Lucene search
+L
VeracodeMost viewed

26180 matches found

Veracode
Veracode
•added 2021/11/09 3:06 p.m.•42 views

Directory Traversal

chrome is vulnerable to directory traversal. The vulnerability exists due to Insufficient validation of untrusted input Downloads...

5.5CVSS4.5AI score0.00587EPSS
SaveExploits0References4Affected Software3
Veracode
Veracode
•added 2021/10/25 5:58 p.m.•42 views

Denial Of Service (DoS)

linux is vulnerable to denial of service. The vulnerability exists due to an out-of-bounds OOB memory read flaw was found in the Qualcomm IPC router protocol in the Linux kernel...

7.1CVSS3.6AI score0.0072EPSS
SaveExploits1References12Affected Software5
Veracode
Veracode
•added 2021/10/20 6:46 a.m.•42 views

Cross-Site Scripting (XSS)

OWASP Java HTML Sanitizer is vulnerable to cross-site scripting. The vulnerability exists due to a lack of proper enforcement of policies which allows an attacker to inject maliciously crafted code via the SELECT, STYLE, and OPTION tag...

9.8CVSS1.1AI score0.03057EPSS
SaveExploits1References5Affected Software2
Veracode
Veracode
•added 2021/09/30 5:57 a.m.•42 views

Privilege Escalation

zoneminder is vulnerable to privilege escalation. The vulnerability exists due to a Time-of-check Time-of-use TOCTOU Race Condition...

7.5CVSS2.9AI score0.00914EPSS
SaveExploits1References2Affected Software1
Veracode
Veracode
•added 2021/09/15 2:03 a.m.•42 views

Denial Of Service (DoS)

chromium:edge is vulnerable to denial of service. Use after free in Extensions API in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS2.6AI score0.04136EPSS
SaveExploits0References8Affected Software2
Veracode
Veracode
•added 2021/09/10 6:15 a.m.•42 views

Denial Of Service(DoS)

netty-codec is vulnerable to denial of service. The vulnerability exists due to lack of allocation size restriction on the decompressed output data in the Bzip2 decompression decoder function, leading to an OOME...

7.5CVSS3.4AI score0.06745EPSS
SaveExploits0References21Affected Software28
Veracode
Veracode
•added 2021/08/24 6:42 a.m.•42 views

Remote Code Execution (RCE)

xstream is vulnerable to remote code execution. An attacker is able to exploit the vulnerability injecting arbitrary code via the processed input stream...

8.5CVSS5.7AI score0.04735EPSS
SaveExploits1References15Affected Software4
Veracode
Veracode
•added 2021/08/23 2:02 a.m.•42 views

Denial Of Service

FFmpeg is vulnerable to denial of service. The vulnerability exists due to a null pointer dereference passed as argument to libavformat/aviobuf.c...

7.5CVSS3.6AI score0.01079EPSS
SaveExploits0References3Affected Software2
Veracode
Veracode
•added 2021/06/14 8:25 a.m.•42 views

Denial Of Service (DoS)

pdfbox is vulnerable to denial of service. An attacker is able to cause an infinite loop by submitting a malicious PDF file...

5.5CVSS2.9AI score0.03054EPSS
SaveExploits0References28Affected Software2
Veracode
Veracode
•added 2021/06/13 8:01 p.m.•42 views

Denial Of Service (DoS)

chromium:edge is vulnerable to denial of service...

8.8CVSS2.5AI score0.01236EPSS
SaveExploits0References8Affected Software3
Veracode
Veracode
•added 2021/06/12 6:21 p.m.•42 views

Arbitrary Code Execution

htmldoc is vulnerable to arbitrary code execution. A double-free in the function pspdfexport in ps-pdf.cxx may result in a write-what-where condition, allowing an attacker to execute arbitrary code and denial of service...

9.8CVSS3.9AI score0.02436EPSS
SaveExploits1References4Affected Software1
Veracode
Veracode
•added 2021/05/24 9:30 a.m.•42 views

Denial Of Service (DoS)

linux-aws:groovy is vulnerable to denial of service. eBPF implementation in the Linux kernel did not properly verify that a BPF program only reserved as much memory for a ring buffer as was allocated. A local attacker could use this to cause a denial of service system crash or execute arbitrary...

7.8CVSS4.5AI score0.0055EPSS
SaveExploits0References7Affected Software4
Veracode
Veracode
•added 2021/05/20 3:25 p.m.•42 views

Denial Of Service (DoS)

sqlite is vulnerable to denial of service. The vulnerability exists due to select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant propagation...

5.5CVSS2.3AI score0.01027EPSS
SaveExploits1References26Affected Software1
Veracode
Veracode
•added 2021/05/12 5:18 a.m.•42 views

Insecure Deserialization

wire allows insecure deserialization. The way the type information is handled in its serialization format allows an attacker to pass malicious payloads a different type for the receiving end to the deserializer and potentially cause unexpected application behavior...

9.1CVSS3.3AI score0.01584EPSS
SaveExploits1References2Affected Software1
Veracode
Veracode
•added 2021/05/04 10:34 p.m.•42 views

Privilege Escalation

exim4 is vulnerable to privilege escalation. The vulnerability exists due to insufficient validation of user-supplied input when processing new line characters. A remote attacker can inject a new line character into the spool header file and modify the mail queue...

8.8CVSS4.5AI score0.04139EPSS
SaveExploits1References2Affected Software7
Veracode
Veracode
•added 2021/04/29 12:05 p.m.•42 views

CVE-2021-28148

One of the usage insights HTTP API endpoints in Grafana Enterprise 6.x before 6.7.6, 7.x before 7.3.10, and 7.4.x before 7.4.5 is accessible without any authentication. This allows any unauthenticated user to send an unlimited number of requests to the endpoint, leading to a denial of service DoS...

7.5CVSS2.3AI score0.03497EPSS
SaveExploits0References9Affected Software1
Veracode
Veracode
•added 2021/03/17 4:36 a.m.•42 views

Out-of-bounds Write

kernel is vulnerable to out-of-bounds write. The vulnerability exists in set of files which allows an attacker to make out-of-bounds writes...

6.8CVSS7.1AI score0.00504EPSS
SaveExploits0References10Affected Software2
Veracode
Veracode
•added 2021/03/17 4:06 a.m.•42 views

Cross-site Scripting (XSS)

pki-core is vulnerable to cross-site scripting XSS. An attacker could inject a specially crafted value that will be executed on the victim's browser if an attacker has a valid nonce...

4.7CVSS3.7AI score0.00677EPSS
SaveExploits0References8Affected Software1
Veracode
Veracode
•added 2021/03/03 12:36 a.m.•42 views

Arbitrary Code Execution

grub2 is vulnerable to arbitrary code execution...

8.2CVSS3.6AI score0.00605EPSS
SaveExploits0References6Affected Software3
Veracode
Veracode
•added 2021/02/10 7:31 a.m.•42 views

Denial Of Service (DoS)

Linux kernel vulnerable to heap-based buffer overflow. The vulnerability exists in the marvell wifi chip driver in Linux kernel which allows local users to cause a denial of servic or possibly execute arbitrary code...

7.8CVSS8.5AI score0.00869EPSS
SaveExploits1References31Affected Software1
Veracode
Veracode
•added 2021/02/04 6:00 a.m.•42 views

Arbitrary Code Execution

chromium is vulnerable to arbitrary code execution. A use-after-free error in the Fonts component allows a remote attacker to execute arbitrary code on the target system when the victim visits a malicious web page...

8.8CVSS5.4AI score0.01039EPSS
SaveExploits0References9Affected Software2
Veracode
Veracode
•added 2021/01/11 8:09 p.m.•42 views

Sandbox Restrictions Bypass

chromium is vulnerable to sandbox restrictions bypass. A use-after-free in payments allows a remote attacker who has compromised the renderer process to perform a sandbox escape via a malicious HTML page...

9.6CVSS3AI score0.01317EPSS
SaveExploits0References9Affected Software1
Veracode
Veracode
•added 2021/01/08 7:27 a.m.•42 views

Arbitrary Code Execution

jackson-databind is vulnerable to remote code execution RCE. The vulnerability exists through the lack of sanitization of the org.apache.commons.dbcp2.cpdsadapter.DriverAdapterCPDS class through deserialization...

8.1CVSS4.9AI score0.05041EPSS
SaveExploits2References10Affected Software3
Veracode
Veracode
•added 2020/12/06 4:38 a.m.•42 views

Arbitrary Code Execution

SQLite is vulnerable to arbitrary code execution. A remote attacker is able to execute arbitrary code via a buffer overflow when the FTS3 extension is enabled...

8.1CVSS6.4AI score0.10312EPSS
SaveExploits1References36Affected Software3
Veracode
Veracode
•added 2020/12/06 4:24 a.m.•42 views

Buffer Overflow

Buffer overflow in the listfiles function in list.c in Info-Zip UnZip 6.0 allows remote attackers to cause a denial of service crash via vectors related to the compression method...

4CVSS5.5AI score0.01453EPSS
SaveExploits0References7Affected Software1
Veracode
Veracode
•added 2020/12/06 4:14 a.m.•42 views

Arbitrary Code Execution

imagemagick is vulnerable to arbitrary code execution. A heap-based buffer overflow in WriteOnePNGImage in coders/png.c allows an attacker to execute arbitrary code via a malicious file...

5.5CVSS5.5AI score0.01016EPSS
SaveExploits1References4Affected Software4
Veracode
Veracode
•added 2020/12/06 3:20 a.m.•42 views

Denial Of Service (DoS)

QEMU is vulnerable to denial of service attacks. An unauthenticated remote attacker could kill the QEMU process on the host due to an assertion failure in the network packet processing, resulting in a denial of service condition in nettxpktaddrawfragment in hw/net/nettxpkt.c...

3.8CVSS3.5AI score0.00377EPSS
SaveExploits0References9Affected Software3
Veracode
Veracode
•added 2020/12/06 3:13 a.m.•42 views

Arbitrary Code Execution

libapache2-mod-fcgid is vulnerable to arbitrary code execution. A heap-based buffer overflow in the fcgidheaderbucketread function in fcgidbucket.c allows remote attackers to execute arbitrary code on the host OS...

7.5CVSS7.3AI score0.13246EPSS
SaveExploits0References11Affected Software1
Veracode
Veracode
•added 2020/12/04 4:26 p.m.•42 views

Denial Of Service (DoS)

nss is vulnerable to denial of service DoS. The vulnerability exists through the way NSS handled CCS ChangeCipherSpec messages in TLS 1.3...

7.5CVSS2.8AI score0.03901EPSS
SaveExploits0References15Affected Software1
Veracode
Veracode
•added 2020/12/01 4:33 a.m.•42 views

Denial Of Service (DoS)

mysql is vulnerable to denial of service DoS. An attacker having high privilege with network access via multiple protocols can compromise MySQL Server...

4.9CVSS3.8AI score0.02653EPSS
SaveExploits0References17Affected Software4
Veracode
Veracode
•added 2020/11/23 11:16 a.m.•42 views

Privilege Escalation

Moodle is vulnerable to privilege escalation. Users students are able to add entries within groups they do not belong to...

6.5CVSS4.3AI score0.01345EPSS
SaveExploits0References7Affected Software1
Veracode
Veracode
•added 2020/11/03 7:36 a.m.•42 views

Cross-site Scripting (XSS)

wordpress is vulnerable to Cross-site Scripting XSS. The vulnerability exists in the addLoadEvent function in admin-header.php where an attacker is able to inject malicious script via global variables and get it executed when a user visits the page...

6.1CVSS7.2AI score0.01721EPSS
SaveExploits0References10Affected Software3
Veracode
Veracode
•added 2020/10/25 12:39 p.m.•42 views

Denial Of Service (DoS)

linux-oem-osp1 is vulnerable to denial of service DoS. The vulnerability exists through a heap based buffer overflow in the bluetooth implementation...

6.5CVSS2.6AI score0.02223EPSS
SaveExploits0References2Affected Software3
Veracode
Veracode
•added 2020/10/01 3:52 a.m.•42 views

Arbitrary Code Execution

WebKitGTK+ is vulnerable to arbitrary code execution. Processing maliciously crafted web content may lead to arbitrary code execution...

8.8CVSS4.3AI score0.04053EPSS
SaveExploits1References11Affected Software1
Veracode
Veracode
•added 2020/10/01 3:52 a.m.•42 views

Arbitrary Code Execution

WebKitGTK+ is vulnerable to arbitrary code execution. A memory corruption issue allows an attacker to execute arbitrary code on the host OS...

8.8CVSS4.4AI score0.01797EPSS
SaveExploits0References10Affected Software1
Veracode
Veracode
•added 2020/09/21 6:39 a.m.•42 views

Arbitrary Code Execution

GraphicsMagick is vulnerable to arbitrary code execution. A segmentation violation in the WriteMAPImage function in coders/map.c when processing a non-colormapped image allows an attacker to execute arbitrary code on the host OS. This vulnerability is different from CVE-2017-11642...

8.8CVSS4.2AI score0.01766EPSS
SaveExploits0References6Affected Software1
Veracode
Veracode
•added 2020/09/21 6:36 a.m.•42 views

Privilege Escalation

android kernel is vulnerable to privilege escalation. A use-after-free in the video driver allows an attacker to obtain higher privileges...

7CVSS4.3AI score0.00171EPSS
SaveExploits0References2Affected Software3
Veracode
Veracode
•added 2020/09/21 6:32 a.m.•42 views

Inappropriate Redirect

squid3:xenial is performing inappropriate redirect. An issue was discovered when the appenddomain setting is used because the appended characters do not properly interact with hostname length restrictions. Due to incorrect message processing, it can inappropriately redirect traffic to origins it...

6.1CVSS3AI score0.07239EPSS
SaveExploits0References13Affected Software4
Veracode
Veracode
•added 2020/09/21 6:25 a.m.•42 views

Remote Code Execution (RCE)

php7.0 is vulnerable to remote code execution RCE. University of Washington IMAP Toolkit 2007f on UNIX, as used in imapopen in PHP and other products, launches an rsh command by means of the imaprimap function in c-client/imap4r1.c and the tcpaopen function in osdep/unix/tcpunix.c without...

7.5CVSS4.2AI score0.9523EPSS
SaveExploits5References21Affected Software2
Veracode
Veracode
•added 2020/09/21 6:24 a.m.•42 views

Denial Of Service (DoS)

linux is vulnerable to denial of service DoS. There is a net/ipv4/tcpinput.c signed integer overflow in tcpackupdatertt when userspace writes a very large integer to /proc/sys/net/ipv4/tcpminrttwlen, leading to a denial of service or possibly unspecified other impact, aka CID-19fad20d15a6...

9.8CVSS6.4AI score0.03431EPSS
SaveExploits0References6Affected Software2
Veracode
Veracode
•added 2020/09/21 6:18 a.m.•42 views

Denial Of Service (DoS)

binutils:bionic is vulnerable to denial of service DoS. The vulnerability exists in the bfdgenericreadminisymbols function of syms.c in the Binary File Descriptor BFD, allowing a malicious user to cause an application crash via a crafted ELF file...

5.5CVSS2.3AI score0.01819EPSS
SaveExploits1References8Affected Software1
Veracode
Veracode
•added 2020/09/11 5:01 a.m.•42 views

Man-in-the-Middle (MitM)

activemq-broker is vulnerable to man-in-the-middleMitM attack. It binds the server to jmxrmi entry after creating JMX RMI registry using LocateRegistry.createRegistry, leading to the connection to the registry without authentication and allowing rebinding of jmxrmi to any other entity. Therefore,...

5.9CVSS2.6AI score0.04544EPSS
SaveExploits0References9Affected Software2
Veracode
Veracode
•added 2020/08/18 5:43 a.m.•42 views

Server-side Request Forgery (SSRF)

phpBB is vulnerable to server side request forgery SSRF. The vulnerability exists as it does not properly limit the dimensions of images posted, allowing an attacker to use the image dimension check function to send requests on behalf of the server...

5.8CVSS3.3AI score0.00966EPSS
SaveExploits0References2Affected Software2
Veracode
Veracode
•added 2020/08/06 9:40 p.m.•42 views

Denial Of Service (DoS)

VLC is vulnerable to denial of service DoS. The vulnerability exists as an exploitable denial-of-service vulnerability exists in the resource record-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing compressed labels in mDNS messages, the compression pointer is followed without...

7.5CVSS4.6AI score0.02457EPSS
SaveExploits1References3Affected Software1
Veracode
Veracode
•added 2020/08/06 9:34 p.m.•42 views

Amplification Attacks

PowerDNS Recursor is vulnerable toamplification attacks. It does not sufficiently defend against amplification attacks. An issue in the DNS protocol has been found that allow malicious parties to use recursive DNS services to attack third party authoritative name servers. The attack uses a crafte...

7.5CVSS4.5AI score0.04372EPSS
SaveExploits0References8Affected Software1
Veracode
Veracode
•added 2020/08/06 6:19 a.m.•42 views

Denial Of Service (DoS)

github.com/etcd-io/etcd is vulnerable to denial of service. An attacker is able to cause a panic in the decodeRecord method and a denial of service condition in a RAFT participant when decoding the WAL by forging a large frame size...

6.5CVSS3.1AI score0.01291EPSS
SaveExploits0References5Affected Software1
Veracode
Veracode
•added 2020/07/22 3:59 a.m.•42 views

Information Disclosure

kernel is vulnerable to information disclosure. A flaw was found in the Linux kernels implementation of IBPB Indirect Branch Prediction Barrier. The IBPB mitigation will be disabled when STIBP is not available or when Enhanced Indirect Branch Restricted Speculation IBRS is available...

5.5CVSS1.8AI score0.00371EPSS
SaveExploits0References4Affected Software2
Veracode
Veracode
•added 2020/06/24 3:08 a.m.•42 views

Remote Code Execution

docker is vulnerable to remote code execution. The vulnerability exists due to a security regression of CVE-2019-5736 due to inclusion of vulnerable runc...

8.8CVSS3.4AI score0.98452EPSS
SaveExploits35References8Affected Software1
Veracode
Veracode
•added 2020/06/13 3:28 a.m.•42 views

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS.It is possible because of brcmfmac frame validation bypass...

8.3CVSS3AI score0.03286EPSS
SaveExploits0References9Affected Software1
Veracode
Veracode
•added 2020/05/26 5:54 a.m.•42 views

Arbitrary Code Execution

commons-configuration2 is vulnerable to arbitrary code execution. The package uses a third-party library that, by default, allows the instantiation of arbitrary classes to parse if the YAML contains special statements. This allows an attacker to execute arbitrary code on the host application if t...

10CVSS6.4AI score0.06849EPSS
SaveExploits0References9Affected Software1
Total number of security vulnerabilities5000