39263 matches found
Denial Of Service (DOS)
Consul is vulnerable to authorization denial of service. Due to incorrectly validating JWT characters, an attacker can continually request TLS certificates and ACL tokens. This unnecessary information being stored can result in authorization denial of service...
Information Disclosure
squid is vulnerable to information disclosure. The vulnerability exits due to inconsistent handling of internal URIs, which allows an attacker to gain access to cache manager information in the file system via bypassing the manager ACL protection...
Denial Of Service (DoS)
tensorflow is vulnerable to denial of service. The vulnerability exists in Compute function in batchkernels.cc because Unbatch Op kernel doesn't properly check if the input argument is a scalar which allows an attacker to send non-scalar input IDs causing an application crash...
Privilege Escalation
linux is vulnerable to Privilege Escalation. The vulnerability exists in nftablesapi.c function in nftables cross-table in the linux kernel which will allow a local privileged attacker to cause a use-after-free problem at the time of table deletion...
Out-of-bounds Write
unzip:sid is vulnerable to out-of-bounds write. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap of out-of-bound write. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution...
Information Disclosure
rocketchip2.12 is vulnerable to information disclosure. The vulnerability exists due to the insecure cryptographic algorithm used in RocketCore.scala, allowing an attacker to gain sensitive information through the malicious Zk extensions...
HTTP Request Smuggling
llhttp is vulnerable to http request smuggling. The vulnerability exists in the http function in http.ts due to a lack of validation and parsing of Transfer-Encoding headers which allows an attacker to smuggle HTTP requests...
Remote Code Execution
getgrav/grav is vulnerable to remote code execution. An authenticated remote attacker is able to cause server side template injection via Twig which renders risky functions by default, such as system...
Remote Code Execution (RCE)
aamiles is vulnerable to remote code execution. The use of the request package opens up a code execution backdoor, allowing an attacker to perform unauthorized actions and accesses to sensitive information and digital currency keys...
Privilege Escalation
kernel is vulnerable to privilege escalation. There is a possible linked list corruption in uvcscanchainforward of uvcdriver.c due to an unusual root cause which could lead to a local escalation of privileges in the library with no additional execution privileges needed...
Privilege Escalation
Slurm is vulnerable to Privilege Escalation. The vulnerability exists due to an Incorrect Access Control allowing an attacker to bypass the authorization to gain higher access...
Server-side Request Forgery (SSRF)
github.com/hoppscotch/proxyscotch is vulnerable to server-side request forgery. When the interceptor mode is set to proxy, An attacker can make HTTP requests to untrusted URLs through the main function of server.go and gain access to sensitive information...
Buffer Overflow
vim is vulnerable to denial of service. The vulnerability exists due to global heap buffer overflow in skiprange, allowing an attacker to crash the system...
Cross-site Scripting (XSS)
privatebin is vulnerable to cross-site scripting. No sanitization in handling Attachment before sending for preview in SVG in AttachmentViewer allows malicious script execution in instance context...
Remote Code Execution
Gzip is vulnerable to remote code execution. Insufficient validations when processing filenames with two or more newlines allow remote attackers to force zgrep or xzgrep to write arbitrary files on the system...
Denial Of Service (DoS)
Red Hat is vulnerable to denial of service. The deprecated compatibility function clntcreate in the sunrpc module of the GNU C Library aka glibc through 2.34 copies its hostname argument on the stack without validating its length, which may result in a buffer overflow, potentially resulting in a...
Buffer Overflow
glibc is vulnerable to buffer overflow. The vulnerability exists due to a memory corruption when the size of the buffer is exactly 1 which allows an attacker to control the input buffer and size passed to getcwd in a setuid program...
SQL Injection
moodle/moodle is vulnerable to SQL Injection attacks. The library does not properly sanitize the keepaliveserver function in the auth.php file allowing a malicious user to inject and execute malicious XML-RPC requests via the MNet peer...
Buffer Overflow
pjproject is vulnerable to buffer overflow. The vulnerability exists due to a stack overflow in PJSUA API when calling pjsuaplayercreate...
Privilege Escalation
kernel is vulnerable to privilege escalation. The vulnerability exists due to the lack of sanitization of access to the i915 Intel GPU...
Remote Code Execution (RCE)
gerapy is vulnerable to remote code execution. An attacker can inject and execute malicious commands through the projectconfigure function of views.py...
Denial Of Service (DoS)
libsolv.so is vulnerable to denial of service. An attacker can cause an application crash through the heap-overflow in the propagate function of solver.c...
Use After Free
chrome is vulnerable to use-after free. The vulnerability exists in v8 allowed a remote attacker to potentially crash via a crafted HTML page...
Denial Of Service (DoS)
linux kernel is vulnerable to Denial Of Service DoS. The vulnerability exists due to an array-index-out-of-bounds flaw in the detachcapictr function in drivers/isdn/capi/kcapi.c...
Inappropriate Implementation In Navigation
Chrome has inappropriate implementation in navigation. The vulnerability exists due to an insecure function in google chrome allowing an attacker to compromise the system...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. The vulnerability exists due to a buffer overflow in drivers/media/firewire/firedtv-avc.c and drivers/media/firewire/firedtv-ci.c...
SQL Injection
Roundcube is vulnerable to cross-site scripting XSS attacks. Attacker are able to inject malicious scripts via search or searchparameters resulting in SQL injection...
Information Disclosure
kernel is vulnerable to information disclosure. The vulnerability exists due to Insufficient control flow in certain data structures...
Denial Of Service (DoS)
tensorflow is vulnerable to denial of service DoS. The vulnerability exists because the API can be made to deadlock when two tf.function functions are mutually recursive by using Lock Python object, allowing an attacker to crash the application by calling a recursive tf.function...
Information Disclosure
chromium is vulnerable to information disclosure. The vulnerability exists due to the side-channel information leakage in DevTools...
Privilege Escalation
github.com/containerd/containerd is vulnerable to privilege escalation. The vulnerability exists due to insecure permission which allows an attacker to traverse directory contents and execute programs...
Denial Of Service (DoS)
RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...
Denial Of Service (DoS)
ntfs-3g:sid is vulnerable to denial of service. A crafted NTFS image can cause a heap-based buffer overflow in ntfsinodelookupbyname in NTFS-3G 2021.8.22...
Arbitrary Code Execution
chakracore is vulnerable to arbitrary code execution. A memory corruption vulnerability allows an attacker to execute arbitrary code on the host OS. This CVE ID is different from CVE-2020-17054...
Denial Of Service (DoS)
openssl is vulnerable to denial of service. A NULL pointer dereference occurs when parsing a malicious renegotiation ClientHello message. This allows an attacker to remotely crash the application...
Denial Of Service (DoS)
github.com/golang/go is vulnerable to denial of service. An infinite loop occurs when using xml.NewTokenDecoder with a custom TokenReader...
Web Cache Poisoning
python-django is vulnerable to web cache poisoning. An attacker may separate query parameters using a semicolon ;, causing a difference in the interpretation of the request between the proxy running with default configuration and the server resulting in malicious requests being cached as complete...
Denial Of Service (DoS)
openjpeg2 is vulnerable to denial of service. Excessive iterations in the opjt1encodecblks function in openjp2/t1.c allows remote attackers to cause a denial of service via a malicious bmp file...
Arbitrary Code Execution
facade/ignition is vulnerable to arbitrary code execution. The vulnerability exists through stream wrappers in files that do not end of .blade.php in MakeViewVariableOptionalSolution...
Privilege Escalation
xorg-server is vulnerable to privilege escalation. An attacker is able to obtain additional privileges due to an XkbSetMap Out-Of-Bounds Access Privilege Escalation Vulnerability...
Information Disclosure
php is vulnerable to information disclosure in exifreaddata...
DNS Rebinding Attack
firefox is vulnerable to DNS rebinding attack. The vulnerability exists as DNS over HTTPS intentionally filters RFC1918 and related IP ranges from the responses as these do not make sense coming from a DoH resolver, and when a IPv4 address was mapped through IPv6...
Command Injection
cmd/go in github.com/golang/go is vulnerable to command injection. An attacker is able to inject malicious command via cgoflags compiler flag argument...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. A null pointer dereference in drivers/scsi/qla2xxx/qlaos.c allows an attacker to crash the kernel...
Remote Code Execution (RCE)
linux kernel is vulnerable to remote code execution RCE. The vulnerability exists through a race condition between hugetlb sysctl handlers in mm/hugetlb.c...
Information Disclosure
webkitgtk4 is vulnerable to information disclosure. The vulnerability exists through the lack of validation, causing a race condition condition that allows reading of restricted memory...
Arbitrary Code Execution
webkitgtk4 is vulnerable to arbitrary code execution. The vulnerabiltiy exists through memory errors...
Arbitrary Code Execution
webkitgtk4 is vulnerable to arbitrary code execution. The vulnerability exists through parsing web content to memory corruption...