38839 matches found
Remote Code Execution Backdoor
cloudlabeling is vulnerable to remote code execution. The use of the request package opens up a code execution backdoor, allowing an attacker to perform unauthorized actions and accesses to sensitive information and digital currency keys...
Information Disclosure
vim is vulnerable to information disclosure. A buffer over-read in function grabfilename is capable of crashing the software, memory modification, and possible remote execution...
Denial Of Service (DoS)
MariaDB is vulnerable to denail of service. The vulnerability exists due to a deadlock when executing the plugin/serveraudit/serveraudit.c method logstatementex...
Denial Of Service (DoS)
MariaDB is vulnerable to denial of service. The vulnerability exists due to a deadlock indsxbstream.cc, crashing the system when an error occurs streamctxt-destfile == NULL while executing the method xbstreamopen...
Denial Of Service (DoS)
eap is vulnerable to denial of service. The vulnerability exists due to a flaw found in XNIO, specifically in the notifyReadClosed method allowing an attacker to crash the system via a flawed requests sent to a server, possibly causing log contention-related performance concerns or an unwanted di...
Out-of-Bounds Read
Apache HTTP Server is vulnerable to out of bounds read. The vulnerability exists due to a memory corruption when configured to process requests with the modisapi module...
Privilege Escalation
Linux kernel is vulnerable to privilege escalation. The vulnerability exists due to an out of bounds read due to a use after free allowing an attacker to escalate privilege within the system...
Denial Of Service (DoS)
.NET and Visual Studio are vulnerable to denial of service. The vulnerability exists due to a flaw in dotnet allowing an attacker to crash the system by applying MaxResponseHeadersLength limit for trailing headers to address a denial of service via excess memory allocations through the HttpClient...
Memory Corruption
firefox is vulnerable to memory corruption vulnerability. Crafted CMS messages are incorrectly processed, leading to invalid memory reads, and potentially further memory corruption...
Denial Of Service (DoS)
firefox is vulnerable to denial of service. The vulnerability exists due to incorrect assembly generation on arm64 leading to a register allocation problem which causes an application crash...
Privilege Escalation
cups is vulnerable to privilege escalation. The vulnerability exists due to gain elevated privileges which allows an attacker to authenticate to CUPS as root/admin without the 32-byte secret key...
Denial Of Service (DoS)
tensorflow is vulnerable to denial of service. Failure to check the input to tf.rawops.LSTMBlockCell to validate ranks of any of the API call arguments causes a CHECK-failure , triggering a denial of service attack...
User Impersonation Via Anonymous Access
github.com/argoproj/argo-cd is vulnerable to user impersonation. An attacker is able to send an invalid JSON Web Token JWT along with a request if anonymous access to the Argo CD instance is enabled, allowing an unauthenticated user to get access with same privilege, create, manipulate and delete...
Denial Of Service (DoS)
pjproject is vulnerable to denial of service. The vulnerability exists due to the library does not properly check the WAV file data length when it greater than 31-bit, allowing an attacker to crash the application by providing malicious WAV files...
Improper Access Control
github.com/golang/go is vulnerable to improper access control. An attacker is able to access unauthorized files in the file system because, the Faccessat function may incorrectly grant permissions to access a prohibited file when called with a non-zero flag parameter...
Insecure IPv6 Connection
curl has insecure IPv6 connection. The vulnerability exists due to an errors in the logic where the config matching function did not take the IPv6 address zone id into account allowing the system to use the wrong connection when one transfer uses a zone id, and when subsequent transfer uses anoth...
Cross-Site Scripting (XSS)
Liferay Layout SEO Web is vulnerable to stored cross-site scripting. The vulnerability exists in getOpenGraphTag function in OpenGraphTopHeadDynamicInclude.java due to lack of html escaping which allows an attacker to inject and execute arbitrary javascript...
Remote Code Execution (RCE)
jenkins-2-plugins is vulnerable to remote code execution. The vulnerability exists due to a sandbox bypass allowing attackers to execute arbitrary code on the system...
SQL Injection
github.com/flipped-aurora/gin-vue-admin is vulnerable to SQL injection. The vulnerability exists due to insecure handling of special elements used in an PostgreSQL Command in server/service/system/sysautocodepgsql.go. The vulnerability is only possible if the user is using PostgreSQL as the...
Denial Of Service (DoS)
golang.org/x/crypto is vulnerable to Denial Of Service DoS. The vulnerability exists in readCipherPacket function which allows an unauthenticated attacker to send an empty plaintext packet to a program linked with golang.org/x/crypto/ssh causing a panic which potentially leads to an application...
CSV Injection
kevinpapst/kimai2 is vulnerable to CSV injection. The vulnerability is possible because the library does not sanitize the $desc parameter, which allows an attacker to inject malicious input...
Remote Code Execution
Gzip is vulnerable to remote code execution. Insufficient validations when processing filenames with two or more newlines allow remote attackers to force zgrep or xzgrep to write arbitrary files on the system...
HTTP Request Smuggling (HRS)
twisted is vulnerable to http request smuggling. The vulnerability exists in twisted.web due to inconsistent interpretation of http requests which allows a remote attacker to conduct HTTP request smuggling attacks via a crafted request...
Directory Traversal
com.caucho:resin is vulnerable to directory traversal attacks. A remote attackers are able to traverse arbitrary directories and read confidential files via a pathname within an HTTP request...
Denial Of Service (DoS)
RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...
Regular Expression Denial Of Service (ReDoS)
ckeditor4 is vulnerable to regular expression denial of service. The vulnerability exists due to a lack of sanitization of the input validator regular expression in dialog...
Out-of-Bounds Read
abcm2ps is vulnerable to out of bounds read. The vulnerability exists due to a lack of sanitization in the function calculatebeam at draw.c...
Privilege Escalation
libexpat.so is vulnerable to privilege escalation. The vulnerability exists in the namespace-separator Character Handler in the xmlparse.c allowing an unauthorized user to access the system account...
Denial Of Service (DoS)
samba is vulnerable to information disclosure. The vulnerability exists due to a lack of sanitization of permission when adding service principals names SPNs to an account...
Injection Vulnerability
Python is vulnerable to injection vulnerability. The vulnerability exists due to a lack of sanitization on the URL string parsed into the urlparse method allowing an attacker to inject maliciously crafted URL...
Information Disclosure
kernel is vulnerable to information disclosure. The vulnerability exists due to the XFS filesystem allowing for size increase of files with unaligned size allowing an attacker to leak data on the XFS filesystem...
Heap-Based Buffer Overflow
vim is vulnerable to Heap-based Buffer Overflow. The vulnerability exists due to the lack of sanitization of the help.ccauses a heap-based buffer overflow which could result in an application crash...
Buffer Overflow
mruby is vulnerable to Heap-based Buffer Overflow. The vulnerability exists due to a lack of sanitization...
Denial Of Service (DoS)
linux kernel is vulnerable to Denial Of Service DoS. The vulnerability exists due to an array-index-out-of-bounds flaw in the detachcapictr function in drivers/isdn/capi/kcapi.c...
Buffer Overflow
Slurm is vulnerable to buffer overflow. The vulnerability exists in the PMIx MPI plugin which causes a buffer overflow which leads to an application crash...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. The vulnerability exists due to a buffer overflow in drivers/media/firewire/firedtv-avc.c and drivers/media/firewire/firedtv-ci.c...
Cross-site Scripting (XSS)
mermaid is vulnerable to cross-site scripting. The vulnerability exists in the sanitizeUrl function in the svgDraw.js, allowing an attacker to inject and execute malicious javascript through the malicious diagrams...
Denial Of Service (DoS)
libexpat.so is vulnerable to denial of service. The vulnerability exists due to the integer overflow in the mgroupSize of xmlparse.c, allowing an attacker to cause an application crash...
Information Disclosure
webkit2gtk is vulnerable to information disclosure. The vulnerability exists due to a logic issue...
Cross-Site Scripting (XSS)
laravel/framework is vulnerable to cross-site scripting XSS. When the parent template contains an exploitable HTML structure, a remote attacker is able to inject arbitrary Javascript via guessing the parent placeholder SHA-1 hash by trying common names of sections...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. Uncontrolled resource consumption in some IntelR Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated user to potentially enable denial of service via local access. An uncontrolled resource consumption in some IntelR...
Denial Of Service (DoS)
SQLite 3.30.1 mishandles certain SELECT statements with a nonexistent VIEW, leading to an application crash...
Cross-Site Scripting (XSS)
OWASP Java HTML Sanitizer is vulnerable to cross-site scripting. The vulnerability exists due to a lack of proper enforcement of policies which allows an attacker to inject maliciously crafted code via the SELECT, STYLE, and OPTION tag...
Denial Of Service (DoS)
qt5-qtwebengine is vulnerable to denial of service. The vulnerability exists due to an Inappropriate implementation in Sandbox...
Denial Of Service (DoS)
Redis is vulnerable to denial of service. An attacker may exploit the vulnerability by injecting a malicious requests over multiple connections can cause the server to allocate significant amount of memory causing it to crash...
Denial Of Service (DoS)
Redis is vulnerable to denial of service. The vulnerability exists due to the debuggers protocol parser to read data beyond the actual buffer...
Denial Of Service (DoS)
ntfs-3g:sid is vulnerable to denial of service. A crafted NTFS image can cause a heap-based buffer overflow in ntfsinodelookupbyname in NTFS-3G 2021.8.22...
Denial Of Service (DoS)
ruby2.7:sid is vulnerable to Denial Of Service DoS. It is possible to execute arbitrary code via | and tags in a filename...
Denial Of Service (DoS)
openexr:stretch is vulnerable to denial of service. An integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEX. An attacker could use this flaw to crash an application compiled with OpenEXR...
Denial Of Service(DoS)
Apache HTTP Server is vulnerable to denial of service.A specially crafted Cookie header handled by modsession can cause a NULL pointer dereference and crash, leading to a possible Denial Of Service...