38536 matches found
Denial Of Service (DoS)
kernel is vulnerable to denial of service. A use-after-free in nttyreceivebufcommon allows an attacker to crash the kernel and potentially obtain confidential information...
Information Disclosure
kernel is vulnerable to information disclosure. The vulnerability exists in net bluetooth when processing certain AMP packets...
Information Disclosure
apache tomcat is vulnerable to information disclosure. The HTTP headers within a request can potentially be included in a subsequent request and reveal confidential information, when the agreed maximum number of concurrent streams for a connection is exceeded...
Cross-site Scripting (XSS)
phpmyadmin is vulnerable to cross-site scripting XSS. Failure to validate the requestparams whereclause allows an attacker inject and execute arbitrary Javascript in a user's browser by sending a link to the victim containing the malicious JavaScript via the transformation feature...
Arbitrary Code Execution
kernel is vulnerable to arbitrary code execution. The vulnerability exists through a use after free caused by a race condition in smptasktimedout and smptaskdone in drivers/scsi/libsas/sasexpander.c which allows an attacker to execute arbitrary codes...
Out-of-bounds (OOB) Read/Write
OpenEXR is vulnerable to out-of-bounds read/write. It is possible via std::vector out-of-bounds read and write in ImfTileOffsets.cpp...
Cross-site Scripting (XSS)
firefox is vulnerable to cross-site scripting XSS. The vulnerability exists when pasting a tag from the clipboard into a rich text editor, and the CSS sanitizer does not escape characters, and when a webpage subsequently copies the node's innerHTML, and assigns it to another innerHTML...
Arbitrary Code Execution
graphicsmagick is vulnerable to arbitrary code execution. The vulnerability exists through a NULL pointer dereference in the WritePCLImage function in coders/pcl.c during writes of monochrome images...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. The ifsdio.c module does not validate the allocworkqueue return value, resulting in a NULL pointer dereference causing a crash...
Arbitrary Code Execution
ruby is vulnerable to arbitrary code execution. An attacker is able to inject code in the first argument to the command argument to Shell or Shelltest in lib/shell.rb...
Denial Of Service (DoS)
openjpeg is vulnerable to denial of service. A use-after-free bug occurs in jp2/opjdecompress.c when there is a mix of valid and invalid files in a directory operated on by the decompressor...
Regular Expression Denial Of Service (ReDoS)
ua-parser-js is vulnerable to regular expression denial of service. A remote attacker is able to cause a denial of service condition by submitting a malicious string that when parsed via the Redmi and Mi Pad regexes, would result in excessive resource consumption...
Man-in-the-Middle (MitM)
activemq-broker is vulnerable to man-in-the-middleMitM attack. It binds the server to jmxrmi entry after creating JMX RMI registry using LocateRegistry.createRegistry, leading to the connection to the registry without authentication and allowing rebinding of jmxrmi to any other entity. Therefore,...
XML External Entity (XXE)
mpxj is vulnerable to XML external entity attacks. The XMLFilter is configured with external DTDs by default, allowing an attacker to perform XXE attacks to access system files or perform requests on behalf of the server...
Denial Of Service (DoS)
apache is vulnerable to denial of service DoS. The vulnerability exists as a specially crafted value for the 'Cache-Digest' header in a HTTP/2 request would result in a crash when the server actually tries to HTTP/2 PUSH a resource afterwards. Configuring the HTTP/2 feature via "H2Push off" will...
Arbitrary Code Execution
webkit2gtk is vulnerable to arbitrary code execution. The vulnerability exists as a logic issue was addressed with improved restrictions...
Denial Of Service (DoS)
SQLite is vulnerable to denial of service. An attacker is able to cause a denial of service segmentation fault condition via a malicious window-function query due to a mishandling during the AggInfo object's initialization...
Information Disclosure
openjdk is vulnerable to information disclosure. HostnameChecker does not ensure X.509 certificate names are in normalized form, potentially resulting in an unauthorized read access...
Denial Of Service (DoS)
unbound is vulnerable to Denial of Service DoS. The attack exists because of amplification of an incoming query into a large number of queries directed to a target...
Arbitrary Code Execution
commons-configuration2 is vulnerable to arbitrary code execution. The package uses a third-party library that, by default, allows the instantiation of arbitrary classes to parse if the YAML contains special statements. This allows an attacker to execute arbitrary code on the host application if t...
Cross-Site Scripting (XSS)
github.com/grafana/grafana is vulnerable to cross-site scripting XSS. A remote attacker is able to inject and execute arbitrary Javascript in a user's browser via the OpenTSDB datasource...
Denial Of Service (DoS)
perl is vulnerable to denial of service DoS. The vulnerability exists as buffer overflow in the SgrokbslashN function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 allows remote attackers to disclose sensitive information or cause a denial of service application crash via ...
Out-of-Bound Reads
libfreerdp.so is vulnerable to Out-of-Bound Reads. The vulnerability exists because it does not properly perform the data boundary check of updatereadbitmapdata, leaking the memory to an image buffer reflecting the result on screen as colour...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists as a NULL pointer dereference in drivers/net/wireless/ath/ath10k/usb.c leads to a crash...
Missing HTTP Security Headers
keycloak does not contain security headers in its server responses. The lack of these headers does not directly lead to a vulnerability, however it reduces the restrictions of an attacker and aids them in their efforts in the event of a successful exploit of a web vulnerability...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists as a flaw in the Xen hypervisor IOMMU error handling implementation could allow a privileged guest user, within a guest operating system that has direct control of a PCI device, to cause performance degradation on the host an...
Arbitrary Code Execution
ghostscript is vulnerable to arbitrary code execution. The vulnerability exists as it was found that Ghostscript always tried to read Ghostscript system initialization files from the current working directory before checking other directories, even if a search path that did not contain the curren...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists as a flaw was found in the way the Linux kernel handled fragmented IPv6 UDP datagrams over the bridge with UDP Fragmentation Offload UFO functionality on. A remote attacker could use this flaw to cause a denial of service...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists as a flaw was found in the b43 driver in the Linux kernel. If a system had an active wireless interface that uses the b43 driver, an attacker able to send a specially-crafted frame to that interface could cause a denial of...
Denial Of Service (DoS)
openssl is vulnerable to denial of service. It was discovered that OpenSSL did not limit the number of TLS/SSL handshake restarts required to support Server Gated Cryptography. A remote attacker could use this flaw to make a TLS/SSL server using OpenSSL consume an excessive amount of CPU by...
Denial Of Service (DoS)
Mozilla Thunderbird is vulnerable to Denial Of Service DoS. A flaw was found in the way Thunderbird displayed multiple marquee elements. A malformed HTML mail message could cause Thunderbird to execute arbitrary code with the privileges of the user running Thunderbird...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. A NULL pointer dereference flaw was found in the Generic Receive Offload GRO functionality in the Linux kernel's networking implementation. If both GRO and promiscuous mode were enabled on an interface in a virtual LAN VLAN, it could result in a denial o...
Access Control Bypass
kernel is vulnerable to access control bypass. A missing security check in the Linux kernel's implementation of the installspecialmapping function could allow a local, unprivileged user to bypass the mmapminaddr protection mechanism...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists as a flaw was found in fixuppagefault in the Xen hypervisor implementation. If a 64-bit para-virtualized guest accessed a certain area of memory, it could cause a denial of service on the host system running the Xen hyperviso...
Information Disclosure
kernel is vulnerable to information disclosure. Missing initialization flaws in the Linux kernel could lead to information leaks...
Information Disclosure
kernel is vulnerable to information disclosure. Missing initialization flaws in the Linux kernel could lead to information leaks...
Privilege Escalation
firefox is vulnerable to privilege escalation. The vulnerability exists as a website containing malicious JavaScript could cause Firefox to execute that JavaScript with the privileges of the user running Firefox...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. A flaw was found in the Linux kernel's CPU time clocks implementation for the POSIX clock interface. A local, unprivileged user could use this flaw to cause a denial of service...
Same-Origin Policy Bypass
firefox is vulnerable to same-origin policy bypass. An attacker could create a malicious web page that, when viewed by a victim, could steal private data from a different website the victim had loaded with Firefox...
Remote Code Execution (RCE)
PostgreSQL is vulnerable to remote code execution RCE. Due to a flaw found in the way PostgreSQL enforced permission checks on scripts written in PL/Tcl, if the PL/Tcl procedural language was registered on a particular database, an authenticated database user running a specially-crafted PL/Tcl...
Information Disclosure
kernel is vulnerable to information disclosure. A flaw was found in the handling of the SWAPEXT IOCTL in the Linux kernel XFS file system implementation. A local user could use this flaw to read write-only files, that they do not own, on an XFS file system. This could lead to unintended informati...
Privilege Escalation
java is vulnerable to privilege escalation. An unspecified vulnerability allows an attacker to affect confidentiality, integrity and availability of the system via unknown vectors...
Denial Of Service (DoS)
openldap is vulnerable to denial of service DoS. The vulnerability exists as an authenticated user with privileges to perform modrdn operations could use these flaws to crash the slapd daemon via specially-crafted modrdn requests...
Use-after-free
The kernel is vulnerable to use-after-free. Due to a flaw found in the tcprcvstateprocess function in the Linux kernel TCP/IP protocol suite implementation, if a system using IPv6 had the IPV6RECVPKTINFO option set on a listening socket, a remote attacker could send an IPv6 packet to that system,...
Information Disclosure
jboss AS web console is vulnerable to information disclosure. Unauthenticated access to the JBoss Application Server Web Console /web-console is blocked by default. However, it was found that this block was incomplete, and only blocked GET and POST HTTP verbs. A remote attacker could use this fla...
Denial Of Service (DoS)
SeaMonkey is vulnerable to Denial Of Service DoS. Due to the flaw found in the processing of malformed web content, a web page containing malicious content could cause SeaMonkey to crash or, potentially, execute arbitrary code with the privileges of the user running SeaMonkey...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists as a NULL pointer dereference flaw in the NFSv4 implementation. Several NFSv4 file locking functions failed to check whether a file had been opened on the server before performing locking operations on it...
Information Disclosure
kernel is vulnerable to information disclosure. The padding data in several core network structures was not initialized properly before being sent to user-space, possibly leading to information leaks...
Cross-site Scripting (XSS)
squirrelmail is vulnerable to cross-site scripting XSS. The vulnerability exists as it was discovered that SquirrelMail did not properly sanitize Cascading Style Sheets CSS directives used in HTML mail. A remote attacker could send a specially-crafted email that could place mail content above...
Privilege Escalation
kernel is vulnerable to privilege escalation. The vulnerability exists as a flaw was found in the NFSv4 implementation. The kernel would do an unnecessary permission check after creating a file. This check would usually fail and leave the file with the permission bits set to random values...