Reverse Tabnabbing Attacks

jupyterlab is vulnerable to Reverse Tabnabbing attacks. The vulnerability is due to missing the noopener attribute in links generated by LaTeX typesetters in Markdown cells and files, which allows an attacker to exploit links with target=blank to potentially hijack the originating browser tab...

Server-Side Template Injection

solspace/craft-freeform is vulnerable to Server-Side Template Injection SSTI. The vulnerability is due to improper input handling because the submission title field in forms allows arbitrary code injection when edited by users with form editing access...

SQL Injection

langchain-ai/langchain is vulnerable to SQL injection. The vulnerability is due to insufficient input validation in the GraphCypherQAChain class, which allows user-controlled inputs to be embedded in SQL queries without proper sanitization...

Denial Of Service (DoS)

Clojure is vulnerable to Denial of Service DoS. The vulnerability is caused due to a lack of input validation in the clojure.core$partial$fn5920 function, which is part of the deserialization process. When an attacker manipulates the deserialization of inputs, they can exploit this function to...

Insufficiently Protected Credentials

Apache Solr is vulnerable to Insufficiently Protected Credentials. The vulnerability is caused due to system property redaction logic inconsistencies. This allows an attacker to access sensitive system properties, including credentials such as passwords or secret keys...

DLL Redirection Attacks

wix is vulnerable to DLL Redirection Attacks. The vulnerability is due to insufficient security checks in handling the TEMP folder, allowing attackers to escalate privileges by dropping a malicious DLL into a specific directory structure monitored by the burn engine, which when elevated, loads th...

Denial Of Service (DoS)

Django is vulnerable to Denial Of Service DoS. The vulnerability is due to inefficient string processing within the intcomma template filter when a long string is parsed. This issue can be exploited by an attacker to cause DoS...

Path Traversal

aiohttp is vulnerable to Path Traversal. The vulnerability is due to faulty path validation which checks if the file being accessed is within the intended static root directory when followsymlinks = True. This allows an attacker to access files and directories outside the intended static root...

External Control Of File Name Or Path

h2o is vulnerable to External Control of File Name or Path. The vulnerability exists due to improper input validation which allows an attacker to manipulate file paths to access or modify files outside of the intended directories...

Denial Of Service (DoS)

openjdk is vulnerable to Denial of Service DoS. The vulnerability applies to Java deployments, primarily clients running sandboxed Java Web Start applications or applets, that load untrusted code e.g., code from the internet and rely on the Java sandbox for security. Successful exploitation can...

Denial Of Service (DoS)

libde265.so is vulnerable to Denial of Service DoS. The vulnerability is due to the slicesegmentheader function in the slice.cc component. An attacker is able to cause a DoS condition by crafting a specially crafted file and tricking the system into processing it. This could disrupt service on th...

HTTP Request Smuggling

aiohttp is vulnerable to HTTP Request Smuggling. The vulnerability exists due to various issues with header parsing in httpparser.py. This allows a remote attacker to smuggle an HTTP request by submitting a maliciously crafted header. This is impactful when AIOHTTPNOEXTENSIONS is enabled or when...

Memory Leaks

binutils is vulnerable to Memory Leaks. The vulnerability occurs in parsestabstructfields within stabs.c which allows a malicious attacker to cause a denial of service locally...

Leak Of Webhook Secret Token

gitlab is vulnerable to Leak Of Webhook Secret Token. The vulnerability exists because the project maintainer could leak a webhook secret token by changing the webhook URL to an endpoint, allowing them to capture request headers...

Information Disclosure

mosquitto is vulnerable to Information Disclosure. This vulnerability occurs when the dynamic security plugin is used and a client is revoked the ability to make subscriptions on a topic while it is offline. In this case, the existing subscriptions for that client are not revoked, which allows th...

Heap-based Buffer Overflow

libtiff.so is vulnerable to Heap-based Buffer Overflow. The vulnerability exists in the processCropSelections at tiffcrop.c due to not correctly updating the buffer size after rotateImage is called which causes an application crash...

Regular Expression Denial Of Service (ReDoS)

word-wrap is vulnerable to Regular Expression Denial Of Service ReDoS. The vulnerability exists due to the usage of an regular expression with inefficient time complexity, resulting in long parsing times...

Denial Of Service (DoS)

libcurl.so is vulnerable to Denial of Service DoS attacks. Although libcurl offers a number of backends for resolving host names, name resolves may time out if built to use the synchronous resolver to slowdown operations with alert and siglongjmp, resulting in multi-threaded application showing...

Information Disclosure

libcurl.so is vulnerable to Information Disclosure. The SSH server's public key is verified with the use of a SHA 256 hash functionality provided by the library, however if the check is unsuccessful, the fingerprint's memory will be released before an error message is returned. This issue puts...

Denial Of Service (DoS)

spring-boot-autoconfigure is vulnerable to Denial Of Service DoS. The vulnerability is applicable when the application has Spring MVC auto-configuration enabled and uses the Spring Boot welcome page, which can be either static or templated, and the application is deployed behind a proxy which...

Denial Of Service (DoS)

github.com/golang/go is vulnerable to Denial of Service DoS attacks. A malicious user is able to cause an infinite loop via integer overflows when calling any of the Parse functions which contain //line directives with very large line numbers, which can cause the application to crash...

Authentication Bypass

curl is vulnerable to Authentication Bypass. The vulnerability exists because the SSH connection is too eager to reuse still since it keeps previously used connections in a connection pool for subsequent transfers to reuse if one of them matches the setup...

Path Traversal

curl is vulnerable to Path Traversal. The library supports SFTP transfers with a tilde character as the first path element to denote a path relative to the user's home directory. However, due to a bug, this can be used wrongly when used as a prefix in the first element...

Remote Code Execution (RCE)

SPIP is vulnerable to Remote Code Execution RCE. The vulnerability exists because of the improper sanitization of form values in the public area, allowing an attacker to inject and execute malicious code...

Denial Of Service (DoS)

Linux kernel is vulnerable to Denial Of Service DoS. The vulnerability exists due to the out-of-bounds read in the vtkioctl function of vtioctl.c because it does not properly protect by lock-in vtioctl KDSETMDE, allowing an attacker to cause an application crash...

Information Disclosure

linux is vulnerable to Information Disclosure. An attacker is able to gain access to leaked kernel pointers remotely via l2capparseconfreq function of net/bluetooth/l2capcore.c, resulting in disclosure of sensitive information...

Information Disclosure

imagemagick is vulnerable to Information Disclosure. A remote unauthenticated attacker is able to gain access to embed the content of an arbitrary file when it parses a PNG image, resulting in disclosure of sensitive information...

Remote Code Execution (RCE)

xorg-server is vulnerable to remote code execution. The vulnerability exists because the handler for the XIPassiveUngrab request accesses out-of-bounds memory when invoked with a high keycode or button code...

HTTP Response Splitting

netty-codec-http is vulnerable to HTTP response splitting attack. The vulnerability exists in the setObject function of DefaultHeaders.java as it takes the arrays and iterators as arguments, providing a way to bypass value validation allowing an attacker to inject malicious header values into the...

Denial Of Service (DoS)

netty-codec-haproxy is vulnerable to Denial Of Service DoS. The vulnerability is due to a StackOverflowError in the HAProxyMessage.java as it does not properly limit the maximum nesting of TLV, allowing an attacker to cause an application crash via infinite recursion by passing a maliciously...

Remote Code Execution (RCE)

GitPython is vulnerable to Remote Code Execution RCE. The vulnerability exists because the clonefrom function in base.py makes external calls to git without sufficient sanitization of input arguments, allowing an attacker to inject and execute a maliciously crafted remote URL into the clone comma...

Information Disclosure

H2 Database Engine is vulnerable to information disclosure. The vulnerability is caused by the webAdminPassword argument, which allows an administrator to specify the password in plaintext. An attacker can get the password for the H2 web admin console by looking at the running processes...

Denial Of Service (DoS)

xen is vulnerable to denial of service. The vulnerability exists due to the large memory allocation in the library, allowing an attacker to create many nodes more than the maximum allowed size and path length by accessing many nodes inside a transaction...

Type Confusion

chromium is vulnerable to type confusion. The vulnerability exists in V8 in Google Chrome which allows a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Denial Of Service (DoS)

rh-mysql80-mysql is vulnerable to denial of service. The vulnerability exists in the Server: Options component, allowing an attacker to cause an application crash and modify some MySQL Server accessible data through the multiple protocols...

Information Disclosure

git is vulnerable to information disclosure. A local attacker is able to convinces a victim to clone a repository with a symbolic link pointing at a restricted component on the victim's machine, which allows the attacker to gain access to confidential information...

Restriction Bypass

chromium is vulnerable to use after free. The vulnerability exists because an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted HTML page...

Denial Of Service (DoS)

libtiff.so is vulnerable to denial of service. The vulnerability exists due to the stack buffer overflow in the main function of tiffcp.c, allowing an attacker to crash the application by providing a maliciously crafted TIFF file to the tiffcp tool...

Denial Of Service (DoS)

vim is vulnerable to denial of service. The vulnerability exists due to an Undefined Behavior allowing an attacker to crash the system via a maliciously crafted Input to API...

Denial Of Service (DoS)

webkit2gtk is vulnerable to denial of service. The vulnerability exists due to an out-of-bound issue which allows a remote attacker to send maliciously crafted web content that may lead to arbitrary code execution...

Denial Of Service (DoS)

xen is vulnerable to denial of service. The vulnerability exists because the Linux Block and Network PV device frontends don't zero memory regions before sharing them with the backend which leads to a memory corruption causing an application crash...

Integer Overflow

thunderbird and firefox are vulnerable to integer overflow. The vulnerability exists in ReplaceElementsAt function because the number of elements to replace was too large for the container causing an integer overflow which then leads to an application crash...

Remote Code Execution (RCE)

concrete5/core is vulnerable to remote code execution. The vulnerability exists due to insecure http requests which allow an attacker to inject and execute arbitrary codes into the system...

Denial Of Service (DoS)

curl is vulnerable to denial of service. The vulnerability exists because the amount of accepted "chained" algorithms is very high which allows an attacker to cause an application crash...

Remote Code Execution (RCE)

watertools is vulnerable to remote code execution. When the package is installed, it opens a malicious backdoor in the package allowing an attacker to inject and execute arbitrary codes and gain access to sensitive user information and digital currency keys as well as escalate privileges...

Privilege Escalation

chromium is vulnerable to privilege escalation. The vulnerability exists because the lack of implementation of the protection mechanism, allowing an attacker to exploit this flaw by providing malicious input...

Authentication Bypass

Linux kernel is vulnerable to authentication bypass. The vulnerability exists because the users have access to some less privileged process that are controlled by cgroups and have higher privileged parent process which allows an attacker to escalate their privileges and crash the system...

Remote Code Execution (RCE)

grub2 is vulnerable to remote code execution. The vulnerability exists due to a use-after-free vulnerability in grubcmdchainloader function which allows an attacker to gain access to restricted data...

Denial Of Service (DoS)

libtiff is vulnerable to denial of service. The vulnerability exists due to a buffer overflow in the "invertImage" function in the component "tiffcrop" allowing an attacker to crash the system via the "invertImage"...

Memory Corruption

firefox is vulnerable to memory corruption vulnerability. Crafted CMS messages are incorrectly processed, leading to invalid memory reads, and potentially further memory corruption...