. The vulnerability exists due to the insecure string comparison in convertfromstr of descriptor.c, allowing an attacker to crash the application...
Remote Code Execution (RCE)
thunderbird and firefox are vulnerable to remote code execution. The vulnerability exists due to a lack of sanitization of the sandbox's script allowing embedding of additional content...
Denial Of Service (DoS)
linux kernal ipc is vulnerable to denial of service. The vulnerability exists due to a memory overflow in the memcg subsystem which allows a attacker to cause an application crash...
Information Disclosure
firefox is vulnerable to information disclosure. The vulnerability exists due to a lack of sanitization which allows a Javascript alert dialog with arbitrary contents to be displayed over top an uncontrolled webpage...
Spoofing Attack
firefox is vulnerable to spoofing attack. The vulnerability exists due to the system entering fullscreen mode without notification or warning to the user...
Denial Of Service (DoS)
linux is vulnerable to denial of service. The vulnerability exists due to a lack of CPU resource in the Linux kernel tracing module functionality...
Server-Side Forgery Request
xstream is vulnerable to Server-Side Forgery Request. An attacker can manipulate the processed input stream and replace or inject objects, that result in a server-side forgery request...
Remote Code Execution (RCE)
xstream is vulnerable to remote code execution. The vulnerability exists due to the usage of an insecure default blacklist which does not cover all the excluded XStream security framework...
Remote Code Execution (RCE)
xstream is vulnerable to remote code execution. The vulnerability exists due to the usage of an insecure default blacklist which does not cover all the excluded XStream security framework...
Privilege Escalation
kernel is vulnerable to privilege escalation. The vulnerability exists due to a race condition in the SCTP sockets net/sctp/socket.c which allows an attacker with network service privileges to escalate to root or from the context of an unprivileged user directly if a BPFCGROUPINETSOCKCREATE is...