Denial Of Service (DoS)

nodejs-current is vulnerable to Denial Of Service DoS. The vulnerability exists due to missing input validation of host names returned by Domain Name Servers in Node.js dns library which can lead to output of wrong hostnames...

Denial Of Service (DoS)

glib2 is vulnerable to denial of service. When gbytearraynewtake is called with a buffer of 4GB or more on a 64-bit platform, an integer overflow occurs as the length would be a truncated modulo 232, causing unintended length truncation...

Information Disclosure

webkit2gtk is vulnerable to information disclosure. The vulnerability exists due to a use-after-free in Webkits GraphicsContext...

Insecure TLS Configuration

maven uses insecure TLS configurations. Non-SSL repository references are allowed by default and would potentially allow for man-in-the-middle attacks...

Denial Of Service (DoS)

openexr is vulnerable to denial of service. An integer overflow in OpenEXR/IlmImf/ImfHuf.cpp allows an attacker to crash the application...

Denial Of Service (DoS)

wireshark is vulnerable to denial of service. The vulnerability exists due to excessive memory consumption in MS-WSP dissector...

Information Disclosure

jetty-servlets is vulnerable to information disclosure. Lack of proper handling of requests to the ConcatServlet with a doubly encoded path allows an attacker to access protected resources within the WEB-INF directory. For example, sending /concat?/%2557EB-INF/web.xml can retrieve the web.xml fil...

Privilege Escalation

kernel is vulnerable to privilege escalation. A use-after-free in cipsov4genopt in net/ipv4/cipsoipv4.c due to the CIPSO and CALIPSO refcounting for the DOI definitions are mishandled, leading to writing of an arbitrary value...

Privilege Escalation

linux is vulnerable to privilege escalation. The vulnerability exists due to a refcount leak in llcpsockbind causing use-after-free...

Arbitrary Code Execution

libcurl before version 7.77.0 can be tricked into using already freed memory when a new TLS session is negotiated or a client certificate is requested on an existing connection. For example, this can happen when a TLS server requests a client certificate on a connection that was established witho...

Denial Of Service (DoS)

linux-oracle:groovy is vulnerable to denial of service. The vulnerability exists in drivers/net/ethernet/freescale/gianfar.c due to a negative fragment size is calculated in situations involving an rx queue overrun when jumbo packets which allows an attacker to crash the application via malicious...

Denial Of Service (DoS)

unbound is vulnerable to denial of service. Unbound allows an out-of-bounds write in sldnsbgettokenpar...

Remote Code Execution

redis is vulnerable to remote code execution. An integer overflow occurs during the execution of a STRALGO LCS command, resulting in heap corruption and potential code execution...

Server-side Request Forgery (SSRF)

yoast-seo-for-typo3/yoastseo is vulnerable to server side request forgery. Failing to restrict analyzed URLs to domains managed by the current TYPO3 website allows a logged in TYPO3 backend user to make HTTP requests to arbitrary domains including the webserver itself or other internally managed...

Use After Free

chromium:sid is vulnerable to use after free...

Authentication Bypass

botframework-connector is vulnerable to authentication bypass. The vulnerability exists as Skill claims found in the jwt token is not validated against the SkillValidation.isSkillClaim method...

Information Disclosure

containerd is vulnerable to information disclosure. The vulnerability exists through containerd's CRI implementation through Kubernetes, crictl, or any other pod/container client that uses the containerd CRI service that share the same image may receive incorrect environment variables, including...

Information Disclosure

kernel is vulnerable to information disclosure. The vulnerability exists in fs/cifs/smb2pdu.c through a use-after-free...

Buffer Overflow

glibc is vulnerable to buffer overflow. The vulnerability occurs when processing invalid multi-byte input sequences in the EUC-KR encoding...

Privilege Escalation

chromium is vulnerable to privilege escalation. The vulnerability exists because of insufficient policy enforcement in Cryptohome...

Denial Of Service (DoS)

libopenjpeg.so is vulnerable to denial of service. The vulnerability exists in opjdwtcalcexplicitstepsizes function of dwt.c due to buffer overflow which allows an attacker to crash the application via malicious input...

Information Disclosure

firefox is vulnerable to information disclosure. The vulnerability exists due to the way software keyboards are handled by the Firefox. Some websites have a feature "Show Password" where clicking a button will change a password field into a textbook field, revealing the typed password.If and when...

Denial Of Service (DoS)

sqlite is vulnerable to denial of service DoS.Use-after-free in fts3EvalNextRow in ext/fts3/fts3.c extension module in the way it implemented the snippet function.This flaw allows an attacker who can execute SQL statements to crash the application or potentially execute arbitrary code...

Cross-site Scripting (XSS)

WebKitGTK+ is vulnerable to cross-site scripting XSS. Processing maliciously crafted web content may lead to a cross site scripting attack...

Arbitrary Code Execution

webkitgtk4 is vulnerable to arbitrary code execution. The vulnerability exists through memory corruption...

Spoofable Frames

linux is vulnerable to spoofable network frames. The vulnerability exists through the reinstallation of the Integrity Group Temporal Key IGTK during the group key handshake, allowing an attacker within radio range to spoof frames from access points to clients...

Arbitrary Code Execution

squid3 is vulnerable to arbitrary code execution. The vulnerability exists as squid by default comes with rules to block access to the Cache Manager, which serves detailed server information meant for the maintainer, that allows encoded URLs to bypass the urlregex check...

Denial Of Service (DoS)

BIND9 is vulnerable to denial of service. An attacker who is allowed to change zone content could introduce a malicious record in order to cause a denial of service condition...

Denial Of Service (DoS)

clamav is vulnerable to denial of service DoS. The vulnerability exists through a null pointer dereference. An attacker could exploit this vulnerability by sending a crafted EGG file to an affected device...

Denial Of Service (DoS)

qemu is vulnerable to denial of service DoS. The vulnerability exists as vnc has memory leakage upon disconnect...

Injection Vulnerabilities

chromium-browser is vulnerable to injection vulnerabilities. The vulnerability exists through an inappropriate implementation in WebRTC...

Denial Of Service (DoS)

openjdk is vulnerable to denial of service. Unexpected exception raised by DerInputStream results in a partial denial of service condition which results in an application crash...

XML External Entity (XXE)

PostgreSQL JDBC Driver is vulnerable to XML external entity attacks. External DTDs are not disabled by default, allowing an attacker to perform XXE attacks and perform request on behalf of the server or retrieve system files via a malicious XML document...

Information Disclosure

kernel is vulnerable to information disclosure. An L2 guest may trick the L0 hypervisor to access confidential L1 resources...

Man-in-the-Middle (MitM)

httpd is vulnerable to man-in-the-middle MiTM. The vulnerability exists as it was discovered that the fix for CVE-2011-3368 released via RHSA-2011:1391 did not completely address the problem. An attacker could bypass the fix and make a reverse proxy connect to an arbitrary server not directly...

Information Disclosure

kernel is vulnerable to information disclosure. The vulnerability exists as the I/O statistics from the taskstats subsystem could be read without any restrictions. A local, unprivileged user could use this flaw to gather confidential information, such as the length of a password used in a process...

Denial Of Service (DoS)

jbossweb is vulnerable to denial of service DoS. The vulnerability exists as a flaw was found in the way JBoss Web handled UTF-8 surrogate pair characters. If JBoss Web was hosting an application with UTF-8 character encoding enabled, or that included user-supplied UTF-8 strings in a response, a...

Denial Of Service (DoS)

php is vulnerable to denial of service DoS. The vulnerability exists as an insufficient input validation flaw, leading to a buffer over-read, was found in the PHP exif extension. A specially-crafted image file could cause the PHP interpreter to crash when a PHP script tries to extract Exchangeabl...

Arbitrary Code Execution

firefox is vulnerable to arbitrary code execution. The vulnerability exists as an integer underflow flaw was found in the way Firefox handled large JavaScript regular expressions. A web page containing malicious JavaScript could cause Firefox to access already freed memory, causing Firefox to cra...

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS. The vulnerability exists as a missing validation check was found in the Linux kernel's macpartition implementation, used for supporting file systems created on Mac OS operating systems. A local attacker could use this flaw to cause a denial of servic...

Arbitrary Code Execution

firefox is vulnerable to arbitrary code execution. An attacker is able to exploit the vulnerability within the OS font implementation to execute arbitrary code using malformed OpenType fonts by verifying the font file prior to use...

Denial Of Service (DoS)

The kernel is vulnerable to Denial Of Service DoS. An array index error was found in the gdth driver. A local user could send a specially-crafted IOCTL request that would cause a denial of service or, possibly, privilege escalation...

Denial Of Service (DoS)

httpd is vulnerable to denial of service. A denial of service flaw was found in the Apache moddeflate module. This module continued to compress large files until compression was complete, even if the network connection that requested the content was closed before compression completed. This would...

Privilege Escalation

kernel is vulnerable to privilege escalation. The vulnerability exists as the NFSv4 client was missing a file permission check for the execute bit in some situations. This could allow local, unprivileged users to run non-executable files on NFSv4 mounted file systems...

Arbitrary Code Execution

php is vulnerable to arbitrary code execution. A heap-based buffer overflow flaw was found in PHP's mbstring extension. A remote attacker able to pass arbitrary input to a PHP script using mbstring conversion functions could cause the PHP interpreter to crash or, possibly, execute arbitrary code...

Arbitrary Code Execution

seamonkey is vulnerable to arbitrary code execution. The vulnerability exists as a web page containing malicious content could cause SeaMonkey to crash or, potentially, execute arbitrary code as the user running SeaMonkey...

Arbitrary Code Execution

xorg-x11-server is vulnerable to arbitrary code execution. The vulnerability exists as two integer overflow flaws were found in the X.Org server's EVI and MIT-SHM modules. A malicious authorized client could exploit these issues to cause a denial of service crash, or potentially execute arbitrary...

Arbitrary Command Execution

php is vulnerable to arbitrary command execution. The vulnerability exists as it was discovered that the PHP escapeshellcmd function did not properly escape multi-byte characters which are not valid in the locale used by the script. This could allow an attacker to bypass quoting restrictions...

Information Disclosure

kernel is vulnerable to information disclosure. A flaw was found in the Advanced Linux Sound Architecture ALSA. A local user who had the ability to read the /proc/driver/snd-page-alloc file could see portions of kernel memory...

Privilege Escalation

kernel is vulnerable to privilege escalation. A flaw in the ISDN CAPI subsystem that allowed a remote user to cause a denial of service or potential remote access. Exploitation would require the attacker to be able to send arbitrary frames over the ISDN network to the victim's machine...