39648 matches found
Denial Of Service (DoS)
libxml2.so is vulnerable to denial of service. The xmlBufCreateSize function of buf.c does not properly check types of buffer sizes, allowing an attacker to crash the application by providing large multi-gigabyte buffers...
Information Disclosure
curl is vulnerable to information disclosure. The vulnerability exists due to an Auth/cookie leak on redirect to the same host but another port number...
SQL Injection
asterisk is vulnerable to SQL injection. The vulnerability exists due to a lack of sanitization of input for backslash characters in SQL queries allowing an attacker to make maliciously crafted queries...
Remote Code Execution
Gzip is vulnerable to remote code execution. Insufficient validations when processing filenames with two or more newlines allow remote attackers to force zgrep or xzgrep to write arbitrary files on the system...
Buffer Overflow
glibc is vulnerable to buffer overflow. The vulnerability exists due to a memory corruption when the size of the buffer is exactly 1 which allows an attacker to control the input buffer and size passed to getcwd in a setuid program...
Remote Code Execution
netatalk is vulnerable to remote code execution. The vulnerability exists in Western Digital PR4100 NAS which allows an attacker to inject and execute codes...
Out-of-Bounds Read
abcm2ps is vulnerable to out of bounds read. The vulnerability exists due to a lack of sanitization in the function calculatebeam at draw.c...
Buffer Overflow
Slurm is vulnerable to buffer overflow. The vulnerability exists in the PMIx MPI plugin which causes a buffer overflow which leads to an application crash...
Denial Of Service (DoS)
Linux kernel is vulnerable to denial of service. The vulnerability exists due to the use-after-free in the NFC stack, allowing an attacker to crash the application...
Remote Code Execution (RCE)
RabbitMQ is vulnerable to Regular Expression Denial Of Service ReDoS. A new user being added via management UI could lead to the user's bane being rendered in a confirmation message without proper...
Signature Verification Bypass
The exploitation of this flaw requires RPM's package verification level to be set to "digest" or "none". In addition, to exploit this flaw, an attacker must either compromise an RPM repository or convince an administrator to install an untrusted RPM. It is strongly recommended to only use RPMs fr...
Denial Of Service (DoS)
busybox is vulnerable to denial of service. An out-of-bounds heap read in unlzma leads to information leak and application crash when crafted LZMA-compressed input is decompressed...
Authentication Bypass
github.com/grafana/grafana is vulnerable to authentication bypass. The library does not properly restrict access to literal paths, allowing unauthenticated users to modify data...
Information Disclosure
Linux is vulnerable to information disclosure. The vulnerability exists due to the system incorrectly computes the access permissions of a shadow page, leading to a missing guest protection page fault...
Remote Code Execution (RCE)
@npmcli/arborist is vulnerable to remote code execution. The vulnerability exists due to a symlink dependency where an attacker is able to create arbitrary contents to be written to any location on the filesystem...
Denial Of Service
FFmpeg is vulnerable to denial of service. The vulnerability exists due to a null pointer dereference passed as argument to libavformat/aviobuf.c...
Denial Of Service (DoS)
glibc is vulnerable to denial of service. The vulnerability exists when processing invalid multi-byte input sequences which could lead to an infinite loop in applications causing the system to crash...
Privilege Escalation
kernel is vulnerable to privilege escalation. The vulnerability exists through sending ioctl commands to midi devices that could trigger a use-after-free issue where a write to this specific memory while freed...
Denial Of Service (DoS)
bind is vulnerable to denial of service. The vulnerability exists due to a buffer over-read...
Remote Code Execution
xstream is vulnerable to remote code execution. A remote attacker with sufficient rights is able to execute arbitrary code by manipulating the processed input stream...
Directory Traversal
flink-runtime in vulnerable to Directory Traversal. An attacker is able to read any file accessible by the JobManager process on the local filesystem of the JobManager through the RES interface of the JobManager process...
Arbitrary Code Execution
SQLite is vulnerable to arbitrary code execution. A remote attacker is able to execute arbitrary code via a buffer overflow when the FTS3 extension is enabled...
Denial Of Service (DoS)
imagemagick is vulnerable to denial of service DoS. The vulnerability exists in the ReadBMPImage function of the coders/bmp.c due to the infinite loop, allowing a malicious user to crash the application via a crafted bmp file...
Denial Of Service (DoS)
ImageMagick is vulnerable to denial of service. The vulnerability existed because of an infinite loop vulnerability was found in the function ReadPSDChannelZip in coders/psd.c, which allows attackers to cause a denial of service CPU exhaustion via a crafted psd image file...
CVE-2020-16289
Artifex Software GhostScript is vulnerable to denial of service attacks. A remote attacker could cause buffer overflows in cifprintpage in devices/gdevcif.c via a crafted PDF file resulting in denial of service conditions...
Denial Of Service (DoS)
QEMU is vulnerable to denial of service attacks. An unauthenticated remote attacker could kill the QEMU process on the host due to an assertion failure in the network packet processing, resulting in a denial of service condition in nettxpktaddrawfragment in hw/net/nettxpkt.c...
Remote Code Execution (RCE)
Google Chrome is vulnerable to remote code execution. The vulnerability existed because of an integer overflow that leads to a use-after-free in Blink Storage in Google Chrome on Linux. An attacker is able to execute arbitrary code via a crafted HTML page...
Man-in-the-Middle (MitM)
linux kernel is vulnerable to man-in-the-middle MitM attack. An insecure and unencrypted channel between two Geneve endpoints is used when IPsec is configured to encrypt traffic...
Information Disclosure
php is vulnerable to information disclosure in exifreaddata...
Authorization Bypass
kernel is vulnerable to authorization bypass. The vulnerability exists in net bluetooth through type confusion while processing AMP packets...
SQL Injection
phpmyadmin/phpmyadmin is vulnerable to SQL injection. An attacker is able to inject and execute arbitrary SQL statements on the database via the search feature, due to inadequate validation...
Information Disclosure
foreman is vulnerable to information disclosre. It is possible due to unauthorized cache read on RPM-based installations through local user...
Arbtirary Code Execution
libjpeg-turbo and mozjpeg is vulnerable to arbitrary code execution. A heap-based buffer over-read in getrgbrow in rdppm.c allows an attacker to execute arbitrary code on the host OS via a malicious PPM input file...
HTTP Header Injection
ceph is vulnerable to HTTP header injection. The vulnerability exists in radosgw through the CORS ExposeHeader tag...
Man-in-the-Middle (MtiM)
keycloak-services is vulnerable to man-in-the-middle attack. The signatures on CRL are not validated, allowing a remote attacker to perform man-in-the-middle attacks to sniff and modify network traffic...
Insecure Temporary Directory
ant uses an insecure temporary directory. The system property java.io.tempdir causes insecure permissions to be set on a directory, allowing local users to access the temporary directory or write arbitrary files into it. This could also lead to an attacker injecting modified source files into the...
Incorrect Number Generator
nss is vulnerable to incorrect number generation. The vulnerability exists as a flaw in DRBG number generation within the Network Security Services NSS library where the internal state V does not correctly carry bits over. The NSS library has been updated to fix this issue to address this issue a...
Denial Of Service (DoS)
faad2 is vulnerable to denial of service DoS. It is a stack-based buffer underflow in the third instance of the calculategain function in libfaad/sbrhfadj.c in Freeware Advanced Audio Decoder 2 FAAD2. A crafted input will lead to a denial of service or possibly unspecified other impact because...
Out-of-Bound Reads
libfreerdp.so is vulnerable to Out-of-Bound Reads. The vulnerability exists because it does not properly perform the data boundary check of updatereadbitmapdata, leaking the memory to an image buffer reflecting the result on screen as colour...
Remote Code Execution
Sonatype nxrm is vulnerable to remote code execution. The vulnerability allows high privilege users such as administrators to run arbitrary code on the server with Nexus process privileges by injecting arbitrary Java Expression Language EL expressions...
Denial Of Service (DoS)
FreeType is vulnerable to denial of service DoS. Multiple input validation flaws were found in the way FreeType processed bitmap font files. If a specially-crafted font file was loaded by an application linked against FreeType, it could cause the application to crash or, potentially, execute...
Information Disclosure
kernel is vulnerable to information disclosure. The vulnerability exists as /proc/PID/io is world-readable by default. Previously, these files could be read without any further restrictions. A local, unprivileged user could read these files, belonging to other, possibly privileged processes to...
Denial Of Service (DoS)
vsftpd is vulnerable to denial of service DoS. The vulnerability exists as a flaw was discovered in the way vsftpd processed file name patterns. An FTP user could use this flaw to cause the vsftpd process to use an excessive amount of CPU time, when processing a request with a specially-crafted...
Denial Of Service (DoS)
firefox and thunderbird are vulnerable to denial of service. A flaw was found in the way Thunderbird handled malformed JPEG images. An HTML mail message containing a malicious JPEG image could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user runni...
Arbitrary Code Execution
thunderbird/firefox is vulnerable to arbitrary code execution. Several flaws were found in the processing of malformed HTML content. Malicious HTML content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird...
Denial Of Service (DoS)
The kernel package is vulnerable to denial of service DpS. Due to a flaw in the dvbcaioctl function in the Linux kernel's av7110 module. On systems that use old DVB cards that require the av7110 module, a local, unprivileged user could use this flaw to cause a denial of service or escalate their...
Information Disclosure
kernel is vulnerable to information disclosure. Missing initialization flaws in the Linux kernel could lead to information leaks...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists as the flaw in sctpprocessunkparam, allowing a remote attacker to send a specially-crafted SCTP packet to an SCTP listening port on a target system, causing a denial of service...
Privilege Escalation
kernel is vulnerable to privilege escalation. Missing sanity checks in the Intel i915 driver in the Linux kernel could allow a local, unprivileged user to escalate their privileges...
Arbitrary Code Execution
xpdf is vulnerable to arbitrary code execution. The vulnerability exists as an uninitialized pointer use flaw was discovered in Xpdf. An attacker could create a malicious PDF file that, when opened, would cause Xpdf to crash or, potentially, execute arbitrary code...