38790 matches found
Remote Code Execution
yiisoft/yii is vulnerable to remote code execution. The vulnerability exists in the wakeup function of CDbCriteria.php, due to improper deserialization of untrusted user input, which allows the attacker to control the state or the flow of execution...
Cross-site Scripting (XSS)
moodle/moodle is vulnerable to cross-site scripting. The vulnerability exists due to a lack of validation in the user-supplied input for field.class.php and helper.php which allows a remote attacker to inject and execute malicious JavaScript into the system...
Denial Of Service (DoS)
samba is vulnerable to denial of service DoS attacks. The library fails to guard against integer overflows when parsing a PAC on a 32-bit system, which allows an attacker with a forged PAC to corrupt the heap...
Denial Of Service (DoS)
tensorflow is vulnerable to denial of service. The vulnerability exists in the BinaryFunctor function of cwiseopscommon.h due to a size mismatch during broadcast assignment which allows an attacker to cause an application crash by providing malicious input...
Denial Of Service (DoS)
grub2 is vulnerable to Denial Of Service DoS. The vulnerability exists in grub2 package because of the unicode sequences not properly validate which may lead to a segmentation fault and an application crash...
Denial Of Service (DoS)
rh-mysql80-mysql is vulnerable to denial of service. The vulnerability exists in the Server: Options component, allowing an attacker to cause an application crash and modify some MySQL Server accessible data through the multiple protocols...
Improper Access Control
openjdk is vulnerable to improper access control. The vulnerability allows an attacker to perform unauthorized updates, insertions or deletions of some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data...
Remote Code Execution
HyperSQL Database is vulnerable to remote code execution. The vulnerability exists in the supportsJavaMethod function of HsqlDatabaseProperties.java due to the untrusted input process allowing an attacker to execute remote codes in the system...
Denial Of Service (DoS)
mediawiki is vulnerable to denial of service. The vulberability exists in HTMLUserTextField where the attacker will code a specially crafted code to expose the existence of the hidden users...
Denial Of Service (DoS)
php is vulnerable to Denial Of Service DoS. The vulnerability exists due to the phar uncompressor code which recursively uncompress quines gzip files, resulting in an infinite loop and deplete the system resource...
Man In The Middle (MitM)
samba:xenial is vulnerable to man-in-the-middle. A flaw was found in samba's Heimdal KDC implementation, versions 4.8.x up to when used in AD DC mode. A man in the middle attacker could use this flaw to intercept the request to the KDC and replace the user name principal in the request with any...
Denial Of Service (DoS)
kafka-clients is vulnerable to denial of service. An attacker can crash the application through the OutOfMemoryException in the readArray function of ByteBufferAccessor.java by providing large amounts of memory on brokers...
Denial Of Service (DoS)
jettison is vulnerable to Denial Of Service DoS. The vulnerability exists due to the stack overflow in the convertToJSONPrimitive function of DefaultConverter.java, allowing an attacker to cause an application crash by providing malicious input through the parser...
Remote Code Execution (RCE)
vm2 is vulnerable to remote code execution. The vulnerability exists in the Object.defineProperties function of setup-sandbox.js, allowing an attacker to bypass the sandbox protections by injecting and executing malicious code on the sandbox host...
Denial Of Service (DoS)
chrome is vulnerable to denial of service. The vulnerability exists due to a memory corruption in FedCM which allows an attacker to crash the application via malicious input...
Insecure Token
An issue was found in fts5UnicodeTokenize in ext/fts5/fts5tokenize.c in Sqlite. A unicode61 tokenizer configured to treat unicode "control-characters" class Cc, was treating embedded nul characters as tokens. The issue was fixed in sqlite-3.34.0 and later...
Spoofing Attacks
moodle/moodle is vulnerable to spoofing attacks. The vulnerability exists in the getremoteaddr function in moodlelib.php, allowing an attacker to spoof a user's IP through the X-Forwarded-For headers, bypassing the remote address checks...
SQL Injection
Mingsoft MCMS are vulnerable to sql injection attacks. The vulnerability exists in verify function in PageAction.java because the validated function call is not properly handled allows an attacker to inject and execute arbitrary queries...
Denial Of Service (DoS)
chrome is vulnerable to denial of service. The vulnerability exists due to a use after free in WebGPU in Google Chrome allowing a remote attacker to potentially exploit heap corruption via a crafted HTML page...
Out-of-bounds Write
unzip:sid is vulnerable to out-of-bounds write. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap of out-of-bound write. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution...
Privilege Escalation
gafana is vulnerable to privilege escalation. An attacker can take over another user's account in the grafana instance by supplying a login name through the specified OAuth IdP when the attacker's external user id is linked to a grafana account, and the attacker knows the grafana user name of the...
Insecure Cryptography
ujson is vulnerable to insecure cryptography. The vulnerability exists in a JSON string contains escaped surrogate characters which are not part of a proper surrogate pair, the library may decode those characters incorrectly which allows remote attackers to cause unintended behavior in the...
Remote Code Execution (RCE)
watertools is vulnerable to remote code execution. When the package is installed, it opens a malicious backdoor in the package allowing an attacker to inject and execute arbitrary codes and gain access to sensitive user information and digital currency keys as well as escalate privileges...
Remote Code Execution Backdoor
cloudlabeling is vulnerable to remote code execution. The use of the request package opens up a code execution backdoor, allowing an attacker to perform unauthorized actions and accesses to sensitive information and digital currency keys...
Denial Of Service (DoS)
MariaDB is vulnerable to denial of service. The vulnerability exists due to a deadlock indsxbstream.cc, crashing the system when an error occurs streamctxt-destfile == NULL while executing the method xbstreamopen...
Out-of-Bounds Read
Apache HTTP Server is vulnerable to out of bounds read. The vulnerability exists due to a lack of sanitization of the aprwrite function allowing an attacker to cause the server to reflect very large input using aprwrite or aprputs, such as with modluas r:puts function...
Buffer Overflow
php is vulnerable to buffer overflow. The vulnerability exists due to a memory corruption which allows an attacker to cause an overflow...
Denial Of Service (DoS)
.NET and Visual Studio are vulnerable to denial of service. The vulnerability exists due to a flaw in dotnet allowing an attacker to crash the system by applying MaxResponseHeadersLength limit for trailing headers to address a denial of service via excess memory allocations through the HttpClient...
Remote Code Execution
laravel/laravel is vulnerable to remote code execution. Improper deserialization in destruct in GuzzleHttp\Cookie\FileCookieJar.php allows an attacker to upload and execute malicious code via an unserialized pop chain...
Denial Of Service (DoS)
pjproject is vulnerable to denial of service. The vulnerability exists due to the library does not properly check the WAV file data length when it greater than 31-bit, allowing an attacker to crash the application by providing malicious WAV files...
Denial Of Service (DoS)
openssl3 is vulnerable to denial of service. The vulnerability exists because the OPENSSLLHflush function reuses the memory occupied by the removed hash table entries, allowing an attacker to cause an application crash...
Deserialization Of Untrusted Data
topthink/framework is vulnerable to deserialization of untrusted data. The vulnerability exists in unserialize function in Driver.php due to the use of string type as the method parameter which allows an attacker to control the state or the flow of the execution...
Denial Of Service (DoS)
FreeType is vulnerable to denial of service. The vulnerability exists in sfntinitface function due to a segment violation which allows an attacker to cause an application crash...
Denial Of Service (DoS)
libxml2.so is vulnerable to denial of service. The xmlBufCreateSize function of buf.c does not properly check types of buffer sizes, allowing an attacker to crash the application by providing large multi-gigabyte buffers...
SQL Injection
github.com/flipped-aurora/gin-vue-admin is vulnerable to SQL injection. The vulnerability exists due to insecure handling of special elements used in an PostgreSQL Command in server/service/system/sysautocodepgsql.go. The vulnerability is only possible if the user is using PostgreSQL as the...
Remote Code Execution (RCE)
ghost is vulnerable to remote code execution. The vulnerability exists due to a lack of sanitization of the upload and update function allowing an attacker inject maliciously crafted script via an SVG file. NOTE: Vendor states that as outlined in Ghost's security documentation, upload of SVGs is...
Denial Of Service (DoS)
.NET and Visual Studio are vulnerable to denial of service. The vulnerability exists due to a lack of sanitization allowing an attacker to crash the system...
Regular Expression Denial Of Service (ReDoS)
ckeditor4 is vulnerable to regular expression denial of service. The vulnerability exists due to a lack of sanitization of the input validator regular expression in dialog...
Information Disclosure
moodle/moodle is vulnerable to information exposure. The vulnerability exists due to a lack of sanitization in output field in the manage.php file, allowing to read sensitive information in the system...
Use After Free
chromium is vulnerable to use after free. The vulnerability exists in Optimization Guide which allows an attacker to cause a memory corruption...
Validation Bypass
github.com/cri-o/cri-o is vulnerable to Validation Bypass. When an attacker creates a pod with a hostIPC and hostNetwork kernel namespace, the attacker is able to apply sysctls from the list of safe sysctls specified for the cluster resulting in unauthorized access due to insufficient validations...
Denial Of Service (DoS)
vim is vulnerable to denial of service. The vulnerability exists due to a heap-based buffer overflow which allows an attacker to cause an application crash...
Buffer Overflow
mruby is vulnerable to Heap-based Buffer Overflow. The vulnerability exists due to a lack of sanitization...
Denial Of Service (DoS)
linux kernel is vulnerable to Denial Of Service DoS. The vulnerability exists due to an array-index-out-of-bounds flaw in the detachcapictr function in drivers/isdn/capi/kcapi.c...
Authorization Bypass
Google Chrome is vulnerable to authorization bypass. This is because the insufficient policy enforcement in background fetch in prior to 96.0.4664.45 allows a remote attacker to bypass same origin policy via a crafted HTML page...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. The vulnerability exists due to a buffer overflow in drivers/media/firewire/firedtv-avc.c and drivers/media/firewire/firedtv-ci.c...
Cross-site Scripting (XSS)
mermaid is vulnerable to cross-site scripting. The vulnerability exists in the sanitizeUrl function in the svgDraw.js, allowing an attacker to inject and execute malicious javascript through the malicious diagrams...
Denial Of Service (DoS)
python3 is vulnerable to denial of service. The vulnerability exists because the ftplib is using the host from the PASV response which allows an attacker to cause an application crash...
Denial Of Service (DoS)
thunderbird and firefox are vulnerable denial of service. The vulnerability exists due to a GC Rooting Failure When Calling Wasm Instance Methods...
Cross-Site Scripting (XSS)
laravel/framework is vulnerable to cross-site scripting XSS. When the parent template contains an exploitable HTML structure, a remote attacker is able to inject arbitrary Javascript via guessing the parent placeholder SHA-1 hash by trying common names of sections...