38515 matches found
Information Disclosure
jetty-http is vulnerable to information disclosure. Insecure parsing of encoded characters allow an attacker to bypass security constraints and potentially access private files within the WEB-INF directory...
Protection Bypass
The Linux kernel is vulnerable to Protection Bypass. It does not properly enforce the Secure Boot Forbidden Signature Database aka dbx protection mechanism. This affects certs/blacklist.c and certs/systemkeyring.c. A flaw was found in the Linux kernel in certs/blacklist.c, When signature entries...
Arbitrary Values
go has arbitrary values. The vulnerability exists due to arbitrary values retrieved from DNS which is not sanitized before including in HTML...
Denial Of Service (DoS)
policykit-1 is vulnerable to denial of service. The vulnerability exists due to the system unable to get a unique uid and pid of the process and it cannot verify the privileges of the requesting process...
Directory Traversal
django is vulnerable to Directory Traversal. Lack of path sanitation allows checking of existence of arbitrary files via the use of admindocs TemplateDetailView view by any staff members. Moreover, the default admindocs templates allows developers to customize in such a way that reveals the conte...
Denial Of Service (DoS)
linux kernel is vulnerable to denial of service. The vulnerability exists due to a memory leak when a webcam device exists...
Denial Of Service (DoS)
linux-oracle:groovy is vulnerable to denial of service. The vulnerability exists in drivers/net/ethernet/freescale/gianfar.c due to a negative fragment size is calculated in situations involving an rx queue overrun when jumbo packets which allows an attacker to crash the application via malicious...
Access Restriction Bypass
Google Chrome is vulnerable to access restriction bypass. Insufficient policy enforcement in extensions in Google Chrome allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension...
Spoofable Secure Lock Icon
firefox:sid is using spoofable Secure Lock icon. Through complicated navigations with new windows, an HTTP page could have inherited a secure lock icon from an HTTPS page...
Padding Oracle Attack
jose is vulnerable to padding oracle attack. A possible observable difference in timing when padding error occurs while decrypting the ciphertext allows an attacker to obtain the plaintext data without knowledge of the decryption key...
Remote Code Execution
xstream is vulnerable to remote code execution. A remote attacker with sufficient rights is able to execute arbitrary code by manipulating the processed input stream...
Denial Of Service (DoS)
github.com/golang/go is vulnerable to denial of service. An infinite loop occurs when using xml.NewTokenDecoder with a custom TokenReader...
Web Cache Poisoning
python-django is vulnerable to web cache poisoning. An attacker may separate query parameters using a semicolon ;, causing a difference in the interpretation of the request between the proxy running with default configuration and the server resulting in malicious requests being cached as complete...
Denial Of Service (DoS)
libopenjpeg.so is vulnerable to denial of service. The vulnerability exists in opjdwtcalcexplicitstepsizes function of dwt.c due to buffer overflow which allows an attacker to crash the application via malicious input...
Denial Of Service (DoS)
openssl is vulnerable to denial of service DoS. The vulnerability exists through a NULL pointer dereference issue when both GENERALNAMEs contain an EDIPARTYNAME...
Denial Of Service (DoS)
qemu is vulnerable to denial of service DoS. The vulnerability exists through a reachable assertion issue was found in the USB EHCI emulation code of QEMU, allows an privileged user to send bogus USB requests and crash the QEMU process on the host...
Denial Of Service (DoS)
linux kernel is vulnerable to denial of service. An infinite loop related to improper interaction between a resampler and edge triggering in ioapiclazyupdateeoi in arch/x86/kvm/ioapic.c results in an application crash...
Remote Code Execution (RCE)
drupal is vulnerable to remote code execution RCE. The vulnerability exists as it does not properly sanitize certain filenames on uploaded files, which can lead to files being interpreted as the incorrect extension and served as the wrong MIME type or executed as PHP for certain hosting...
Heap Buffer Overflow
FreeType is vulnerable to heap-based buffer overflow due to integer truncation in LoadSBitPng...
Buffer Overflow
The glibc is vulnerable to buffer overflow. An attacker may input an 80-bit long double function contains a non-canonical bit pattern causing the buffer overflow...
Arbitrary Code Execution
glibc is vulnerable to arbitrary code execution. A use-after-free in the glob function when expanding user allows an attacker to execute arbitrary code on the host OS...
Denial Of Service (DoS)
kernel is vulnerable to Denial Of Service DoS. The vulnerability exists through a memory leak in the ipmibmcregister function in drivers/char/ipmi/ipmimsghandler.c allowing an attacker to cause a denial of service memory consumption by triggering idasimpleget failure...
Use-after-free
kernel is vulnerable to use-after-free vulnerability. It is possible due to a flaw in the function mdiobusregister in drivers/net/phy/mdiobus.c...
Cross-Site Scripting (XSS)
dompurify is vulnerable to cross-site scripting XSS. A mutation XSS vulnerability exists as a serialize-parse roundtrip does not return the original DOM tree, causing a namespace change from HTML to MathML via FORM elements...
Arbitrary Code Execution
webkitgtk4 is vulnerable to arbitrary code execution. The vulnerabiltiy exists through memory errors...
Cross-site Scripting (XSS)
WebKitGTK+ is vulnerable to cross site scripting. Processing maliciously crafted web content may lead to universal cross site scripting...
Authorization Bypass
busybox is vulnerable to authorization bypass. The addprobe function in modutils/modprobe.c allows local users to bypass intended restrictions by loading kernel modules via a / character in the module name, as demonstrated by an ifconfig /usbserial up command or a mount -t /sndpcm none / command...
Arbitrary Code Execution
firefox is vulnerable to arbitrary code execution. The vulnerability exists through memory safety bugs...
Arbitrary Code Execution
kernel is vulnerable to arbitrary code execution. A heap-based buffer overflow in the lbsibssjoinexisting function in drivers/net/wireless/marvell/libertas/cfg.c allows an attacker to execute arbitrary code on the host OS...
Authorization Bypass
django is vulnerable to authorization bypass. The FILEUPLOADDIRECTORYPERMISSIONS mode was not applied to intermediate-level directories created in the process of uploading files and to intermediate-level collected static directories when using the collectstatic management command...
Denial Of Service (DoS)
BIND9 is vulnerable to denial of service. An attacker who is allowed to change zone content could introduce a malicious record in order to cause a denial of service condition...
Denial Of Service (DoS)
github.com/golang/go is vulnerable to denial of service. An infinite read loop in ReadUvarint and ReadVarint allows an attacker to create a denial of service condition via malicious input...
Denial Of Service (DoS)
apache2 is vulnerable to denial of service DoS. The vulnerability exists when trace/debug was enabled for the HTTP/2 module and on certain traffic edge patterns, logging statements were made on the wrong connection, causing concurrent use of memory pools. Configuring the LogLevel of modhttp2 abov...
Denial Of Service (DoS)
PHP is vulnerable to denial of service DoS. When using file upload functionality, if upload progress tracking is enabled, but session.uploadprogress.cleanup is set to 0 disabled, and the file upload fails, the upload procedure would try to clean up data that does not exist and encounter null...
Denial Of Service (DoS)
qemu is vulnerable to denial of service DoS. The vulnerability exists as vnc has memory leakage upon disconnect...
Injection Vulnerabilities
chromium-browser is vulnerable to injection vulnerabilities. The vulnerability exists through an inappropriate implementation in WebRTC...
Arbitrary Code Execution
grub2 is vulnerable to arbitrary code execution. The vulnerability exists through a crafted grub.cfg file during boot process...
Server Side Request Forgery (SSRF)
github.com/kubernetes/kubernetes is vulnerable to Server Side Request Forgery SSRF. An attacker with a privilege to create a pod with certain built-in Volume types GlusterFS, Quobyte, StorageFS, ScaleIO or to create a StorageClass can cause an authenticated user to leak the resources from the...
Remote Code Execution (RCE)
udp.c in the Linux kernel is vulnerable Remote Code Execution RCE. It allows remote attackers to execute arbitrary code via UDP traffic that triggers an unsafe second checksum calculation during execution of a recv system call with the MSGPEEK flag...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists through a null pointer dereference in the sound/usb/line6/pcm.c...
Cross-Site Scripting (XSS)
thunderbird is vulnerable to cross-site scripting XSS. A cross-site scripting XSS flaw was found in the way Thunderbird handled certain multibyte character sets. Malicious, remote content could cause Thunderbird to run JavaScript code with the permissions of different remote content...
Arbitrary Code Execution
thunderbird/firefox is vulnerable to arbitrary code execution. Several flaws were found in the processing of malformed HTML content. Malicious HTML content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird...
Information Disclosure
kernel is vulnerable to information disclosure. The vulnerability exists through as missing initialization flaws in the Linux kernel could lead to information leaks...
Information Disclosure
kvm is vulnerable to information disclosure. The vulnerability exists as a data structure field in kvmvcpuioctlx86getvcpuevents in QEMU-KVM was not initialized properly before being copied to user-space. A privileged host user with access to "/dev/kvm" could use this flaw to leak kernel stack...
Information Disclosure
kernel is vulnerable to information disclosure. Missing initialization flaws in the Linux kernel could lead to information leaks...
Arbitrary Code Execution
firefox is vulnerable to arbitrary code execution. It was found that the fix for CVE-2010-0179 was incomplete when the Firebug add-on was used. If a user visited a website containing malicious JavaScript while the Firebug add-on was enabled, it could cause Firefox to execute arbitrary JavaScript...
Arbitrary Code Execution
firefox is vulnerable to arbitrary code execution. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox...
Cross-site Scripting (XSS)
Mozilla Firefox is vulnerable to cross-site scripting XSS. It happens due to the way Firefox handled the "Content-Disposition: attachment" HTTP header when the "Content-Type: multipart" HTTP header was also present. A website that allows arbitrary uploads and relies on the "Content-Disposition:...
Privilege Escalation
JRE unpack200 is vulnerable to privilege escalation. An integer overflow flaw was found in the JRE unpack200 functionality. An untrusted applet or application could extend its privileges, allowing it to read and write local files, as well as to execute local applications with the privileges of th...
Arbitrary Code Execution
thunderbird is vulnerable to arbitrary code execution. Several flaws were found in the processing of malformed HTML mail content. An HTML mail message containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code as the user running Thunderbird...