38790 matches found
Information Disclosure
mosquitto is vulnerable to Information Disclosure. This vulnerability occurs when the dynamic security plugin is used and a client is revoked the ability to make subscriptions on a topic while it is offline. In this case, the existing subscriptions for that client are not revoked, which allows th...
Authorization Bypass
certifi is vulnerable to Authorization Bypasses. The application accepted e-Tugra's root certificates which were subject to an investigation prompted by reporting of security issues. The fix removes e-Tugra's root certificates as accepted...
Information Exposure
mediawiki/core is vulnerable to information exposure. The vulnerability exists due to the lack of rollback page error messages masking in the action=rollback operation of the RollbackAction.php page, which allows an attacker to read a username...
Command Injection
go is vulnerable to Command Injection. The vulnerability allows templates containing actions in unquoted HTML attributes to be executed with empty inputs resulting in unexpected results when parsed potentially leading to allowing injection or arbitrary attributes into tags...
Denial Of Services (DoS)
engine.io is vulnerable to Denial Of Services DoS. The vulnerability exists due to the uncaught exception that occurs in the handleUpgrade function of server.ts and userver.ts when providing an invalid query param, which allows an attacker to crash the application through a maliciously crafted...
Memory Leak
linux-aws is vulnerable to Memory Leak. The vulnerability available in linux kernal affects the 'function vsockconnect' within the 'net/vmwvsock/afvsock.c' file leading to memory leak...
Authorization Bypass
openssl is vulnerable to Authorization Bypasses. Invalid certificate policies in leaf certificates are ignored by OpenSSL, allowing malicious CA to bypass policy checking. Policy processing is disabled by default, but can be enabled by passing the '-policy' argument to command line utilities or...
Denial Of Service (DoS)
net.minidev, json-smart is vulnerable to Denial Of Service DoS. The vulnerability exists because there is no nested depth checks for deeply nested JSON arrays or objects, which allows an attacker to crash the application via a malicious array with deeply nested elements...
Information Disclosure
xen is vulnerable to Information Disclosure. AMD processors may speculatively execute instruction from a sibling thread after a SMT mode switch leading to information disclosure...
Use-after-free
kernel is vulnerable to Use-after-free. A race condition between the VTDISALLOCATE ioctl and closing/opening of ttys could lead to a use-after-free resulting in an application crash...
XML External Entity (XXE)
swift is vulnerable to XML External Entity XXE attacks. The vulnerability allows a remote authenticated attacker to access potentially sensitive data in S3 buckets by persuading the S3 API into returning arbitrary file contents from the host server...
Denial Of Service (DoS)
ruby-nokogiri is vulnerable to denial of service DoS attacks. The library fails to check the return value from xmlTextReaderExpand in the method Nokogiri::XML::Readerattributehash which may lead to a null pointer exception when invalid markup is being parsed, causing denial of service conditions...
Remote Code Execution (RCE)
quarkus-vertx-http is vulnerable to remote code execution. The vulnerability exists in multiple functions due to drive-by localhost attacks which allows an attacker to inject and execute malicious query parameters via the Dev UI Config Editor...
Denial Of Service (DoS)
xen is vulnerable to denial of service. The vulnerability exists due to the large memory allocation in the library, allowing an attacker to create many nodes more than the maximum allowed size and path length by accessing many nodes inside a transaction...
Authorization Bypass
github.com/cloudflare/cloudflare-warp is vulnerable to authorization bypass. The vulnerability is due to the type WarpRoutingConfig struct parameter in configuration.go not properly validating endpoint configuration parameters which allows to malicious users to bypassing Zero Trust enrolled...
Denial Of Service (DoS)
libcurl.so is vulnerable to denial of service. The vulnerability exists due to stack-based buffer overflow when curl is instructed to parse a .netrc file for credentials which allows an attacker to crash the application via malicious input...
Information Disclosure
git is vulnerable to information disclosure. A local attacker is able to convinces a victim to clone a repository with a symbolic link pointing at a restricted component on the victim's machine, which allows the attacker to gain access to confidential information...
Sandbox Bypass
Script Security is vulnerable to Sandbox Bypass. The vulnerability exists because the sandbox intercept Groovy casts perform implicitly which allows an attacker to bypass sandbox protection and execute arbitrary code...
Remote Code Execution (RCE)
chromium is vulnerable to remote code execution. The vulnerability exists due to insufficient validation of untrusted input in VPN, allowing an attacker to crash the application by providing a malicious input...
Information Exposure
Tinyproxy is vulnerable to information exposure.The vulnerability exists in processrequest function due to the lack of processing of the HTTP request lines which allows attackers to exploit this vulnerability to access sensitive information at system runtime...
Denial Of Service (DoS)
Jettison is vulnerable to denial of service. The vulnerability exists in nextValue function in JSONTokener.java where the attacker may supply content that causes the parser to crash by out of memory if the parser is running on user supplied input...
Command Injection
pdfkit is vulnerable to command injection. A remote attacker is able to execute malicious code on the system through a specifically crafted query string parameter due to the improper sanitization of user input in initialize function...
Path Traversal
dcmtk is vulnerable to path traversal, A remote attacker is able to write DICOM files into arbitrary directories under controlled names...
Cross-site Scripting (XSS)
grapesjs is vulnerable to cross-site scripting. The vulnerability exists due to the lack of sanitization in the class name in ClassTagView.ts when it adds to the selector manager, allowing an attacker to inject and execute malicious javascript...
Denial Of Service (DoS)
go is vulnerable to Denial Of Service DoS. The vulnerable exists in globWithLimit and Glob functions in glob.go because the the number of path separators allowed by an input to Glob is not separated which allows an attacker to cause an application crash...
Remote Code Execution (RCE)
Redis is vulnerable to remote code execution. The vulnerability exists due to a lack of sanitization of the input allowing an attacker to inject maliciously crafted script into the system...
Stored Cross-Site Scripting (XSS)
github.com/grafana/grafana is vulnerable to stored cross-site scripting attacks. The attack is possible because the library does not sanitize the runbookURL parameter of RuleDetailsActionButtons.tsx file, which allows remote authenticated attackers to inject and execute malicious javascript on th...
Remote Code Execution (RCE)
activerecord is vulnerable to Remote Code Execution RCE. Active Record uses YAML.unsafeload to convert the YAML data in to Ruby objects allowing an attacker who can manipulate data in the database to execute malicious code remotely...
HTTP Request Smuggling
llhttp is vulnerable to HTTP request smuggling. The vulnerability exists because the http.js does not properly handle the CRLF sequence, allowing an attacker to smuggle HTTP requests by submitting LF characters without CR...
Denial Of Service (DoS)
xen is vulnerable to denial of service. The vulnerability exists because the Linux Block and Network PV device frontends don't zero memory regions before sharing them with the backend which leads to a memory corruption causing an application crash...
Log Injection
org.apache.sling:org.apache.sling.api and org.apache.sling:org.apache.sling.commons.log is vulnerable to log injection. A remote attacker with privileges to forge logs, is able to inject fake logs and potentially corrupt log files, causing unintended behavior in the the system...
Denial Of Service (DoS)
Apache HTTP Server is vulnerable to denial of service. The vulnerability exists due to a lack of sanitization with modsed in contexts where the input to modsed may be very large, modsed may make excessively large memory allocations and trigger an abort...
Denial Of Service (DoS)
spring-messaging is vulnerable to denial of service. The vulnerability exists because the handleMessageInternal function of SimpleBrokerMessageHandler.java does not properly handle to ignore the invalid STOMP frames, allowing an attacker to cause an application crash through the WebSocket endpoin...
XML External Entity (XXE) Injection
NiFi Standard Processors is vulnerable to xml external entity injection. The vulnerability exists in multiple components because EvaluateXPath, EvaluateXQuery and ValidateXml processors do not restrict XXE references when configured with default values which allows an attacker to send malicious X...
Authentication Bypass
ngxhttpluamodule is vulnerable to authentication bypass. The vulnerability exists because it doesn't properly restrict the user inputs which allows an attacker to insert unsafe characters in an argument when using the API to mutate a URI, or a request or response header...
Denial Of Service (DoS)
Red Hat is vulnerable to denial of service. The deprecated compatibility function clntcreate in the sunrpc module of the GNU C Library aka glibc through 2.34 copies its hostname argument on the stack without validating its length, which may result in a buffer overflow, potentially resulting in a...
Denial Of Service (DoS)
Red Hat Product Security has rated this issue as having Moderate security impact and the issue is not currently planned to be addressed in future updates for Red Hat Enterprise Linux 6 and 7, hence, marked as Out-of-Support-Scope. For additional information, refer to the Issue Severity...
Insecure Access Control
linux is vulnerable to insecure access control. The vulnerability exists due to a flaw in kvms390guestsidaop in the arch/s390/kvm/kvm-s390.c function in KVM allowing an attacker to obtain unauthorized memory write access...
Privilege Escalation
github.com/snapcore/snapd is vulnerable to privilege escalation. The scopensnapdtool function of tool.c does not properly validate the location of the snap-confine binary, allowing an attacker to hardlink setuid binaries to another location when fs.protectedhardlinks is 0...
Denial Of Service (DoS)
Jenkins is vulnerable to denial of service. The vulnerability exists due to earlier defines custom XStream converters that have not been updated to apply the protections for the vulnerability CVE-2021-43859 and allow unconstrained resource usage...
Cross-site Request Forgery (CSRF)
github.com/filebrowser/filebrowser is vulnerable to cross-site request forgery. The vulnerability exists due to a lack of validation when creating a user with admin privilege allowing an attacker get access to filesystem via a maliciously crafted HTML webpage...
Inappropriate Implementation In Navigation
Chrome has inappropriate implementation in navigation. The vulnerability exists due to an insecure function in google chrome allowing an attacker to compromise the system...
Privilege Escalation
linux-azure:hirsute is vulnerable to privilege escalation. aspeedlpcctrlmmap in drivers/soc/aspeed/aspeed-lpc-ctrl.c allows an attacker to access the Aspeed LPC control interface and to overwrite memory in the kernel and potentially execute privileges, aka CID-b49a0e69a7b1. This occurs because a...
Cross-site Scripting (XSS)
lxml is vulnerable to Cross-site Scripting XSS. An attacker can inject and execute crafted and SVG embedded scripts through the data URIs in clean.py...
Denial Of Service (DoS)
linux kernal ipc is vulnerable to denial of service. The vulnerability exists due to a memory overflow in the memcg subsystem which allows a attacker to cause an application crash...
Improper Input Validation
Java SE is vulnerable to improper input validation. an attacker can perform service disruption through the swing component in the oracle GraalVM enterprise edition...
Denial Of Service (DoS)
firefox is vulnerable to denial of service. An exploitable crash is possible from incorrect instruction reordering during JIT optimization...
Remote Code Execution (RCE)
virtualbox:sid is vulnerable to remote code execution.Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox...
Arbitrary Code Execution
chromium is vulnerable to arbitrary code execution. A use-after-free in Blink XSLT allows an attacker to execute arbitrary code on the host OS...
Spoofable Relay
tor:sid is vulnerable to spoofable relays. Relays could spoof RELAYEND or RELAYRESOLVED cell on half-closed streams because clients failed to validate which hop sent these cells. This would allow a relay on a circuit to end a stream that wasn't actually built with it...