Remote Code Execution

libencode is vulnerable to remote code execution. Encode.pm loads code from outside...

Information Disclosure

webkit2gtk is vulnerable to information disclosure. The vulnerability exists due to a use-after-free in Webkits GraphicsContext...

Remote Code Execution (RCE)

java openjdk is vulnerable to remote code execution. It has a flaw was found in the way the Hotspot component of OpenJDK performed range check elimination. An untrusted Java application or applet could use this flaw to bypass Java sandbox restrictions...

Denial Of Service

Linux kernel is vulnerable to denial of service. Linux fair scheduler has a use-after-free in shownumastats because NUMA fault statistics are inappropriately freed. A flaw was found in the Linux kernels implementation of displaying NUMA statistics, where displaying the scheduler statistics could...

Insecure SSL Configuration

curl uses insecure SSL configurations. The curlsslconfigmatches attempts to compare whether two SSL connections have identical SSL security options and could potentially reuse a connection that is less secure or uses different security options such as capath, cainfo or certificate/issuer pinning...

Wrong Content

curl:edge shows wrong content via metalink as it is not discarded...

Authentication Bypass

libcurl.so is vulnerable to authentication bypass. Insecure re-use of NTLM-authenticated proxy connections allow an attacker to authenticate as other users via a malicious request...

Denial Of Service (DoS)

cxf-rt-rs-json-basic is vulnerable to denial of service. An attacker is able to cause a thread to be stuck in an infinite loop due to an insecure parsing of JSON in JsonMapObjectReaderWriter...

Denial Of Service (DoS)

chromium:edge is vulnerable to denial of service...

Arbitrary Code Execution

htmldoc is vulnerable to arbitrary code execution. A double-free in the function pspdfexport in ps-pdf.cxx may result in a write-what-where condition, allowing an attacker to execute arbitrary code and denial of service...

Denial Of Service (DoS)

golang is vulnerable to . Due to a pre-allocation optimization in zip.NewReader, an attacker can cause a denial of service condition using a malicious archive which would result in a panic or memory exhaustion...

Denial Of Service (DoS)

linux-aws:groovy is vulnerable to denial of service. eBPF implementation in the Linux kernel did not properly verify that a BPF program only reserved as much memory for a ring buffer as was allocated. A local attacker could use this to cause a denial of service system crash or execute arbitrary...

Denial Of Service (DoS)

Unbound is vulnerable to denial of service. It allows an assertion failure and denial of service in dnamepktcopy via an invalid packet. A flaw was found in unbound. A reachable assertion in the dnamepktcopy function can be triggered by sending invalid packets to the server...

Denial Of Service (DoS)

sqlite is vulnerable to denial of service. The vulnerability exists due to select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant propagation...

Remote Code Execution (RCE)

graphviz is vulnerable to remote code execution. An attacker is able to exploit the vulnerability by loading a malicious file into the lib/common/shapes.c component...

Denial Of Service (DoS)

libxml2 is vulnerable to denial of service. It is due to a NULL pointer dereference when post-validating mix content parsed in recovery mode...

Denial Of Service (DoS)

ceph is vulnerable to denial of service. A NULL pointer exception allows an attacker to crash the RGW process via a malicious tagging XML...

Arbitrary Code Execution

exim4 is vulnerable to arbitrary code execution. An integer overflow in receiveaddrecipient could potentially allow an attacker to execute arbitrary code on the host OS...

Remote Code Execution (RCE)

cacti is vulnerable to remote code injection. The vulnerability exists due to cacti allows an admin to inject SQL via the filter parameter...

Remote Code Execution (RCE)

webkit2gtk is vulnerable to remote code execution, the vulnerability exists due to an out-of-bounds write issue...

CVE-2021-28148

One of the usage insights HTTP API endpoints in Grafana Enterprise 6.x before 6.7.6, 7.x before 7.3.10, and 7.4.x before 7.4.5 is accessible without any authentication. This allows any unauthenticated user to send an unlimited number of requests to the endpoint, leading to a denial of service DoS...

Denial Of Service (DoS)

chromium is vulnerable to denial of service. An out-of-bounds memory access in V8 allows an attacker to crash the application, and potentially obtain confidential information...

Heap Buffer Overflow

A heap buffer overflow security issue was found in the TabStrip component of the Chromium browser...

Denial Of Service (DoS)

LibTIFF is vulnerable to denial of service. When a crafted TIFF document is sent, a memory malloc failure in tifpixarlog.c causes an abort, resulting in a remote denial of service attack...

Denial Of Service (DoS)

Linux kernel is vulnerable to denial of service DoS. It is possible because of a NULL-ptr deref in the spkttyioreceivebuf2 function in spkttyio.c...

Denial Of Service (DoS)

linux is vulnerable to denial of service DoS. The vulnerability exists through a use after free in the Linux kernel infiniband hfi1 driver, found in the way user calls Ioctl after open dev file and fork...

DNS Rebinding

nodejs is vulnerable to DNS rebinding attacks. The vulnerability exists in the inspector component allowing an attacker to bypass the DNS rebinding protection if the, said attacker controls the victim's DNS server or can spoof its responses...

Heap Buffer Overflow

BusyBox is vulnerable to heap-based buffer overflow in the DHCP client udhcpc. It allows remote attackers to have unspecified impact via vectors involving OPTION6RD parsing...

Denial Of Service (DoS)

mariadb is vulnerable to denial of service. A difficult to exploit vulnerability allows an attacker to crash the application...

Privilege Escalation

Qemu is vulnerable to privilege escalation attack. A race condition flaw was found in the 9pfs server implementation of QEMU. This flaw allows a malicious 9p client to cause a use-after-free error, potentially escalating their privileges on the system. The highest threat from this vulnerability i...

Denial Of Service (DoS)

openjpeg2 is vulnerable to denial of service. Excessive iterations in the opjt1encodecblks function in openjp2/t1.c allows remote attackers to cause a denial of service via a malicious bmp file...

Arbitrary Code Execution

github.com/golang/go is vulnerable to arbitrary code execution. The go command may execute arbitrary code at build time when users have “.” listed explicitly in their PATH and are running “go get” or build commands outside of a module or with module mode disabled...

Information Disclosure

jenkins-2-plugins is vulnerable to information disclosure. The vulnerability exists as low-privilege users can access Jenkins controller environment variables...

Directory Traversal

flink-runtime in vulnerable to Directory Traversal. An attacker is able to read any file accessible by the JobManager process on the local filesystem of the JobManager through the RES interface of the JobManager process...

Denial Of Service (DoS)

github.com/golang/text is vulnerable to Denial Of Service DoS. A buffer overflow vulnerability in language.ParseAcceptLanguage allows an attacker to crash the application as the resize Range is indexed in an insecure manner...

Use After Free

chromium, sid is vulnerable to Use after free in printing in Google Chrome. It allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

Denial Of Service (DoS)

crypto/ssh in github.com/golang/go is vulnerable to Denial Of Service DoS. The vulnerability is possible because of a nil pointer dereference in the component...

Denial Of Service (DoS)

Qemu is vulnerable to denial of service. The vulnerability exist because of an infinite loop via an RX descriptor with a NULL buffer address...

Arbitrary Code Injection

Apache SpamAssassin is vulnerable to arbitrary code injection. A local user is able to inject arbitrary code in the meta rule syntax...

Arbitrary Code Execution

imagemagick is vulnerable to arbitrary code execution. A heap-based buffer overflow in WriteOnePNGImage in coders/png.c allows an attacker to execute arbitrary code via a malicious file...

Remote Code Execution (RCE)

Dropbear is vulnerable to remote code execution. The vulnerability existed because of a double free in cleanup of TCP listeners when the -a option is enabled...

Denial Of Service (DoS)

Linux kernel is vulnerable to denial of service. Local attackers are able to inject conntrack netlink configuration to overflow a local buffer and cause a crash in ctnetlinkparsetuplefilter in net/netfilter/nfconntracknetlink.c...

Denial Of Service (DoS)

nss is vulnerable to denial of service DoS. The vulnerability exists through the way NSS handled CCS ChangeCipherSpec messages in TLS 1.3...

Privilege Escalation

cephx is vulnerable to privilege escalation attacks. This is because cephx authentication protocol does not verify ceph clients correctly. An attacker who has access to the ceph cluster network is able to sniff packets on the network...

Denial Of Service (DoS)

oniguruma is vulnerable to denial of service DoS. The vulnerability exists through a heap-based buffer overflow in strlowercasematch in regexec.c...

Information Disclosure

php is vulnerable to information disclosure. The vulnerability exists as the DirectoryIterator class accepts filenames with embedded \0 byte and treats them as terminating at that byte...

PHAR Unserialization

pear/archivetar is vulnerable to PHAR unserialization. The vulnerability exists due to the improper validation of filename that allows a filename that starts with PHAR:// to be executed...

Open Redirection

werkzeug is vulnerable to open redirection. An attacker is able to redirect a user to a malicious site via double slashes in the URL...

Arbitrary Code Execution

spamassassin is vulnerable to arbitrary code execution. An attacker can send malicious configuration files to run system commands without any output or errors...

Information Disclosure

kernel is vulnerable to information disclosure.It incorrectly writes to the /proc/sys/vm/cmmtimeout file.This flaw allows to local user see the kernel stack information leak on s390/s390x...