Lucene search
+L
VeracodeMost viewed

38839 matches found

Veracode
Veracode
•added 2022/05/24 6:45 a.m.•46 views

Cross-Site Request Forgery (CSRF)

XXL Job Core is vulnerable to cross-site request forgery. The vulnerability exists in xxl-job-admin component due to less restrictions of user permissions which allows an attacker to perform unauthorized actions...

8.8CVSS8.1AI score0.00469EPSS
SaveExploits1References2Affected Software1
Veracode
Veracode
•added 2022/05/24 5:48 a.m.•46 views

Heap-based Buffer Overflow

tensorflow is vulnerable to heap-based buffer overflow. The use of AllocatedBytes in the insecure hash function AbslHashValue allows local authenticated attackers to cause heap-based buffer overflows resulting in denial of service conditions...

5.5CVSS5.6AI score0.00227EPSS
SaveExploits0References9Affected Software3
Veracode
Veracode
•added 2022/05/20 4:01 a.m.•46 views

Integer Overflow

org.springframework.security:spring-security-crypto is vulnerable to integer overflows. The encoder does not perform any salt rounds when the BCrypt class is used with the maximum work factor31, allowing a local authenticated attacker to cause an integer overflow error resulting in the attacker...

5.3CVSS7.1AI score0.02344EPSS
SaveExploits0References5Affected Software2
Veracode
Veracode
•added 2022/05/12 7:57 p.m.•46 views

Privilege Escalation

Slurm is vulnerable to Privilege Escalation. The vulnerability exists due to an Incorrect Access Control allowing an attacker to bypass the authorization to gain higher access...

9.8CVSS9.1AI score0.01816EPSS
SaveExploits0References10Affected Software1
Veracode
Veracode
•added 2022/04/25 5:38 a.m.•46 views

Cross-Site Request Forgery (CSRF)

MCMS is vulnerable to cross site request forgery. The vulnerability exists due to lack of handling of parameters, allowing an attacker to bypass authentication and submit request on the behalf of the server and gain access to internal resources via the file or endpoint /role/saveOrUpdateRole.do...

8.8CVSS4.8AI score0.00667EPSS
SaveExploits1References2Affected Software1
Veracode
Veracode
•added 2022/04/22 4:29 p.m.•46 views

SQL Injection

asterisk is vulnerable to SQL injection. The vulnerability exists due to a lack of sanitization of input for backslash characters in SQL queries allowing an attacker to make maliciously crafted queries...

9.8CVSS5.3AI score0.07083EPSS
SaveExploits0References6Affected Software1
Veracode
Veracode
•added 2022/04/15 12:53 a.m.•46 views

Denial Of Service (DoS)

go:edge is vulnerable to denial of service DoS attacks. A malicious user is able to cause an application crash via a large amount of PEM data...

7.5CVSS3AI score0.0995EPSS
SaveExploits1References18Affected Software14
Veracode
Veracode
•added 2022/03/12 12:42 a.m.•46 views

Privilege Escalation

kernel is vulnerable to privilege escalation. The vulnerability exists due to the lack of sanitization of access to the i915 Intel GPU...

7.8CVSS3.7AI score0.00379EPSS
SaveExploits0References6Affected Software3
Veracode
Veracode
•added 2022/03/02 6:23 a.m.•46 views

Remote Code Execution (RCE)

codeigniter4/framework is vulnerable to remote code execution. The vulnerability exists due to the improper input validation in the library, allowing an attacker to execute CLI routes via an HTTP request...

9.8CVSS4AI score0.01173EPSS
SaveExploits0References3Affected Software1
Veracode
Veracode
•added 2022/02/14 10:31 a.m.•46 views

Arbitrary Code Execution

vm2 is vulnerable to arbitrary code execution. Remote attackers are able to inject and execute crafted malicious scripts on the host machine via direct access to host error objects generated by node internals during generation of a stacktraces...

9.8CVSS5.8AI score0.02876EPSS
SaveExploits1References2Affected Software1
Veracode
Veracode
•added 2022/01/18 8:50 p.m.•46 views

Insecure Cryptography

cryptsetup is vulnerable to insecure cryptography. A malicious attacker can modify on-disk metadata to simulate decryption in progress with crashed reencryption step and persistently decrypt part of the LUKS device...

4.3CVSS3.6AI score0.00307EPSS
SaveExploits0References10Affected Software3
Veracode
Veracode
•added 2022/01/17 9:09 a.m.•46 views

Information Disclosure

node-fetch is vulnerable to information disclosure. The vulnerability exists due to the cookie header being leaked to third party site which allows an attacker to gain access to sensitive information...

6.1CVSS1.9AI score0.01646EPSS
SaveExploits1References5Affected Software8
Veracode
Veracode
•added 2022/01/15 12:28 a.m.•46 views

Denial Of Service (DoS)

Linux kernel is vulnerable to denial of service. The vulnerability exists due to the use-after-free in the NFC stack, allowing an attacker to crash the application...

7.8CVSS3.8AI score0.00354EPSS
SaveExploits0References5Affected Software3
Veracode
Veracode
•added 2022/01/05 6:23 p.m.•46 views

Remote Code Execution (RCE)

RabbitMQ is vulnerable to Regular Expression Denial Of Service ReDoS. A new user being added via management UI could lead to the user's bane being rendered in a confirmation message without proper...

5.4CVSS5.4AI score0.01432EPSS
SaveExploits1References4Affected Software1
Veracode
Veracode
•added 2021/12/10 7:36 a.m.•46 views

Denial Of Service (DoS)

thunderbird and firefox are vulnerable denial of service. The vulnerability exists due to a GC Rooting Failure When Calling Wasm Instance Methods...

8.8CVSS2.9AI score0.01613EPSS
SaveExploits0References13Affected Software7
Veracode
Veracode
•added 2021/11/17 10:36 p.m.•46 views

Symlink Attack

glib2 is vulnerable to symlink attack. The vulnerability exists due to a dangling symlink which incorrectly creates the target of the symlink as an empty file, which have security relevance if the symlink is attacker-controlled...

5.3CVSS1.8AI score0.02622EPSS
SaveExploits1References12Affected Software3
Veracode
Veracode
•added 2021/11/17 10:36 p.m.•46 views

Information Disclosure

kernel is vulnerable to information disclosure. The vulnerability exists due to Insufficient control flow in certain data structures...

5.5CVSS2.2AI score0.01447EPSS
SaveExploits0References23Affected Software2
Veracode
Veracode
•added 2021/11/12 3:18 p.m.•46 views

CVE-2020-25722

samba is vulnerable to privilege escalation. The vulnerability exists due to a lack of sanitization of access and conformance of data stored allowing total domain compromise...

8.8CVSS4AI score0.01606EPSS
SaveExploits0References4Affected Software5
Veracode
Veracode
•added 2021/11/12 8:43 a.m.•46 views

Denial Of Service (DoS)

busybox is vulnerable to denial of service. An out-of-bounds heap read in unlzma leads to information leak and application crash when crafted LZMA-compressed input is decompressed...

5.3CVSS1.9AI score0.00623EPSS
SaveExploits1References9Affected Software5
Veracode
Veracode
•added 2021/10/07 10:15 a.m.•46 views

Information Disclosure

chromium is vulnerable to information disclosure. The vulnerability exists due to the side-channel information leakage in DevTools...

4.3CVSS1AI score0.01153EPSS
SaveExploits0References8Affected Software2
Veracode
Veracode
•added 2021/09/28 4:28 a.m.•46 views

Prototype Pollution

aurelia-path is vulnerable to prototype pollution. An attacker is able to modify object class Object by tricking an application to parse the following URL: https://aurelia.io/blog/?protoasdf=asdf...

9.1CVSS3.5AI score0.04895EPSS
SaveExploits1References5Affected Software1
Veracode
Veracode
•added 2021/09/13 6:49 a.m.•46 views

Prototype Pollution

set-value is vulnerable to prototype pollution. Lack of validation in type of user-provided keys in the path parameter causes a bypass of CVE-2019-10747. The exploit is possible when the user-provided keys used in the path parameter are arrays...

9.8CVSS9.1AI score0.02475EPSS
SaveExploits2References7Affected Software2
Veracode
Veracode
•added 2021/09/11 5:29 p.m.•46 views

Information Disclosure

Linux is vulnerable to information disclosure. The vulnerability exists due to the system incorrectly computes the access permissions of a shadow page, leading to a missing guest protection page fault...

5.5CVSS2.4AI score0.00469EPSS
SaveExploits1References5Affected Software3
Veracode
Veracode
•added 2021/09/09 4:22 p.m.•46 views

Denial Of Service (DoS)

kernel is vulnerable to denial of service. The vulnerability exists due to the system allowing OS users to cause host OS memory corruption via rtasargs.nargs...

7.8CVSS7.5AI score0.00575EPSS
SaveExploits1References14Affected Software2
Veracode
Veracode
•added 2021/08/03 4:29 a.m.•46 views

Arbitrary Code Execution

chakracore is vulnerable to arbitrary code execution. A memory corruption vulnerability allows an attacker to execute arbitrary code on the host OS. This CVE ID is different from CVE-2020-17054...

4.2CVSS4.5AI score0.02067EPSS
SaveExploits0References3Affected Software2
Veracode
Veracode
•added 2021/07/29 6:44 a.m.•46 views

Information Disclosure

webkit2gtk is vulnerable to information disclosure. The vulnerability exists due to a use-after-free in Webkits GraphicsContext...

8.8CVSS1AI score0.029EPSS
SaveExploits1References8Affected Software17
Veracode
Veracode
•added 2021/06/11 10:48 p.m.•46 views

Denial Of Service (DoS)

apache2 is vulnerable to denial of service. A null pointer dereference occurs when handling malicious HTTP/2 request. A remote attacker could use this flaw to crash the httpd child process, causing temporary denial of service...

7.5CVSS2.6AI score0.51489EPSS
SaveExploits0References21Affected Software1
Veracode
Veracode
•added 2021/06/06 10:35 a.m.•46 views

Denial Of Service (DoS)

linux is vulnerable to denial of service. In intelpmudrainpebsnhm in arch/x86/events/intel/ds.c in the Linux kernel on some Haswell CPUs, userspace applications such as perf-fuzzer can cause a system crash because the PEBS status in a PEBS record is mishandled, aka CID-d88d05a9e0b6...

5.5CVSS3.6AI score0.00385EPSS
SaveExploits0References11Affected Software5
Veracode
Veracode
•added 2021/05/24 2:29 a.m.•46 views

Information Disclosure

bouncycastle is vulnerable to information disclosure. The vulnerability exists due to a timing issue within the EC math library that can expose information about the private key when an attacker is able to observe timing information for the generation of multiple deterministic ECDSA signatures...

5.9CVSS1.5AI score0.01522EPSS
SaveExploits0References4Affected Software11
Veracode
Veracode
•added 2021/05/24 12:38 a.m.•46 views

Denial Of Service (DoS)

glibc is vulnerable to denial of service. The vulnerability exists when processing invalid multi-byte input sequences which could lead to an infinite loop in applications causing the system to crash...

5.5CVSS3.3AI score0.00887EPSS
SaveExploits1References11Affected Software1
Veracode
Veracode
•added 2021/05/12 5:18 a.m.•46 views

Insecure Deserialization

wire allows insecure deserialization. The way the type information is handled in its serialization format allows an attacker to pass malicious payloads a different type for the receiving end to the deserializer and potentially cause unexpected application behavior...

9.1CVSS3.3AI score0.01584EPSS
SaveExploits1References2Affected Software1
Veracode
Veracode
•added 2021/03/17 1:19 a.m.•46 views

Heap Buffer Overflow

Google Chrome is vulnerable to heap buffer overflow in tab groups. It allows a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS3.1AI score0.01475EPSS
SaveExploits1References7Affected Software1
Veracode
Veracode
•added 2021/03/09 2:27 p.m.•46 views

Denial Of Service(DoS)

chromium:sid is vulnerable to a denial-of-service vulnerability. An attacker can use a malicious HTTP page to trigger this vulnerability...

8.8CVSS0.8AI score0.26723EPSS
SaveExploits0References11Affected Software2
Veracode
Veracode
•added 2021/02/15 3:48 a.m.•46 views

Open Redirection

rails is vulnerable to open redirection. Inadequate validation and regex matching of URLs allows an attacker to bypass validation checks using a malicious Host header and redirect users to a malicious website...

6.1CVSS4AI score0.87301EPSS
SaveExploits1References9Affected Software2
Veracode
Veracode
•added 2021/02/07 4:05 a.m.•46 views

Remote Code Execution

Apache Druid is vulnerable to remote code execution. An attacker is able to execute arbitrary JavaScript code that is embedded in certain types of requests. This functionality is however disabled by default...

8.8CVSS3.2AI score0.99001EPSS
SaveExploits8References30Affected Software1
Veracode
Veracode
•added 2021/01/13 2:33 a.m.•46 views

Arbitrary Code Execution

facade/ignition is vulnerable to arbitrary code execution. The vulnerability exists through stream wrappers in files that do not end of .blade.php in MakeViewVariableOptionalSolution...

9.8CVSS6.4AI score0.99943EPSS
SaveExploits38References5Affected Software1
Veracode
Veracode
•added 2020/12/06 4:14 a.m.•46 views

Arbitrary Code Execution

imagemagick is vulnerable to arbitrary code execution. A heap-based buffer overflow in WriteOnePNGImage in coders/png.c allows an attacker to execute arbitrary code via a malicious file...

5.5CVSS5.5AI score0.01028EPSS
SaveExploits1References4Affected Software4
Veracode
Veracode
•added 2020/12/06 2:18 a.m.•46 views

Denial Of Service (DoS)

linux kernel is vulnerable to denial of service. An infinite loop related to improper interaction between a resampler and edge triggering in ioapiclazyupdateeoi in arch/x86/kvm/ioapic.c results in an application crash...

5.5CVSS2.9AI score0.00569EPSS
SaveExploits1References5Affected Software3
Veracode
Veracode
•added 2020/12/02 9:50 a.m.•46 views

Information Disclosure

php is vulnerable to information disclosure in exifreaddata...

6.5CVSS0.5AI score0.07473EPSS
SaveExploits1References18Affected Software1
Veracode
Veracode
•added 2020/11/20 10:27 a.m.•46 views

DNS Rebinding Attack

firefox is vulnerable to DNS rebinding attack. The vulnerability exists as DNS over HTTPS intentionally filters RFC1918 and related IP ranges from the responses as these do not make sense coming from a DoH resolver, and when a IPv4 address was mapped through IPv6...

6.5CVSS1.2AI score0.01165EPSS
SaveExploits0References5Affected Software8
Veracode
Veracode
•added 2020/11/20 3:05 a.m.•46 views

PHAR Unserialization

pear/archivetar is vulnerable to PHAR unserialization. The vulnerability exists due to the improper validation of filename that allows a filename that starts with PHAR:// to be executed...

7.8CVSS4AI score0.84554EPSS
SaveExploits4References19Affected Software6
Veracode
Veracode
•added 2020/11/19 6:14 a.m.•46 views

Command Injection

cmd/go in github.com/golang/go is vulnerable to command injection. An attacker is able to inject malicious command via cgoflags compiler flag argument...

7.5CVSS3.9AI score0.02405EPSS
SaveExploits0References13Affected Software5
Veracode
Veracode
•added 2020/10/13 4:24 a.m.•46 views

SQL Injection

phpmyadmin/phpmyadmin is vulnerable to SQL injection. An attacker is able to inject and execute arbitrary SQL statements on the database via the search feature, due to inadequate validation...

9.8CVSS4.8AI score0.67081EPSS
SaveExploits1References13Affected Software2
Veracode
Veracode
•added 2020/10/12 4:02 a.m.•46 views

Validation Bypass

httpclient is vulnerable to validation bypass. A malformed authority component in the request URIs that is passed to the library as java.net.URI object would result in the request execution for a wrong target host...

5.3CVSS1.1AI score0.09032EPSS
SaveExploits1References120Affected Software22
Veracode
Veracode
•added 2020/10/01 3:53 a.m.•46 views

Arbitrary Code Execution

webkitgtk4 is vulnerable to arbitrary code execution. The vulnerability exists through memory corruption...

8.8CVSS3.8AI score0.01858EPSS
SaveExploits0References7Affected Software28
Veracode
Veracode
•added 2020/10/01 3:51 a.m.•46 views

Arbitrary Code Execution

kernel is vulnerable to arbitrary code execution. The vulnerability exists through a use after free caused by a race condition in smptasktimedout and smptaskdone in drivers/scsi/libsas/sasexpander.c which allows an attacker to execute arbitrary codes...

8.1CVSS8.5AI score0.05088EPSS
SaveExploits0References18Affected Software2
Veracode
Veracode
•added 2020/09/21 6:36 a.m.•46 views

Information Disclosure

kernel is vulnerable to information disclosure. An info-leak bug that can be caused by a malicious USB device in the drivers/media/usb/ttusb-dec/ttusbdec.c driver allows an attacker to obtain confidential information...

2.4CVSS2.8AI score0.0046EPSS
SaveExploits0References6Affected Software4
Veracode
Veracode
•added 2020/09/12 1:27 a.m.•46 views

Arbitrary Code Execution

kernel is vulnerable to arbitrary code execution. A heap-based buffer overflow in the lbsibssjoinexisting function in drivers/net/wireless/marvell/libertas/cfg.c allows an attacker to execute arbitrary code on the host OS...

9.8CVSS4.3AI score0.08667EPSS
SaveExploits0References22Affected Software1
Veracode
Veracode
•added 2020/08/06 9:27 p.m.•46 views

Denial Of Service (DoS)

samba is vulnerable to denial of service. Due to the way samba handles certain requests as an Active Directory Domain Controller LDAP server, an attacker is able to cause a stack overflow leading to an application crash...

7.5CVSS2.9AI score0.03542EPSS
SaveExploits0References10Affected Software1
Veracode
Veracode
•added 2020/07/30 4:30 a.m.•46 views

Remote Code Execution (RCE)

typo3/cms is vulnerable to insecure cryptography. During installation with mediace extension, the vulnerability exists because it was possible to generate arbitrary checksums that allows the injection of arbitrary data, allowing an attacker with at least one Extbase plugin or module action to...

9.8CVSS5.6AI score0.02721EPSS
SaveExploits1References3Affected Software1
Total number of security vulnerabilities5000