38839 matches found
Denial Of Service (DoS)
firefox is vulnerable to denial of service. Memory corruption due to missing sign-extension for ValueTags on ARM64 allows an attacker to crash the application...
XML External Entity (XXE)
PostgreSQL JDBC Driver is vulnerable to XML external entity attacks. External DTDs are not disabled by default, allowing an attacker to perform XXE attacks and perform request on behalf of the server or retrieve system files via a malicious XML document...
Arbitrary Code Execution
qemu-kvm-rhev is vulnerable to arbitrary code execution. The vulnerability exists in slirp where an out of bounds OOB buffer access while emulating tcp protocols in tcpemu...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. Memory leak in the kernelreadfile function in fs/exec.c allows an attacker to cause a denial of service...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists through a null pointer dereference in the sound/usb/line6/pcm.c...
Information Disclosure
kernel is vulnerable to information disclosure. A flaw in ibuverbspollcq could allow a local, unprivileged user to cause an information leak...
Denial Of Service (DoS)
firefox and thunderbird are vulnerable to denial of service. A flaw was found in the way Thunderbird handled malformed JPEG images. An HTML mail message containing a malicious JPEG image could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user runni...
Arbitrary Code Execution
thunderbird/firefox is vulnerable to arbitrary code execution. Several flaws were found in the processing of malformed HTML content. Malicious HTML content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists as a missing validation check was found in the Linux kernel's macpartition implementation, used for supporting file systems created on Mac OS operating systems. A local attacker could use this flaw to cause a denial of servic...
Same Origin Policy Bypass
WebKitGTK+ is vulnerable to same origin policy bypass. It was found that WebKit did not correctly restrict read access to images created from the "canvas" element. Malicious web content could allow a remote attacker to bypass the same-origin policy and potentially access sensitive image data...
Arbitrary Code Execution
firefox is vulnerable to arbitrary code execution. An attacker is able to exploit the vulnerability within the OS font implementation to execute arbitrary code using malformed OpenType fonts by verifying the font file prior to use...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists as the flaw in sctpprocessunkparam, allowing a remote attacker to send a specially-crafted SCTP packet to an SCTP listening port on a target system, causing a denial of service...
Denial Of Service (DoS)
The kernel package is vulnerable to Denial Of Service DoS. A race condition was found in the mac80211 implementation, a framework used for writing drivers for wireless devices. An attacker could trigger this flaw by sending a Delete Block ACK DELBA packet to a target system, resulting in a remote...
Denial Of Service (DoS)
The kernel is vulnerable to Denial Of Service DoS. An array index error was found in the gdth driver. A local user could send a specially-crafted IOCTL request that would cause a denial of service or, possibly, privilege escalation...
Arbitrary Command Execution
php is vulnerable to arbitrary command execution. The vulnerability exists as it was discovered that the PHP escapeshellcmd function did not properly escape multi-byte characters which are not valid in the locale used by the script. This could allow an attacker to bypass quoting restrictions...
Information Disclosure
kernel is vulnerable to information disclosure. A flaw was found in the Advanced Linux Sound Architecture ALSA. A local user who had the ability to read the /proc/driver/snd-page-alloc file could see portions of kernel memory...
Denial Of Service (DoS)
Mozilla is vulnerable to denial of service DoS. The vulnerability exists through memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7...
HTTP Request Smuggling
tomcat-coyote is vulnerable to HTTP request smuggling. The vulnerability exists due to mishandling of incorrect transfer encoding headers introduced by a regression if server is placed after a reverse proxy...
Remote Code Execution
chakracore is vulnerable to remote code execution. This is due to an uninitialized memory usage error, which would allow an attacker to corrupt memory in such a way that it allows for execution of arbitrary code in the context of the current user. This CVE ID is different from CVE-2020-0673,...
Reflected File Download
spring-web is vulnerable to reflected file download. The filename attribute that is derived from the user-supplied Content-Disposition header is not validated and sanitized, potentially resulting in the downloaded content of the response to be saved and executed as a file by the user's browser...
Sandbox Restrictions Bypass
github.com/opencontainers/runc is vulnerable to sandbox restrictions bypass. An attacker who controls the container image for two containers that share a volume will be able to mount arbitrary volumes in a race condition during container initialization via a symlink that is added to the rootfs...
Denial Of Service (DoS)
Mozilla firefox is vulnerable to denial of service DoS. The vulnerability exists through a use-after-free when retrieving a document in antitracking...
Remote Code Execution (RCE)
solr-velocity is vulnerable to remote code execution RCE. The vulnerability can be caused by loading custom Velocity templates containing malicious code since the solr resource loader in VelocityResponseWriter.java was on by default...
Denial Of Service (DoS)
libtiff.so is vulnerable to denial of service DoS. A heap-based buffer overflow in tifgetimage.c caused by an integer overflow allows an attacker to crash the application via a malicious RGBA image, or potentially execute arbitrary code on the system...
Denial Of Service (DoS)
PHP is vulnerable to denial of service DoS. A NULL pointer dereference is possible due to mishandling of ldapgetdn return value, allowing DoS via malicious LDAP server reply...
Directory Traversal
LibreOffice is vulnerable to directory traversal. Arbitrary python functions in arbitrary modules on the filesystem can be executed without warning...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists through a NULL pointer dereference in drivers/scsi/megaraid/megaraidsasbase.c leading to DoS...
Denial Of Service (DoS)
kernel is vulneralbe to denial of service DoS. The vulnerability exists as TLB flush happens too late on mremap...
Prototype Pollution
lodash is vulnerable to prototype pollution. The vulnerability exists due to the ability to inject properties in .defaultsDeep, which allows DoS, and possibly other forms of attacks...
Memory Corruption
Linux kernel is vulnerable to memory corruption vulnerability. The vulnerability exists in the function ext4getgroupinfo of the component EXT4 File System. A local user could cause an out-of-bound in the function ext4getgroupinfo resulting a denial of service condition...
Information Disclosure
PHP is vulnerable to information disclosure attacks. A remote user could trigger an information leak in the date extension's timelibmeridian parsing code to obtain potentially sensitive information from the interpreter...
Information Disclosure
PHP is vulnerable to information disclosure vulnerability. This is because an error in the date extension's timelibmeridian handling of 'front of' and 'back of' directives could be used by attackers able to supply date strings to leak information from the interpreter, related to...
Denial Of Service (DoS)
MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon mysqld and many client programs and libraries. This update fixes several vulnerabilities in the MySQL database server. Information about these flaws can be found on the Oracle Critical Patch Update...
Denial Of Service (DoS)
Linux kernel is vulnerable to denial of service DOS attacks. This vulnerability exists in NFSv2/NFSv3 server in the nfsd subsystem in the Linux kernel. A remote user or program could use this flaw to crash the kernel, resulting in an application crash...
Denial Of Service (DoS)
Apache HTTP Server is vulnerable to denial of serviceDoS attacks. A remote attacker can exploit a flaw in the modauthdigest module of httpd which does not properly check memory allocation failures causing httpd child processes to repeatedly crash if the server used HTTP digest authentication...
Information Disclosure
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The rh-php56 packages provide a recent stable release of PHP with PEAR 1.9.5 and enhanced language features including constant expressions, variadic functions, arguments unpacking, and the interactive debuger. T...
Denial Of Service (DoS)
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The rh-php56 packages provide a recent stable release of PHP with PEAR 1.9.5 and enhanced language features including constant expressions, variadic functions, arguments unpacking, and the interactive debuger. T...
Denial Of Service (DoS)
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The rh-php56 packages provide a recent stable release of PHP with PEAR 1.9.5 and enhanced language features including constant expressions, variadic functions, arguments unpacking, and the interactive debuger. T...
Denial Of Service (DoS)
KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on AMD64 and Intel 64 systems. The qemu-kvm package provides the user-space component for running virtual machines using KVM. A heap-based buffer overflow flaw was discovered in the way QEMU's AMD PC-Net II Ethernet...
Arbitrary Code Execution And Denial Of Service (DoS)
GNU C Library is vulnerable to arbitrary code execution and denial of service. An context-dependent attacker could trigger an out-of-bounds heap-memory access via the size argument to the hcreater function to cause a denial of service or possibly execute arbitrary code...
Arbitrary Code Execution
TigerVNC is vulnerable to arbitrary code execution attacks. A remote user can send a specially crafted RRE message with subrectangle outside framebuffer boundaries via the ModifiablePixelBuffer::fillRect function to trigger a buffer overflow and execute arbitrary code on the target system...
Information Disclosure
The libxml2 library is a development toolbox providing the implementation of various XML standards. Several denial of service flaws were found in libxml2, a library providing support for reading, modifying, and writing XML and HTML files. A remote attacker could provide a specially crafted XML or...
Improper Signature Validation
The GnuTLS library provides support for cryptographic algorithms and for protocols such as Transport Layer Security TLS. It was found that GnuTLS did not check activation and expiration dates of CA certificates. This could cause an application using GnuTLS to incorrectly accept a certificate as...
Denial Of Service (DoS)
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The php54 packages provide a recent stable release of PHP with the PEAR 1.9.4, APC 3.1.15, and memcache 3.0.8 PECL extensions, and a number of additional utilities. The php54 packages have been upgraded to...
Denial Of Service (DoS)
ntp is vulnerable to denial of service. The fix for CVE-2014-9750 was incomplete which resulted in incorrect value length checks in ntpcrypto.c. A packet with particular autokey operations that contained malicious data was not always being completely validated. A remote attacker could use a...
Denial Of Service (DoS)
file is vulnerable to denial of service. Multiple flaws were found in the way file parsed Executable and Linkable Format ELF files. A remote attacker could use these flaws to cause file to crash, disclose portions of its memory, or consume an excessive amount of system resources...
Denial Of Service (DoS)
The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server is operating correctly. A denial of...
Use-After-Free
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Multiple flaws were discovered in the way PHP performed object unserialization. Specially crafted input processed by the unserialize function could cause a PHP application to crash or, possibly, execute arbitrar...
Buffer Over-Read
Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...
Man-In-The-Middle (MitM)
OpenShift Enterprise by Red Hat is the company's cloud computing Platform-as-a-Service PaaS solution designed for on-premise or private cloud deployments. The following security issues are addressed with this release: An authorization flaw was discovered in Kubernetes; the API server did not...