38790 matches found
Remote Code Execution
xstream is vulnerable to remote code execution. A remote attacker with sufficient rights is able to execute arbitrary code on the host by manipulating the processed input stream...
Denial Of Service (DoS)
glib:edge is vulnerable to denial of service. The function gbytesnew has an integer overflow on 64-bit platforms due to an implicit cast from 64 bits to 32 bits. The overflow could potentially lead to memory corruption...
Remote Code Execution (RCE)
libxml2 is vulnerable to remote code execution. The vulnerability exists due to a use after free in libxml2 in xmlXIncludeDoProcess in xinclude.c...
Denial Of Service (DoS)
libxml2 is vulnerable to denial of service. It is due to a NULL pointer dereference when post-validating mix content parsed in recovery mode...
Directory Traversal
babel is vulnerable to directory traversal. The vulnerability allows an attacker to load arbitrary locale .dat files which contain serialized Python objects. This can potentially lead to arbitrary code execution If an attacker is able to load a malicious local .dat file through Babel.Locale...
Privilege Escalation
chromium is vulnerable to privilege escalation. Inappropriate implementation in Network allows an attacker to perform an action which is otherwise not permitted...
Padding Oracle Attack
jose-node-cjs-runtime is vulnerable to padding oracle attack. The vulnerability exists as decryption did not fail as soon as hmac verification fails, allowing timing information to be measured by running the CBC decryption with various padding length...
Heap Buffer Overflow
A heap buffer overflow security issue was found in the TabStrip component of the Chromium browser...
Denial Of Service(DoS)
webkit2gtk is vulnerable to denial of service. A memory corruption happens due to processing of maliciously crafted web content, leading to an arbitrary code execution...
Cross-site Scripting (XSS)
lxml is vulnerable to cross-site scripting XSS. An attacker is able to inject and execute arbitrary script via HTML action attribute into defs.linkattrs in html/defs.py...
Denial Of Service (DoS)
etcd is vulnerable to denial of service. A panic occurs in decodeRecord method when a large slice is processed due to a lack of validation on the size of record...
Authentication Bypass
botframework-connector is vulnerable to authentication bypass. The vulnerability exists as Skill claims found in the jwt token is not validated against the SkillValidation.isSkillClaim method...
Arbitrary Code Execution
grub is vulnerable to arbitrary code execution. An attacker is able to remove address ranges from memory via the cutmem command to bypass Secure Boot protections...
Information Disclosure
tomcat-coyote is vulnerable to information leakage. When responding to new h2c connection requests, a request mix-up occurs with h2c as the request headers and a limited amount of request body is duplicated from one request to another, resulting in the request being seen by another user...
Open Redirection
rails is vulnerable to open redirection. Inadequate validation and regex matching of URLs allows an attacker to bypass validation checks using a malicious Host header and redirect users to a malicious website...
Arbitrary Code Execution
qemu is vulnerable to arbitrary code execution. An out-of-bound heap buffer access via an interrupt ID field could potentially allow an attacker to execute arbitrary code on the host OS...
Arbitrary Code Execution
kernel is vulnerable to arbitrary code execution. The vulnerability exists through a use-after-free in the sound subsystem as card disconnection causes certain data structures to be deleted too early...
Arbitrary Code Execution
kernel is vulnerable to arbitrary code execution. The vulnerability exists through an out-of-bounds access in the function buildaudioprocunit in the file sound/usb/mixer.c...
Remote Code Execution
Apache Druid is vulnerable to remote code execution. An attacker is able to execute arbitrary JavaScript code that is embedded in certain types of requests. This functionality is however disabled by default...
Buffer Overflow
glibc is vulnerable to buffer overflow. The vulnerability occurs when processing invalid multi-byte input sequences in the EUC-KR encoding...
Information Disclosure
jenkins-2-plugins is vulnerable to information disclosure. The vulnerability exists as low-privilege users can access Jenkins controller environment variables...
DNS Cache Poisoning
dnsmasq is vulnerable to DNS cache poisoning. The vulnerability exists when getting a reply from a forwarded query, dnsmasq checks in forward.c:replyquery, which is the forwarded query that matches the reply, by only using a weak CRC32 hash of the query name...
Directory Traversal
flink-runtime in vulnerable to Directory Traversal. An attacker is able to read any file accessible by the JobManager process on the local filesystem of the JobManager through the RES interface of the JobManager process...
Remote Code Execution (RCE)
firefox is vulnerable to remote code execution. The vulnerability exists due to a use-after-free error when processing COOKIE-ECHO chunk in a SCTP packet. An attacker can inject malicious data to the browser, triggering a use-after-free error and execute arbitrary code on the system...
Deserialization Of Untrusted Object
jackson-databind is vulnerable to deserialization of untrusted data that can lead to remote code execution. It is possible because untrusted classes org.apache.commons.dbcp2.datasources.SharedPoolDataSource was not filtered by default from the interaction between serialization gadgets and...
Arbitrary Code Execution
lighttpd is vulnerable to arbitrary code execution. A signed integer overflow allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code on the host OS malicious HTTP GET request due to mishandling of /%2F? in burlnormalize2Ftoslashfix in burl.c...
Arbitrary Code Execution
openjfx is vulnerable to arbitrary code execution.An easy-to-exploit vulnerability allows an unauthenticated attacker to compromise and takeover the Java SE...
Arbitrary Code Execution
openexr is vulnerable to arbitrary code execution. An invalid write of size 8 in the storeSSE function in ImfOptimizedPixelReading.h could cause the application to crash or execute arbitrary code...
Arbitrary Code Execution
chromium is vulnerable to arbitrary code execution. Incorrect optimization assumptions in V8 allows a remote attacker to execute arbitrary code inside a sandbox via a malicious HTML page...
Remote Code Execution (RCE)
Google Chrome is vulnerable to remote code execution. The vulnerability existed because of an integer overflow that leads to a use-after-free in Blink Storage in Google Chrome on Linux. An attacker is able to execute arbitrary code via a crafted HTML page...
Remote Code Execution
ArchiveTar is vulnerable to remote code execution. An attacker is able to inject malicious code through file extension.PHARwithin a tar archive...
Information Disclosure
firefox is vulnerable to information disclosure. When drawing a transparent image on top of an unknown cross-origin image, the Skia library drawImage function takes a variable amount of time depending on the content of the underlying image. This can result in potential cross-origin information...
Information Disclosure
kernel is vulnerable to information disclosure.It incorrectly writes to the /proc/sys/vm/cmmtimeout file.This flaw allows to local user see the kernel stack information leak on s390/s390x...
Privilege Escalation
kernel is vulnerable to privilege escalation. A use-after-free flaw was found in the way the Linux kernel's filesystem subsystem handled a race condition in the cdevget of chardev.c function.This flaw allows a privileged local user to starve the resources, causing potentially escalating their...
Cross-Site Request Forgery (CSRF)
wordpress is vulnerable to cross-site request forgery CSRF. Lack of authenticity check for HTTP requests allows an attacker to submit requests on behalf of a user, such as changing of the theme's background image...
Arbitrary Code Execution
webkitgtk4 is vulnerable to arbitrary code execution. The vulnerability exists through memory corruption...
Arbitrary Code Execution
webkitgtk4 is vulnerable to arbitrary code execution. The vulnerabiltiy exists through memory errors...
Arbitrary Code Execution
webkitgtk4 is vulnerable to arbitrary code execution. The vulnerability exists as parsing web content can cause memory corruption...
Arbitrary Code Execution
kernel is vulnerable to arbitrary code execution. The vulnerability exists through an out of bounds write in function i2csmbusxferemulated in drivers/i2c/i2c-core-smbus.c...
Information Disclosure
foreman is vulnerable to information disclosre. It is possible due to unauthorized cache read on RPM-based installations through local user...
Wrong Access Permission
Linux kernel is using wrong access permission.It can set incorrect permissions on new filesystem objects when the filesystem lacks ACL support, aka CID-22cf8419f131. This occurs because the current umask is not considered...
Memory Leak
The Linux kernel is vulnerable to memory leak. usbtestdisconnect in drivers/usb/misc/usbtest.c has a memory leak, aka CID-28ebeb8db770...
Information Disclosure
chromium-browser is vulnerable to information disclosure. The vulnerability exists in the fetch API of the WebKit component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site...
Denial Of Service (DoS)
busybox is vulnerable to denial of service DoS. The vulnerability exists through an integer overflow issue in the DHCP client udhcpc...
Remote Code Execution (RCE)
mysql is vulnerable to remote code execution. The vulnerability exists in the Server Security Privileges through multiple unspecified vulnerabilities...
Denial Of Service (DoS)
php7 is vulnerable to denial of service. When HTTP file uploads are allowed, overly long filenames or field names could cause the engine to allocate oversized memory storage and stop further processes when the memory limit is hit. This results in the accumulation of uncleaned temporary files...
Information Disclosure
php7 is vulnerable to information disclosure. The vulnerability exists while parsing EXIF data with exifreaddata function, it is possible for malicious data to cause PHP to read one byte of uninitialized memory...
Arbtirary Code Execution
libjpeg-turbo and mozjpeg is vulnerable to arbitrary code execution. A heap-based buffer over-read in getrgbrow in rdppm.c allows an attacker to execute arbitrary code on the host OS via a malicious PPM input file...