Denial Of Service (DoS)

samba is vulnerable to denial of service DoS attacks. The library fails to guard against integer overflows when parsing a PAC on a 32-bit system, which allows an attacker with a forged PAC to corrupt the heap...

Use After Free

linux-azure, linux-aws, linux-gcp, linux-oracle and linux-kvm is vulnerable to Use After Free. The vulnerability exists in mm/mremap.c via a stale tlb because of a rmap lock is not held during a pud move...

Privilege Escalation

rh-mysql80-mysql is vulnerable to privilege escalation. A high privileged attacker with network access via multiple protocols to compromise MySQL server, resulting in unauthorized update, insert or delete access to some of MySQL server accessible data...

Denial Of Service (DoS)

libvirt.so is vulnerable to denial of service DoS attacks. The locked virStoragePoolObj object in the storagePoolLookupByTargetPath function is not properly released on ACL permission failures which allows clients connected to the read-write socket with limited ACL permissions to acquire the lock...

Authorization Bypass

jenkins-2-plugins is vulnerable to Authorization Bypass. The vulnerability exists because of not encoding the ID of input steps when using it to generate URLs which allows an attacker to specify input step IDs and bypass CSRF protection of any target URL...

Denial Of Service (DoS)

Linux kernel is vulnerable to denial of service. The vulnerability exists in mac80211 stack when parsing a multi-BSSID element which allows an attacker to execute arbitrary codes and crash the system...

Denial Of Service (DoS)

Linux is vulnerable to denial of service.The vulnerability exists in xfrmexpandpolicies in net/xfrm/xfrmpolicy.c that would cause a refcount to be dropped twice resulting in an application crash...

Remote Code Execution

moodle/moodle is vulnerable to remote code execution. The vulnerability exists in convertconfigdata function of lib.php when restoring backup files which allows an attacker to execute remote codes in the system...

HTTP Request Smuggling

nodejs-current is vulnerable to HTTP request smuggling. The vulnerability exists due to incorrect parsing header fields in the library, allowing an attacker to smuggle HTTP requests by providing a maliciously crafted input...

Privilege Escalation

github.com/grafana/grafana is vulnerable to privilege escalation. A remote admin is able to take over the server admin account and gain full control of the particular grafana instance when auth proxy is used, via calling a fake datasource publicly through this proxying feature...

Information Disclosure

thunderbird is vulnerable to information disclosure. An attacker can gain sensitive information when composing a response to an HTML email with a META refresh tag...

Remote Code Execution (RCE)

vm2 is vulnerable to remote code execution. The vulnerability exists in the Object.defineProperties function of setup-sandbox.js, allowing an attacker to bypass the sandbox protections by injecting and executing malicious code on the sandbox host...

Denial Of Service (DoS)

chrome is vulnerable to denial of service. The vulnerability exists due to a memory corruption in the functionality of the component SwiftShader allowing an attacker to crash the system via manipulation with an unknown input...

Command Injection

moment-timezone is vulnerable to command injection. An attacker can inject and execute the malicious commands using the childprocess exec function as it does not sanitize the input...

Insecure Token

An issue was found in fts5UnicodeTokenize in ext/fts5/fts5tokenize.c in Sqlite. A unicode61 tokenizer configured to treat unicode "control-characters" class Cc, was treating embedded nul characters as tokens. The issue was fixed in sqlite-3.34.0 and later...

Denial Of Service (DoS)

mariadb is vulnerable to denial of service DoS attacks. The vulnerability is in the subselect function where the attacker is able to remotely cause denial of service conditions due to a segmentation fault in the above mentioned function...

Out-Of-Bounds Read

vim:sid is vulnerable to out of bounds read. A remote attacker is able to perform out of bound reads...

Privilege Escalation

gafana is vulnerable to privilege escalation. An attacker can take over another user's account in the grafana instance by supplying a login name through the specified OAuth IdP when the attacker's external user id is linked to a grafana account, and the attacker knows the grafana user name of the...

Denial Of Service (DoS)

curl is vulnerable to denial of service. The vulnerability exists because the amount of accepted "chained" algorithms is very high which allows an attacker to cause an application crash...

Denial Of Service (DoS)

mariadb is vulnerable to denial of service. getsortbytable in MariaDB allows an application crash via certain subquery uses of ORDER BY...

Denial Of Service (DoS)

protobuf is vulnerable to denial of service. The vulnerability exists due to a lack of sanitization in google.protobuf.UnknownFieldSet parameter which allows a remote attacker to inject a malicious javascript into the system and crash. which allowing an attacker to...

Denial Of Service (DoS)

gopkg.in/yaml.v3 is vulnerable to denial of service. The vulnerability exists when the deserializing input data through the unmarshal function of yaml.go, allowing an attacker to crash the application by providing invalid YAML data...

Information Disclosure

eventsource is vulnerable to information disclosure. The vulnerability exists in few function in eventsource.js due to the leakage of cookies and authorization headers to external sites which allows an attacker to steal user credentials and perform unauthorized actions...

Deserialization Of Untrusted Data

topthink/framework is vulnerable to deserialization of untrusted data. The vulnerability exists in unserialize function in Driver.php due to the use of string type as the method parameter which allows an attacker to control the state or the flow of the execution...

Privilege Escalation

njs is vulnerable to privilege escalation. The vulnerability exists in njspromiseperformthen function due to a type confusion which allows an attacker to gain access to the system and perform unauthorized actions...

Memory Leak

qemu is vulnerable to a memory leak. The vulnerability exists in virtio-net device of qemu where it forgets to unmap the cached virtqueue element on error where a malicious privileged guest could exploit this issue to crash qemu within the context of the qemu process on the host...

Denial Of Service (DoS)

Spring Security OAuth is vulnerable to denial of service. The vulnerability exists due to a lack of restriction of the number of request initiating the Authorization Request for the Authorization Code Grant allowing an attacker to exhaust the system resources sending multiple requests with a sing...

Denial Of Service (DoS)

github.com/golang/text is vulnerable to Denial Of Service DoS. The vulnerability exists because an incorrectly formatted language tag may cause the parse to panic due to an out of bounds read, resulting in an application crash...

Denial Of Service (DoS)

golang.org/x/crypto is vulnerable to Denial Of Service DoS. The vulnerability exists in readCipherPacket function which allows an unauthenticated attacker to send an empty plaintext packet to a program linked with golang.org/x/crypto/ssh causing a panic which potentially leads to an application...

Information Exposure

moodle/moodle is vulnerable to information exposure. The vulnerability exists due to a lack of input validation in the export.php file, allowing to read sensitive informations in the system...

Denial Of Service (DoS)

vim is vulnerable to denial of service. The vulnerability exists due to an Out-of-range Pointer Offset...

Denial Of Service (DoS)

firefox is vulnerable to denial of service. An attacker is able to exploit the vulnerability by forcing a text reflow in an SVG object leading to a potentially exploitable crash...

Insecure HTTP2 TrustManager

spring-cloud-gateway-server uses an insecure HTTP2 TrustManager. Application with default configuration and no key store or trusted certificates uses an insecure trustmanager factory option when HTTP2 is enabled, allowing the gateway connections to remote services with invalid or custom...

Denial Of Service (DoS)

linux is vulnerable to denial of service DoS attacks. A malicious user is able to cause a heap-based buffer overflow, causing the application to crash...

Privilege Escalation

libexpat.so is vulnerable to privilege escalation. The vulnerability exists in the namespace-separator Character Handler in the xmlparse.c allowing an unauthorized user to access the system account...

Denial Of Service (DoS)

github.com/golang/go is vulnerable to Denial Of Service DoS. The vulnerability exists due to uncontrolled memory consumption in SetString function which allows an attacker to crash the application by providing a malicious input...

Remote Code Execution (RCE)

firefox is vulnerable to remote code execution. The vulnerability when a worker is shutdown, it was possible to cause script to run late in the lifecycle, at a point after where it should not be possible...

Information Disclosure

samba is vulnerable to information disclosure...

Denial Of Service (DoS)

libexpat is vulnerable to denial of service. The vulnerability exists due to a lack of sanitization of boundary in storeAtts function in xmlparse.c leading to an integer overflow...

Remote Code Execution (RCE)

RabbitMQ is vulnerable to Regular Expression Denial Of Service ReDoS. A new user being added via management UI could lead to the user's bane being rendered in a confirmation message without proper...

Cross-Site Scripting (XSS)

laravel/framework is vulnerable to cross-site scripting XSS. When the parent template contains an exploitable HTML structure, a remote attacker is able to inject arbitrary Javascript via guessing the parent placeholder SHA-1 hash by trying common names of sections...

Cross-Site Scripting (XSS)

ckeditor4 is vulnerable to cross-site scripting. The vulnerability exists due to a lack of sanitization of HTML in the Advance Content Filter ACF module which allows an attacker to inject maliciously crafted HTML containing Javascript code...

Privilege Escalation

samba:edge is vulnerable to privilege escalation. The vulnerability exists in the component AD Domain Handler resulting in escalation of privileges...

Directory Traversal

chrome is vulnerable to directory traversal. The vulnerability exists due to Insufficient validation of untrusted input Downloads...

Heap Corruption

chrome is vulnerable to heap corruption. The vulnerability exists due to a use after free in dev tools...

Sandbox Escape

chrome is vulnerable to sandbox escape. The vulnerability exists due to a heap buffer overflow...

Improper Input Validation

Java SE is vulnerable to Improper Input Validation. An attacker can perform service disruption through the Hotspot component in the oracle GraalVM enterprise edition...

Denial Of Service (DoS)

chromium is vulnerable to denial of service. An attacker is able to crash the system by exploiting a heap corruption via a maliciously crafted HTML page...

Denial Of Service (DoS)

Redis is vulnerable to denial of service. The vulnerability exists due to the debuggers protocol parser to read data beyond the actual buffer...

Privilege Escalation

matrixsynapse is vulnerable to privilege escalation. An unauthorised user knowing Room ID of a private room and setting room's history visibility to shared is allowed to enumerate the room's members, including their display names...