39263 matches found
Escalation Of Privilege
In Apache HTTP Server 2.4 is vulnerable to escalation of privilege. The vulnerability exist because of a bug in modssl that uses per-location client certificate verification which allows a client to bypass configured access control restrictions...
Unintended Write Access
An issue was discovered in splithugepmd in mm/hugememory.c in the Linux kernel before 5.7.5. The copy-on-write implementation can grant unintended write access because of a race condition in a THP mapcount check, aka CID-c444eb564fb1...
Denial Of Service (DoS)
firefox is vulnerable to denial of service DoS. The vulnerability exists when the Compact method was called on an nsTArray, allowing the array to be reallocated without updating other pointers...
Arbitrary Code Execution
spamassassin is vulnerable to arbitrary code execution. An attacker can send malicious configuration files to run system commands without any output or errors...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. The vulnerability exists due to a memory leak in af9005identifystate function in dvb-usb/af9005.c which allows an attacker to cause an application crash...
Cross-site Scripting (XSS)
github.com/grafana/grafana is vulnerable to cross-site scripting XSS. The vulnerability exists when specifying series alias such as test data or elastic search, which allows special characters, caused by the bs-typeahead directive that evals the select options passed to it...
Use-after-free
kernel is vulnerable to use-after-free. Unprivileged users are able to create RAW sockets in AFIEEE802154 network protocol...
Validation Bypass
httpclient is vulnerable to validation bypass. A malformed authority component in the request URIs that is passed to the library as java.net.URI object would result in the request execution for a wrong target host...
Cross-Site Scripting (XSS)
dompurify is vulnerable to cross-site scripting XSS. A mutation XSS vulnerability exists as a serialize-parse roundtrip does not return the original DOM tree, causing a namespace change from HTML to MathML via FORM elements...
Information Leakage
FreeRADIUS is vulnerable to Information leak. It is possible due to aborting when needing more than 10 iterations...
Arbitrary Code Execution
webkitgtk4 is vulnerable to arbitrary code execution. The vulnerabiltiy exists through memory errors...
Information Disclosure
webkitgtk4 is vulnerable to information disclosure. The vulnerability exists through the drawing of web page elements that causes browsing history to be revealed...
Arbitrary Code Execution
webkitgtk4 is vulnerable to arbitrary code execution. The vulnerability exists through memory corruption when processing web content...
Information Disclosure
busybox is vulnerable to information disclosure. An out of bounds read in the udhcp components allows a remote attacker to leak confidential information from the stack by sending malicious DHCP messages...
Arbitrary Code Execution
grub2 is vulnerable to arbitrary code execution. The vulnerability exists through a crafted grub.cfg file during boot process...
Denial Of Service (DoS)
unbound is vulnerable to Denial of Service DoS. The attack exists because of an Insufficient Control of Network Message Volume, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records...
Arbitrary Code Execution
sqlite is vulnerable to arbitrary code execution. The vulnerability exists as the getNodeSize function in ext/rtree/rtree.c in SQLite through 3.19.3, as used in GDAL and other products, mishandles undersized RTree blobs in a crafted database, leading to a heap-based buffer over-read or possibly...
Denial Of Service (DoS)
Mozilla Firefox is vulnerable to denial of service attacks. It happens due to memory safety bugs fixed in Firefox...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. A NULL pointer dereference flaw was found in the way the Linux kernel's key management facility handled user-defined key types. A local, unprivileged user could use the keyctl utility to cause a denial of service...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists as the Linux kernel in the way splitting two extents in ext4extconverttoinitialized worked. A local, unprivileged user with access to mount and unmount ext4 file systems could use this flaw to cause a denial of service...
Denial Of Service (DoS)
The kernel is vulnerable to denial of service DoS. Due to flaws in the AGPGART driver implementation when handling certain IOCTL commands, it allows a local user to cause a denial of service or escalate their privileges...
Information Disclosure
kernel is vulnerable to information disclosure. A missing initialization flaw in the XFS file system implementation could lead to an information leak...
Arbitrary Code Execution
openoffice.org is vulnerable to arbitrary code execution. The vulnerability exist as a heap-based buffer overflow flaw was found in the way OpenOffice.org parsed certain Microsoft Office PowerPoint files. An attacker could use this flaw to create a specially-crafted Microsoft Office PowerPoint fi...
Arbitrary Code Execution
thunderbird is vulnerable to arbitrary code execution. The vulnerability exists as a double free flaw was found in the way Thunderbird handled "application/http-index-format" documents. A malformed HTTP response could cause Thunderbird to execute arbitrary code with the privileges of the user...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. Missing sanity checks were found in setupargpages in the Linux kernel. When making the size of the argument and environment area on the stack very large, it could trigger a BUGON, resulting in a local denial of service...
Arbitrary Code Execution
firefox is vulnerable to arbitrary code execution. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox...
Remote Code Execution (RCE)
Perl is vulnerable to Remote Code Execution RCE. The Safe module did not properly restrict the code of implicitly called methods such as DESTROY and AUTOLOAD on implicitly blessed objects returned as a result of unsafe code evaluation. These methods could have been executed unrestricted by Safe...
Arbitrary Code Execution
freetype is vulnerable to arbitrary code execution. The vulnerability exists through an array index error was found in the way the FreeType font rendering engine processed certain PostScript Type 42 font files. If a user loaded a specially-crafted font file with an application linked against...
Arbitrary Code Execution
thunderbird is vulnerable to arbitrary code execution. Several flaws were found in the processing of malformed HTML mail content. An HTML mail message containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running...
Arbitrary Code Execution
firefox is vulnerable to arbitrary code execution. The vulnerability exists as a web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox...
Information Disclosure
libpng is vulnerable to information disclosure. The vulnerability exists through the libpng library processed 1-bit interlaced PNG images. An attacker could create a specially-crafted PNG image that could cause an application using libpng to disclose uninitialized memory...
Denial Of Service (DoS)
The kernel is vulnerable to denial of service DoS. A flaw was found in each of the following Intel PRO/1000 Linux drivers in the Linux kernel: e1000 and e1000e. A remote attacker using packets larger than the MTU could bypass the existing fragment check, resulting in partial, invalid frames being...
Denial Of Service (DoS)
The kernel is vulnerable to Denial of Service DoS.Due to a NULL pointer dereference flaw was found in each of the following functions in the Linux kernel: pipereadopen, pipewriteopen, and piperdwropen. When the mutex lock is not held, the ipipe pointer could be released by other processes before ...
Man-in-the-Middle (MitM)
openssh is vulnerable to man-in-the-middle attack. A flaw was found in the SSH protocol. An attacker able to perform a man-in-the-middle attack may be able to obtain a portion of plain text from an arbitrary ciphertext block when a CBC mode cipher was used to encrypt SSH communication. This updat...
Denial Of Service (DoS)
The kernel is vulnerable to denial of service DoS.The ADDRCOMPATLAYOUT and MMAPPAGEZERO flags were not cleared when a setuid or setgid program was executed. A local, unprivileged user could use this flaw to bypass the mmapminaddr protection mechanism and perform a NULL pointer dereference attack,...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists as the Realtek r8169 Ethernet driver in the Linux kernel. This driver allowed interfaces using this driver to receive frames larger than what could be handled. This could lead to a remote denial of service or code execution...
Arbitrary Code Execution
seamonkey is vulnerable to arbitrary code execution. The vulnerability exists as a web page containing malicious content could cause SeaMonkey to crash or, potentially, execute arbitrary code as the user running SeaMonkey...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. A deficiency was found in the libATA implementation. This could, potentially, lead to a denial of service. By default, the /dev/sg devices are accessible only to the root user...
Arbitrary Code Execution
thunderbird is vulnerable to arbitrary code execution. Several flaws were found in the processing of malformed HTML mail content. An HTML mail message containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code as the user running Thunderbird...
Same-Origin Policy Bypass
seamonkey is vulnerable to same-origin policy bypass. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause SeaMonkey to crash or, potentially, execute arbitrary code as the user running SeaMonkey...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists as a flaw in the flow list of listening IPv6 sockets that allowed a local user to cause a denial of service...
Deserialization Of Untrusted Object
jackson-databind is vulnerable to deserialization of untrusted data. It was possible for an untrusted class, javax.swing.JEditorPane to be used as a serialization gadget through polymorphic typing, potentially allowing execution of arbitrary code...
Information Disclosure
rack is vulnerable to information disclosure. The vulnerability exists due to the insecure comparison of session IDs. A remote attacker is able to perform timing attacks by analyzing the response time of the server when performing the comparison of session IDs...
Remote Code Execution (RCE)
solr-velocity is vulnerable to remote code execution RCE. The vulnerability can be caused by loading custom Velocity templates containing malicious code since the solr resource loader in VelocityResponseWriter.java was on by default...
Access Control Bypass
Automattic Mongoose is vulnerable to access control bypass. If an attacker injects a bsontype attribute to a query object, Mongoose ignores the query object, allowing an attacker to log into other users account or bypassing the token verification during a password reset...
Denial Of Service (DoS)
sqlite3 is vulnerable to denial of service. A divide-by-zero bug in the whereLoopAddBtreeIndex function allows an attacker to crash the application...
Information Disclosure
php is vulnerable to denial of service. An attacker is able to read past allocated buffer in the function exifreaddata by passing malicious EXIF data to the PHP EXIF extension. This can also potentially lead to an application crash...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists through a NULL pointer dereference in drivers/scsi/megaraid/megaraidsasbase.c leading to DoS...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists through a memory leak in drivers/net/wireless/mac80211hwsim.c:hwsimnewradionl can lead to potential denial of service...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. A NULL pointer dereference due to an anomalized NFS message sequence allows an attacker to cause a panic in the system and deny access to the NFS server...