SQL Injection

moodle/moodle is vulnerable to SQL Injection. The vulnerability is due to improper SQL sanitization in lib.php, allowing an authenticated attacker to inject and execute malicious SQL queries when viewing a users recent courses, leading to Information Disclosure...

Authorization Bypass

snort is vulnerable to authorization bypasses. An unauthenticated, remote attacker may exploit this vulnerability by sending crafted HTTP packets that would flow through an affected system. A successful exploit allows the attacker to bypass the configured file policies and deliver a malicious...

Information Disclosure

xen is vulnerable to Information Disclosure. AMD processors may speculatively execute instruction from a sibling thread after a SMT mode switch leading to information disclosure...

Command Injection

org.apache.sling:org.apache.sling.jcr.base is vulnerable to Command Injection. The vulnerability exists in the getRepository and getRepositoryFromURL functions of RepositoryAccessor.java because it allows a remote attacker to access data stored in a remote location via JDNI or RMI. An application...

Use-after-free

kernel is vulnerable to Use-after-free. A race condition between the VTDISALLOCATE ioctl and closing/opening of ttys could lead to a use-after-free resulting in an application crash...

Regular Expression Denial Of Service (ReDoS)

cookiejar is vulnerable to Regular Expression Denial of Service ReDoS. The vulnerability exists in the parse function of cookiejar.js due to inefficient regular expression complexity which allows an attacker to crash the application by submitting a malicious string...

Type Confusion

qt5-qtwebengine is vulnerable to type confusion. A remote attacker is able to potentially exploit heap corruption via a crafted HTML page resulting in type confusion vulnerability...

Server-side Request Forgery (SSRF)

moodle/moodle is vulnerable to server-side request forgery. An attacker can make HTTP requests to untrusted URLs through the send function of HTTPMessage.php and gain access to sensitive information through the LTI provider library...

Information Disclosure

System.Data.SqlClient and Microsoft.Data.SqlClient packages in the .NET framework are vulnerable to information disclosure. The vulnerability occurs during heavy load, which lets an attacker access arbitrary data from asynchronously executed queries...

Signature Verification Bypass

github.com/grafana/grafana is vulnerable to signature verification bypass. A local attacker is able to convince a server admin to download and successfully run a malicious plugin even though unsigned plugins are not allowed, due to the improper verification of plugin signature...

Remote Code Execution

HyperSQL Database is vulnerable to remote code execution. The vulnerability exists in the supportsJavaMethod function of HsqlDatabaseProperties.java due to the untrusted input process allowing an attacker to execute remote codes in the system...

Remote Code Execution (RCE)

chromium is vulnerable to remote code execution. The vulnerability exists due to insufficient validation of untrusted input in VPN, allowing an attacker to crash the application by providing a malicious input...

Man In The Middle (MitM)

samba:xenial is vulnerable to man-in-the-middle. A flaw was found in samba's Heimdal KDC implementation, versions 4.8.x up to when used in AD DC mode. A man in the middle attacker could use this flaw to intercept the request to the KDC and replace the user name principal in the request with any...

Information Disclosure

github.com/containers/buildah is vulnerable to information disclosure. The vulnerability exists in configureUIDGID function in runcommon.go due to improper handling of the supplementary groups in the Buildah container engine which allows an attacker to gain access to containers and perform...

Privilege Escalation

moodle/moodle is vulnerable to privilege escalation. The vulnerability exists due to application does not properly impose security restrictions in assigning roles which allows a remote attacker to escalate privileges on the system...

Out-of-bounds Write

vim:sid is vulnerable to Out-of-bounds Write. It causes a memory access error when substitute expression changes window...

Command Injection

s3-kilatstorage is vulnerable to command injection. The vulnerability exists due to a lack of sanitization of the input argument allowing an attacker to inject maliciously crafted OS command into the system...

SQL Injection

Prestashop is vulnerable to SQL injection. The vulnerability is due to the file config/smarty.config.inc.php improperly neutralizing SQL code. An attacker can chain this vulnerability to then call the PHP eval function, executing arbitrary code...

Command Injection

git-clone is vulnerable to command injection. The vulnerability exists due to the insecure usage of the --upload-pack feature of git. An attacker with the ability to control the options object provided to the clone function through the options.args array, is able to inject arbitrary commands to r...

Heap-based Buffer Overflow

vim is vulnerable to heap-based buffer overflow. The vulnerability exists because the lisp indenting does not check for NULL earlier which causes an overflow...

Authorization Bypass

shiro-core is vulnerable to authorization bypass. The vulnerability exists due to the case-insensitive regex pattern matching used in the matches function of RegExPatternMatcher.java, allowing an attacker to bypass the servlet container when RegExPatternMatcher with . in the regular expression...

Man-in-the-Middle (MitM)

curl is vulnerable to man-in-the-middle attacks. The vulnerability exists due to the lack of message verification in krb5, allowing an attacker to inject data to the client...

Log Injection

org.apache.sling:org.apache.sling.api and org.apache.sling:org.apache.sling.commons.log is vulnerable to log injection. A remote attacker with privileges to forge logs, is able to inject fake logs and potentially corrupt log files, causing unintended behavior in the the system...

Command Injection

openssl is vulnerable to command injection. The vulnerability exists in crehash script which allows an attacker to inject and execute malicious commands...

Privilege Escalation

linux-gcp:focal is vulnerable to privilege escalation. The vulnerability exists in afllc.c which allows an attacker to craft and inject malicious attacks...

Use-after-Free

WebKitGTK is vulnerable to a use-after-free. The vulnerability is in WebCore::TextureMapperLayer::setContentsLayer in WebCore/platform/graphics/texmap/TextureMapperLayer.cpp...

Information Disclosure

moodle is vulnerable to information disclosure. The vulnerability exists due to the $hiddenfields not properly set in user/profile.php and in user/view.php allowing the description user field to be seen even when it is set to hidden...

Heap-Based Buffer Overflow

An issue was discovered in the Linux kernel before 5.16.12. drivers/net/usb/sr9700.c allows attackers to obtain sensitive information from heap memory via crafted frame lengths from a device...

Privilege Escalation

njs is vulnerable to privilege escalation. The vulnerability exists in njspromiseperformthen function due to a type confusion which allows an attacker to gain access to the system and perform unauthorized actions...

Privilege Escalation

virtualbox is vulnerable privilege escalation. The vulnerability exists due to a lack of validation of authentication...

Denial Of Service (DoS)

zlib is vulnerable to Denial Of Service DoS. The vulnerability exists due to a memory corruption when deflating if the input has many distant matches which will results in corrupted output due to invalid distances, which leads to out-of-bound access, corrupting the memory and potentially crashing...

Insecure Access Control

linux is vulnerable to insecure access control. The vulnerability exists due to a flaw in kvms390guestsidaop in the arch/s390/kvm/kvm-s390.c function in KVM allowing an attacker to obtain unauthorized memory write access...

Privilege Escalation

linux is vulnerable to privilege escalation. The vulnerability exists due to a lack of sanitization of the namespace isolation...

Privilege Escalation

MariaDB is vulnerable to Privilege Escalation. The vulnerability exists due to a lack of sanitization of a user-supplied string before using it as a format specifier...

XML External Entity (XXE)

liquibase-core is vulnerable to XML external entity attacks. The XMLChangeLogSAXParser function of XMLChangeLogSAXParser.java does not disable access to external entities by default, allowing an attacker to submit a malicious XML document to perform requests on behalf of the server...

Cross-site Scripting (XSS)

com.liferay:com.liferay.layout.admin.web is vulnerable to cross-site scripting. The library does not properly escape the COLLECTIONNAME parameter before it output to the front end, allowing an attacker to inject and execute malicious javascript...

Denial Of Service (DoS)

php7 and php8 are vulnerable to denial of service...

Privilege Escalation

github.com/snapcore/snapd is vulnerable to privilege escalation. The scopensnapdtool function of tool.c does not properly validate the location of the snap-confine binary, allowing an attacker to hardlink setuid binaries to another location when fs.protectedhardlinks is 0...

Denial Of Service (DoS)

Jenkins is vulnerable to denial of service. The vulnerability exists due to earlier defines custom XStream converters that have not been updated to apply the protections for the vulnerability CVE-2021-43859 and allow unconstrained resource usage...

Denial Of Service (DoS)

microsoft.aspnetcore.http.features is vulnerable to denial of service. The vulnerability exists in NET 6.0 and .NET 5.0 when kestrel web server processes certain HTTP requests causing an application crash...

Denial Of Service (DoS)

webkit2gtk:edge is vulnerable denial of service...

Denial Of Service (DoS)

expat is vulnerable to denial-of-service. The vulnerability exists in storeAtts function in xmlparse.c may lead to realloc misbehavior, allowing a malicious user to cause an application crash...

Denial Of Service (DoS)

libexpat.so is vulnerable to denial of service. The vulnerability exists due to the integer overflow in the lookup of xmlparse.c, allowing an attacker to cause an application crash...

CVE-2020-25722

samba is vulnerable to privilege escalation. The vulnerability exists due to a lack of sanitization of access and conformance of data stored allowing total domain compromise...

Improper Input Validation

pip suffers from improper input validation. The library does not properly handle unicode separators in git references. An attacker can use this flaw to install a different revision on a repository...

Denial Of Service (DoS)

chromium-browser:bionic is vulnerable to denial of service...

Denial Of Service (DoS)

linux kernal ipc is vulnerable to denial of service. The vulnerability exists due to a memory overflow in the memcg subsystem which allows a attacker to cause an application crash...

Remote Code Execution (RCE)

Redis is vulnerable to remote code execution. The vulnerability exists due to an integer overflow in the underlying string library can be used to corrupt the heap and potentially result with denial of service or remote code execution...

Remote Code Execution (RCE)

ntfs-3g is vulnerable to Remote Code Execution RCE. The vulnerability exists due to a stack buffer overflow...

Remote Code Execution (RCE)

qt5-qtwebengine is vulnerable to remote code execution. The vulnerability exists due to a lack of sanitization which allows an attacker to execute arbitrary code inside a sandbox via a crafted HTML page...