39640 matches found
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists as the flaw in sctpprocessunkparam, allowing a remote attacker to send a specially-crafted SCTP packet to an SCTP listening port on a target system, causing a denial of service...
Privilege Escalation
kernel is vulnerable to privilege escalation. Missing sanity checks in the Intel i915 driver in the Linux kernel could allow a local, unprivileged user to escalate their privileges...
Arbitrary Code Execution
seamonkey is vulnerable to arbitrary code execution. The vulnerability exists through a race condition flaw was found in the way SeaMonkey handled Document Object Model DOM element properties. A web page containing malicious content could cause SeaMonkey to crash or, potentially, execute arbitrar...
Privilege Escalation
java is vulnerable to privilege escalation. An unspecified vulnerability allows an attacker to affect confidentiality, integrity and availability of the system via unknown vectors...
Denial Of Service (DoS)
Mozilla Firefox is vulnerable to Denial Of Service DoS. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox...
Spoofing Attack
mysql is vulnerable to spoofing attack. It was discovered that the MySQL client ignored certain SSL certificate verification errors when connecting to servers. A man-in-the-middle attacker could use this flaw to trick MySQL clients into connecting to a spoofed MySQL server...
Privilege Escalation
The gcc and gcc4 is vulnerable to Privilege Escalation. A flaw was found in the way GNU Libtool's libltdl library looked for libraries to load. It was possible for libltdl to load a malicious library from the current working directory. In certain configurations, if a local attacker is able to tri...
Denial Of Service (DoS)
The kernel is vulnerable to Denial Of Service DoS. A flaw was found in each of the following Intel PRO/1000 Linux drivers in the Linux kernel: e1000 and e1000e. A remote attacker using packets larger than the MTU could bypass the existing fragment check, resulting in partial, invalid frames being...
Privilege Escalation
kernel is vulnerable to privilege escalation. The vulnerability exists as permission issues were found in the megaraidsas driver. The "dbglvl" and "pollmodeio" files on the sysfs file system "/sys/" had world-writable permissions. This could allow local, unprivileged users to change the behavior ...
Denial Of Service (DoS)
SeaMonkey is vulnerable to Denial Of Service DoS. Due to a flaw found in the processing of malformed web content, it causes memory corruption and application crash or possibly execute arbitrary code via unknown vectors...
Arbitrary Code Execution
python is vulnerable to arbitrary code execution. When the assert system call was disabled, an input sanitization flaw was revealed in the Python string object implementation that led to a buffer overflow. The missing check for negative size values meant the Python memory allocator could allocate...
Cross-Site Scripting (XSS)
php is vulnerable to cross-site scripting. A cross-site scripting flaw was found in a way PHP reported errors for invalid cookies. If the PHP interpreter had "displayerrors" enabled, a remote attacker able to set a specially-crafted cookie on a victim's system could possibly inject arbitrary HTML...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists as the Xen implementation did not prevent applications running in a para-virtualized guest from modifying CR4 TSC. This could cause a local denial of service...
Arbitrary JavaScript Code Execution
seamonkey is vulnerable to arbitrary javascript code execution. The vulnerability exists as a flaw was found in SeaMonkey that caused certain characters to be stripped from JavaScript code. This flaw could allow malicious JavaScript to bypass or evade script filters...
Weak Encryption
kernel is vulnerable to weak encryption. The vulnerability exists due to a lack of random number generation, which allowed a local user to cause a denial of service or potentially gain privileges...
Arbitrary Code Execution
php is vulnerable to arbitrary code execution. The vulnerability exists as an integer overflow flaw was found in the PHP chunksplit function. If a remote attacker was able to pass arbitrary data to the third argument of chunksplit they could possibly execute arbitrary code as the apache user. Not...
Denial Of Service (DoS)
Mozilla is vulnerable to denial of service DoS. The vulnerability exists through memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7...
Memory Leak
ImageMagick is vulnerable to memory leaks. The attack is possible because of the function WriteMSLImage of coders/msl.c...
Denial Of Service (DoS)
ImageMagick is vulnerable to denial of service DoS. The attack exists because the function WriteTIFFImage of coders/tiff.c causes memory leaks in AcquireMagickMemory , allowing an attacker to input a malicious image file to trigger a heap-based buffer over-read...
Remote Code Execution
jackson-databind is vulnerable to deserialization of untrusted data that can lead to remote code execution. The gadget org.apache.aries.transaction.jms is not validated and filtered by default from the interaction between serialization gadgets and polymorphic typing, allowing for injection of sai...
HTTP Request Splitting
twisted is vulnerable to HTTP request splitting. The vulnerability exists as requests with both Content-Length and Transfer-Encoding headers would have honored the first header.This vulnerability is similar to CVE-2020-10108...
Cross-Site Request Forgery (CSRF)
spring-web is vulnerable to cross-site request forgery CSRF. The CORS preflight requests does not validate the Origin header and allows for CSRF attacks. Non-authenticated endpoints are vulnerable except for Chrome-based browsers using client certificates authentication...
Information Disclosure
OpenJDK is vulnerable to information disclosure. The vulnerability exists through the use of unsafe RSA-MD5 checkum in Kerberos TGS...
Denial Of Service (DoS)
ASP.NET Core is vulnerable to denial of service. Improper handling of web requests allows a remote attacker to cause a denial of service condition in the application via vectors related to SignalR...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists through a use-after-free in arch/x86/lib/insn-eval.c...
Unauthenticated Access To Restricted Resources
wordpress allows unauthenticated access to restricted resources. This vulnerability could allow unauthenticated users to view private or draft posts that would otherwise be restricted...
Denial Of Service (DoS)
OpenJDK is vulnerable to denial of service DoS. The attack exists because it does not perform glyph bitmap image dimension check in FreetypeFontScaler...
Denial Of Service (DoS)
OpenJDK is vulnerable to denial of service DoS. The vulnerability exists through an unexpected exception thrown by XPath processing crafted XPath expression...
Denial Of Service (DoS)
PHP is vulnerable to denial of service DoS. A NULL pointer dereference is possible due to mishandling of ldapgetdn return value, allowing DoS via malicious LDAP server reply...
Remote Code Execution (RCE)
microsoft chakracore is vulnerable to remote code execution. The vulnerability exists through a JIT type confusion attack in lib/Backend/GlobOptIntBounds.cpp...
Directory Traversal
LibreOffice is vulnerable to directory traversal. Arbitrary python functions in arbitrary modules on the filesystem can be executed without warning...
Authorization Bypass
glibc is vulnerable to authorization bypass. Successful parsing of strings containing an IPv4 address appended with whitespace and arbitrary characters causes applications using glibc to parse incorrectly validated strings. This can potentially lead to circumvention of validation and authorizatio...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists through a NULL pointer dereference in xfsdashrinkinode function...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. The vulnerability exists in alarmtimernsleep function of alarmtimer.c due to an integer overflow which allows an attacker to crash the application via malicious input...
Denial Of Service (DoS)
expat is vulnerable to denial of service DoS. The attack exists because XML parser does not validate and handle the XML names input with large number of colons, consuming high CPU and memory...
Cross-site Scripting (XSS)
tomcat-catalina is vulnerable to cross-site scripting XSS. The vulnerability is possible because it outputs unsanitized user provided data for SSI printenv, allowing the attacker to inject arbitrary script through it...
Privilege Escalation
Apache httpd is vulnerable to privilege escalation attacks. This is because the expression may not correctly match characters in a filename. The expression may match the '$' character to a newline character instead of matching only the end of the filename.On systems that allow uploading of...
Information Disclosure
Linux kernel is vulnerable to information disclosure vulnerability. This is because Linux kernel does not properly initialize memory in messages passed between virtual guests and the host operating system in the vhost/vhost.c:vhostnewmsg function. A privileged user could read some memory contents...
Denial Of Service (DoS)
Oracle Java SE is vulnerable to denial of service DoS attacks. The vulnerability exists in an unknown functionality of the subcomponent JMX. An unauthenticated attacker with network access via multiple protocols could compromise Java SE, Java SE Embedded, JRockit causing a partial denial of servi...
Privilege Escalation
Linux kernel is vulnerable to privilege escalation vulnerability. The vulnerability exists in the xc2028setconfig function in drivers/media/tuners/tuner-xc2028.c in the Linux kernel. Local users could cause a denial of service via vectors involving omission of the firmware name from a certain dat...
Privilege Escalation
Linux kernel is vulnerable to privilege escalation vulnerability. This occurs in the 32-bit compatibility layer of the ioctl handling code of the v4l2 video driver in the Linux kernel. An attacker to overwrite a kernel memory from an unprivileged userspace process causing a privilege escalation...
Denial Of Service (DoS)
MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon mysqld and many client programs and libraries. This update fixes several vulnerabilities in the MySQL database server. Information about these flaws can be found on the Oracle Critical Patch Update...
Privilege Escalation
Git is vulnerable to privilege escalation attacks. A remote authenticated user could supply a specially crafted repository name to break out of the restricted git-shell and gain elevated privileges on the target system...
Denial Of Service (DoS)
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The rh-php56 packages provide a recent stable release of PHP with PEAR 1.9.5 and enhanced language features including constant expressions, variadic functions, arguments unpacking, and the interactive debuger. T...
Sandbox Restrictions Bypass
IBM Java SE version 6 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update fixes several vulnerabilities in the IBM Java Runtime Environment and the IBM Java Software Development Kit. Further information about these flaws can be found on the IBM Java...
Improper Input Validation And Arbitary Code Injection
The Network Time Protocol NTP is used to synchronize a computer's time with another referenced time source. It was found that because NTP's access control was based on a source IP address, an attacker could bypass source IP restrictions and send malicious control and configuration packets by...
Privilege Escalation
The kernel packages contain the Linux kernel, the core of any Linux operating system. A flaw was found in the way Linux kernel's Transparent Huge Pages THP implementation handled non-huge page migration. A local, unprivileged user could use this flaw to crash the kernel by migrating transparent...
CRLF Injection
The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. It was found that the libcurl library did not correctly handle partial literal IP addresses when parsing received HTTP cookies. An attacker...
Sandbox Restrictions Bypass
The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Multiple flaws were discovered in the 2D, CORBA, JMX, Libraries and RMI components in OpenJDK. An untrusted Java application or applet could use these flaws to bypass Ja...
Sensitive Information Leakage
The kernel-rt packages contain the Linux kernel, the core of any Linux operating system. It was found that the Linux kernel's implementation of vectored pipe read and write functionality did not take into account the I/O vectors that were already processed when retrying after a failed atomic acce...