HTTP Request Smuggling

llhttp is vulnerable to http request smuggling. The vulnerability exists in the http function in http.ts due to a lack of validation and parsing of Transfer-Encoding headers which allows an attacker to smuggle HTTP requests...

SQL Injection

django is vulnerable to SQL injection. An attacker is able to execute arbitrary SQL commands via the Trunc and Extract database functions which allows an attacker to execute arbitrary sql queries...

Authorization Bypass

shiro-core is vulnerable to authorization bypass. The vulnerability exists due to the case-insensitive regex pattern matching used in the matches function of RegExPatternMatcher.java, allowing an attacker to bypass the servlet container when RegExPatternMatcher with . in the regular expression...

Denial Of Service (DoS)

curl is vulnerable to denial of service. The vulnerability exists because the amount of accepted "chained" algorithms is very high which allows an attacker to cause an application crash...

Remote Code Execution (RCE)

aamiles is vulnerable to remote code execution. The use of the request package opens up a code execution backdoor, allowing an attacker to perform unauthorized actions and accesses to sensitive information and digital currency keys...

Use-After-Free

vim is vulnerable to use after free. The vulnerability exists in utfptr2char function in mbyte.c because the freed memory is used when searching for pattern in path which allows an attacker to cause a memory corruption causing an application crash...

Denial Of Service (DoS)

moodle/moodle is vulnerable to denial of service. The vulnerability exists in loginattemptfailed function in authlib.php due to incorrect calculation of login attempts which allows an attacker to cause an application crash...

Denial Of Service (DoS)

Gson is vulnerable to denial of service. The vulnerability exists in internal java classes due to not preventing writing a replacement JDK object during serialization which allows an attacker to cause an application crash...

Privilege Escalation

libarchive is vulnerable to privilege escalation. The vulnerability exists due to a lack of validation of the access control list ACL when extracting a maliciously crafted link...

SQL Injection

asterisk is vulnerable to SQL injection. The vulnerability exists due to a lack of sanitization of input for backslash characters in SQL queries allowing an attacker to make maliciously crafted queries...

Improper Access Control

calibreweb is vulnerable to improper access control. The vulnerability exists because the server doesn't properly validate the user permissions when rendering HTML containing shelf name which allows an attacker to gain access to names of all private shelves...

Remote Code Execution

netatalk is vulnerable to remote code execution. The vulnerability exists in Western Digital PR4100 NAS which allows an attacker to inject and execute codes...

SQL Injection

moodle/moodle is vulnerable to SQL Injection attacks. The library does not properly sanitize the keepaliveserver function in the auth.php file allowing a malicious user to inject and execute malicious XML-RPC requests via the MNet peer...

Denial Of Service (DoS)

firefox is vulnerable to denial of service. An attacker is able to exploit the vulnerability by forcing a text reflow in an SVG object leading to a potentially exploitable crash...

Cross-site Scripting (XSS)

com.liferay:com.liferay.layout.admin.web is vulnerable to cross-site scripting. The library does not properly escape the COLLECTIONNAME parameter before it output to the front end, allowing an attacker to inject and execute malicious javascript...

Information Disclosure

hashicorp-vault-plugin is vulnerable to information disclosure. Remote unauthenticated attackers are able to gain access to sensitive information by controlling agent processes to obtain Vault secrets via an attacker-specified path and key...

Denial Of Service (DoS)

vim is vulnerable to denial of service. The vulnerability exists due to a heap-based buffer overflow which allows an attacker to cause an application crash...

Denial Of Service (DoS)

webkit2gtk:edge is vulnerable denial of service...

Denial Of Service (DoS)

expat is vulnerable to denial-of-service. The vulnerability exists in storeAtts function in xmlparse.c may lead to realloc misbehavior, allowing a malicious user to cause an application crash...

Cross-site Scripting (XSS)

WordPress is vulnerable to cross site scripting. The vulnerability exists due to an Inappropriate implementation allowed a remote privileged authenticated users to abuse content security policy...

Denial Of Service (DoS)

libexpat.so is vulnerable to denial of service. The vulnerability exists due to the integer overflow in the lookup of xmlparse.c, allowing an attacker to cause an application crash...

Denial Of Service (DoS)

django is vulnerable to denial of service DoS attacks. A malicious user is able to craft an artificially large password relative to the comparison values, to significantly overhead UserAttributeSimilarityValidator component resulting in denial of service conditions...

Denial Of Service (DoS)

golang is vulnerable to denial of service. The vulnerability exists due to an uncontrolled resource consumption flaw in golang's net/http library in the canonicalHeader function which allows an attacker to submits maliciously crafted requests to applications linked with net/http's http2...

Denial Of Service (DoS)

kernel-rt is vulnerable to denial of service. The vulnerability exists because the double free happens during flush procedure, and no use of incorrect data during flush finishing even if double free could happen without kernel crash...

Signature Verification Bypass

The exploitation of this flaw requires RPM's package verification level to be set to "digest" or "none". In addition, to exploit this flaw, an attacker must either compromise an RPM repository or convince an administrator to install an untrusted RPM. It is strongly recommended to only use RPMs fr...

Denial Of Service (DoS)

chromium-browser:bionic is vulnerable to denial of service...

Denial Of Service (DoS)

qt5-qtwebengine is vulnerable to denial of service. The vulnerability exists due to a Heap buffer overflow in WebRTC...

Denial Of Service (DoS)

python3.9 is vulnerable to denial of service. The vulnerability exists due to an improperly handled HTTP response in the HTTP client code of python which may allow a remote attacker, who controls the HTTP server, to make the client script enter an infinite loop, consuming CPU time...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. The vulnerability exists due to the system allowing OS users to cause host OS memory corruption via rtasargs.nargs...

Remote Code Execution (RCE)

ntfs-3g is vulnerable to Remote Code Execution RCE. The vulnerability exists due to a stack buffer overflow...

Information Disclosure

microsoft.aspnetcore.authentication.jwtbearer is vulnerable to information disclosure. The vulnerability exists due to an insecure JWT token that is logged if it cannot be parsed...

Remote Code Execution (RCE)

xstream is vulnerable to remote code execution. An attacker can manipulate the processed input stream and replace or inject objects, that result in execution of arbitrary code loaded from a remote server...

Privilege Escalation

kernel is vulnerable to privilege escalation. The vulnerability exists due to a race condition in the SCTP sockets net/sctp/socket.c which allows an attacker with network service privileges to escalate to root or from the context of an unprivileged user directly if a BPFCGROUPINETSOCKCREATE is...

Man In The Middle (MitM)

ruby2.7 is vulnerable to Man In the Middle Attack. An attacker may bypass the TLS protections by leveraging a network position between the client and the registry to block the StartTLS command, aka a “StartTLS stripping attack.”...

Protection Bypass

The Linux kernel is vulnerable to Protection Bypass. It does not properly enforce the Secure Boot Forbidden Signature Database aka dbx protection mechanism. This affects certs/blacklist.c and certs/systemkeyring.c. A flaw was found in the Linux kernel in certs/blacklist.c, When signature entries...

Denial Of Service (DoS)

wireshark is vulnerable to denial of service. The vulnerability exists due to excessive memory consumption in MS-WSP dissector...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. The ext4 file system implementation contains an integer overflow in ext4escacheextent when lblk + len exceeds 2^32. An attacker is able to crash the kernel by mounting a malicious file system...

Privilege Escalation

kernel is vulnerable to privilege escalation. A refcount leak in llcpsockconnect results in a use-after-free bug which can lead to privilege escalation...

Arbitrary Values

go has arbitrary values. The vulnerability exists due to arbitrary values retrieved from DNS which is not sanitized before including in HTML...

Denial Of Service (DoS)

linux-oracle:groovy is vulnerable to denial of service. The vulnerability exists in drivers/net/ethernet/freescale/gianfar.c due to a negative fragment size is calculated in situations involving an rx queue overrun when jumbo packets which allows an attacker to crash the application via malicious...

Information Disclosure

postgresql is vulnerable to information disclosure. The vulnerability exists through the use of an INSERT ... ON CONFLICT ... DO UPDATE command on a purpose-crafted table, allowing arbitrary bytes of server memory to be read. The CREATE and TEMPORARY privileges on all databases and the CREATE...

Denial Of Service (DoS)

bind is vulnerable to denial of service. The vulnerability exists due to a buffer over-read...

Access Restriction Bypass

Google Chrome is vulnerable to access restriction bypass. Insufficient policy enforcement in extensions in Google Chrome allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension...

Remote Code Execution (RCE)

chromium is vulnerable to remote code execution. The vulnerability exists due to an Out of bounds read in IPC. These vulnerabilities can be exploited if a user visits, or is redirected to, a specially crafted web page...

Denial Of Service (DoS)

github.com/golang/go is vulnerable to denial of service. An infinite loop occurs when using xml.NewTokenDecoder with a custom TokenReader...

Denial Of Service(DoS)

chromium:sid is vulnerable to a denial-of-service vulnerability. An attacker can use a malicious HTTP page to trigger this vulnerability...

Privilege Escalation

grub2 is vulnerable to privilege escalation. The vulnerability exists as variable names present are expanded in the supplied command line into their corresponding variable contents, using a 1kB stack buffer for temporary storage, without sufficient bounds checking. If the function is called with ...

Denial Of Service(DoS)

Jetty is vulnerable to denial of service DoS. The use of multiple Accept headers with a large number of quality causes a high CPU usage, resulting in long durations of CPU processing and crashing of the application...

Web Cache Poisoning

python-django is vulnerable to web cache poisoning. An attacker may separate query parameters using a semicolon ;, causing a difference in the interpretation of the request between the proxy running with default configuration and the server resulting in malicious requests being cached as complete...

Arbitrary Code Execution

facade/ignition is vulnerable to arbitrary code execution. The vulnerability exists through stream wrappers in files that do not end of .blade.php in MakeViewVariableOptionalSolution...