Remote Code Execution (RCE)

libxml2 is vulnerable to remote code execution. The vulnerability exists due to a use after free in libxml2 in xmlXIncludeDoProcess in xinclude.c...

CVE-2021-28148

One of the usage insights HTTP API endpoints in Grafana Enterprise 6.x before 6.7.6, 7.x before 7.3.10, and 7.4.x before 7.4.5 is accessible without any authentication. This allows any unauthenticated user to send an unlimited number of requests to the endpoint, leading to a denial of service DoS...

Arbitrary Code Execution

Linux kernel is vulnerable to arbitrary code execution. Due to a flaw in mwifiexcmd80211adhocstart in drivers/net/wireless/marvell/mwifiex/join.c in the Linux kernel, it allows remote attackers to execute arbitrary code via a long SSID value, aka CID-5c455c5ab332...

Denial Of Service (DoS)

LibTIFF is vulnerable to denial of service. When a crafted TIFF document is sent, a memory malloc failure in tifpixarlog.c causes an abort, resulting in a remote denial of service attack...

Regular Expression Denial-of-Service (ReDoS)

pillow is vulnerable to regular expression denial of service. Usage of an insecure regex allows an attacker to cause excessive CPU consumption when parsing a malicious PDF file...

Cross-Site Scripting (XSS)

nanohttpd is vulnerable to cross-site scripting XSS. An attacker is able to inject and execute arbitrary Javascript code in a user's browser via the GeneralHandler class that implements a basic GET handler which prints debug information as an HTML page...

Denial Of Service (DoS)

openssl is vulnerable to denial of service DoS. The vulnerability exists through a NULL pointer dereference issue when both GENERALNAMEs contain an EDIPARTYNAME...

NULL Pointer Dereference

SQLite is vulnerable to NULL pointer dereference. An attacker, interleaving reads and writes in a single transaction with an fts5 virtual table could cause denial of service conditions...

Arbitrary Code Execution

Bazaar is vulnerable to Arbitrary Code Execution. An attacker is able to execute arbitrary commands via a bzr+ssh URL with an initial dash character in the hostname...

Denial Of Service (DoS)

Artifex Software GhostScript is vulnerable to denial of service attacks. A remote attacker could cause buffer overflows in mjcolorcorrect in contrib/japanese/gdevmjc.c via a crafted PDF file resulting in denial of service conditions...

Denial Of Service (DoS)

qemu is vulnerable to denial of service DoS. The vulnerability exists through a reachable assertion issue was found in the USB EHCI emulation code of QEMU, allows an privileged user to send bogus USB requests and crash the QEMU process on the host...

Remote Code Execution (RCE)

drupal is vulnerable to remote code execution RCE. The vulnerability exists as it does not properly sanitize certain filenames on uploaded files, which can lead to files being interpreted as the incorrect extension and served as the wrong MIME type or executed as PHP for certain hosting...

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS. It is possible due to Red Hat only CVE-2020-12351 regression, allowing a remote attacker in an adjacent range to crash the system...

Buffer Overflow

The glibc is vulnerable to buffer overflow. An attacker may input an 80-bit long double function contains a non-canonical bit pattern causing the buffer overflow...

Denial Of Service (DoS)

kernel is vulnerable denial of service DoS. It mishandles invalid descriptors in drivers/media/usb/gspca/xirlinkcit.c...

Denial Of Service (DoS)

kernel is vulnerable to Denial Of Service DoS. The vulnerability exists through a memory leak in the ipmibmcregister function in drivers/char/ipmi/ipmimsghandler.c allowing an attacker to cause a denial of service memory consumption by triggering idasimpleget failure...

Use-after-free

libslirp is vulnerable to use-after-free. It is due to a flaw in ipreass in ipinput.c...

Arbitrary Code Execution

SQLite is vulnerable to arbitrary code execution. A stack-based buffer overflow and integer overflow in the sqlite3VXPrintf function in printf.c allows an attacker to execute arbitrary code on the host OS due to improperly handling of precision and width values during floating-point conversions...

Path Traversal

jsf-impl: Mojarra is vulnerable to Path traversal. It is possible via either the loc parameter or the con parameter, incomplete fix of CVE-2018-14371...

Signature Verification Bypass

libfwupd.so is vulnerable to signature verification bypass. It does not validate the return value from the function gpgmeopverify when PGP signature is verified, causing a FuKeyringResult return with no timestamp and an empty authority that subsequently allows an installation of unsigned firmware...

Prototype Pollution

kibana is vulnerable to prototype pollution. The vulnerability exists due to an improper use of Object.keys, allowing an authenticated user with Kibana index writing privilege to overwrite Object.prototype and execute malicious code with the permissions of the Kibana process on the host...

Insecure Temporary Directory

ant uses an insecure temporary directory. The system property java.io.tempdir causes insecure permissions to be set on a directory, allowing local users to access the temporary directory or write arbitrary files into it. This could also lead to an attacker injecting modified source files into the...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. A null pointer dereference while receiving CIPSO packet with null category may cause kernel panic...

Denial Of Service (DoS)

perl is vulnerable to denial of service DoS. The vulnerability exists as buffer overflow in the SgrokbslashN function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 allows remote attackers to disclose sensitive information or cause a denial of service application crash via ...

Privilege Escalation

subversion is vulnerable to privilege escalation. The vulnerability exists as a maliciously constructed svn+ssh:// URL would cause Subversion clients before 1.8.19, 1.9.x before 1.9.7, and 1.10.0.x through 1.10.0-alpha3 to run an arbitrary shell command. Such a URL could be generated by a malicio...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. A use-after-free vulnerability in blkaddtrace in kernel/trace/blktrace.c allows an attacker to crash the system...

Arbitrary Directory Access

salt allows arbitrary directory access. The salt-master process in ClearFuncs class allows access to some methods that improperly sanitize paths and the methods allow authenticated users to access arbitrary directories...

Information Disclosure

kernel is vulnerable to information disclosure. A flaw in ibuverbspollcq could allow a local, unprivileged user to cause an information leak...

Privilege Escalation

kvm is vulnerable to privilege escalation. The vulnerability exists as a flaw was found in QEMU-KVM, allowing the guest some control over the index used to access the callback array during sub-page MMIO initialization. A privileged guest user could use this flaw to crash the guest denial of servi...

Information Disclosure

kvm is vulnerable to information disclosure. The vulnerability exists as a data structure field in kvmvcpuioctlx86getvcpuevents in QEMU-KVM was not initialized properly before being copied to user-space. A privileged host user with access to "/dev/kvm" could use this flaw to leak kernel stack...

Arbitrary Code Execution

samba is vulnerable to arbitrary code execution. A missing array boundary checking flaw was found in the way Samba parsed the binary representation of Windows security identifiers SIDs. A malicious client could send a specially-crafted SMB request to the Samba server, resulting in arbitrary code...

Information Disclosure

jboss EAP is vulnerable to information disclosure. The RHSA-2008:0826 update fixed an issue CVE-2008-3273 where unauthenticated users were able to access the status servlet; however, a bug fix included in the RHSA-2009:0347 update re-introduced the issue. A remote attacker could use this flaw to...

Denial Of Service (DoS)

SeaMonkey is vulnerable to Denial Of Service DoS. Due to a flaw found in the processing of malformed web content, it causes memory corruption and application crash or possibly execute arbitrary code via unknown vectors...

Denial Of Service (DoS)

httpd is vulnerable to denial of service DoS due to memory corruption on early pushes...

Remote Code Execution

jackson-databind is vulnerable to deserialization of untrusted data that can lead to remote code execution. The gadget org.apache.aries.transaction.jms is not validated and filtered by default from the interaction between serialization gadgets and polymorphic typing, allowing for injection of sai...

HTTP Request Splitting

twisted is vulnerable to HTTP request splitting. The vulnerability exists as requests with both Content-Length and Transfer-Encoding headers would have honored the first header.This vulnerability is similar to CVE-2020-10108...

Arbitrary Code Execution

python-psutil is vulnerable to arbitrary code execution. Mishandling of refcount within a while or for loop that converts system data into a Python object results in a double-free bug and allows for execution of arbitrary code...

Remote Code Execution (RCE)

firefox is vulnerable to arbitrary code execution. Multiple critical memory safety bugs allow a remote attacker to execute arbtirary code on the system...

Privilege Escalation

Mozilla Firefox is vulnerable to privilege escalation. It allows an unintended access to a privileged JSONView object...

Authorization Bypass

httpd is vulnerable to authorization bypass. The vulnerability exists as modauthdigest has an access control bypass issue due to race condition...

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS. The vulnerability exists in HID debug where a buffer overflow in hiddebugeventsread in drivers/hid/hid-debug.c...

Denial Of Service (DoS)

kernel is vulneralbe to denial of service DoS. The vulnerability exists as TLB flush happens too late on mremap...

Denial Of Service (DoS)

Oracle MySQL is vulnerable to denial of service attacks. Remote authenticated attacker could exploit the vulnerable DDL component to cause a hang or frequently repeatable crash...

Denial Of Service (DoS)

PHP is vulnerable to denial of serviceDoS attacks. An attacker could exploit a flaw in the PHAR archive handler by supplying a malicious archive file which may leads to crash the PHP interpreter or potentially disclose information due to a buffer over-read in the pharparsepharfile function in...

Information Disclosure

PHP is vulnerable to information disclosure attacks. A remote user could trigger an information leak in the date extension's timelibmeridian parsing code to obtain potentially sensitive information from the interpreter...

Privilege Escalation

Linux kernel is vulnerable to privilege escalation vulnerability. This occurs in the 32-bit compatibility layer of the ioctl handling code of the v4l2 video driver in the Linux kernel. An attacker to overwrite a kernel memory from an unprivileged userspace process causing a privilege escalation...

Key Reinstallation Attack (KRACK)

WPA and WPA2 are vulnerable to key reinstallation attacks KRACK. A remote attacker within Wi-Fi range could exploit this attack to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by reinstalling a previously used group key GTK during a 4-way handshake...

Privilege Escalation

Git is vulnerable to privilege escalation attacks. A remote authenticated user could supply a specially crafted repository name to break out of the restricted git-shell and gain elevated privileges on the target system...

Denial Of Service (DoS)

Apache HTTP Server is vulnerable to denial of serviceDoS attacks. A remote user could send a specially crafted HTTP/2 request to trigger a null pointer dereference in the modhttp2 component and cause the server process to crash...

Information Disclosure

Linux kernel is vulnerable to information disclosure. This occurs in arch/x86/kvm/emulate.c in the Linux kernel. Local users could obtain sensitive information from kernel memory or cause a denial of service use-after-free via a crafted application that leverages instruction emulation for fxrstor...