Lucene search
+L
VeracodeMost viewed

38839 matches found

Veracode
Veracode
added 2019/05/02 5:03 a.m.46 views

Denial Of Service (DoS)

The kernel-rt packages contain the Linux kernel, the core of any Linux operating system. A flaw was found in the way the Linux kernel's futex subsystem handled the requeuing of certain Priority Inheritance PI futexes. A local, unprivileged user could use this flaw to escalate their privileges on...

7.8CVSS6.6AI score0.37233EPSS
SaveExploits24References21Affected Software1
Veracode
Veracode
added 2019/05/02 5:03 a.m.46 views

Denial Of Service (DoS)

The GnuTLS library provides support for cryptographic algorithms and for protocols such as Transport Layer Security TLS. The gnutls packages also include the libtasn1 library, which provides Abstract Syntax Notation One ASN.1 parsing and structures management, and Distinguished Encoding Rules DER...

7.5CVSS7.6AI score0.11221EPSS
SaveExploits1References25Affected Software2
Veracode
Veracode
added 2019/05/02 5:03 a.m.46 views

Denial Of Service (DoS) Through A Race Condition

The kernel-rt packages contain the Linux kernel, the core of any Linux operating system. A race condition leading to a use-after-free flaw was found in the way the Linux kernel's TCP/IP protocol suite implementation handled the addition of fragments to the LRU Last-Recently Used list under certai...

5.5CVSS6.8AI score0.22475EPSS
SaveExploits18References11Affected Software1
Veracode
Veracode
added 2019/05/02 4:58 a.m.46 views

Arbitrary Code Execution

KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on AMD64 and Intel 64 systems. The qemu-kvm package provides the user-space component for running virtual machines using KVM. Multiple buffer overflow, input validation, and out-of-bounds write flaws were found in the wa...

8.8CVSS8.5AI score0.05412EPSS
SaveExploits0References15Affected Software2
Veracode
Veracode
added 2019/05/02 4:58 a.m.46 views

Sandbox Restrictions Bypass

IBM Java SE version 6 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update fixes several vulnerabilities in the IBM Java Runtime Environment and the IBM Java Software Development Kit. Detailed vulnerability descriptions are linked from the IBM Security...

10CVSS6.6AI score0.17606EPSS
SaveExploits0References20Affected Software1
Veracode
Veracode
added 2019/05/02 4:58 a.m.46 views

Arbitrary Code Execution

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...

10CVSS9.7AI score0.06115EPSS
SaveExploits0References40Affected Software2
Veracode
Veracode
added 2019/05/02 4:58 a.m.46 views

Information Disclosure

IBM Java SE version 6 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update fixes several vulnerabilities in the IBM Java Runtime Environment and the IBM Java Software Development Kit. Detailed vulnerability descriptions are linked from the IBM Security...

10CVSS7.6AI score0.0973EPSS
SaveExploits1References19Affected Software3
Veracode
Veracode
added 2019/05/02 4:58 a.m.46 views

Privilege Escalation

IBM Java SE version 6 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update fixes several vulnerabilities in the IBM Java Runtime Environment and the IBM Java Software Development Kit. Detailed vulnerability descriptions are linked from the IBM Security...

10CVSS7.6AI score0.0973EPSS
SaveExploits1References52Affected Software3
Veracode
Veracode
added 2019/05/02 4:57 a.m.46 views

Buffer Overflow

KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on AMD64 and Intel 64 systems. The qemu-kvm-rhev package provides the user-space component for running virtual machines using KVM in environments managed by Red Hat Enterprise Virtualization Manager. Multiple integer...

8.6CVSS7.3AI score0.0101EPSS
SaveExploits3References26Affected Software2
Veracode
Veracode
added 2019/05/02 4:57 a.m.46 views

Denial Of Service (DoS)

KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on AMD64 and Intel 64 systems. The qemu-kvm-rhev package provides the user-space component for running virtual machines using KVM in environments managed by Red Hat Enterprise Virtualization Manager. Multiple integer...

8.6CVSS7.2AI score0.0101EPSS
SaveExploits3References20Affected Software2
Veracode
Veracode
added 2019/05/02 4:57 a.m.46 views

Infomation Disclosure

OpenStack Compute nova launches and schedules large networks of virtual machines, creating a redundant and scalable cloud computing platform. Compute provides the software, control panels, and APIs required to orchestrate a cloud, including running virtual machine instances, managing networks, an...

7.1CVSS5.8AI score0.02438EPSS
SaveExploits3References22Affected Software1
Veracode
Veracode
added 2019/05/02 4:56 a.m.46 views

Arbitrary Code Execution

The kernel-rt packages contain the Linux kernel, the core of any Linux operating system. A flaw was found in the way IP packets with an Internet Header Length ihl of zero were processed in the skbflowdissect function in the Linux kernel. A remote attacker could use this flaw to trigger an infinit...

7.1CVSS6.9AI score0.09408EPSS
SaveExploits6References19Affected Software2
Veracode
Veracode
added 2019/05/02 4:55 a.m.46 views

Authorization Bypass

java is vulnerable to authorization bypass. The vulnerability exists through Scripting...

9.8CVSS8.9AI score0.96714EPSS
SaveExploits13References18Affected Software2
Veracode
Veracode
added 2019/05/02 4:54 a.m.46 views

Use-After-Free

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...

6.5CVSS7.9AI score0.10893EPSS
SaveExploits5References18Affected Software3
Veracode
Veracode
added 2019/05/02 4:54 a.m.46 views

Memory Corruption

Perl is a high-level programming language commonly used for system administration utilities and web programming. A heap overflow flaw was found in Perl. If a Perl application allowed user input to control the count argument of the string repeat operator, an attacker could cause the application to...

7.5CVSS9.8AI score0.63488EPSS
SaveExploits14References24Affected Software1
Veracode
Veracode
added 2019/05/02 4:53 a.m.46 views

Arbitrary Code Execution

openjdk is vulnerable to arbitrary code execution. It was discovered that the 2D component did not properly reject certain malformed images. Specially-crafted raster parameters could cause Java Virtual Machine memory corruption and, possibly, lead to arbitrary code execution with virtual machine...

10CVSS9.6AI score0.86151EPSS
SaveExploits10References35Affected Software3
Veracode
Veracode
added 2019/05/02 4:52 a.m.46 views

Heap-Based Buffer Overflow

mingw32-libxml2 is vulnerable to a heap-based buffer overflow. Due to a flaw in libxml2 which decods entity references with long names, it allows an attacker to provide a malicious XML file, causing an application crash and arbitrary code execution...

7.5CVSS8.7AI score0.02386EPSS
SaveExploits1References17Affected Software2
Veracode
Veracode
added 2019/05/02 4:52 a.m.46 views

Information Disclosure

The kernel-rt packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues: A heap-based buffer overflow flaw was found in the Linux kernel's iSCSI target subsystem. A remote attacker could use a specially-crafted iSCSI request to caus...

7.9CVSS6.3AI score0.07313EPSS
SaveExploits13References20Affected Software1
Veracode
Veracode
added 2019/05/02 4:46 a.m.46 views

Sandbox Restrictions Bypass

openjdk is vulnerable to sandbox restrictions bypass. An improper permission check issue was discovered in the reflection API in OpenJDK. An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions...

9.8CVSS5.9AI score0.97563EPSS
SaveExploits38References22Affected Software1
Veracode
Veracode
added 2019/05/02 4:43 a.m.46 views

Denial Of Service (DoS)

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...

9.3CVSS9.8AI score0.42609EPSS
SaveExploits5References18Affected Software3
Veracode
Veracode
added 2019/05/02 4:43 a.m.46 views

Access Restriction Bypass

JBoss Enterprise Application Platform 6 is a platform for Java applications based on JBoss Application Server 7. This release serves as a replacement for JBoss Enterprise Application Platform 6.0.0, and includes bug fixes and enhancements. Refer to the 6.0.1 Release Notes for information on the...

10CVSS6AI score0.6477EPSS
SaveExploits8References11Affected Software204
Veracode
Veracode
added 2019/05/02 4:41 a.m.46 views

Information Disclosure

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...

10CVSS9.4AI score0.04899EPSS
SaveExploits1References12Affected Software3
Veracode
Veracode
added 2019/05/02 4:41 a.m.46 views

Arbitrary Code Execution

IBM Java SE version 6 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update fixes several vulnerabilities in the IBM Java Runtime Environment and the IBM Java Software Development Kit. Detailed vulnerability descriptions are linked from the IBM Security...

10CVSS5.7AI score0.69037EPSS
SaveExploits6References25Affected Software1
Veracode
Veracode
added 2019/02/22 1:55 a.m.46 views

Open Redirection

spring-security-oauth2 is vulnerable to open redirection. A lack of validation on the redirecturi parameter allows an attacker to manipulate the redirect URI by sending a malicious request to the authorization endpoint using the authorization code grant type and cause the authorization server to...

6.5CVSS6.6AI score0.15498EPSS
SaveExploits4References5Affected Software1
Veracode
Veracode
added 2019/01/15 9:25 a.m.46 views

Denial Of Service (DoS)

Linux kernel is vulnerable to denial of service. The AIO interface permitted reading or writing 2 GB of data or more in a single chunk, which could lead to an integer overflow in the aiosetupsinglevector function in fs/aio.c when applied to certain filesystems, socket or device types...

7.8CVSS7.3AI score0.00683EPSS
SaveExploits1References21Affected Software2
Veracode
Veracode
added 2019/01/15 9:24 a.m.46 views

Privilege Escalation

Linux kernel is vulnerable to privilege escalation. An integer overflow in the createelftables function allows an unprivileged local user with access to SUID binary to escalate their privileges on the system...

7.8CVSS7.6AI score0.14689EPSS
SaveExploits6References28Affected Software2
Veracode
Veracode
added 2019/01/15 9:20 a.m.46 views

Information Disclosure

openssh is vulnerable to information disclosure attacks. The vulnerability exists as sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static password when the username does not exist, which allows remote attackers to enumerate users ...

5.9CVSS6.4AI score0.88944EPSS
SaveExploits12References13Affected Software1
Veracode
Veracode
added 2019/01/15 9:19 a.m.46 views

Remote Code Execution (RCE)

lucene-queryparser is vulnerable to remote code execution. This is possible through the use of an XML external entity expansion XXE attack and the Config API with add-listener command...

9.8CVSS9.6AI score0.91896EPSS
SaveExploits12References31Affected Software14
Veracode
Veracode
added 2019/01/15 8:58 a.m.46 views

Denial Of Service (DoS)

libxml2 is vulnerable to denial of service DoS attacks. The vulnerability exists as libxml2 2.9.0 and earlier allows context-dependent attackers to cause a denial of service CPU and memory consumption via an XML file containing an entity declaration with long replacement text and many references ...

4.3CVSS7.5AI score0.02856EPSS
SaveExploits0References14Affected Software1
Veracode
Veracode
added 2019/01/15 8:55 a.m.46 views

Directory Traversal When Route Globbing Configurations Are Enabled

Directory traversal vulnerability in actionpack/lib/abstractcontroller/base.rb in the implicit-render implementation in Ruby on Rails before 3.2.18, 4.0.x before 4.0.5, and 4.1.x before 4.1.1, when certain route globbing configurations are enabled, allows remote attackers to read arbitrary files...

7.5CVSS6.1AI score0.53703EPSS
SaveExploits2References11Affected Software12
Veracode
Veracode
added 2019/01/15 8:52 a.m.46 views

Remote Code Execution (RCE)

busybox is vulnerable to remote code execution RCE attacks. The vulnerability exists in the decompress function in compress42.c in 1 ncompress 4.2.4 and 2 liblzw allows remote attackers to cause a denial of service crash, and possibly execute arbitrary code, via crafted data that leads to a buffe...

7.5CVSS7.6AI score0.05817EPSS
SaveExploits0References71Affected Software2
Veracode
Veracode
added 2019/01/15 8:51 a.m.46 views

Memory Corruption

Oracle MySQL has a stack-based buffer overflow vulnerability. It does not handle checking of user permission in MySQL, allowing an authenticated user to crash the mysqld daemon and subsequently leading to arbitrary code execution with the privileges of the user running the application...

6.5CVSS5.8AI score0.23956EPSS
SaveExploits3References29Affected Software1
Veracode
Veracode
added 2019/01/15 8:50 a.m.46 views

Denial Of Service (DoS)

kernel-rt is vulnerable to denial of service DoS attacks. The vulnerability exists as the epoll implementation in the Linux kernel 2.6.37.2 and earlier does not properly traverse a tree of epoll file descriptors, which allows local users to cause a denial of service through a crafted application...

4.9CVSS5.4AI score0.00795EPSS
SaveExploits2References20Affected Software2
Veracode
Veracode
added 2018/11/13 6:55 a.m.46 views

HTTP Request Smuggling

Apache Tomcat is vulnerable to HTTP request smuggling. Incorrect handling of HTTP requests allows a remote attacker to poison the web cache, bypass web application firewall protections or perform XSS attacks. The vulnerability is exploited by submitting crafted values for the Transfer-Encoding an...

4.3CVSS5.6AI score0.29784EPSS
SaveExploits4References103Affected Software4
Veracode
Veracode
added 2018/11/13 5:10 a.m.46 views

Session Hijacking

tomcat-util is vulnerable to session hijacking attacks. The vulnerability exists due to tomcat-util incorrectly treating single quotes as delimiters in cookies, allowing sensitive information such as session ID to be leaked. This issue is also CVE-2007-3385...

4.3CVSS4.4AI score0.37497EPSS
SaveExploits5References51Affected Software7
Veracode
Veracode
added 2018/07/23 9:10 a.m.46 views

Denial Of Service (DoS)

tomcat-util is vulnerable to denial of service DoS attacks. The attack exists due to not proper handling of overflow in the decodeHasArray function in UTF-8 decoder...

7.5CVSS7.4AI score0.20599EPSS
SaveExploits0References58Affected Software2
Veracode
Veracode
added 2018/07/09 3:34 a.m.46 views

Arbitrary File Writing

DotNetZip.Semverd is vulnerable to arbitrary file writing aka zip-slip vulnerability. The vulnerability is possible because it does not check that the relative paths in a zip file don't go outside of the target directory...

5.5CVSS5.8AI score0.10395EPSS
SaveExploits0References2Affected Software5
Veracode
Veracode
added 2018/07/05 3:08 a.m.46 views

Remote Code Execution (RCE)

microsoft.chakracore is vulnerable to remote code execution RCE. This happens because it does not have ample InlineCache checks, leading to type confusion which allows an attacker to perform RCE. This CVE ID is different from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893,...

7.5CVSS8AI score0.68491EPSS
SaveExploits36References5Affected Software2
Veracode
Veracode
added 2018/05/24 6:38 a.m.46 views

Denial Of Service (DoS) Through JMS Deserialization

nifi-jms-processors is vulnerable to denial of service DoS attacks. The vulnerability exists due to the usage of the vulnerable transitive activemq-client library, affected by CVE-2015-5254, which would cause a DoS attack when malicious JMS content is parsed...

9.8CVSS8AI score0.38191EPSS
SaveExploits4References2Affected Software4
Veracode
Veracode
added 2018/04/06 5:24 a.m.46 views

Denial Of Service (DoS) Through Uninitialized Memory Leak

http-proxy-agent is susceptible to denial of service DoS. auth parameters are passed to the buffer constructor without proper sanitization, leading to DoS via uninitialized memory leak...

9.8CVSS9AI score0.01392EPSS
SaveExploits0References6Affected Software1
Veracode
Veracode
added 2018/02/01 8:52 a.m.46 views

Incorrect Documentation

Apache Tomcat contains incorrect documentation. The library's default documentation's CGI search algorithm was incorrect, and could have caused the outcome of scripts to be incorrect when executed...

5.3CVSS5.6AI score0.06083EPSS
SaveExploits0References24Affected Software1
Veracode
Veracode
added 2017/06/28 1:33 a.m.46 views

Remote Code Execution (RCE)

phpunit is vulnerable to remote code execution RCE attacks. A malicious user can inject and execute arbitrary PHP script by using the ?php tag and sending a POST request to the eval-stdin.php file on the system...

9.8CVSS9.9AI score0.99999EPSS
SaveExploits20References11Affected Software1
Veracode
Veracode
added 2017/05/16 2:21 a.m.46 views

Copy-Paste Vulnerability (CPV) Through Libxml2

nokogiri has a copied version of the libxml2 library. The copy that nokogiri includes is vulnerable to CVE-2017-8872 which allows attackers to cause a denial of service DoS or information disclosure via a buffer overflow. This is caused by the htmlParseTryOrFinish method in the HTMLparser.c file...

8.7AI score0.02306EPSS
SaveExploits0
Veracode
Veracode
added 2017/04/11 2:17 a.m.46 views

Information Disclosure

Tomcat is vulnerable to information disclosure. The library does not use the appropriate facade object when making calls to certain application listeners. This allows an untrusted application to retain a reference to the object and access or modify the associated information...

9.1CVSS8.5AI score0.13225EPSS
SaveExploits0References25Affected Software7
Veracode
Veracode
added 2017/02/10 12:52 a.m.46 views

Cipher Bypass

OpenSSL is vulnerable to cipher bypasses. A malicious user can negotiate and complete an SSLv2 handshake with the server even if the ciphers have been disabled on the server. SSLv2 handshakes are vulnerable to man-in-the-middle attacks...

5.9CVSS6.8AI score0.10731EPSS
SaveExploits2References38Affected Software3
Veracode
Veracode
added 2017/02/08 5:35 a.m.46 views

Denial Of Service (DoS)

OpenSSL is vulnerable to denial of service DoS attacks. These attacks are possible because the sslgetalgorithm2 function obtains a version number from an incorrect data structure crashing the daemon through traffic from a TLS 1.2 client...

4.3CVSS7AI score0.21174EPSS
SaveExploits0References29Affected Software1
Veracode
Veracode
added 2017/02/01 3:14 a.m.46 views

Denial Of Service (DoS) Or Arbitrary Code Execution

expat is vulnerable to denial of service DoS or arbitrary code execution attacks. When users input malformed document, expat XML parser mishandles the input which causes a buffer overflow during the processing and error reporting. This leading to a denial of service and conceivably result in remo...

9.8CVSS8.4AI score0.13335EPSS
SaveExploits3References32Affected Software2
Veracode
Veracode
added 2017/01/25 2:53 a.m.46 views

Cache-timing Attack

OpenSSL is vulnerable to a cache-timing attack. The attack exists due to a flaw in signing function of crypto/ecdsa/ecdsaossl.c which sets the BNFLGCONSTTIME flag for nonces instead of taking a secure code path in the BNmodinverse method...

5.5CVSS6.5AI score0.00594EPSS
SaveExploits0References22Affected Software10
Veracode
Veracode
added 2026/08/06 6:16 a.m.45 views

Information Disclosure

undici is vulnerable to Sensitive Information Exposure. The vulnerability is due to improper parsing of whitespace around qualified Cache-Control directives, causing authenticated responses to be incorrectly stored in shared caches and potentially served to unauthorized users...

7.5CVSS5.4AI score0.00304EPSS
SaveExploits0References4Affected Software1
Veracode
Veracode
added 2026/05/14 4:43 p.m.45 views

Directory Traversal

org.springframework.cloud, spring-cloud-config-server is vulnerable to a Directory Traversal. The vulnerability is due to improper validation of specially crafted URL paths in the spring-cloud-config-server module, which allows an attacker to perform a directory traversal attack and access...

9.1CVSS5.9AI score0.00727EPSS
SaveExploits0References7Affected Software1
Total number of security vulnerabilities5000