Lucene search
+L
VeracodeMost viewed

38790 matches found

Veracode
Veracode
•added 2022/07/22 4:38 p.m.•44 views

Privilege Escalation

Zulip is vulnerable to Privilege Escalation. An attacker may exploit the vulnerability by sending a maliciously crafted API call that grants administrator privileges to a bot in control...

8.8CVSS8.3AI score0.00782EPSS
SaveExploits0References3Affected Software1
Veracode
Veracode
•added 2022/07/04 3:15 p.m.•44 views

Remote Code Execution (RCE)

openssl is vulnerable to remote code execution. The vulnerability exists due to the improper RSA implementation of AVX512IFMA instructions in X8664 CPUs, allowing an attacker to crash the application by providing a malicious input...

9.8CVSS6.7AI score0.4705EPSS
SaveExploits3References6Affected Software1
Veracode
Veracode
•added 2022/06/30 5:21 a.m.•44 views

Remote Code Execution

getgrav/grav is vulnerable to remote code execution. An authenticated remote attacker is able to cause server side template injection via Twig which renders risky functions by default, such as system...

7.2CVSS7.5AI score0.10603EPSS
SaveExploits2References3Affected Software1
Veracode
Veracode
•added 2022/06/26 4:59 p.m.•44 views

Denial Of Service (DoS)

vim is vulnerable to denial of service. The vulnerability exists due to the usage of invalid index when looking for spell suggestions which causes out-of-bound reads which then lead to an application crash...

7.8CVSS7.4AI score0.01522EPSS
SaveExploits1References17Affected Software1
Veracode
Veracode
•added 2022/06/26 4:57 p.m.•44 views

Privilege Escalation

chromium is vulnerable to privilege escalation. The vulnerability exists because the lack of implementation of the protection mechanism, allowing an attacker to exploit this flaw by providing malicious input...

6.5CVSS7.3AI score0.00658EPSS
SaveExploits1References8Affected Software3
Veracode
Veracode
•added 2022/06/26 7:50 a.m.•44 views

Information Disclosure

vim is vulnerable to information disclosure. A buffer over-read in function grabfilename is capable of crashing the software, memory modification, and possible remote execution...

7.8CVSS7.4AI score0.02185EPSS
SaveExploits1References18Affected Software1
Veracode
Veracode
•added 2022/06/22 7:29 a.m.•44 views

Denial Of Service (DoS)

MariaDB is vulnerable to denail of service. The vulnerability exists due to a deadlock when executing the plugin/serveraudit/serveraudit.c method logstatementex...

5.5CVSS6.1AI score0.00209EPSS
SaveExploits0References6Affected Software5
Veracode
Veracode
•added 2022/06/21 11:46 p.m.•44 views

Denial Of Service (DoS)

eap is vulnerable to denial of service. The vulnerability exists due to a flaw found in XNIO, specifically in the notifyReadClosed method allowing an attacker to crash the system via a flawed requests sent to a server, possibly causing log contention-related performance concerns or an unwanted di...

7.5CVSS8.1AI score0.01486EPSS
SaveExploits0References8Affected Software26
Veracode
Veracode
•added 2022/06/20 7:47 p.m.•44 views

Authentication Bypass

Linux kernel is vulnerable to authentication bypass. The vulnerability exists because the users have access to some less privileged process that are controlled by cgroups and have higher privileged parent process which allows an attacker to escalate their privileges and crash the system...

7.8CVSS4.9AI score0.00536EPSS
SaveExploits0References8Affected Software4
Veracode
Veracode
•added 2022/06/16 5:10 p.m.•44 views

Denial Of Service (DoS)

linux is vulnerable to denial of service. The vulnerability exists because the emsusbstartxmit in emsusb.c in the Linux kernel has a double free which allows an attacker to crash the application...

7.8CVSS7.2AI score0.00359EPSS
SaveExploits0References12Affected Software4
Veracode
Veracode
•added 2022/06/16 3:04 a.m.•44 views

Path Traversal

github.com/golang/go is vulnerable to Path Traversal. The vulnerability exists because the Clean function of path.go does not properly remove the . prefix when the file path contains :, allowing an attacker to access files outside the expected directory on windows...

7.5CVSS7.3AI score0.02119EPSS
SaveExploits0References12Affected Software2
Veracode
Veracode
•added 2022/06/14 8:10 a.m.•44 views

Out-of-Bounds Read

Apache HTTP Server is vulnerable to out of bounds read. The vulnerability exists due to a memory corruption when configured to process requests with the modisapi module...

5.3CVSS7.5AI score0.03834EPSS
SaveExploits0References5Affected Software1
Veracode
Veracode
•added 2022/06/12 6:35 p.m.•44 views

Incorrect Logic

x86 pv is using an incorrect logic. The vulnerability exists due to insufficient care with non-coherent mappings which allows an attacker to perform unwanted actions...

6.7CVSS7AI score0.00341EPSS
SaveExploits0References10Affected Software1
Veracode
Veracode
•added 2022/06/02 11:41 p.m.•44 views

Denial Of Service (DoS)

libtiff is vulnerable to denial of service. The vulnerability exists due to a buffer overflow in the "invertImage" function in the component "tiffcrop" allowing an attacker to crash the system via the "invertImage"...

7.5CVSS7.6AI score0.02433EPSS
SaveExploits1References7Affected Software1
Veracode
Veracode
•added 2022/06/01 3:18 p.m.•44 views

Memory Corruption

firefox is vulnerable to memory corruption vulnerability. Crafted CMS messages are incorrectly processed, leading to invalid memory reads, and potentially further memory corruption...

8.8CVSS9.3AI score0.00662EPSS
SaveExploits0References7Affected Software6
Veracode
Veracode
•added 2022/05/24 6:45 a.m.•44 views

Cross-Site Request Forgery (CSRF)

XXL Job Core is vulnerable to cross-site request forgery. The vulnerability exists in xxl-job-admin component due to less restrictions of user permissions which allows an attacker to perform unauthorized actions...

8.8CVSS8.1AI score0.00469EPSS
SaveExploits1References2Affected Software1
Veracode
Veracode
•added 2022/05/24 5:48 a.m.•44 views

Heap-based Buffer Overflow

tensorflow is vulnerable to heap-based buffer overflow. The use of AllocatedBytes in the insecure hash function AbslHashValue allows local authenticated attackers to cause heap-based buffer overflows resulting in denial of service conditions...

5.5CVSS5.6AI score0.00227EPSS
SaveExploits0References9Affected Software3
Veracode
Veracode
•added 2022/05/08 2:04 a.m.•44 views

Privilege Escalation

njs is vulnerable to privilege escalation. The vulnerability exists in njspromiseperformthen function due to a type confusion which allows an attacker to gain access to the system and perform unauthorized actions...

9.8CVSS5.3AI score0.01663EPSS
SaveExploits1References6Affected Software2
Veracode
Veracode
•added 2022/04/30 4:23 p.m.•44 views

Insecure IPv6 Connection

curl has insecure IPv6 connection. The vulnerability exists due to an errors in the logic where the config matching function did not take the IPv6 address zone id into account allowing the system to use the wrong connection when one transfer uses a zone id, and when subsequent transfer uses anoth...

7.5CVSS3.7AI score0.03154EPSS
SaveExploits1References5Affected Software3
Veracode
Veracode
•added 2022/04/26 11:54 a.m.•44 views

Buffer Overflow

vim is vulnerable to denial of service. The vulnerability exists due to global heap buffer overflow in skiprange, allowing an attacker to crash the system...

7.8CVSS3.2AI score0.03104EPSS
SaveExploits1References12Affected Software1
Veracode
Veracode
•added 2022/04/26 7:03 a.m.•44 views

Cross-Site Scripting (XSS)

Liferay Layout SEO Web is vulnerable to stored cross-site scripting. The vulnerability exists in getOpenGraphTag function in OpenGraphTopHeadDynamicInclude.java due to lack of html escaping which allows an attacker to inject and execute arbitrary javascript...

6.1CVSS1.4AI score0.00711EPSS
SaveExploits0References4Affected Software1
Veracode
Veracode
•added 2022/04/21 12:42 a.m.•44 views

Remote Code Execution (RCE)

jenkins-2-plugins is vulnerable to remote code execution. The vulnerability exists due to a sandbox bypass allowing attackers to execute arbitrary code on the system...

8.8CVSS7.5AI score0.01601EPSS
SaveExploits0References4Affected Software1
Veracode
Veracode
•added 2022/04/17 9:55 a.m.•44 views

Type Confusion

Google Chrome is vulnerable to type confusion. A remote attacker is able to exploit a heap memory corruption issue via a crafted HTML page, which leads to a use-after-free state in V8 Turbofan engine...

8.8CVSS2AI score0.1372EPSS
SaveExploits2References4Affected Software2
Veracode
Veracode
•added 2022/04/11 9:08 a.m.•44 views

CSV Injection

kevinpapst/kimai2 is vulnerable to CSV injection. The vulnerability is possible because the library does not sanitize the $desc parameter, which allows an attacker to inject malicious input...

7.8CVSS3.5AI score0.01014EPSS
SaveExploits0References3Affected Software1
Veracode
Veracode
•added 2022/04/10 10:33 a.m.•44 views

Remote Code Execution

Gzip is vulnerable to remote code execution. Insufficient validations when processing filenames with two or more newlines allow remote attackers to force zgrep or xzgrep to write arbitrary files on the system...

8.8CVSS6.9AI score0.05036EPSS
SaveExploits0References15Affected Software7
Veracode
Veracode
•added 2022/04/05 11:15 a.m.•44 views

HTTP Request Smuggling (HRS)

twisted is vulnerable to http request smuggling. The vulnerability exists in twisted.web due to inconsistent interpretation of http requests which allows a remote attacker to conduct HTTP request smuggling attacks via a crafted request...

8.1CVSS4.5AI score0.028EPSS
SaveExploits0References9Affected Software4
Veracode
Veracode
•added 2022/03/14 6:03 a.m.•44 views

Spoofing Attack

swagger-ui-react is vulnerable to spoofing attack. The vulnerability allows remote attackers to acquire remote OpenAPI definitions by persuading the victim to open a specifically crafted URL...

4.3CVSS5.3AI score0.42326EPSS
SaveExploits4References5Affected Software1
Veracode
Veracode
•added 2022/03/02 6:23 a.m.•44 views

Remote Code Execution (RCE)

codeigniter4/framework is vulnerable to remote code execution. The vulnerability exists due to the improper input validation in the library, allowing an attacker to execute CLI routes via an HTTP request...

9.8CVSS4AI score0.01173EPSS
SaveExploits0References3Affected Software1
Veracode
Veracode
•added 2022/02/14 10:31 a.m.•44 views

Arbitrary Code Execution

vm2 is vulnerable to arbitrary code execution. Remote attackers are able to inject and execute crafted malicious scripts on the host machine via direct access to host error objects generated by node internals during generation of a stacktraces...

9.8CVSS5.8AI score0.02876EPSS
SaveExploits1References2Affected Software1
Veracode
Veracode
•added 2022/02/08 6:17 p.m.•44 views

Denial Of Service (DoS)

samba is vulnerable to information disclosure. The vulnerability exists due to a lack of sanitization of permission when adding service principals names SPNs to an account...

8.8CVSS2.4AI score0.01634EPSS
SaveExploits0References8Affected Software2
Veracode
Veracode
•added 2022/01/23 12:19 a.m.•44 views

Heap-Based Buffer Overflow

vim is vulnerable to Heap-based Buffer Overflow. The vulnerability exists due to the lack of sanitization of the help.ccauses a heap-based buffer overflow which could result in an application crash...

7.8CVSS3.1AI score0.01792EPSS
SaveExploits1References11Affected Software3
Veracode
Veracode
•added 2022/01/19 7:13 p.m.•44 views

Buffer Overflow

Slurm is vulnerable to buffer overflow. The vulnerability exists in the PMIx MPI plugin which causes a buffer overflow which leads to an application crash...

9.8CVSS3.2AI score0.02242EPSS
SaveExploits0References4Affected Software1
Veracode
Veracode
•added 2022/01/15 12:28 a.m.•44 views

Denial Of Service (DoS)

Linux kernel is vulnerable to denial of service. The vulnerability exists due to the use-after-free in the NFC stack, allowing an attacker to crash the application...

7.8CVSS3.8AI score0.00354EPSS
SaveExploits0References5Affected Software3
Veracode
Veracode
•added 2022/01/07 6:05 a.m.•44 views

Denial Of Service (DoS)

libexpat.so is vulnerable to denial of service. The vulnerability exists due to the integer overflow in the mgroupSize of xmlparse.c, allowing an attacker to cause an application crash...

8.1CVSS3.9AI score0.0379EPSS
SaveExploits1References10Affected Software23
Veracode
Veracode
•added 2022/01/05 6:23 p.m.•44 views

Remote Code Execution (RCE)

RabbitMQ is vulnerable to Regular Expression Denial Of Service ReDoS. A new user being added via management UI could lead to the user's bane being rendered in a confirmation message without proper...

5.4CVSS5.4AI score0.01432EPSS
SaveExploits1References4Affected Software1
Veracode
Veracode
•added 2021/11/17 10:36 p.m.•44 views

Information Disclosure

kernel is vulnerable to information disclosure. The vulnerability exists due to Insufficient control flow in certain data structures...

5.5CVSS2.2AI score0.01447EPSS
SaveExploits0References23Affected Software2
Veracode
Veracode
•added 2021/10/05 1:27 p.m.•44 views

Denial Of Service (DoS)

Redis is vulnerable to denial of service. An attacker may exploit the vulnerability by injecting a malicious requests over multiple connections can cause the server to allocate significant amount of memory causing it to crash...

7.5CVSS3.3AI score0.16904EPSS
SaveExploits0References19Affected Software2
Veracode
Veracode
•added 2021/09/13 6:49 a.m.•44 views

Prototype Pollution

set-value is vulnerable to prototype pollution. Lack of validation in type of user-provided keys in the path parameter causes a bypass of CVE-2019-10747. The exploit is possible when the user-provided keys used in the path parameter are arrays...

9.8CVSS9.1AI score0.02475EPSS
SaveExploits2References7Affected Software2
Veracode
Veracode
•added 2021/09/11 5:29 p.m.•44 views

Information Disclosure

Linux is vulnerable to information disclosure. The vulnerability exists due to the system incorrectly computes the access permissions of a shadow page, leading to a missing guest protection page fault...

5.5CVSS2.4AI score0.00469EPSS
SaveExploits1References5Affected Software3
Veracode
Veracode
•added 2021/08/03 4:29 a.m.•44 views

Arbitrary Code Execution

chakracore is vulnerable to arbitrary code execution. A memory corruption vulnerability allows an attacker to execute arbitrary code on the host OS. This CVE ID is different from CVE-2020-17054...

4.2CVSS4.5AI score0.02067EPSS
SaveExploits0References3Affected Software2
Veracode
Veracode
•added 2021/07/29 6:44 a.m.•44 views

Information Disclosure

webkit2gtk is vulnerable to information disclosure. The vulnerability exists due to a use-after-free in Webkits GraphicsContext...

8.8CVSS1AI score0.029EPSS
SaveExploits1References8Affected Software17
Veracode
Veracode
•added 2021/07/22 5:50 a.m.•44 views

Insecure SSL Configuration

curl uses insecure SSL configurations. The curlsslconfigmatches attempts to compare whether two SSL connections have identical SSL security options and could potentially reuse a connection that is less secure or uses different security options such as capath, cainfo or certificate/issuer pinning...

3.7CVSS2.1AI score0.0627EPSS
SaveExploits1References21Affected Software7
Veracode
Veracode
•added 2021/07/11 3:57 p.m.•44 views

Denial Of Service (DoS)

ruby2.7:sid is vulnerable to Denial Of Service DoS. It is possible to execute arbitrary code via | and tags in a filename...

7CVSS7.7AI score0.0148EPSS
SaveExploits0References6Affected Software10
Veracode
Veracode
•added 2021/06/11 10:48 p.m.•44 views

Denial Of Service (DoS)

apache2 is vulnerable to denial of service. A null pointer dereference occurs when handling malicious HTTP/2 request. A remote attacker could use this flaw to crash the httpd child process, causing temporary denial of service...

7.5CVSS2.6AI score0.51489EPSS
SaveExploits0References21Affected Software1
Veracode
Veracode
•added 2021/05/24 12:38 a.m.•44 views

Denial Of Service (DoS)

glibc is vulnerable to denial of service. The vulnerability exists when processing invalid multi-byte input sequences which could lead to an infinite loop in applications causing the system to crash...

5.5CVSS3.3AI score0.00887EPSS
SaveExploits1References11Affected Software1
Veracode
Veracode
•added 2021/05/20 3:25 p.m.•44 views

Denial Of Service (DoS)

sqlite is vulnerable to denial of service. The vulnerability exists due to select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant propagation...

5.5CVSS2.3AI score0.01027EPSS
SaveExploits1References26Affected Software1
Veracode
Veracode
•added 2021/05/08 3:21 p.m.•44 views

Arbitrary Code Execution

libxml2 is vulnerable to arbitrary code execution. A use-after-free occurs in xmllint when --html and --push options are used, allowing an attacker to execute arbitrary code on the host OS by submitting malicious files...

7.8CVSS4.8AI score0.0199EPSS
SaveExploits1References12Affected Software17
Veracode
Veracode
•added 2021/05/08 3:20 p.m.•44 views

Remote Code Execution (RCE)

libxml2 is vulnerable to remote code execution. The vulnerability exists due to a use after free in libxml2 in xmlXIncludeDoProcess in xinclude.c...

8.8CVSS2.9AI score0.03653EPSS
SaveExploits0References24Affected Software17
Veracode
Veracode
•added 2021/05/06 11:27 a.m.•44 views

Information Disclosure

samba is vulnerable to information disclosure. The vulnerability exists due to a flaw that could allow an attacker to read data beyond the end of the array...

6.8CVSS2.4AI score0.01616EPSS
SaveExploits0References12Affected Software7
Veracode
Veracode
•added 2021/05/06 4:01 a.m.•44 views

Remote Code Execution

redis is vulnerable to remote code execution. An integer overflow occurs during the execution of a STRALGO LCS command, resulting in heap corruption and potential code execution...

8.8CVSS5.8AI score0.04028EPSS
SaveExploits0References12Affected Software1
Total number of security vulnerabilities5000