Directory Traversal

chrome is vulnerable to directory traversal. The vulnerability exists due to Insufficient validation of untrusted input Downloads...

Denial Of Service (DoS)

linux is vulnerable to denial of service. The vulnerability exists due to an out-of-bounds OOB memory read flaw was found in the Qualcomm IPC router protocol in the Linux kernel...

Cross-Site Scripting (XSS)

OWASP Java HTML Sanitizer is vulnerable to cross-site scripting. The vulnerability exists due to a lack of proper enforcement of policies which allows an attacker to inject maliciously crafted code via the SELECT, STYLE, and OPTION tag...

Privilege Escalation

zoneminder is vulnerable to privilege escalation. The vulnerability exists due to a Time-of-check Time-of-use TOCTOU Race Condition...

Denial Of Service (DoS)

chromium:edge is vulnerable to denial of service. Use after free in Extensions API in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Denial Of Service(DoS)

netty-codec is vulnerable to denial of service. The vulnerability exists due to lack of allocation size restriction on the decompressed output data in the Bzip2 decompression decoder function, leading to an OOME...

Remote Code Execution (RCE)

xstream is vulnerable to remote code execution. An attacker is able to exploit the vulnerability injecting arbitrary code via the processed input stream...

Denial Of Service

FFmpeg is vulnerable to denial of service. The vulnerability exists due to a null pointer dereference passed as argument to libavformat/aviobuf.c...

Denial Of Service (DoS)

pdfbox is vulnerable to denial of service. An attacker is able to cause an infinite loop by submitting a malicious PDF file...

Denial Of Service (DoS)

chromium:edge is vulnerable to denial of service...

Arbitrary Code Execution

htmldoc is vulnerable to arbitrary code execution. A double-free in the function pspdfexport in ps-pdf.cxx may result in a write-what-where condition, allowing an attacker to execute arbitrary code and denial of service...

Denial Of Service (DoS)

linux-aws:groovy is vulnerable to denial of service. eBPF implementation in the Linux kernel did not properly verify that a BPF program only reserved as much memory for a ring buffer as was allocated. A local attacker could use this to cause a denial of service system crash or execute arbitrary...

Denial Of Service (DoS)

sqlite is vulnerable to denial of service. The vulnerability exists due to select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant propagation...

Insecure Deserialization

wire allows insecure deserialization. The way the type information is handled in its serialization format allows an attacker to pass malicious payloads a different type for the receiving end to the deserializer and potentially cause unexpected application behavior...

Privilege Escalation

exim4 is vulnerable to privilege escalation. The vulnerability exists due to insufficient validation of user-supplied input when processing new line characters. A remote attacker can inject a new line character into the spool header file and modify the mail queue...

CVE-2021-28148

One of the usage insights HTTP API endpoints in Grafana Enterprise 6.x before 6.7.6, 7.x before 7.3.10, and 7.4.x before 7.4.5 is accessible without any authentication. This allows any unauthenticated user to send an unlimited number of requests to the endpoint, leading to a denial of service DoS...

Out-of-bounds Write

kernel is vulnerable to out-of-bounds write. The vulnerability exists in set of files which allows an attacker to make out-of-bounds writes...

Cross-site Scripting (XSS)

pki-core is vulnerable to cross-site scripting XSS. An attacker could inject a specially crafted value that will be executed on the victim's browser if an attacker has a valid nonce...

Arbitrary Code Execution

grub2 is vulnerable to arbitrary code execution...

Denial Of Service (DoS)

Linux kernel vulnerable to heap-based buffer overflow. The vulnerability exists in the marvell wifi chip driver in Linux kernel which allows local users to cause a denial of servic or possibly execute arbitrary code...

Arbitrary Code Execution

chromium is vulnerable to arbitrary code execution. A use-after-free error in the Fonts component allows a remote attacker to execute arbitrary code on the target system when the victim visits a malicious web page...

Sandbox Restrictions Bypass

chromium is vulnerable to sandbox restrictions bypass. A use-after-free in payments allows a remote attacker who has compromised the renderer process to perform a sandbox escape via a malicious HTML page...

Arbitrary Code Execution

jackson-databind is vulnerable to remote code execution RCE. The vulnerability exists through the lack of sanitization of the org.apache.commons.dbcp2.cpdsadapter.DriverAdapterCPDS class through deserialization...

Arbitrary Code Execution

SQLite is vulnerable to arbitrary code execution. A remote attacker is able to execute arbitrary code via a buffer overflow when the FTS3 extension is enabled...

Buffer Overflow

Buffer overflow in the listfiles function in list.c in Info-Zip UnZip 6.0 allows remote attackers to cause a denial of service crash via vectors related to the compression method...

Arbitrary Code Execution

imagemagick is vulnerable to arbitrary code execution. A heap-based buffer overflow in WriteOnePNGImage in coders/png.c allows an attacker to execute arbitrary code via a malicious file...

Denial Of Service (DoS)

QEMU is vulnerable to denial of service attacks. An unauthenticated remote attacker could kill the QEMU process on the host due to an assertion failure in the network packet processing, resulting in a denial of service condition in nettxpktaddrawfragment in hw/net/nettxpkt.c...

Arbitrary Code Execution

libapache2-mod-fcgid is vulnerable to arbitrary code execution. A heap-based buffer overflow in the fcgidheaderbucketread function in fcgidbucket.c allows remote attackers to execute arbitrary code on the host OS...

Denial Of Service (DoS)

nss is vulnerable to denial of service DoS. The vulnerability exists through the way NSS handled CCS ChangeCipherSpec messages in TLS 1.3...

Denial Of Service (DoS)

mysql is vulnerable to denial of service DoS. An attacker having high privilege with network access via multiple protocols can compromise MySQL Server...

Privilege Escalation

Moodle is vulnerable to privilege escalation. Users students are able to add entries within groups they do not belong to...

Cross-site Scripting (XSS)

wordpress is vulnerable to Cross-site Scripting XSS. The vulnerability exists in the addLoadEvent function in admin-header.php where an attacker is able to inject malicious script via global variables and get it executed when a user visits the page...

Denial Of Service (DoS)

linux-oem-osp1 is vulnerable to denial of service DoS. The vulnerability exists through a heap based buffer overflow in the bluetooth implementation...

Arbitrary Code Execution

WebKitGTK+ is vulnerable to arbitrary code execution. Processing maliciously crafted web content may lead to arbitrary code execution...

Arbitrary Code Execution

WebKitGTK+ is vulnerable to arbitrary code execution. A memory corruption issue allows an attacker to execute arbitrary code on the host OS...

Arbitrary Code Execution

GraphicsMagick is vulnerable to arbitrary code execution. A segmentation violation in the WriteMAPImage function in coders/map.c when processing a non-colormapped image allows an attacker to execute arbitrary code on the host OS. This vulnerability is different from CVE-2017-11642...

Privilege Escalation

android kernel is vulnerable to privilege escalation. A use-after-free in the video driver allows an attacker to obtain higher privileges...

Inappropriate Redirect

squid3:xenial is performing inappropriate redirect. An issue was discovered when the appenddomain setting is used because the appended characters do not properly interact with hostname length restrictions. Due to incorrect message processing, it can inappropriately redirect traffic to origins it...

Remote Code Execution (RCE)

php7.0 is vulnerable to remote code execution RCE. University of Washington IMAP Toolkit 2007f on UNIX, as used in imapopen in PHP and other products, launches an rsh command by means of the imaprimap function in c-client/imap4r1.c and the tcpaopen function in osdep/unix/tcpunix.c without...

Denial Of Service (DoS)

linux is vulnerable to denial of service DoS. There is a net/ipv4/tcpinput.c signed integer overflow in tcpackupdatertt when userspace writes a very large integer to /proc/sys/net/ipv4/tcpminrttwlen, leading to a denial of service or possibly unspecified other impact, aka CID-19fad20d15a6...

Denial Of Service (DoS)

binutils:bionic is vulnerable to denial of service DoS. The vulnerability exists in the bfdgenericreadminisymbols function of syms.c in the Binary File Descriptor BFD, allowing a malicious user to cause an application crash via a crafted ELF file...

Man-in-the-Middle (MitM)

activemq-broker is vulnerable to man-in-the-middleMitM attack. It binds the server to jmxrmi entry after creating JMX RMI registry using LocateRegistry.createRegistry, leading to the connection to the registry without authentication and allowing rebinding of jmxrmi to any other entity. Therefore,...

Server-side Request Forgery (SSRF)

phpBB is vulnerable to server side request forgery SSRF. The vulnerability exists as it does not properly limit the dimensions of images posted, allowing an attacker to use the image dimension check function to send requests on behalf of the server...

Denial Of Service (DoS)

VLC is vulnerable to denial of service DoS. The vulnerability exists as an exploitable denial-of-service vulnerability exists in the resource record-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing compressed labels in mDNS messages, the compression pointer is followed without...

Amplification Attacks

PowerDNS Recursor is vulnerable toamplification attacks. It does not sufficiently defend against amplification attacks. An issue in the DNS protocol has been found that allow malicious parties to use recursive DNS services to attack third party authoritative name servers. The attack uses a crafte...

Denial Of Service (DoS)

github.com/etcd-io/etcd is vulnerable to denial of service. An attacker is able to cause a panic in the decodeRecord method and a denial of service condition in a RAFT participant when decoding the WAL by forging a large frame size...

Information Disclosure

kernel is vulnerable to information disclosure. A flaw was found in the Linux kernels implementation of IBPB Indirect Branch Prediction Barrier. The IBPB mitigation will be disabled when STIBP is not available or when Enhanced Indirect Branch Restricted Speculation IBRS is available...

Remote Code Execution

docker is vulnerable to remote code execution. The vulnerability exists due to a security regression of CVE-2019-5736 due to inclusion of vulnerable runc...

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS.It is possible because of brcmfmac frame validation bypass...

Arbitrary Code Execution

commons-configuration2 is vulnerable to arbitrary code execution. The package uses a third-party library that, by default, allows the instantiation of arbitrary classes to parse if the YAML contains special statements. This allows an attacker to execute arbitrary code on the host application if t...