Cross-Site Request Forgery (CSRF)

XXL Job Core is vulnerable to cross-site request forgery. The vulnerability exists in xxl-job-admin component due to less restrictions of user permissions which allows an attacker to perform unauthorized actions...

Heap-based Buffer Overflow

tensorflow is vulnerable to heap-based buffer overflow. The use of AllocatedBytes in the insecure hash function AbslHashValue allows local authenticated attackers to cause heap-based buffer overflows resulting in denial of service conditions...

Integer Overflow

org.springframework.security:spring-security-crypto is vulnerable to integer overflows. The encoder does not perform any salt rounds when the BCrypt class is used with the maximum work factor31, allowing a local authenticated attacker to cause an integer overflow error resulting in the attacker...

Privilege Escalation

Slurm is vulnerable to Privilege Escalation. The vulnerability exists due to an Incorrect Access Control allowing an attacker to bypass the authorization to gain higher access...

Cross-Site Request Forgery (CSRF)

MCMS is vulnerable to cross site request forgery. The vulnerability exists due to lack of handling of parameters, allowing an attacker to bypass authentication and submit request on the behalf of the server and gain access to internal resources via the file or endpoint /role/saveOrUpdateRole.do...

SQL Injection

asterisk is vulnerable to SQL injection. The vulnerability exists due to a lack of sanitization of input for backslash characters in SQL queries allowing an attacker to make maliciously crafted queries...

Denial Of Service (DoS)

go:edge is vulnerable to denial of service DoS attacks. A malicious user is able to cause an application crash via a large amount of PEM data...

Privilege Escalation

kernel is vulnerable to privilege escalation. The vulnerability exists due to the lack of sanitization of access to the i915 Intel GPU...

Remote Code Execution (RCE)

codeigniter4/framework is vulnerable to remote code execution. The vulnerability exists due to the improper input validation in the library, allowing an attacker to execute CLI routes via an HTTP request...

Arbitrary Code Execution

vm2 is vulnerable to arbitrary code execution. Remote attackers are able to inject and execute crafted malicious scripts on the host machine via direct access to host error objects generated by node internals during generation of a stacktraces...

Insecure Cryptography

cryptsetup is vulnerable to insecure cryptography. A malicious attacker can modify on-disk metadata to simulate decryption in progress with crashed reencryption step and persistently decrypt part of the LUKS device...

Information Disclosure

node-fetch is vulnerable to information disclosure. The vulnerability exists due to the cookie header being leaked to third party site which allows an attacker to gain access to sensitive information...

Denial Of Service (DoS)

Linux kernel is vulnerable to denial of service. The vulnerability exists due to the use-after-free in the NFC stack, allowing an attacker to crash the application...

Remote Code Execution (RCE)

RabbitMQ is vulnerable to Regular Expression Denial Of Service ReDoS. A new user being added via management UI could lead to the user's bane being rendered in a confirmation message without proper...

Denial Of Service (DoS)

thunderbird and firefox are vulnerable denial of service. The vulnerability exists due to a GC Rooting Failure When Calling Wasm Instance Methods...

Symlink Attack

glib2 is vulnerable to symlink attack. The vulnerability exists due to a dangling symlink which incorrectly creates the target of the symlink as an empty file, which have security relevance if the symlink is attacker-controlled...

Information Disclosure

kernel is vulnerable to information disclosure. The vulnerability exists due to Insufficient control flow in certain data structures...

CVE-2020-25722

samba is vulnerable to privilege escalation. The vulnerability exists due to a lack of sanitization of access and conformance of data stored allowing total domain compromise...

Denial Of Service (DoS)

busybox is vulnerable to denial of service. An out-of-bounds heap read in unlzma leads to information leak and application crash when crafted LZMA-compressed input is decompressed...

Information Disclosure

chromium is vulnerable to information disclosure. The vulnerability exists due to the side-channel information leakage in DevTools...

Prototype Pollution

aurelia-path is vulnerable to prototype pollution. An attacker is able to modify object class Object by tricking an application to parse the following URL: https://aurelia.io/blog/?protoasdf=asdf...

Prototype Pollution

set-value is vulnerable to prototype pollution. Lack of validation in type of user-provided keys in the path parameter causes a bypass of CVE-2019-10747. The exploit is possible when the user-provided keys used in the path parameter are arrays...

Information Disclosure

Linux is vulnerable to information disclosure. The vulnerability exists due to the system incorrectly computes the access permissions of a shadow page, leading to a missing guest protection page fault...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. The vulnerability exists due to the system allowing OS users to cause host OS memory corruption via rtasargs.nargs...

Arbitrary Code Execution

chakracore is vulnerable to arbitrary code execution. A memory corruption vulnerability allows an attacker to execute arbitrary code on the host OS. This CVE ID is different from CVE-2020-17054...

Information Disclosure

webkit2gtk is vulnerable to information disclosure. The vulnerability exists due to a use-after-free in Webkits GraphicsContext...

Denial Of Service (DoS)

apache2 is vulnerable to denial of service. A null pointer dereference occurs when handling malicious HTTP/2 request. A remote attacker could use this flaw to crash the httpd child process, causing temporary denial of service...

Denial Of Service (DoS)

linux is vulnerable to denial of service. In intelpmudrainpebsnhm in arch/x86/events/intel/ds.c in the Linux kernel on some Haswell CPUs, userspace applications such as perf-fuzzer can cause a system crash because the PEBS status in a PEBS record is mishandled, aka CID-d88d05a9e0b6...

Information Disclosure

bouncycastle is vulnerable to information disclosure. The vulnerability exists due to a timing issue within the EC math library that can expose information about the private key when an attacker is able to observe timing information for the generation of multiple deterministic ECDSA signatures...

Denial Of Service (DoS)

glibc is vulnerable to denial of service. The vulnerability exists when processing invalid multi-byte input sequences which could lead to an infinite loop in applications causing the system to crash...

Insecure Deserialization

wire allows insecure deserialization. The way the type information is handled in its serialization format allows an attacker to pass malicious payloads a different type for the receiving end to the deserializer and potentially cause unexpected application behavior...

Heap Buffer Overflow

Google Chrome is vulnerable to heap buffer overflow in tab groups. It allows a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Denial Of Service(DoS)

chromium:sid is vulnerable to a denial-of-service vulnerability. An attacker can use a malicious HTTP page to trigger this vulnerability...

Open Redirection

rails is vulnerable to open redirection. Inadequate validation and regex matching of URLs allows an attacker to bypass validation checks using a malicious Host header and redirect users to a malicious website...

Remote Code Execution

Apache Druid is vulnerable to remote code execution. An attacker is able to execute arbitrary JavaScript code that is embedded in certain types of requests. This functionality is however disabled by default...

Arbitrary Code Execution

facade/ignition is vulnerable to arbitrary code execution. The vulnerability exists through stream wrappers in files that do not end of .blade.php in MakeViewVariableOptionalSolution...

Arbitrary Code Execution

imagemagick is vulnerable to arbitrary code execution. A heap-based buffer overflow in WriteOnePNGImage in coders/png.c allows an attacker to execute arbitrary code via a malicious file...

Denial Of Service (DoS)

linux kernel is vulnerable to denial of service. An infinite loop related to improper interaction between a resampler and edge triggering in ioapiclazyupdateeoi in arch/x86/kvm/ioapic.c results in an application crash...

Information Disclosure

php is vulnerable to information disclosure in exifreaddata...

DNS Rebinding Attack

firefox is vulnerable to DNS rebinding attack. The vulnerability exists as DNS over HTTPS intentionally filters RFC1918 and related IP ranges from the responses as these do not make sense coming from a DoH resolver, and when a IPv4 address was mapped through IPv6...

PHAR Unserialization

pear/archivetar is vulnerable to PHAR unserialization. The vulnerability exists due to the improper validation of filename that allows a filename that starts with PHAR:// to be executed...

Command Injection

cmd/go in github.com/golang/go is vulnerable to command injection. An attacker is able to inject malicious command via cgoflags compiler flag argument...

SQL Injection

phpmyadmin/phpmyadmin is vulnerable to SQL injection. An attacker is able to inject and execute arbitrary SQL statements on the database via the search feature, due to inadequate validation...

Validation Bypass

httpclient is vulnerable to validation bypass. A malformed authority component in the request URIs that is passed to the library as java.net.URI object would result in the request execution for a wrong target host...

Arbitrary Code Execution

webkitgtk4 is vulnerable to arbitrary code execution. The vulnerability exists through memory corruption...

Arbitrary Code Execution

kernel is vulnerable to arbitrary code execution. The vulnerability exists through a use after free caused by a race condition in smptasktimedout and smptaskdone in drivers/scsi/libsas/sasexpander.c which allows an attacker to execute arbitrary codes...

Information Disclosure

kernel is vulnerable to information disclosure. An info-leak bug that can be caused by a malicious USB device in the drivers/media/usb/ttusb-dec/ttusbdec.c driver allows an attacker to obtain confidential information...

Arbitrary Code Execution

kernel is vulnerable to arbitrary code execution. A heap-based buffer overflow in the lbsibssjoinexisting function in drivers/net/wireless/marvell/libertas/cfg.c allows an attacker to execute arbitrary code on the host OS...

Denial Of Service (DoS)

samba is vulnerable to denial of service. Due to the way samba handles certain requests as an Active Directory Domain Controller LDAP server, an attacker is able to cause a stack overflow leading to an application crash...

Remote Code Execution (RCE)

typo3/cms is vulnerable to insecure cryptography. During installation with mediace extension, the vulnerability exists because it was possible to generate arbitrary checksums that allows the injection of arbitrary data, allowing an attacker with at least one Extbase plugin or module action to...