39270 matches found
Web Cache Poisoning
python-django is vulnerable to web cache poisoning. An attacker may separate query parameters using a semicolon ;, causing a difference in the interpretation of the request between the proxy running with default configuration and the server resulting in malicious requests being cached as complete...
Denial Of Service (DoS)
openjpeg2 is vulnerable to denial of service. Excessive iterations in the opjt1encodecblks function in openjp2/t1.c allows remote attackers to cause a denial of service via a malicious bmp file...
Arbitrary Code Execution
facade/ignition is vulnerable to arbitrary code execution. The vulnerability exists through stream wrappers in files that do not end of .blade.php in MakeViewVariableOptionalSolution...
Privilege Escalation
xorg-server is vulnerable to privilege escalation. An attacker is able to obtain additional privileges due to an XkbSetMap Out-Of-Bounds Access Privilege Escalation Vulnerability...
Information Disclosure
php is vulnerable to information disclosure in exifreaddata...
DNS Rebinding Attack
firefox is vulnerable to DNS rebinding attack. The vulnerability exists as DNS over HTTPS intentionally filters RFC1918 and related IP ranges from the responses as these do not make sense coming from a DoH resolver, and when a IPv4 address was mapped through IPv6...
Command Injection
cmd/go in github.com/golang/go is vulnerable to command injection. An attacker is able to inject malicious command via cgoflags compiler flag argument...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. A null pointer dereference in drivers/scsi/qla2xxx/qlaos.c allows an attacker to crash the kernel...
Remote Code Execution (RCE)
linux kernel is vulnerable to remote code execution RCE. The vulnerability exists through a race condition between hugetlb sysctl handlers in mm/hugetlb.c...
Information Disclosure
webkitgtk4 is vulnerable to information disclosure. The vulnerability exists through the lack of validation, causing a race condition condition that allows reading of restricted memory...
Arbitrary Code Execution
webkitgtk4 is vulnerable to arbitrary code execution. The vulnerabiltiy exists through memory errors...
Arbitrary Code Execution
webkitgtk4 is vulnerable to arbitrary code execution. The vulnerability exists through parsing web content to memory corruption...
Cross-site Scripting (XSS)
WebKitGTK+ is vulnerable to cross site scripting. Processing maliciously crafted web content may lead to universal cross site scripting...
Arbitrary Code Execution
WebKitGTK+ is vulnerable to arbitrary code execution. Processing maliciously crafted web content may lead to arbitrary code execution...
Privilege Escalation
Qt is vulnerable to Privilege Escalation. Files placed by attacker can influence the working directory and lead to malicious code execution...
Arbitrary Code Execution
kernel is vulnerable to arbitrary code execution. The vulnerability exists through a use after free caused by a race condition in smptasktimedout and smptaskdone in drivers/scsi/libsas/sasexpander.c which allows an attacker to execute arbitrary codes...
Information Disclosure
kernel is vulnerable to information disclosure. An info-leak bug that can be caused by a malicious USB device in the drivers/media/usb/ttusb-dec/ttusbdec.c driver allows an attacker to obtain confidential information...
Open Redirection
Squid is vulnerable to Open Redirection. When certain web browsers are used, HTML in the hostname parameter is mishandled to cachemgr.cgi...
Arbitrary Code Execution
firefox is vulnerable to arbitrary code execution. The vulnerability exists through memory safety bugs...
Arbitrary Code Execution
GraphicsMagick is vulnerable to arbitrary code execution. A memory leak in the PersistCache function in magick/pixelcache.c during writing of Magick Persistent Cache MPC files allows an attacker to execute arbitrary code on the host OS...
Remote Code Execution (RCE)
php7.0 is vulnerable to remote code execution RCE. University of Washington IMAP Toolkit 2007f on UNIX, as used in imapopen in PHP and other products, launches an rsh command by means of the imaprimap function in c-client/imap4r1.c and the tcpaopen function in osdep/unix/tcpunix.c without...
Arbitrary Code Execution
gdb is vulnerable to arbitrary code execution. The vulnerability exists through a stack buffer overflow when printing bad bytes in Intel Hex objects...
Remote Code Execution (RCE)
mysql is vulnerable to remote code execution. The vulnerability exists in the Server Security Privileges through multiple unspecified vulnerabilities...
Denial Of Service (DoS)
MySQL is vulnerable to denial of service DoS due to flaws in managing Privileges...
Unauthorized Modification And Access
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Libraries. Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multipl...
Denial Of Service (DoS)
apache2 is vulnerable to denial of service DoS. The vulnerability exists when trace/debug was enabled for the HTTP/2 module and on certain traffic edge patterns, logging statements were made on the wrong connection, causing concurrent use of memory pools. Configuring the LogLevel of modhttp2 abov...
Denial Of Service (DoS)
python is vulnerable to denial of service DoS. The vulnerability exists because of the urllib.request.AbstractBasicAuthHandler catastrophic backtracking...
Authorization Bypass
mariadb is vulnerable to authorization bypass. The vulnerability exists through high privileged attacker with network access via multiple protocols...
Arbitrary Code Execution
webkit2gtk is vulnerable to arbitrary code execution. The vulnerability exists as there was a logic issue that did not adhere to restrictions...
Remote Code Execution (RCE)
typo3/cms is vulnerable to insecure cryptography. During installation with mediace extension, the vulnerability exists because it was possible to generate arbitrary checksums that allows the injection of arbitrary data, allowing an attacker with at least one Extbase plugin or module action to...
HTTP Header Injection
ceph is vulnerable to HTTP header injection. The vulnerability exists in radosgw through the CORS ExposeHeader tag...
Remote Code Execution (RCE)
apache-airflow is vulnerable to remote code execution RCE. The vulnerability exists as the example DAGs does not properly sanitize the value of dagrun.conf"message". The vulnerability exists if examples are enabled when the loadexamples=True is present in the config...
Denial Of Service (DoS)
firefox is vulnerable to denial of service DoS. The vulnerability exists through JavaScript Type confusion with NativeTypes...
Denial Of Service (DoS)
apache2 is vulnerable to denial of service. The HTTP/2 handling code would sometimes access memory after it has been freed, potentially resulting in a crash when closing multiple connections...
Arbitrary Code Execution
activesupport is vulnerable to arbitrary code execution. The vulnerability exists as the user input written to the cache store using the raw: true parameter can cause the cached code to be evaluated when read again...
Man-in-the-Middle (MtiM)
keycloak-services is vulnerable to man-in-the-middle attack. The signatures on CRL are not validated, allowing a remote attacker to perform man-in-the-middle attacks to sniff and modify network traffic...
Incorrect Number Generator
nss is vulnerable to incorrect number generation. The vulnerability exists as a flaw in DRBG number generation within the Network Security Services NSS library where the internal state V does not correctly carry bits over. The NSS library has been updated to fix this issue to address this issue a...
Remote Code Execution (RCE)
udp.c in the Linux kernel is vulnerable Remote Code Execution RCE. It allows remote attackers to execute arbitrary code via UDP traffic that triggers an unsafe second checksum calculation during execution of a recv system call with the MSGPEEK flag...
Denial Of Service (DoS)
faad2 is vulnerable to denial of service DoS. It is a stack-based buffer underflow in the third instance of the calculategain function in libfaad/sbrhfadj.c in Freeware Advanced Audio Decoder 2 FAAD2. A crafted input will lead to a denial of service or possibly unspecified other impact because...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists as a flaw was found in the way the Linux kernel handled fragmented IPv6 UDP datagrams over the bridge with UDP Fragmentation Offload UFO functionality on. A remote attacker could use this flaw to cause a denial of service...
Cross-Site Scripting (XSS)
thunderbird is vulnerable to cross-site scripting XSS. A cross-site scripting XSS flaw was found in the way Thunderbird handled certain multibyte character sets. Malicious, remote content could cause Thunderbird to run JavaScript code with the permissions of different remote content...
Denial Of Service (DoS)
firefox and thunderbird are vulnerable to denial of service. A flaw was found in the way Thunderbird handled malformed JPEG images. An HTML mail message containing a malicious JPEG image could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user runni...
Arbitrary Code Execution
openoffice.org is vulnerable to arbitrary code execution. The vulnerability exists as a heap-based buffer overflow flaw and an array index error were found in the way OpenOffice.org parsed certain Microsoft Office Word documents. An attacker could use these flaws to create a specially-crafted...
Information Disclosure
kernel is vulnerable to information disclosure. The vulnerability exists as a buffer overflow flaw in the DEC Alpha OSF partition implementation in the Linux kernel could allow a local attacker to cause an information leak by mounting a disk that contains specially-crafted partition tables...
Arbitrary Code Execution
firefox is vulnerable to arbitrary code execution. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox...
Privilege Escalation
The gcc and gcc4 is vulnerable to Privilege Escalation. A flaw was found in the way GNU Libtool's libltdl library looked for libraries to load. It was possible for libltdl to load a malicious library from the current working directory. In certain configurations, if a local attacker is able to tri...
Privilege Escalation
The kernel is vulnerable to Privilege Escalation.A system with SELinux enforced was more permissive in allowing local users in the unconfinedt domain to map low memory areas even if the mmapminaddr restriction was enabled. This could aid in the local exploitation of NULL pointer dereference bugs...
Authorization Bypass
mysql is vulnerable to authorization bypass. The vulnerability exists as it was discovered that the Red Hat Security Advisory RHSA-2008:0505, for Red Hat Application Stack v2.1, provided an incomplete fix for the flaw where MySQL did not correctly check directories used as arguments for the DATA...
Cross-site Scripting (XSS)
httpd is vulnerable to cross-site scripting XSS. The vulnerability exists as a flaw was found in the Apache HTTP Server modstatus module. On sites where the server-status page is publicly accessible and ExtendedStatus is enabled this could lead to a cross-site scripting attack. On Red Hat...
Denial Of Service (DoS)
netty-codec is vulnerable to denial of service DoS. The vulnerability exists as it was possible to send a large data for compression, causing large buffer allocation sizes in the client JVM...