38790 matches found
Cookie Injection
react/http is vulnerable to cookie injection. The vulnerability exists due to a lack of sanitization in the decode function in urldecode in Message/ServerRequest.php allowing an attacker to counterfeit cookies...
Deserialization Of Untrusted Data
apache-geode is vulnerable to deserialization of untrusted data. The vulnerability exists because the serialization filtering is not properly configured for JMX/RMI which allows an attacker to to inject and execute arbitrary code through the untrusted data...
Out-of-bounds Write
vim:sid is vulnerable to Out-of-bounds Write. It causes a memory access error when substitute expression changes window...
Remote Code Execution
laravel/laravel is vulnerable to remote code execution. The vulnerability exists due to an insecure deserialization of trusted data which allows an attacker to inject a malicious code via an unserialize pop chain...
Heap-based Buffer Overflow
vim is vulnerable to heap-based buffer overflow. The vulnerability exists because the lisp indenting does not check for NULL earlier which causes an overflow...
Man-in-the-Middle (MitM)
curl is vulnerable to man-in-the-middle attacks. The vulnerability exists due to the lack of message verification in krb5, allowing an attacker to inject data to the client...
Integer Overflow
kernel-rt is vulnerable to integer overflow. No code depends on this integer overflow so it is unlikely that the vulnerability can be used for anything apart from crashing the system. An issue was discovered in the Linux kernel 4.4 through 5.7.1. drivers/tty/vt/keyboard.c has an integer overflow ...
Privilege Escalation
kernel is vulnerable to privilege escalation. There is a possible linked list corruption in uvcscanchainforward of uvcdriver.c due to an unusual root cause which could lead to a local escalation of privileges in the library with no additional execution privileges needed...
Heap-Based Buffer Overflow
An issue was discovered in the Linux kernel before 5.16.12. drivers/net/usb/sr9700.c allows attackers to obtain sensitive information from heap memory via crafted frame lengths from a device...
Server-side Request Forgery (SSRF)
github.com/hoppscotch/proxyscotch is vulnerable to server-side request forgery. When the interceptor mode is set to proxy, An attacker can make HTTP requests to untrusted URLs through the main function of server.go and gain access to sensitive information...
Privilege Escalation
virtualbox is vulnerable privilege escalation. The vulnerability exists due to a lack of validation of authentication...
Memory Corruption
firefox is vulnerable to memory corruption. The application crashes when a compromised content process sent an unexpected number of WebAuthN extensions in a register command to the parent process...
SQL Injection
moodle/moodle is vulnerable to SQL Injection. The vulnerability exists due to improper configuration in the getoptions function of awardcriteriaprofile.php which allows an attacker to inject malicious sql queries...
XML External Entity (XXE)
liquibase-core is vulnerable to XML external entity attacks. The XMLChangeLogSAXParser function of XMLChangeLogSAXParser.java does not disable access to external entities by default, allowing an attacker to submit a malicious XML document to perform requests on behalf of the server...
Denial Of Service (DoS)
libsolv.so is vulnerable to denial of service. An attacker can cause an application crash through the heap-overflow in the propagate function of solver.c...
Denial Of Service (DoS)
php7 and php8 are vulnerable to denial of service...
Use After Free
chrome is vulnerable to use-after free. The vulnerability exists in v8 allowed a remote attacker to potentially crash via a crafted HTML page...
Inappropriate Implementation In Navigation
Chrome has inappropriate implementation in navigation. The vulnerability exists due to an insecure function in google chrome allowing an attacker to compromise the system...
CRLF Injection
phpservermon/phpservermon is vulnerable to CRLF injection. The vulnerability exists because of the misconfiguration in nginx that allows a malicious attacker to gain CSRF token and set fake cookies...
Remote Code Execution (RCE)
nss is vulnerable to remote code execution. The vulnerability exists due to a flaw in the way NSS verifies certificates allowing an attacker to pose as an SSL/TLS server to trigger this issue in a client application compiled with NSS when it tries to initiate an SSL/TLS connection...
Improper Input Validation
pip suffers from improper input validation. The library does not properly handle unicode separators in git references. An attacker can use this flaw to install a different revision on a repository...
Improper Input Validation
Java SE is vulnerable to improper input validation. An attacker can perform service disruption through the utility component in the oracle GraalVM enterprise edition...
Authentication Bypass
github.com/grafana/grafana is vulnerable to authentication bypass. The library does not properly restrict access to literal paths, allowing unauthenticated users to modify data...
Denial Of Service (DoS)
RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...
Denial Of Service(DoS)
netty-codec is vulnerable to denial of service. The vulnerability exists due to lack of allocation size restriction on the decompressed output data in the Snappy frame decoder function, leading to an OOME...
Remote Code Execution (RCE)
qt5-qtwebengine is vulnerable to remote code execution. The vulnerability exists due to a lack of sanitization which allows an attacker to execute arbitrary code inside a sandbox via a crafted HTML page...
Remote Code Execution (RCE)
xstream is vulnerable to remote code execution. The vulnerability exists due to the usage of an insecure default blacklist which does not cover all the excluded XStream security framework...
Remote Code Execution (RCE)
GNU is vulnerable to Remote Code Execution RCE. The vulnerability exists due to an integer overflow that triggers an out-of-bounds heap write...
Denial Of Service (DoS)
glib2 is vulnerable to denial of service. When gbytearraynewtake is called with a buffer of 4GB or more on a 64-bit platform, an integer overflow occurs as the length would be a truncated modulo 232, causing unintended length truncation...
Denial Of Service (DoS)
openexr is vulnerable to denial of service. An integer overflow in OpenEXR/IlmImf/ImfHuf.cpp allows an attacker to crash the application...
Denial Of Service (DoS)
linux is vulnerable to denial of service. THe function qrtrrecvmsg in net/qrtr/qrtr.c allows attackers to obtain sensitive information from kernel memory because of a partially uninitialized data structure, aka CID-50535249f624...
Denial Of Service (DoS)
linux is vulnerable to denial of service. An issue was discovered in fs/fuse/fusei.h in the Linux kernel. A "stall on CPU" can occur because a retry loop continually finds the same bad inode, aka CID-775c5033a0d1...
Privilege Escalation
linux is vulnerable to privilege escalation. The vulnerability exists due to a refcount leak in llcpsockbind causing use-after-free...
Denial Of Service (DoS)
policykit-1 is vulnerable to denial of service. The vulnerability exists due to the system unable to get a unique uid and pid of the process and it cannot verify the privileges of the requesting process...
Regular Expression Denial Of Service (ReDoS)
ws is vulnerable to regular expression denial of service. An attacker is able to cause excessive CPU consumption that can lead to an application crash by submitting a malicious value of Sec-Websocket-Protocol...
Denial Of Service (DoS)
linux kernel is vulnerable to denial of service. The vulnerability exists due to a memory leak when a webcam device exists...
Information Disclosure
kernel is vulnerable to information disclosure. An out-of-bounds speculation on pointer arithmetic in kernel/bpf/verifier.c allows side-channel attacks that defeat Spectre mitigations and allows an attacker to obtain confidential information from kernel memory...
Denial Of Service (DoS)
unbound is vulnerable to denial of service. Unbound allows an out-of-bounds write in sldnsbgettokenpar...
Information Disclosure
postgresql is vulnerable to information disclosure. An attacker can read arbitrary bytes of server memory using the UPDATE ... RETURNING statements on a purpose-crafted partitioned table...
Denial Of Service (DoS)
openssl is vulnerable to denial of service. A NULL pointer dereference occurs when parsing a malicious renegotiation ClientHello message. This allows an attacker to remotely crash the application...
Denial Of Service (DoS)
pillow is vulnerable to denial of service DoS. The vulnerability exists through a heap-based buffer overflow during the decoding of a malicious YCbCr file in RGBA mode. This CVE is due to an incomplete fix for CVE-2020-35654...
Arbitrary Code Execution
chromium is vulnerable to arbitrary code execution. A use-after-free in Blink allows a remote attacker to exploit a heap corruption via a malicious HTML page...
Phishing Attacks
curl is vulnerable to phishing attacks. malicious server can redirect FTP to malicious host via PASV reponse...
Unintended Write Access
An issue was discovered in splithugepmd in mm/hugememory.c in the Linux kernel before 5.7.5. The copy-on-write implementation can grant unintended write access because of a race condition in a THP mapcount check, aka CID-c444eb564fb1...
Remote Code Execution (RCE)
drupal is vulnerable to remote code execution RCE. The vulnerability exists as it does not properly sanitize certain filenames on uploaded files, which can lead to files being interpreted as the incorrect extension and served as the wrong MIME type or executed as PHP for certain hosting...
Cache Poisoning
find-my-way is vulnerable to web cache poisoning. The vulnerability exists when it accepts the Accept-Version header by default, and if the versioned routes are not used, it leads to a denial of serviceDoS...
Denial Of Service (DoS)
sqlite is vulnerable to denial of service DoS.Use-after-free in fts3EvalNextRow in ext/fts3/fts3.c extension module in the way it implemented the snippet function.This flaw allows an attacker who can execute SQL statements to crash the application or potentially execute arbitrary code...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. It is possible due to uninitialized kernel data leak in userspace coredumps...