39271 matches found
Remote Code Execution
studio-42/elfinder is vulnerable to remote code execution. An attacker is able to execute arbitrary code and commands on the server hosting the elFinder PHP connector even with the minimal configuration...
Denial Of Service (DoS)
pdfbox is vulnerable to denial of service. An attacker is able to cause an infinite loop by submitting a malicious PDF file...
Denial Of Service (DoS)
apache2 is vulnerable to denial of service. A null pointer dereference occurs when handling malicious HTTP/2 request. A remote attacker could use this flaw to crash the httpd child process, causing temporary denial of service...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. A slab-out-of-bounds read in fbcon in the Linux kernel could be used by local attackers to read privileged information or potentially crash the kernel. A bounds check failure allows a local attacker with special user privileges to gain access to...
Cross-site Scripting (XSS)
aurelia-templating-resources is vulnerable to cross-site scripting. The vulnerability exists because of the use of insecure default HTML sanitizer which only attempts to filter SCRIPT elements...
Arbitrary Code Execution
libxml2 is vulnerable to arbitrary code execution. A use-after-free occurs in xmllint when --html and --push options are used, allowing an attacker to execute arbitrary code on the host OS by submitting malicious files...
Privilege Escalation
chromium is vulnerable to privilege escalation. Inappropriate implementation in Network allows an attacker to perform an action which is otherwise not permitted...
Heap Buffer Overflow
Google Chrome is vulnerable to heap buffer overflow in tab groups. It allows a remote attacker to potentially exploit heap corruption via a crafted HTML page...
Privilege Escalation
grub2 is vulnerable to privilege escalation. The vulnerability exists as variable names present are expanded in the supplied command line into their corresponding variable contents, using a 1kB stack buffer for temporary storage, without sufficient bounds checking. If the function is called with ...
Denial Of Service(DoS)
Jetty is vulnerable to denial of service DoS. The use of multiple Accept headers with a large number of quality causes a high CPU usage, resulting in long durations of CPU processing and crashing of the application...
Open Redirection
rails is vulnerable to open redirection. Inadequate validation and regex matching of URLs allows an attacker to bypass validation checks using a malicious Host header and redirect users to a malicious website...
Arbitrary Code Execution
kernel is vulnerable to arbitrary code execution. The vulnerability exists through a use-after-free in the sound subsystem as card disconnection causes certain data structures to be deleted too early...
Arbitrary Code Execution
kernel is vulnerable to arbitrary code execution. The vulnerability exists through an out-of-bounds access in the function buildaudioprocunit in the file sound/usb/mixer.c...
Denial Of Service (DoS)
openjpeg is vulnerable to denial of service. The vulnerability exists in opjt2encodepacket function of t2.c due to a null pointer dereference which allows an attacker to crash the application via malicious input...
Denial Of Service (DoS)
crypto/ssh in github.com/golang/go is vulnerable to Denial Of Service DoS. The vulnerability is possible because of a nil pointer dereference in the component...
Arbitrary File Deletion
xstream is vulnerable to arbitrary file deletion. XStream's default blacklist of the Security Framework does not blacklist the internal JAX-WS type ReadAllStream.FileStream and therefore, allows the deserialization of XML containing those untrusted type, subsequently leading to an arbitrary file...
Arbitrary Code Execution
SQLite is vulnerable to arbitrary code execution. A remote attacker is able to execute arbitrary code via a buffer overflow when the FTS3 extension is enabled...
Arbitrary Code Execution
imagemagick is vulnerable to arbitrary code execution. A heap-based buffer overflow in WriteOnePNGImage in coders/png.c allows an attacker to execute arbitrary code via a malicious file...
Cross Site Request Forgery (CSRF)
GnuPG is vulnerable to Cross Site Request Forgery CSRF, Information Disclosure and DoS. The attack is possible when a victim performs a web key directory request...
Arbitrary Code Execution
openexr is vulnerable to arbitrary code execution. An invalid write of size 8 in the storeSSE function in ImfOptimizedPixelReading.h could cause the application to crash or execute arbitrary code...
Remote Code Execution (RCE)
Google Chrome is vulnerable to remote code execution. The vulnerability existed because of an integer overflow that leads to a use-after-free in Blink Storage in Google Chrome on Linux. An attacker is able to execute arbitrary code via a crafted HTML page...
Denial Of Service (DoS)
nss is vulnerable to denial of service DoS. The vulnerability exists through the way NSS handled CCS ChangeCipherSpec messages in TLS 1.3...
Template Injection
cron-utils is vulnerable to a template Injection vulnerability. The use of cron-utils with @Cron annotation allows an attacker to inject malicious Java EL expressions as it does not properly validate the untrusted Cron expressions, leading to a remote code execution...
Information Disclosure
firefox is vulnerable to information disclosure. When drawing a transparent image on top of an unknown cross-origin image, the Skia library drawImage function takes a variable amount of time depending on the content of the underlying image. This can result in potential cross-origin information...
Information Disclosure
samba is vulnerable to information disclosure. A missing permissions check on a directory handle requesting ChangeNotify meant that a client with a directory handle open only for FILEREADATTRIBUTES minimal access rights could be used to obtain change notify replies from the server. These replies...
Authorization Bypass
kernel is vulnerable to authorization bypass. The vulnerability exists in net bluetooth through type confusion while processing AMP packets...
Authentication Bypass
picketbox is vulnerable to authentication bypass. An attacker is able to bypass authentication via JBoss EAP reload to admin-only mode...
Arbitrary Code Execution
kernel is vulnerable to arbitrary code execution. The vulnerability exists through an out of bounds write in function i2csmbusxferemulated in drivers/i2c/i2c-core-smbus.c...
Information Disclosure
foreman is vulnerable to information disclosre. It is possible due to unauthorized cache read on RPM-based installations through local user...
Arbitrary Code Execution
GraphicsMagick is vulnerable to arbitrary code execution. A heap-based buffer overflow in the "Display visual image directory" feature of the DescribeImage function in magick/describe.c file allows an attacker to execute arbitrary code on the host OS via a malicious MIFF format file with the...
Denial Of Service (DoS)
busybox is vulnerable to denial of service DoS. The vulnerability exists through an integer overflow issue in the DHCP client udhcpc...
Denial Of Service (DoS)
graphicsmagick is vulnerable to denial of service DoS. The vulnerability exists through a NULL pointer dereference in ReadPNMImage in coders/pnm.c...
Remote Code Execution (RCE)
opensmtpd:bionic is vulnerable to denial of service DoS. smtpmailaddr in smtpsession.c allows remote attackers to execute arbitrary commands as root via a crafted SMTP session, as demonstrated by shell metacharacters in a MAIL FROM field. This affects the "uncommented" default configuration. The...
Denial Of Service (DoS)
QEMU is vulnerable to denial of service DoS. es1370transferaudio in hw/audio/es1370.c does not properly validate the frame count, which allows guest OS users to trigger an out-of-bounds access during an es1370write operation...
Denial Of Service (DoS)
binutils:bionic is vulnerable to denial of service DoS. An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils. There is a heap-based buffer over-read in bfddoprnt in bfd.c because elfobjectp in elfcode.h mishandles an eshstrndx section of typ...
Denial Of Service (DoS)
openjpeg is vulnerable to denial of service. A use-after-free bug occurs in jp2/opjdecompress.c when there is a mix of valid and invalid files in a directory operated on by the decompressor...
Arbitrary Code Execution
kernel is vulnerable to arbitrary code execution. A heap-based buffer overflow in the lbsibssjoinexisting function in drivers/net/wireless/marvell/libertas/cfg.c allows an attacker to execute arbitrary code on the host OS...
Denial Of Service (DoS)
chrony is vulnerable to denial of service DoS. The vulnerability exists as a flaw was found in chrony versions before 3.5.1 when creating the PID file under the /var/run/chrony folder. The file is created during chronyd startup while still running as the root user, and when it's opened for writin...
Integer Overflow
Perl has an integer overflow related to mishandling of a "PLregkindOPn == NOTHING" situation. A crafted regular expression could lead to malformed bytecode with a possibility of instruction injection...
Denial Of Service (DoS)
PHP is vulnerable to denial of service DoS. When using file upload functionality, if upload progress tracking is enabled, but session.uploadprogress.cleanup is set to 0 disabled, and the file upload fails, the upload procedure would try to clean up data that does not exist and encounter null...
Denial Of Service (DoS)
libvirt is vulnerable to denial of service DoS. The vulnerability exists as an issue was discovered in qemuDomainGetStatsIOThread in qemu/qemudriver.c in libvirt 4.10.0 though 6.x before 6.1.0. A memory leak was found in the virDomainListGetStats libvirt API that is responsible for retrieving...
Arbitrary Code Execution
webkit2gtk is vulnerable to arbitrary code execution. The vulnerability exists as a logic issue was addressed with improved restrictions...
Denial Of Service (DoS)
mariadb is vulnerable to denial of service DoS. The vulnerability exists through high privileged attacker with network access via multiple protocols to compromise MySQL Server...
Information Disclosure
kernel is vulnerable to information disclosure. A flaw was found in the Linux kernels implementation of IBPB Indirect Branch Prediction Barrier. The IBPB mitigation will be disabled when STIBP is not available or when Enhanced Indirect Branch Restricted Speculation IBRS is available...
Privilege Escalation
An attacker is able to intercept certain requests to the Kubelet and send a redirect response that may be followed by a client using the credentials from the original request. This can lead to compromise of other nodes...
Arbitrary Code Execution
commons-configuration2 is vulnerable to arbitrary code execution. The package uses a third-party library that, by default, allows the instantiation of arbitrary classes to parse if the YAML contains special statements. This allows an attacker to execute arbitrary code on the host application if t...
Denial Of Service (DoS)
libsndfile is vulnerable to denial of service DoS. The vulnerability exists as an error in the flacbuffercopy function flac.c can be exploited to cause a segmentation violation with read memory access via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585...
Denial Of Service (DoS)
openjdk is vulnerable to regex denial of service. A regular expression DoS in Scanner allows an attacker to crash the application...
Remote Code Execution
Sonatype nxrm is vulnerable to remote code execution. The vulnerability allows high privilege users such as administrators to run arbitrary code on the server with Nexus process privileges by injecting arbitrary Java Expression Language EL expressions...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists as a flaw was found in the b43 driver in the Linux kernel. If a system had an active wireless interface that uses the b43 driver, an attacker able to send a specially-crafted frame to that interface could cause a denial of...