Arbitrary Code Execution

graphicsmagick is vulnerable to arbitrary code execution. The vulnerability exists through a NULL pointer dereference in the WritePCLImage function in coders/pcl.c during writes of monochrome images...

Arbitrary Code Execution

GraphicsMagick is vulnerable to arbitrary code execution. A heap-based buffer overflow in the "Display visual image directory" feature of the DescribeImage function in magick/describe.c file allows an attacker to execute arbitrary code on the host OS via a malicious MIFF format file with the...

Arbitrry Code Execution

BusyBox is vulnerable to arbitrary code execution. A buffer overflow vulnerability in Busybox wget allows an attacker to execute arbitrary code on the host OS...

Denial Of Service (DoS)

python is vulnerable to denial of service DoS. The vulnerability exists because of the urllib.request.AbstractBasicAuthHandler catastrophic backtracking...

Remote Code Execution (RCE)

typo3/cms is vulnerable to insecure cryptography. During installation with mediace extension, the vulnerability exists because it was possible to generate arbitrary checksums that allows the injection of arbitrary data, allowing an attacker with at least one Extbase plugin or module action to...

HTTP Header Injection

ceph is vulnerable to HTTP header injection. The vulnerability exists in radosgw through the CORS ExposeHeader tag...

Denial Of Service (DoS)

unbound is vulnerable to Denial of Service DoS. The attack exists because of an Insufficient Control of Network Message Volume, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records...

Incorrect Type Checks

OpenJDK is vulnerable to Incorrect type checks in MethodType.readObject...

Insecure Temporary Directory

ant uses an insecure temporary directory. The system property java.io.tempdir causes insecure permissions to be set on a directory, allowing local users to access the temporary directory or write arbitrary files into it. This could also lead to an attacker injecting modified source files into the...

Denial Of Service (DoS)

ghostscript is vulnerable to denial of service DoS. The vulnerability exists as the memgetbitsrectangle function in base/gdevmem.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted file...

Man-in-the-Middle (MitM)

kenrel is vulnerable to man-in-the-middle attack. Certain ipv6 protocols are not encrypted over ipsec tunnel, allowing an attacker to intercept and modify network traffic...

Denial Of Service (DoS)

openjdk is vulnerable to regex denial of service. A regular expression DoS in Scanner allows an attacker to crash the application...

Arbitrary Directory Access

salt allows arbitrary directory access. The salt-master process in ClearFuncs class allows access to some methods that improperly sanitize paths and the methods allow authenticated users to access arbitrary directories...

Denial Of Service (DoS)

FreeType is vulnerable to denial of service DoS. Multiple input validation flaws were found in the way FreeType processed bitmap font files. If a specially-crafted font file was loaded by an application linked against FreeType, it could cause the application to crash or, potentially, execute...

Brute-force Attack

postgresql is vulnerable to brute-force attacks. The vulnerability exists as a signedness issue was found in the way the crypt function in the PostgreSQL pgcrypto module handled 8-bit characters in passwords when using Blowfish hashing. Up to three characters immediately preceding a non-ASCII...

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS. The vulnerability exists as a heap overflow flaw in the Linux kernel's EFI GUID Partition Table GPT implementation could allow a local attacker to cause a denial of service by mounting a disk that contains specially-crafted partition tables...

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS. The vulnerability exists as a missing validation check was found in the Linux kernel's macpartition implementation, used for supporting file systems created on Mac OS operating systems. A local attacker could use this flaw to cause a denial of servic...

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS. The vulnerability exists as a flaw was found in fixuppagefault in the Xen hypervisor implementation. If a 64-bit para-virtualized guest accessed a certain area of memory, it could cause a denial of service on the host system running the Xen hyperviso...

Information Disclosure

kernel is vulnerable to information disclosure. The vulnerability exists through as missing initialization flaws in the Linux kernel could lead to information leaks...

Arbitrary Code Execution

firefox is vulnerable to arbitrary code execution. A flaw was found in the way Firefox handled malformed JPEG images. A website containing a malicious JPEG image could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox...

Privilege Escalation

kvm is vulnerable to privilege escalation. The vulnerability exists as a flaw was found in QEMU-KVM, allowing the guest some control over the index used to access the callback array during sub-page MMIO initialization. A privileged guest user could use this flaw to crash the guest denial of servi...

Arbitrary Code Execution

webkitgtk is vulnerable to arbitrary code execution. Multiple memory corruption flaws were found in WebKit. Malicious web content could cause an application using WebKitGTK+ to crash or, potentially, execute arbitrary code with the privileges of the user running the application...

Information Disclosure

kernel is vulnerable to information disclosure. Missing initialization flaws in the Linux kernel could lead to information leaks...

Privilege Escalation

java-1.6.0-ibm is vulnerable to privilege escalation. The vulnerability exists in the IBM Java 2 Runtime Environment...

Arbitrary Code Execution

xpdf is vulnerable to arbitrary code execution. The vulnerability exists as an uninitialized pointer use flaw was discovered in Xpdf. An attacker could create a malicious PDF file that, when opened, would cause Xpdf to crash or, potentially, execute arbitrary code...

Use-after-free

Mozilla Firefox is vulnerable to Use-after-free. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox...

Spoofing Attack

mysql is vulnerable to spoofing attack. It was discovered that the MySQL client ignored certain SSL certificate verification errors when connecting to servers. A man-in-the-middle attacker could use this flaw to trick MySQL clients into connecting to a spoofed MySQL server...

Denial Of Service (DoS)

The kernel is vulnerable to Denial of Service DoS. A NULL pointer dereference flaw was found in the ip6dstlookuptail function in the Linux kernel. An attacker on the local network could trigger this flaw by sending IPv6 traffic to a target system, leading to a system crash kernel OOPS if...

Denial Of Service (DoS)

java is vulnerable to denial of service DoS. The vulnerability exists in in the IBM Java 2 Runtime Environment and the IBM Java 2 Software Development Kit...

Denial Of Service (DoS)

Mozilla Firefox is vulnerable to Denial of Service DoS. Due to flaws found in the processing of malformed web content, a web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code as the user running Firefox...

Arbitrary Code Execution

python is vulnerable to arbitrary code execution. When the assert system call was disabled, an input sanitization flaw was revealed in the Python string object implementation that led to a buffer overflow. The missing check for negative size values meant the Python memory allocator could allocate...

Denial Of Service (DoS)

httpd is vulnerable to denial of service. A denial of service flaw was found in the Apache moddeflate module. This module continued to compress large files until compression was complete, even if the network connection that requested the content was closed before compression completed. This would...

Arbitrary Code Execution

freetype is vulnerable to arbitrary code execution. If a user loaded a carefully-crafted font file with an application linked against FreeType, it could cause the application to crash or, possibly, execute arbitrary code with the privileges of the user running the application...

Cross-Site Scripting (XSS)

php is vulnerable to cross-site scripting. A cross-site scripting flaw was found in a way PHP reported errors for invalid cookies. If the PHP interpreter had "displayerrors" enabled, a remote attacker able to set a specially-crafted cookie on a victim's system could possibly inject arbitrary HTML...

Same-Origin Policy Bypass

thunderbird is vulnerable to same-origin policy bypass. Several flaws were found in the way malformed content was processed. An HTML mail message containing specially-crafted content could potentially trick a Thunderbird user into surrendering sensitive information...

Information Disclosure

kernel is vulnerable to information disclosure. A flaw was found in the Advanced Linux Sound Architecture ALSA. A local user who had the ability to read the /proc/driver/snd-page-alloc file could see portions of kernel memory...

Privilege Escalation

kernel is vulnerable to privilege escalation. A flaw in the ISDN CAPI subsystem that allowed a remote user to cause a denial of service or potential remote access. Exploitation would require the attacker to be able to send arbitrary frames over the ISDN network to the victim's machine...

Denial Of Service (DoS)

Mozilla is vulnerable to denial of service DoS. The vulnerability exists through memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7...

Denial Of Service (DoS)

netty-codec is vulnerable to denial of service DoS. The vulnerability exists as it was possible to send a large data for compression, causing large buffer allocation sizes in the client JVM...

Memory Leak

ImageMagick is vulnerable to memory leaks. The attack is possible because of the function WriteMSLImage of coders/msl.c...

Segmentation Fault

qt5-qtsvg is vulnerable to segmentation fault. The vulnerability is possible because of an Invalid parsing of malformed url reference resulting in a denial of service...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. An out-of-bounds array access in xfrmpolicyunlink allows an attacker to crash the OS due to the way directory validation are handled...

HTTP Request Splitting

twisted is vulnerable to HTTP request splitting. The vulnerability exists as requests with both Content-Length and Transfer-Encoding headers would have honored the first header.This vulnerability is similar to CVE-2020-10108...

Remote Code Execution

chakracore is vulnerable to remote code execution. This is due to an incorrect offset for homeObj on cross-site objects, which would allow an attacker to corrupt memory in such a way that it allows for execution of arbitrary code in the context of the current user. This CVE ID is different from...

Information Disclosure

OpenJDK is vulnerable to information disclosure. The vulnerability exists through the use of unsafe RSA-MD5 checkum in Kerberos TGS...

Denial Of Service (DoS)

Mozilla firefox is vulnerable to denial of service DoS. The vulnerability exists through a use-after-free when retrieving a document in antitracking...

Denial Of Service (DoS)

Mozilla firefox is vulnerable to denial of service DoS. The vulnerability exists through a buffer overflow issue in plain text serializer...

Arbitrary Code Execution

python-psutil is vulnerable to arbitrary code execution. Mishandling of refcount within a while or for loop that converts system data into a Python object results in a double-free bug and allows for execution of arbitrary code...

Server-Side Request Forgery (SSRF)

wordpress is vulnerable to server-side request forgery SSRF. The URL validation does not consider the interpretation of a name as a series of hex characters, allowing a remote attacker to bypass the URL validation using hex values in the URL...

Denial Of Service (DoS)

openjdk is vulnerable to denial of service. An unexpected exception thrown by XPathParser processing malicious XPath expression allows an attacker to crash the application...