39640 matches found
Privilege Escalation
gafana is vulnerable to privilege escalation. An attacker can take over another user's account in the grafana instance by supplying a login name through the specified OAuth IdP when the attacker's external user id is linked to a grafana account, and the attacker knows the grafana user name of the...
Remote Code Execution
getgrav/grav is vulnerable to remote code execution. An authenticated remote attacker is able to cause server side template injection via Twig which renders risky functions by default, such as system...
Remote Code Execution (RCE)
watertools is vulnerable to remote code execution. When the package is installed, it opens a malicious backdoor in the package allowing an attacker to inject and execute arbitrary codes and gain access to sensitive user information and digital currency keys as well as escalate privileges...
Privilege Escalation
chromium is vulnerable to privilege escalation. The vulnerability exists because the lack of implementation of the protection mechanism, allowing an attacker to exploit this flaw by providing malicious input...
Information Disclosure
kernel is vulnerable to information disclosure. The vulnerability exists due to a userland application can read the contents of the sigpage, which leaks kernel memory contents allowing an attacker to read a process’s memory at a specific offset...
Denial Of Service (DoS)
MariaDB is vulnerable to denail of service. The vulnerability exists due to a deadlock when executing the plugin/serveraudit/serveraudit.c method logstatementex...
Authentication Bypass
Linux kernel is vulnerable to authentication bypass. The vulnerability exists because the users have access to some less privileged process that are controlled by cgroups and have higher privileged parent process which allows an attacker to escalate their privileges and crash the system...
Denial Of Service (DoS)
linux is vulnerable to denial of service. The vulnerability exists because the emsusbstartxmit in emsusb.c in the Linux kernel has a double free which allows an attacker to crash the application...
Remote Code Execution (RCE)
grub2 is vulnerable to remote code execution. The vulnerability exists due to a use-after-free vulnerability in grubcmdchainloader function which allows an attacker to gain access to restricted data...
Path Traversal
github.com/golang/go is vulnerable to Path Traversal. The vulnerability exists because the Clean function of path.go does not properly remove the . prefix when the file path contains :, allowing an attacker to access files outside the expected directory on windows...
Unchecked Return Value
ntfs-3g is vulnerable to unchecked return value. The vulnerability exists due to an invalid return code in fusekernmount enables intercepting of libfuse-lite protocol traffic between NTFS-3G and the kernel in NTFS-3G when using libfuse-lite...
Privilege Escalation
Linux kernel is vulnerable to privilege escalation. The vulnerability exists due to an out of bounds read due to a use after free allowing an attacker to escalate privilege within the system...
Denial Of Service (DoS)
.NET and Visual Studio are vulnerable to denial of service. The vulnerability exists due to a flaw in dotnet allowing an attacker to crash the system by applying MaxResponseHeadersLength limit for trailing headers to address a denial of service via excess memory allocations through the HttpClient...
Path Traversal
firefox is vulnerable to Path Traversal. A remote attacker is able to use the % character in filenames to store the data outside of the intended directory using windows environment variables, such as %HOMEPATH% or %APPDATA%...
Memory Corruption
firefox is vulnerable to memory corruption vulnerability. Crafted CMS messages are incorrectly processed, leading to invalid memory reads, and potentially further memory corruption...
Heap-based Buffer Overflow
pillow is vulnerable to a heap buffer overflow. The vulnerability exists in the ImagingTgaRleDecode of TgaRleDecode.c due to a lack of input validation which allows an attacker to inject maliciously crafted tga image and crash the system...
Cross-Site Request Forgery (CSRF)
XXL Job Core is vulnerable to cross-site request forgery. The vulnerability exists in xxl-job-admin component due to less restrictions of user permissions which allows an attacker to perform unauthorized actions...
Denial Of Service (DoS)
gopkg.in/yaml.v3 is vulnerable to denial of service. The vulnerability exists when the deserializing input data through the unmarshal function of yaml.go, allowing an attacker to crash the application by providing invalid YAML data...
Denial Of Service (DoS)
moodle/moodle is vulnerable to denial of service. The vulnerability exists in loginattemptfailed function in authlib.php due to incorrect calculation of login attempts which allows an attacker to cause an application crash...
Denial Of Service (DoS)
pjproject is vulnerable to denial of service. The vulnerability exists due to the library does not properly check the WAV file data length when it greater than 31-bit, allowing an attacker to crash the application by providing malicious WAV files...
Denial Of Service (DoS)
openssl3 is vulnerable to denial of service. The vulnerability exists because the OPENSSLLHflush function reuses the memory occupied by the removed hash table entries, allowing an attacker to cause an application crash...
Information Disclosure
curl is vulnerable to information disclosure. The vulnerability exists due to an Auth/cookie leak on redirect to the same host but another port number...
Memory Leak
qemu is vulnerable to a memory leak. The vulnerability exists in virtio-net device of qemu where it forgets to unmap the cached virtqueue element on error where a malicious privileged guest could exploit this issue to crash qemu within the context of the qemu process on the host...
Cross-Site Request Forgery (CSRF)
MCMS is vulnerable to cross site request forgery. The vulnerability exists due to lack of handling of parameters, allowing an attacker to bypass authentication and submit request on the behalf of the server and gain access to internal resources via the file or endpoint /role/saveOrUpdateRole.do...
SQL Injection
asterisk is vulnerable to SQL injection. The vulnerability exists due to a lack of sanitization of input for backslash characters in SQL queries allowing an attacker to make maliciously crafted queries...
Type Confusion
Google Chrome is vulnerable to type confusion. A remote attacker is able to exploit a heap memory corruption issue via a crafted HTML page, which leads to a use-after-free state in V8 Turbofan engine...
SQL Injection
github.com/flipped-aurora/gin-vue-admin is vulnerable to SQL injection. The vulnerability exists due to insecure handling of special elements used in an PostgreSQL Command in server/service/system/sysautocodepgsql.go. The vulnerability is only possible if the user is using PostgreSQL as the...
Remote Code Execution
Gzip is vulnerable to remote code execution. Insufficient validations when processing filenames with two or more newlines allow remote attackers to force zgrep or xzgrep to write arbitrary files on the system...
Buffer Overflow
glibc is vulnerable to buffer overflow. The vulnerability exists due to a memory corruption when the size of the buffer is exactly 1 which allows an attacker to control the input buffer and size passed to getcwd in a setuid program...
Side-Channel Attacks
hostapd is vulnerable to side channel attack. The vulnerability exists due to cache access patterns...
Denial Of Service (DoS)
libvirt.so is vulnerable to denial of service. Lack of proper handling of a locked virStoragePoolObj object to release on ACL permission failure in the function virStoragePoolLookupByTargetPath allows other users to access storage pool APIs, causing an application crash...
Remote Code Execution (RCE)
codeigniter4/framework is vulnerable to remote code execution. The vulnerability exists due to the improper input validation in the library, allowing an attacker to execute CLI routes via an HTTP request...
Information Disclosure
hashicorp-vault-plugin is vulnerable to information disclosure. Remote unauthenticated attackers are able to gain access to sensitive information by controlling agent processes to obtain Vault secrets via an attacker-specified path and key...
Denial Of Service (DoS)
linux kernel is vulnerable to Denial Of Service DoS. The vulnerability exists due to an array-index-out-of-bounds flaw in the detachcapictr function in drivers/isdn/capi/kcapi.c...
Buffer Overflow
Slurm is vulnerable to buffer overflow. The vulnerability exists in the PMIx MPI plugin which causes a buffer overflow which leads to an application crash...
Denial Of Service (DoS)
Linux kernel is vulnerable to denial of service. The vulnerability exists due to the use-after-free in the NFC stack, allowing an attacker to crash the application...
Authorization Bypass
Google Chrome is vulnerable to authorization bypass. This is because the insufficient policy enforcement in background fetch in prior to 96.0.4664.45 allows a remote attacker to bypass same origin policy via a crafted HTML page...
Denial Of Service (DoS)
libexpat.so is vulnerable to denial of service. The vulnerability exists due to the integer overflow in the mgroupSize of xmlparse.c, allowing an attacker to cause an application crash...
Denial Of Service (DoS)
linux-oracle:hirsute is vulnerable to denial of service. A memory leak in the ccprunaesgcmcmdfunction in drivers/crypto/ccp/ccp-ops.c in the Linux kernel allows attackers to cause an application crash...
Denial Of Service (DoS)
openssl3:edge is vulnerable to denial of service. Internally libssl in OpenSSL calls X509verifycert on the client side to verify a certificate supplied by a server. That function may return a negative return value to indicate an internal error for example out of memory. Such a negative return val...
Denial Of Service (DoS)
golang is vulnerable to denial of service. The vulnerability exists due to an uncontrolled resource consumption flaw in golang's net/http library in the canonicalHeader function which allows an attacker to submits maliciously crafted requests to applications linked with net/http's http2...
Signature Verification Bypass
The exploitation of this flaw requires RPM's package verification level to be set to "digest" or "none". In addition, to exploit this flaw, an attacker must either compromise an RPM repository or convince an administrator to install an untrusted RPM. It is strongly recommended to only use RPMs fr...
Denial Of Service (DoS)
busybox is vulnerable to denial of service. An out-of-bounds heap read in unlzma leads to information leak and application crash when crafted LZMA-compressed input is decompressed...
Denial Of Service (DoS)
qt5-qtwebengine is vulnerable to denial of service. The vulnerability exists due to a Heap buffer overflow in WebRTC...
HTTP Request Smuggling (HRS)
nodejs is vulnerable to HTTP Request Smuggling HRS. The vulnerability exists due to an error related to a space in headers which allows an attacker to poison the web cache, bypassing the web application...
Authentication Bypass
github.com/grafana/grafana is vulnerable to authentication bypass. The library does not properly restrict access to literal paths, allowing unauthenticated users to modify data...
Information Disclosure
Linux is vulnerable to information disclosure. The vulnerability exists due to the system incorrectly computes the access permissions of a shadow page, leading to a missing guest protection page fault...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. The vulnerability exists due to the system allowing OS users to cause host OS memory corruption via rtasargs.nargs...
Remote Code Execution (RCE)
xstream is vulnerable to remote code execution. An attacker can manipulate the processed input stream and replace or inject objects, that result in execution of arbitrary code loaded from a remote server...
Remote Code Execution (RCE)
virtualbox:sid is vulnerable to remote code execution.Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox...