39640 matches found
Access Control Bypass
java is vulnerable to access control bypass. Javascript loaded from localhost is not restricted from connecting to other ports on the system, allowing access restrictions bypass via LiveConnect...
Information Disclosure
kernel is vulnerable to information disclosure. The vulnerability exists as a flaw was found in the AGPGART driver. The agpgenericallocpage and agpgenericallocpages functions did not zero out the memory pages they allocate, which may later be available to user-space processes. This flaw could...
Arbitrary Code Execution
freetype is vulnerable to arbitrary code execution. If a user loaded a carefully-crafted font file with an application linked against FreeType, it could cause the application to crash or, possibly, execute arbitrary code with the privileges of the user running the application...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists if a memory leak in keyctl handling. A local user could use this flaw to deplete kernel memory, eventually leading to a denial of service...
Arbitrary Code Execution
thunderbird is vulnerable to arbitrary code execution. Several flaws were found in the processing of malformed HTML mail content. An HTML mail message containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code as the user running Thunderbird...
Denial Of Service (DoS)
cups is vulnerable to denial of service DoS. The vulnerability exists as a null pointer dereference flaw was found in the way CUPS handled subscriptions for printing job completion notifications. A local user could use this flaw to crash the CUPS daemon by submitting a large number of printing jo...
Denial Of Service (DoS)
httpd is vulnerable to denial of service DoS. The vulnerability exists as a bug was found in the Apache HTTP Server modcache module. On sites where caching is enabled, a remote attacker could send a carefully crafted request that would cause the Apache child process handling that request to crash...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. An out-of-bounds array access in xfrmpolicyunlink allows an attacker to crash the OS due to the way directory validation are handled...
Cross-Site Scripting (XSS)
deltaspike is vulnerable to cross-site scripting XSS. A remote attacker is able to inject and execute arbitrary Javascript in a user's browser via the dswid parameter and the URL...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists through a Count overflow in FUSE request leading to use-after-free issues...
Remote Code Execution (RCE)
gulp-tape is susceptible to remote code execution RCE. The vulnerability exists as the flush function accepts the tapeProcess argument directly from the input using tapeBinaryFilepath without any sanitization...
Prototype Pollution
dojox is vulnerable to prototype pollution. A attacker is able to inject arbitrary Javascript construct prototype to overwrite or pollute base Objects, potentially resulting in arbitrary code execution...
HTTP Response Splitting
puma is vulnerable to HTTP response splitting. The attack exist because it does not properly handle the CRLF carriage feed or line return characters injection in early hints response header, allowing an attacker to inject CRLF to end the the HTTP response header and manipulate with malicious...
Unauthorized File Overwrite
github.com/containers/libpod is vulnerable to unauthorised file overwritten. The library fails to check if the volume is empty before copying even if the containers are mounted as read-only, allowing the existing files in the volumes to be overwritten...
Cross-Site Scripting (XSS)
cxf-rt-transports-http is vulnerable to cross-site scripting XSS. A remote attacker is able to inject arbitrary Javascript into a user's browser via an endpoint addresses and URL...
Denial Of Service (DoS)
OpenJDK is vulnerable to denial of service DoS. The vulnerability exists through excessive memory usage in OID processing in X.509 certificate parsing...
Denial Of Service (DoS)
ASP.NET Core is vulnerable to denial of service. Improper handling of web requests allows a remote attacker to cause a denial of service condition in the application via vectors related to SignalR...
Session Fixation
Apache Tomcat Catalina is vulnerable to session fixation attack. The vulnerability exists because there is a flaw in checking whether an authentication information authType and principal are cached for a session and the validity of a session token in request when cache==false, allowing an attacke...
Denial Of Service (DoS)
Mozilla firefox is vulnerable to denial of service DoS. The vulnerability exists through a use-after-free when retrieving a document in antitracking...
Information Disclosure
kernel is vulnerable to information disclosure. Due to the way Intel CPUs handle speculative execution of instructions when the TSX Asynchronous Abort TAA error occur, a local authenticated attacker with the ability to monitor execution times could infer the TSX memory state by comparing abort...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. Intel GPU results in a denial of service condition while accessing MMIO in lower power state...
Denial Of Serivce (DoS)
Mozilla Firefox is vulnerable to denial of service DoS. It causes a Stack buffer overflow in HKDF output...
OS Command Injection
patch is vulnerable to OS command injection. An attacker is able to execute arbitrary OS commands through patch using a malicious patch file containing ed style diff payload with shell metacharacters...
Arbitrary Code Execution
php is vulnerable to arbitrary code execution. A heap-based buffer over-read in the mbstring regular expression functions allows an attacker to execute arbitrary code on the system...
Denial Of Service (Dos)
php is vulnerable to denial of service. An out-of-bounds read due to integer overflow in the function iconvmimedecodeheaders can lead to information disclosure or allow an attacker to crash the application...
Denial Of Service (Dos)
patch is vulnerable to denial of service. An out-of-bounds access in the function pchwriteline in pch.c allows an attacker to crash the application using a malicious file...
Unauthorised Access
github.com/kubernetes/kubernetes is vulnerable to unauthorised access to the resources. API server allows a user with access privilege to the custom resources in one namespace to create, view update or delete the cluster-scoped resources...
Improper Permissions For Directory And File Restrictions
glib uses improper permissions for directory and file restrictions. Directories are created using less restrictive permissions for directory and file using gfilemakedirectorywithparents kfsb-dir, NULL, NULL and files using gfilereplacecontents kfsb-file, contents, length, NULL, FALSE,...
Arbitrary Code Execution
libvirt is vulnerable to arbitrary code execution. It was discovered that libvirtd would permit readonly clients to use the virDomainManagedSaveDefineXML API, which would permit them to modify managed save state files. If a managed save had already been created by a privileged user, a local...
Information Disclosure
Undertow Core is vulnerable to information disclosure. Confidential information such as HTTP Authentication for HttpServerExchange object at ERROR level are logged in plain text using UndertowLogger.REQUESTLOGGER.undertowRequestFailedt, exchange by Connectors.executeRootHandler:402...
Authorization Bypass
PolicyKit is vulnerable to authorization bypass attacks. This occurs when authentication is performed by a non-root user to perform an administrative task which may lead to an authentication crash temporarily. A local attacker could use this flaw to gain access to elevated privileges...
Denial Of Service (DoS)
Oracle MySQL is vulnerable to denial of service attacks. A remote authenticated attacker could exploit a flaw in the Storage Engines component to cause denial of service conditions...
Privilege Escalation
Linux kernel is vulnerable to privilege escalation vulnerability. The vulnerability exists in an unknown function of the component Speculative Execution. An attacker could execute and/ read privileged memory by conducting targeted cache side-channel attacks...
Authorization Bypass
Linux kernel is vulnerable to authorization bypass attacks. This is because net/netfilter/nfnetlinkcthelper.c function does not require the CAPNETADMIN capability for new, get, and del operations. This allows local users to bypass intended access restrictions...
Regular Expression Denial-of-Service (DoS)
remarkable is vulnerable to regex denial of service. Malicious users can craft a string inside the CDATA tag to cause the regex function to consume a large amount of system resources that could potentially result in a crash...
Denial Of Service (DOS)
Linux Kernel is vulnerable to denial of service DOS attacks. This is because Linux Kernel running on AMD64 systems will sometimes map the contents of PIE executable, the heap or ld.so to where the stack is mapped allowing attackers to more easily manipulate the stack...
Denial Of Service (DoS)
Apache HTTP Server is vulnerable to denial of serviceDoS attacks. A remote attacker can exploit a flaw in the modauthdigest module of httpd which does not properly check memory allocation failures causing httpd child processes to repeatedly crash if the server used HTTP digest authentication...
Command Injection
Snoopy library is vulnerable to command injection attacks. This allows remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers which may leads to data modification...
Null Pointer Dereference
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The rh-php56 packages provide a recent stable release of PHP with PEAR 1.9.5 and enhanced language features including constant expressions, variadic functions, arguments unpacking, and the interactive debuger. T...
Directory Traversal
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The rh-php56 packages provide a recent stable release of PHP with PEAR 1.9.5 and enhanced language features including constant expressions, variadic functions, arguments unpacking, and the interactive debuger. T...
Denial Of Service (DoS)
Linux kernel is vulnerable to denial of serviceDoS attacks. blkrqmapuseriov function in the Linux kernel's block device implementation does not properly restrict the type of iterator, which could allow a local attacker to read or write to arbitrary kernel memory locations or cause a use-after-fre...
Arbitrary Code Execution
Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...
Arbitrary Code Execution
Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...
Symlink Attack
ABRT Automatic Bug Reporting Tool is a tool to help users to detect defects in applications and to create a bug report with all the information needed by a maintainer to fix it. It uses a plug-in system to extend its functionality. It was found that ABRT was vulnerable to multiple race condition...
Privilege Escalation
The kernel-rt packages contain the Linux kernel, the core of any Linux operating system. It was found that the Linux kernel's implementation of vectored pipe read and write functionality did not take into account the I/O vectors that were already processed when retrying after a failed atomic acce...
Arbitrary File Read And Write
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The php54 packages provide a recent stable release of PHP with the PEAR 1.9.4, APC 3.1.15, and memcache 3.0.8 PECL extensions, and a number of additional utilities. The php54 packages have been upgraded to...
Sandbox Restrictions Bypass
IBM Java SE version 6 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update fixes several vulnerabilities in the IBM Java Runtime Environment and the IBM Java Software Development Kit. Further information about these flaws can be found on the IBM Java...
Denial Of Service (DoS)
mysql is vulnerable to denial of service DoS. The vulnerability exists as remotely authenticated users can affect the availability through Server : InnoDB...
Sensitive Information Disclosure
OpenShift Enterprise by Red Hat is the company's cloud computing Platform-as-a-Service PaaS solution designed for on-premise or private cloud deployments. The following security issues are addressed with this release: An authorization flaw was discovered in Kubernetes; the API server did not...
Spoofable Server
Subversion SVN is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes. The moddavsvn module is used with the Apache HTTP Server to allow access to Subversion...