39640 matches found
Remote Code Execution (RCE)
xstream is vulnerable to remote code execution. The vulnerability exists due to the usage of an insecure default blacklist which does not cover all the excluded XStream security framework...
Privilege Escalation
kernel is vulnerable to privilege escalation. The vulnerability exists due to a race condition in the SCTP sockets net/sctp/socket.c which allows an attacker with network service privileges to escalate to root or from the context of an unprivileged user directly if a BPFCGROUPINETSOCKCREATE is...
Denial Of Service (DoS)
openexr is vulnerable to denial of service. An integer overflow in OpenEXR/IlmImf/ImfHuf.cpp allows an attacker to crash the application...
Denial Of Service (DoS)
wireshark is vulnerable to denial of service. The vulnerability exists due to excessive memory consumption in MS-WSP dissector...
Information Disclosure
jetty-servlets is vulnerable to information disclosure. Lack of proper handling of requests to the ConcatServlet with a doubly encoded path allows an attacker to access protected resources within the WEB-INF directory. For example, sending /concat?/%2557EB-INF/web.xml can retrieve the web.xml fil...
Denial Of Service (DoS)
linux is vulnerable to denial of service. An issue was discovered in fs/fuse/fusei.h in the Linux kernel. A "stall on CPU" can occur because a retry loop continually finds the same bad inode, aka CID-775c5033a0d1...
Privilege Escalation
kernel is vulnerable to privilege escalation. A refcount leak in llcpsockconnect results in a use-after-free bug which can lead to privilege escalation...
Billion Laugh Attack
libxml2:sid is vulnerable to billion laugh attack via parameter entities expansion and following the line of the billion laugh attack...
Denial Of Service (DoS)
linux-firmware is vulnerable to denial of service. Linux kernel allows a privileged user to potentially enable an escalation of privilege via local access. A flaw was found in the Linux kernel. An integer overflow in the firmware for some IntelR Graphics Drivers may allow a privileged user to...
Information Disclosure
postgresql is vulnerable to information disclosure. An attacker can read arbitrary bytes of server memory using the UPDATE ... RETURNING statements on a purpose-crafted partitioned table...
Denial Of Service (DoS)
pydantic is vulnerable to denial of service. An attacker is able to exploit the vulnerability by passing either infinity , inf or floatinf or their negatives to datetime or data fields causing the validaton to run in loops with 100% CPU usage...
Remote Code Execution
redis is vulnerable to remote code execution. An integer overflow occurs during the execution of a STRALGO LCS command, resulting in heap corruption and potential code execution...
Privilege Escalation
kernel-rt is vulnerable to privilege escalation. The vulnerability exists due to certain iSCSI data structures do not have appropriate length constraints or checks, and can exceed the PAGESIZE value which allows an unprivileged user to send a Netlink message that is associated with iSCSI, and has...
Remote Code Execution (RCE)
webkit2gtk is vulnerable to remote code execution. The vulnerability exists due to a logic issue...
Denial Of Service (DoS)
busybox is vulnerable to denial of service. The vulnerability exists due to the decompressgunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huftbuild result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data...
Denial Of Service (DoS)
pillow is vulnerable to denial of service DoS. The vulnerability exists through a heap-based buffer overflow during the decoding of a malicious YCbCr file in RGBA mode. This CVE is due to an incomplete fix for CVE-2020-35654...
Insecure Anti-CSRF Tokens
myfaces-impl uses an insecure cryptographic random for anti-CSRF tokens. The usage of the insecure tokens would allow an attacker to predict subsequent anti-CSRF token values and successfully perform requests on behalf of the users...
Directory Traversal
busybox is vulnerable to directory traversal. A remote attacker is able to perform a symlink attack to gain access to files outside of the current working directory...
Privilege Escalation
wpasupplicant is vulnerable to privilege escalation. The vulnerability exists in p2pcopyclientinfo of p2p.c, through a possible out of bounds write due to a missing bounds check...
Denial Of Service (DoS)
php7 is vulnerable to denial of service. PHP will crash with a SIGSEGV whenever an XML is provided to the SoapClient query function without an existing field...
Buffer Overflow
glibc is vulnerable to buffer overflow. The vulnerability occurs when processing invalid multi-byte input sequences in the EUC-KR encoding...
Arbitrary File Write
django is vulnerable to arbitrary file write. The vulnerability exists through the django.utils.archive.extract function, used by startapp --template and startproject --template, to extract files with absolute paths or relative paths, out of the application root directory...
Escalation Of Privilege
In Apache HTTP Server 2.4 is vulnerable to escalation of privilege. The vulnerability exist because of a bug in modssl that uses per-location client certificate verification which allows a client to bypass configured access control restrictions...
Malicious Code Execution
postgresql is vulnerable to malicious code execution. An attacker having permission to create non-temporary objects in at least one schema can execute arbitrary SQL functions under the identity of a superuser. The highest threat from this vulnerability is to data confidentiality and integrity as...
Heap Buffer Overflow
FreeType is vulnerable to heap-based buffer overflow due to integer truncation in LoadSBitPng...
Out-of-bounds Write
kernel is vulnerable to out-of-bounds write. It is possible due to a flaw in ext4xattrsetentry in fs/ext4/xattr.c...
Use-after-free
kernel is vulnerable to use-after-free. Unprivileged users are able to create RAW sockets in AFIEEE802154 network protocol...
Heap Buffer Overflow
FreeType is vulnerable to heap-based buffer overflow due to integer truncation in LoadSBitPng...
Privilege Escalation
libvirt is vulnerable to arbitrary code execution. A double free memory issue affects the polkit access control driver and allows clients connecting to the read-write socket with limited ACL permissions to exploit the vulnerability to crash the libvirt daemon or potentially escalate their...
Arbitrary Code Execution
WebKitGTK+ is vulnerable to arbitrary code execution. An attacker can input malicious web content to lead to memory corruptions and arbitrary code execution...
Use-after-free
libslirp is vulnerable to use-after-free. It is due to a flaw in ipreass in ipinput.c...
Spoofable Frames
linux is vulnerable to spoofable network frames. The vulnerability exists through the reinstallation of the Integrity Group Temporal Key IGTK during the group key handshake, allowing an attacker within radio range to spoof frames from access points to clients...
Denial Of Service (DoS)
graphicsmagick:xenial is vulnerable to denial of service DoS. An allocation failure vulnerability was found in the function ReadTIFFImage in coders/tiff.c, which allows attackers to cause a denial of service via a crafted file, because file size is not properly used to restrict scanline, strip, a...
Denial Of Service (DoS)
MySQL is vulnerable to denial of service DoS due to flaws in managing Privileges...
Exposed API
foreman does not properly restrict access to APIs. A remote attacker is able to access arbitrary hosts via an API request...
Insecure Direct Object Reference
telerik.web.ui is vulnerable to insecure direct object reference. User input is not validated and used directly by RadAsyncUpload without modification or validation. This can potentially result in arbitrary file uploads and executino of arbitrary code...
Path Traversal
jsf-impl: Mojarra is vulnerable to Path traversal. It is possible via either the loc parameter or the con parameter, incomplete fix of CVE-2018-14371...
Server Side Request Forgery (SSRF)
github.com/kubernetes/kubernetes is vulnerable to Server Side Request Forgery SSRF. An attacker with a privilege to create a pod with certain built-in Volume types GlusterFS, Quobyte, StorageFS, ScaleIO or to create a StorageClass can cause an authenticated user to leak the resources from the...
Arbitrary Code Execution
qemu-kvm-rhev is vulnerable to arbitrary code execution. The vulnerability exists in slirp where an out of bounds OOB buffer access while emulating tcp protocols in tcpemu...
Man-in-the-Middle (MitM)
kenrel is vulnerable to man-in-the-middle attack. Certain ipv6 protocols are not encrypted over ipsec tunnel, allowing an attacker to intercept and modify network traffic...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. Memory leak in the kernelreadfile function in fs/exec.c allows an attacker to cause a denial of service...
Arbitrary Directory Access
salt allows arbitrary directory access. The salt-master process in ClearFuncs class allows access to some methods that improperly sanitize paths and the methods allow authenticated users to access arbitrary directories...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. A NULL pointer dereference flaw was found in the way the Linux kernel's key management facility handled user-defined key types. A local, unprivileged user could use the keyctl utility to cause a denial of service...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists as an integer signedness error in nextpidmap could allow a local, unprivileged user to cause a denial of service...
Denial Of Service (DoS)
The kernel is vulnerable to denial of service DoS. Due to flaws in the AGPGART driver implementation when handling certain IOCTL commands, it allows a local user to cause a denial of service or escalate their privileges...
Arbitrary Code Execution
firefox is vulnerable to arbitrary code execution. The vulnerability exists as an integer underflow flaw was found in the way Firefox handled large JavaScript regular expressions. A web page containing malicious JavaScript could cause Firefox to access already freed memory, causing Firefox to cra...
Denial Of Service (DoS)
samba is vulnerable to denial of service. It was found that the fix for CVE-2010-0547, provided by the Samba rebase in RHBA-2011:0054, was incomplete. The mount.cifs tool did not properly handle share or directory names containing a newline character, allowing a local attacker to corrupt the mtab...
Arbitrary Code Execution
openoffice.org is vulnerable to arbitrary code execution. The vulnerability exists as an array index error and an integer signedness error were found in the way OpenOffice.org parsed certain Rich Text Format RTF files. An attacker could use these flaws to create a specially-crafted RTF file that,...
Arbitrary Code Execution
thunderbird is vulnerable to arbitrary code execution. The vulnerability exists as a double free flaw was found in the way Thunderbird handled "application/http-index-format" documents. A malformed HTTP response could cause Thunderbird to execute arbitrary code with the privileges of the user...