39640 matches found
Out-of-bounds Write
Qt is vulnerable to Out-of-bounds Write. The vulnerability exists in QtPrivate::QCommonArrayOps::growAppend which allows an attacker who is able to submit a crafted image file to an application that uses qsvghandler could cause an out-of-bounds write and potential denial of service...
Time-of-check To Time-of-Use (TOCTOU)
grunt is vulnerable to Time-of-check To Time-of-Use TOCTOU. The vulnerability exists in file.copy function in file.js because the permissions are not properly handled in both source and destination directories which allows an attacker to access and write arbitrary files...
Denial Of Service (DoS)
FreeType is vulnerable to denial of service. The vulnerability exists in sfntinitface function due to a segment violation which allows an attacker to cause an application crash...
Authentication Bypass
ngxhttpluamodule is vulnerable to authentication bypass. The vulnerability exists because it doesn't properly restrict the user inputs which allows an attacker to insert unsafe characters in an argument when using the API to mutate a URI, or a request or response header...
Denial Of Service (DoS)
Red Hat is vulnerable to denial of service. The deprecated compatibility function clntcreate in the sunrpc module of the GNU C Library aka glibc through 2.34 copies its hostname argument on the stack without validating its length, which may result in a buffer overflow, potentially resulting in a...
Privilege Escalation
linux is vulnerable to privilege escalation. The vulnerability exists due to a lack of sanitization of the namespace isolation...
Privilege Escalation
kernel is vulnerable to privilege escalation. The vulnerability exists due to the lack of sanitization of access to the i915 Intel GPU...
Denial Of Service (DoS)
libsolv.so is vulnerable to denial of service. An attacker can cause an application crash through the heap-overflow in the propagate function of solver.c...
Use After Free
chromium is vulnerable to use after free. The vulnerability exists in Optimization Guide which allows an attacker to cause a memory corruption...
Denial Of Service (DoS)
php7 and php8 are vulnerable to denial of service...
Denial Of Service (DoS)
github.com/golang/go is vulnerable to Denial Of Service DoS. The vulnerability exists due to uncontrolled memory consumption in SetString function which allows an attacker to crash the application by providing a malicious input...
Denial Of Service (DoS)
Jenkins is vulnerable to denial of service. The vulnerability exists due to earlier defines custom XStream converters that have not been updated to apply the protections for the vulnerability CVE-2021-43859 and allow unconstrained resource usage...
Use After Free
chrome is vulnerable to use-after free. The vulnerability exists in v8 allowed a remote attacker to potentially crash via a crafted HTML page...
Information Disclosure
node-fetch is vulnerable to information disclosure. The vulnerability exists due to the cookie header being leaked to third party site which allows an attacker to gain access to sensitive information...
Information Dislcosure
pillow is vulnerable to information disclosure. The vulnerability exists because the pillow doesn't restrict the builtins available in eval function of ImageMath.py which allows an attacker to evaluate arbitrary expressions and gain access to sensitive information...
Denial Of Service (DoS)
thunderbird and firefox are vulnerable denial of service. The vulnerability exists due to a GC Rooting Failure When Calling Wasm Instance Methods...
SQL Injection
Roundcube is vulnerable to cross-site scripting XSS attacks. Attacker are able to inject malicious scripts via search or searchparameters resulting in SQL injection...
Heap Corruption
chrome is vulnerable to heap corruption. The vulnerability exists due to a use after free in dev tools...
Improper Input Validation
Java SE is vulnerable to improper input validation. an attacker can perform service disruption through the swing component in the oracle GraalVM enterprise edition...
Privilege Escalation
github.com/containerd/containerd is vulnerable to privilege escalation. The vulnerability exists due to insecure permission which allows an attacker to traverse directory contents and execute programs...
Prototype Pollution
set-value is vulnerable to prototype pollution. Lack of validation in type of user-provided keys in the path parameter causes a bypass of CVE-2019-10747. The exploit is possible when the user-provided keys used in the path parameter are arrays...
Remote Code Execution (RCE)
qt5-qtwebengine is vulnerable to remote code execution. The vulnerability exists due to a lack of sanitization which allows an attacker to execute arbitrary code inside a sandbox via a crafted HTML page...
Arbitrary Code Execution
chakracore is vulnerable to arbitrary code execution. A memory corruption vulnerability allows an attacker to execute arbitrary code on the host OS. This CVE ID is different from CVE-2020-17054...
Privilege Escalation
linux is vulnerable to privilege escalation. The vulnerability exists due to a refcount leak in llcpsockbind causing use-after-free...
Arbitrary Values
go has arbitrary values. The vulnerability exists due to arbitrary values retrieved from DNS which is not sanitized before including in HTML...
Regular Expression Denial Of Service (ReDoS)
ws is vulnerable to regular expression denial of service. An attacker is able to cause excessive CPU consumption that can lead to an application crash by submitting a malicious value of Sec-Websocket-Protocol...
Remote Code Execution (RCE)
libxml2 is vulnerable to remote code execution. The vulnerability exists due to a use after free in libxml2 in xmlXIncludeDoProcess in xinclude.c...
CVE-2021-28148
One of the usage insights HTTP API endpoints in Grafana Enterprise 6.x before 6.7.6, 7.x before 7.3.10, and 7.4.x before 7.4.5 is accessible without any authentication. This allows any unauthenticated user to send an unlimited number of requests to the endpoint, leading to a denial of service DoS...
Server-side Request Forgery (SSRF)
yoast-seo-for-typo3/yoastseo is vulnerable to server side request forgery. Failing to restrict analyzed URLs to domains managed by the current TYPO3 website allows a logged in TYPO3 backend user to make HTTP requests to arbitrary domains including the webserver itself or other internally managed...
Denial Of Service (DoS)
openssl is vulnerable to denial of service. A NULL pointer dereference occurs when parsing a malicious renegotiation ClientHello message. This allows an attacker to remotely crash the application...
Denial Of Service (DoS)
LibTIFF is vulnerable to denial of service. When a crafted TIFF document is sent, a memory malloc failure in tifpixarlog.c causes an abort, resulting in a remote denial of service attack...
Denial Of Service (DoS)
Linux kernel vulnerable to heap-based buffer overflow. The vulnerability exists in the marvell wifi chip driver in Linux kernel which allows local users to cause a denial of servic or possibly execute arbitrary code...
Denial Of Service (DoS)
libopenjpeg.so is vulnerable to denial of service. The vulnerability exists in opjdwtcalcexplicitstepsizes function of dwt.c due to buffer overflow which allows an attacker to crash the application via malicious input...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. A buffer over-read in the function cryptoauthencextractkeys when a payload longer than 4 bytes is not aligned causes a system crash...
HTTP Request Smuggling
nginx is vulnerable to HTTP request smuggling. A remote attacker is able to smuggle HTTP requests via the ngx.location.capture API...
DNS Rebinding Attack
firefox is vulnerable to DNS rebinding attack. The vulnerability exists as DNS over HTTPS intentionally filters RFC1918 and related IP ranges from the responses as these do not make sense coming from a DoH resolver, and when a IPv4 address was mapped through IPv6...
PHAR Unserialization
pear/archivetar is vulnerable to PHAR unserialization. The vulnerability exists due to the improper validation of filename that allows a filename that starts with PHAR:// to be executed...
Denial Of Service (DoS)
sqlite is vulnerable to denial of service DoS.Use-after-free in fts3EvalNextRow in ext/fts3/fts3.c extension module in the way it implemented the snippet function.This flaw allows an attacker who can execute SQL statements to crash the application or potentially execute arbitrary code...
Denial Of Service (DoS)
kernel is vulnerable to Denial Of Service DoS. The vulnerability exists through a memory leak in the ipmibmcregister function in drivers/char/ipmi/ipmimsghandler.c allowing an attacker to cause a denial of service memory consumption by triggering idasimpleget failure...
Cross-site Scripting (XSS)
github.com/grafana/grafana is vulnerable to cross-site scripting XSS. The vulnerability exists when specifying series alias such as test data or elastic search, which allows special characters, caused by the bs-typeahead directive that evals the select options passed to it...
Validation Bypass
httpclient is vulnerable to validation bypass. A malformed authority component in the request URIs that is passed to the library as java.net.URI object would result in the request execution for a wrong target host...
Cross-Site Scripting (XSS)
dompurify is vulnerable to cross-site scripting XSS. A mutation XSS vulnerability exists as a serialize-parse roundtrip does not return the original DOM tree, causing a namespace change from HTML to MathML via FORM elements...
XML External Entity (XXE) Injection
print-lib/print-servlet is vulnerable to XML External Entity XXE injection. A remote attacker is able to inject untrusted XML entity via tryLoadSLD as SDL parser does not disable DTDs...
Cross-site Scripting (XSS)
WebKitGTK+ is vulnerable to cross-site scripting XSS. Processing maliciously crafted web content may lead to a cross site scripting attack...
Arbitrary Code Execution
webkitgtk4 is vulnerable to arbitrary code execution. The vulnerability exists through memory corruption...
Cross-site Scripting (XSS)
WebKitGTK+ is vulnerable to cross site scripting. Processing maliciously crafted web content may lead to universal cross site scripting...
Privilege Escalation
Qt is vulnerable to Privilege Escalation. Files placed by attacker can influence the working directory and lead to malicious code execution...
Arbitrary Code Execution
graphicsmagick is vulnerable to arbitrary code execution. The vulnerability exists through a NULL pointer dereference in the WritePCLImage function in coders/pcl.c during writes of monochrome images...
Arbitrary Code Execution
GraphicsMagick is vulnerable to arbitrary code execution. A memory leak in the PersistCache function in magick/pixelcache.c during writing of Magick Persistent Cache MPC files allows an attacker to execute arbitrary code on the host OS...