Cross-site Scripting (XSS)

modx/revolution is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper file validation due to authenticated users being able to upload SVG files containing malicious JavaScript, which executes in victims' browsers when viewing the profile image...

SQL Injection

opencart/opencart is vulnerable to SQL Injection. The vulnerability is due to insufficient validation in the Divido payment extension, allowing an anonymous unauthenticated user to exploit SQL injection to gain unauthorized access to the backend database...

Local File Inclusion

voila is vulnerable to Local File Inclusion. The vulnerability is due to improper handling of file paths within app.py which allows an attacker to access readable files on the server's filesystem...

Server-Side Request Forgery (SSRF)

org.apache.cxf, cxf-rt-databinding-aegis is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due improper URL sanitisation which allows an attacker to perform SSRF attacks on web services that take at least one parameter of any type. Users of other data bindings, including the...

Denial Of Service (DoS)

Django is vulnerable to Denial Of Service DoS. The vulnerability is due to inefficient string processing within the intcomma template filter when a long string is parsed. This issue can be exploited by an attacker to cause DoS...

Arbitrary File Read

Jenkins-core is vulnerable to Arbitrary File Read. The vulnerable is due to the command parser improperly substituting the @ character followed by a file path in an argument with the content of the specified file. This flaw allows unauthenticated attackers to read arbitrary files on the Jenkins...

Denial Of Service (DOS)

QEMU virtual machine monitor is vulnerable to Denial Of Service DOS. The vulnerability is caused due to a DMA reentrancy issue leading to a use-after-free error found in the e1000e NIC emulation code. This can lead to a privileged guest user crash the QEMU process on the host, resulting in a Deni...

Path Traversal

golang is vulnerable to Path Traversal. The vulnerability is due to a lack of file path validation in pathwindows.go. This can allows an attacker to access arbitrary locations on a Windows system...

Remote Code Execution

activemq is vulnerable to Remote Code Execution. The vulnerability is due to BaseDataStreamMarshaller.java as there is no class validation and does not verify that the loaded class is a valid Throwable. This allows an attacker to manipulate serialized class types within the OpenWire protocol,...

Authorization HTTP Header Leakage

Urllib3 is vulnerable to Information Disclosure. The vulnerability exists in cross-origin redirects, due to authorization HTTP header leakage. This can result in the authorization header being leaked to unintended hosts after a redirect, which results in information disclosure. This vulnerability...

Authorization Bypass

Org.apache.zookeeper: zookeeper is vulnerable to authorization bypass. This vulnerability exists due to improper implementation of a User-Controlled Key for user authentication, allowing an attacker to gain access to the system and perform unauthorized actions. Note that this vulnerability is onl...

Remote Code Execution

Microsoft .NET 7.0 and .NET 6.0 are vulnerable to Remote Code Execution RCE. The vulnerability exists in Microsoft.DiaSymReader.Native.amd64.dll when reading a corrupted PDB file which may lead to RCE...

Arbitrary Code Execution

langchain is vulnerable to Arbitrary Code Execution. The vulnerability exists due to a lack of validation in the loadprompt parameter, which allows an attacker to execute malicious code into the system...

Remote Code Execution (RCE)

redis is vulnerable to Remote Code Execution RCE. This vulnerability occurs due to a flaw in the way that Redis handles cJSON and cmsgpack libraries. An attacker can exploit this vulnerability to cause Redis to crash or to execute arbitrary code...

Credentials Leaks

cas-server-support-x509-core is vulnerable to Credentials Leaks. The vulnerability exists because the prepareConnectionFactory function of LdaptiveResourceCRLFetcher.java does not properly validate the ldapURL parameter provided by the certificate, leaking the credentials for LDAP authentication ...

Authorization Bypass

libssh.so is vulnerable to Authorization Bypass. The vulnerability exists in the pkicrypto.c because the pkiverifydatasignature can accept invalid signatures when some memory allocations fail...

File Upload Validation Bypass

Django is vulnerable to File Upload Validation Bypass. The vulnerability exists due to the FileInput class in widgets.py because uploading multiple files using one form field has never been officially supported by forms.FileField or forms.ImageField as only the last uploaded file was validated,...

Denial Of Services (DoS)

Linux kernel is vulnerable to Denial Of Services DoS. The vulnerability exists due to the heap-based buffer overflow in the library due to the lack of proper validation of the length of user-supplied data before copying it to a fixed length, which allows an attacker to cause an application crash ...

Use After Free

chromium is vulnerable to Use After Free. Vulnerability is available within 'WebProtect' in 'Google Chrome' which allows an attacker to commit heap corruption via a crafter HTML page...

Information Disclosure

github.com/mattermost/mattermost-server is vulnerable to Information Disclosure. The vulnerability exists because the library fails to sanitize the related WebSocket event sent to currently connected clients, which allows an attacker to see the name, display name, description, and other data when...

Authorization Bypass

openssl is vulnerable to Authorization Bypasses. Invalid certificate policies in leaf certificates are ignored by OpenSSL, allowing malicious CA to bypass policy checking. Policy processing is disabled by default, but can be enabled by passing the '-policy' argument to command line utilities or...

Denial Of Services (DoS)

graphql-java is vulnerable to Denial Of Services DoS. An attacker can send a maliciously crafted GraphQL query that causes excessive stack consumption, which can lead to an application crash...

Path Traversal

curl is vulnerable to Path Traversal. The library supports SFTP transfers with a tilde character as the first path element to denote a path relative to the user's home directory. However, due to a bug, this can be used wrongly when used as a prefix in the first element...

Heap-Based Buffer Overflow

ring:sid is vulnerable to Heap-Based Buffer Overflow. An attacker is able to cause buffer over read by parsing a specially crafted STUN message with unknown attribute via multiple functions. This only affects applications using STUN including PJNATH and PJSUA-LIB...

Information Disclosure

kernel is vulnerable to Information Disclosure. A local user is able to read random memory from the kernel space due to the way a user calls DMAFROMDEVICE...

Remote Code Execution (RCE)

xorg-server is vulnerable to remote code execution. The vulnerability exists because the handler for the XIPassiveUngrab request accesses out-of-bounds memory when invoked with a high keycode or button code...

Denial Of Service (DoS)

cn.hutool:hutool-core is vulnerable to denial of service DoS attacks. A malicious user is able to cause excessive resource consumption due to improper decompression mechanisms in multiple functions of ZipUtil.java, resulting in an application crash...

Type Confusion

qt5-qtwebengine is vulnerable to type confusion. A remote attacker is able to potentially exploit heap corruption via a crafted HTML page resulting in type confusion vulnerability...

Information Disclosure

Liferay Portal is vulnerable to information disclosure. The vulnerability exists because of including the LDAP credential in the page URL when paginating through the list of users which allows an attacker to access to the request logs to see the LDAP credential...

Authorization Bypass

Spring Security Web is vulnerable to Authorization Bypass. The vulnerability exists in AuthorizationFilter because it incorrectly extends OncePerRequestFilter which allows an attacker to bypass authorization rules via forward or include dispatcher types...

Improper Verification Of Cryptographic Signature

Passport-saml is vulnerable to improper cryptographic signature verification. A remote attacker is able to bypass SAML authentication via an arbitrary IDP signed XML element, due to improper checks for a valid top-level signature in saml.ts...

Heap-based Buffer Overflow

tcppreplay is vulnerable to heap-based buffer overflow. The vulnerability exists in the parsempls in get.c which allows an attacker to cause buffer overflows...

Information Disclosure

squid is vulnerable to information disclosure. The vulnerability exits due to inconsistent handling of internal URIs, which allows an attacker to gain access to cache manager information in the file system via bypassing the manager ACL protection...

Deserialization Of Untrusted Data

apache-geode is vulnerable to deserialization of untrusted data. The vulnerability exists because the serialization filtering is not properly configured for JMX/RMI which allows an attacker to to inject and execute arbitrary code through the untrusted data...

Insecure Token

An issue was found in fts5UnicodeTokenize in ext/fts5/fts5tokenize.c in Sqlite. A unicode61 tokenizer configured to treat unicode "control-characters" class Cc, was treating embedded nul characters as tokens. The issue was fixed in sqlite-3.34.0 and later...

Privilege Escalation

moodle/moodle is vulnerable to privilege escalation. The vulnerability exists due to application does not properly impose security restrictions in assigning roles which allows a remote attacker to escalate privileges on the system...

Command Injection

s3-kilatstorage is vulnerable to command injection. The vulnerability exists due to a lack of sanitization of the input argument allowing an attacker to inject maliciously crafted OS command into the system...

Heap Buffer Overflow

chromium is vulnerable to a Heap Buffer Overflow. The vulnerability allows an attacker to crash the system through potentially exploit heap corruption via a crafted HTML page...

Timing Attack

@fastify/bearer-auth is vulnerable to timing attacks. The vulnerability exists because the timingSafeEqual functionality in the compare function of plugin.js does not securely perform a constant-time comparison against the length of the bearer token, allowing an attacker to guess the length of th...

HTTP Request Smuggling

llhttp is vulnerable to HTTP request smuggling. The vulnerability exists because the http.js does not properly handle the CRLF sequence, allowing an attacker to smuggle HTTP requests by submitting LF characters without CR...

SQL Injection

django is vulnerable to SQL injection. An attacker is able to execute arbitrary SQL commands via the Trunc and Extract database functions which allows an attacker to execute arbitrary sql queries...

Remote Code Execution (RCE)

concrete5/core is vulnerable to remote code execution. The vulnerability exists due to insecure http requests which allow an attacker to inject and execute arbitrary codes into the system...

Information Disclosure

moodle is vulnerable to information disclosure. The vulnerability exists due to the $hiddenfields not properly set in user/profile.php and in user/view.php allowing the description user field to be seen even when it is set to hidden...

Denial Of Service (DoS)

FreeType is vulnerable to denial of service. The vulnerability exists in sfntinitface function due to a segment violation which allows an attacker to cause an application crash...

Privilege Escalation

virtualbox is vulnerable privilege escalation. The vulnerability exists due to a lack of validation of authentication...

Authentication Bypass

ngxhttpluamodule is vulnerable to authentication bypass. The vulnerability exists because it doesn't properly restrict the user inputs which allows an attacker to insert unsafe characters in an argument when using the API to mutate a URI, or a request or response header...

Cross-site Scripting (XSS)

privatebin is vulnerable to cross-site scripting. No sanitization in handling Attachment before sending for preview in SVG in AttachmentViewer allows malicious script execution in instance context...

Denial Of Service (DoS)

Red Hat is vulnerable to denial of service. The deprecated compatibility function clntcreate in the sunrpc module of the GNU C Library aka glibc through 2.34 copies its hostname argument on the stack without validating its length, which may result in a buffer overflow, potentially resulting in a...

SQL Injection

moodle/moodle is vulnerable to SQL Injection. The vulnerability exists due to improper configuration in the getoptions function of awardcriteriaprofile.php which allows an attacker to inject malicious sql queries...

Information Disclosure

moodle/moodle is vulnerable to information exposure. The vulnerability exists due to a lack of sanitization in output field in the lib.php file, allowing to read sensitive information in the system...