38790 matches found
Privilege Escalation
rh-mysql80-mysql is vulnerable to privilege escalation. A high privileged attacker with network access via multiple protocols to compromise MySQL server, resulting in unauthorized update, insert or delete access to some of MySQL server accessible data...
Arbitrary Code Execution
nodejs is vulnerable to Arbitrary Code Execution. The vulnerability exists because the IP addresses are not properly handled which allows an attacker to perform DNS rebinding and execute arbitrary code...
Denial Of Service (DoS)
qemu is vulnerable to denial of service. The vulnerability exists due to an integer underflow found in the QEMU VNC server while processing ClientCutText messages in the extended format. A malicious client could use this flaw to make QEMU unresponsive by sending a specially crafted payload messag...
Out-of-bounds Write
libtiff.so is vulnerable to out-of-bound write. The vulnerability exists due to a heap based buffer overflow in uint32t parameter in tifdir.c which allows an attacker to submit a malicious code file into the system and perform out of bound writes...
Authorization Bypass
jenkins-2-plugins is vulnerable to Authorization Bypass. The vulnerability exists because of not encoding the ID of input steps when using it to generate URLs which allows an attacker to specify input step IDs and bypass CSRF protection of any target URL...
Denial Of Service (DoS)
Linux is vulnerable to denial of service.The vulnerability exists in xfrmexpandpolicies in net/xfrm/xfrmpolicy.c that would cause a refcount to be dropped twice resulting in an application crash...
Arbitrary Code Execution
webkitgtk is vulnerable to Arbitrary Code Execution. The vulnerability exists due to a out-of-bounds write issue which allows an attacker to send maliciously crafted web content that may lead to arbitrary code execution...
Command Injection
snyk-go-plugin is vulnerable to command injection. The vulnerability exists in execute function of sub-process.js because shell for child processes is not properly disabled which allows an attacker to run arbitrary commands on the host system...
Remote Code Execution
moodle/moodle is vulnerable to remote code execution. The vulnerability exists in convertconfigdata function of lib.php when restoring backup files which allows an attacker to execute remote codes in the system...
Denial Of Service (DOS)
Consul is vulnerable to authorization denial of service. Due to incorrectly validating JWT characters, an attacker can continually request TLS certificates and ACL tokens. This unnecessary information being stored can result in authorization denial of service...
Memory Leak
bind is vulnerable to memory leak. By spoofing the target resolver with responses that have a malformed EdDSA signature, an attacker can trigger a small memory leak. It is possible to gradually erode available memory to the point where named crashes for lack of resources...
Denial Of Service (DoS)
jettison is vulnerable to Denial Of Service DoS. The vulnerability exists due to the stack overflow in the convertToJSONPrimitive function of DefaultConverter.java, allowing an attacker to cause an application crash by providing malicious input through the parser...
Denial Of Service (DoS)
chrome is vulnerable to denial of service. The vulnerability exists due to a memory corruption in FedCM which allows an attacker to crash the application via malicious input...
Command Injection
moment-timezone is vulnerable to command injection. An attacker can inject and execute the malicious commands using the childprocess exec function as it does not sanitize the input...
Out-of-bounds Write
vim:sid is vulnerable to denial of service. The vulnerability exists due to an out-of-bounds write in GitHub repository...
Remote Code Execution
drupal/core is vulnerable to remote code execution. A remote attacker is able to bypass protections provided in sanitizeName function because the filenames with .htaccess extension are not properly sanitized, which allows the attacker to upload and execute malicious code on the system under attac...
Denial Of Service
libtiff.so is vulnerable to denial of service DoS attacks. A malicious user is able to cause denial of service conditions via a crafted TIFF file through TIFFVGetField function, resulting in an application crash...
Use-After-Free
qemu is vulnerable to use-after-free. The vulnerability exists in USB EHCI controller emulation because EHCI does not verify if the Buffer Pointer overlaps with its MMIO region when it transfers the USB packets which allows an attacker to cause an application crash...
Information Disclosure
opensshkeyparser is vulnerable to information disclosure. The vulnerability exists in readfixedbytes function in pascalstylebytestream.py because the exception message is not properly handled which allows an attacker to gain access to view and modify the length of a raw field value of a key...
Session Fixation
silverstripe/hybridsessions is vulnerable to session fixation. The vulnerability exists because the destroy function of DatabaseStore.php does not properly reset the user session after logging out, allowing an attacker to gain privileges via the client-side cookie...
Information Disclosure
vim is vulnerable to information disclosure. Buffer over-read in the currentquote function allows local attackers to cause information disclosure...
Information Disclosure
kernel is vulnerable to information disclosure. The vulnerability exists due to a userland application can read the contents of the sigpage, which leaks kernel memory contents allowing an attacker to read a process’s memory at a specific offset...
Privilege Escalation
Linux kernel is vulnerable to privilege escalation. The vulnerability exists due to an out of bounds read due to a use after free allowing an attacker to escalate privilege within the system...
Denial Of Service (DoS)
mariadb is vulnerable to denial of service. getsortbytable in MariaDB allows an application crash via certain subquery uses of ORDER BY...
Regular Expression Denial Of Service (ReDoS)
org.apache.tika:tika is vulnerable to regular expression denial of service ReDoS attacks. An attacker is able to cause denial of service conditions to the users who are running the StandardsExtractingContentHandler, due to a insecure regular expression usage in StandardsText class by backtracking...
Privilege Escalation
cups is vulnerable to privilege escalation. The vulnerability exists due to gain elevated privileges which allows an attacker to authenticate to CUPS as root/admin without the 32-byte secret key...
Out-of-bounds Write
Qt is vulnerable to Out-of-bounds Write. The vulnerability exists in QtPrivate::QCommonArrayOps::growAppend which allows an attacker who is able to submit a crafted image file to an application that uses qsvghandler could cause an out-of-bounds write and potential denial of service...
Denial Of Service (DoS)
tensorflow is vulnerable to denial of service. Failure to check the input to tf.rawops.LSTMBlockCell to validate ranks of any of the API call arguments causes a CHECK-failure , triggering a denial of service attack...
Denial Of Service (DoS)
gopkg.in/yaml.v3 is vulnerable to denial of service. The vulnerability exists when the deserializing input data through the unmarshal function of yaml.go, allowing an attacker to crash the application by providing invalid YAML data...
Cross-Site Scripting (XSS)
total.js is vulnerable to stored cross-site scripting. The vulnerability exists in upload function due to lack of sanitization which allows an attacker to execute arbitrary javascript via a javascript embedded PDF file...
Information Disclosure
curl is vulnerable to information disclosure.libcurl wrongly allows cookies to be set for Top Level Domains TLDs if thehost name is provided with a trailing dot.curl can be told to receive and send cookies...
Out-of-bound Reads
linux is vulnerable to out-of bound reads. The vulnerability exists in drivers/usb/gadget/udc/udc-xilinx.c because the endpoint index is not validated and might be manipulated by the host for out-of-array access...
Host Header Injection
craftcms/cms is vulnerable to host header injection. The vulnerability exists due to the lack of validation in the password reset token in processInvalidToken function of UsersController.php, allowing an attacker with valid email addresses or account names to manipulate the password reset...
Denial Of Service (DoS)
github.com/golang/text is vulnerable to Denial Of Service DoS. The vulnerability exists because an incorrectly formatted language tag may cause the parse to panic due to an out of bounds read, resulting in an application crash...
Denial Of Service (DoS)
go:edge is vulnerable to denial of service DoS attacks. A malicious user is able to cause an application crash via a large amount of PEM data...
Denial Of Service (DoS)
golang.org/x/crypto is vulnerable to Denial Of Service DoS. The vulnerability exists in readCipherPacket function which allows an unauthenticated attacker to send an empty plaintext packet to a program linked with golang.org/x/crypto/ssh causing a panic which potentially leads to an application...
Out Of Bound Reads
vhost-vsockis vulnerable to out of bound reads. The vulnerability exists because, case of error, an invalid element was not detached from the virtqueue before freeing its memory, leading to memory leakage and other unexpected results...
Directory Traversal
com.caucho:resin is vulnerable to directory traversal attacks. A remote attackers are able to traverse arbitrary directories and read confidential files via a pathname within an HTTP request...
Path Traversal
studio-42/elfinder is vulnerable to path traversal. The vulnerability exists due to improper handling of absolute file paths in the getFullPathfunction. allowing a remote attacker to access data in the system...
Out-of-Bounds Read
abcm2ps is vulnerable to out of bounds read. The vulnerability exists due to a lack of sanitization in the function calculatebeam at draw.c...
Denial Of Service (DoS)
github.com/istio/istio is vulnerable to Denial Of Service DoS. The vulnerability exists because the library does not properly limit the reads from untrusted inputs, allowing an attacker to crash the application by providing maliciously crafted messages...
Denial Of Service (DoS)
com.liferay.layout.admin.web is vulnerable to denial of service. The vulnerability exists due to improper handle of user privileges in script.jsp file allows a remote attacker to restrict system access to the legitimate users...
Insecure HTTP2 TrustManager
spring-cloud-gateway-server uses an insecure HTTP2 TrustManager. Application with default configuration and no key store or trusted certificates uses an insecure trustmanager factory option when HTTP2 is enabled, allowing the gateway connections to remote services with invalid or custom...
Denial Of Service (DoS)
webkit2gtk edge is vulnerable to denial of service. This allows an attacker to process maliciously crafted web content and arbitrarily execute codes in the system...
Privilege Escalation
libexpat.so is vulnerable to privilege escalation. The vulnerability exists in the namespace-separator Character Handler in the xmlparse.c allowing an unauthorized user to access the system account...
Directory Traversal
firefox is vulnerable to directory traversal. The vulnerability exists due to a Time-of-Check Time-of-Use bug existed in the Maintenance Updater Service that could be abused to grant Users write access to an arbitrary directory. This bug only affects Firefox on Windows. Other operating systems ar...
Denial Of Service (DoS)
github.com/golang/go is vulnerable to Denial Of Service DoS. The vulnerability exists due to uncontrolled memory consumption in SetString function which allows an attacker to crash the application by providing a malicious input...
Denial Of Service (DoS)
tensorflow is vulnerable to denial of service. The vulnerability exists in TensorByteSize function of attrvalueutil.cc because of the check failure in TensorShape which leads to an application crash...
Injection Vulnerability
Python is vulnerable to injection vulnerability. The vulnerability exists due to a lack of sanitization on the URL string parsed into the urlparse method allowing an attacker to inject maliciously crafted URL...
Denial Of Service (DoS)
util-linux is vulnerable to denial of service. The vulnerability exists due to a logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem...