Denial Of Service (DoS)

sqlite3 is vulnerable to denial of service DoS. The vulnerability exists as the WITH stack continues to unwind even after a parsing error in selectExpander in select.c...

Arbitrry Code Execution

BusyBox is vulnerable to arbitrary code execution. A buffer overflow vulnerability in Busybox wget allows an attacker to execute arbitrary code on the host OS...

Arbitrary Code Execution

GraphicsMagick is vulnerable to arbitrary code execution. A heap-based buffer over-read in ReadOneJNGImage in coders/png.c allows an attacker to execute arbitrary code on the host OS...

Denial Of Service (DoS)

openjpeg is vulnerable to denial of service. A use-after-free bug occurs in jp2/opjdecompress.c when there is a mix of valid and invalid files in a directory operated on by the decompressor...

XML External Entity (XXE)

mpxj is vulnerable to XML external entity attacks. The XMLFilter is configured with external DTDs by default, allowing an attacker to perform XXE attacks to access system files or perform requests on behalf of the server...

Denial Of Service (DoS)

chrony is vulnerable to denial of service DoS. The vulnerability exists as a flaw was found in chrony versions before 3.5.1 when creating the PID file under the /var/run/chrony folder. The file is created during chronyd startup while still running as the root user, and when it's opened for writin...

Denial Of Service (DoS)

mysql is vulnerable to denial of service DoS. The vulnerability exists in Server Logging...

SQL Injection

hibernate-core is vulnerable to SQL injection. The vulnerability exists in Hibernate ORM...

Amplification Attacks

PowerDNS Recursor is vulnerable toamplification attacks. It does not sufficiently defend against amplification attacks. An issue in the DNS protocol has been found that allow malicious parties to use recursive DNS services to attack third party authoritative name servers. The attack uses a crafte...

Arbitrary Code Execution

firefox is vulnerable to arbitrary code execution. A type-confusion bug in the JIT optiomizations involving the Javascript arguments object could confuse later optimization and result in arbitrary code execution...

Information Disclosure

kernel is vulnerable to information disclosure. A flaw was found in the Linux kernels implementation of IBPB Indirect Branch Prediction Barrier. The IBPB mitigation will be disabled when STIBP is not available or when Enhanced Indirect Branch Restricted Speculation IBRS is available...

Arbitrary Code Execution

kernel is vulnerable to arbitrary code execution. The vulnerability exists through a use-after-free in block/bfq-iosched.c related to bfqidleslicetimerbody...

Remote Code Execution (RCE)

Microsoft Chakracore is vulnerable to remote code execution RCE. It does not properly handle the JIT bails out when there is an object marked as temporary during an implicit call, allowing objects stored on the stack to be used outside of the function during the DeadStore pass of GlobOpt...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. A NULL pointer dereference in drivers/net/wireless/intel/iwlwifi/pcie/trans.c allow an attacker to crash the system...

Privilege Escalation

undertow is vulnerable to privilege escalation. The vulnerability exists through invalid HTTP request with large chunk size...

Unauthorized Access

Roundcube Webmail is vulnerable to unauthorized access. An attacker can access arbitrary files on the host's filesystem, including configuration files due to a flaw related to file-based attachment plugins and task=settings&action=upload-display&from=timezone requests...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. A memory leak when idralloc fails in genlregisterfamily in net/netlink/genetlink.c allows an attacker to crash the system...

Denial Of Service (DoS)

openjdk is vulnerable to regex denial of service. A regular expression DoS in Scanner allows an attacker to crash the application...

Insecure Password Reset Mechanism

wordpress uses an insecure password reset mechanism. A user's password reset link does not become invalidated upon a successful password change. This would allow an attacker to reset the user's password again if the password reset link was discovered...

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS. The vulnerability exists as a NULL pointer dereference in drivers/net/wireless/ath/ath10k/usb.c leads to a crash...

Information Disclosure

tcpdump is vulnerable to information disclosure. The vulnerability exists through a stack-based buffer over-read in print-hncp.c:printprefix via crafted pcap...

Denial Of Service (DoS)

exiv2 is vulnerable to a denial of service. The vulnerability exists due to a heap-based buffer overflow in Exiv2::d2Data in types.cpp which allows an attacker to crash the application via malicious input...

Arbitrary Code Execution

firefoxi s vulnerable to arbitrary code execution. The vulnerability in Sanitiser for OpenType OTS, used by Firefox to help prevent potential exploits in malformed OpenType fonts. A web page containing malicious content could cause Firefox to crash or, under certain conditions, possibly execute...

CRL Validation Bypass

OpenSSL is vulnerable to CRL validation bypass. An uninitialized variable use flaw was found in OpenSSL. This flaw could cause anapplication using the OpenSSL Certificate Revocation List CRL checking functionality to incorrectly accept a CRL that has a nextUpdate date in the past...

Denial Of Service (DoS)

pidgin is vulnerable to denial of service. An input sanitization flaw was found in the way the AOL Open System for Communication in Realtime OSCAR protocol plug-in in Pidgin, used by the AOL ICQ and AIM instant messaging systems, escaped certain UTF-8 characters. A remote attacker could use this...

Privilege Escalation

qemu-kvm is vulnerable to privilege escalation. It was found that qemu-kvm did not properly drop supplemental group privileges when the root user started guests from the command line "/usr/libexec/qemu-kvm" with the "-runas" option. A qemu-kvm process started this way could use this flaw to gain...

Arbitrary Code Execution

openoffice.org is vulnerable to arbitrary code execution. The vulnerability exists as a heap-based buffer overflow flaw was found in the way OpenOffice.org parsed certain TARGA Truevision TGA files. An attacker could use this flaw to create a specially-crafted TARGA file. If a document containing...

Arbitrary Code Execution

openoffice.org is vulnerable to arbitrary code execution. The vulnerability exists as a flaw was found in the script that launches OpenOffice.org. In some situations, a "." character could be included in the LDLIBRARYPATH variable, allowing a local attacker to execute arbitrary code with the...

Arbitrary Code Execution

openoffice.org is vulnerable to arbitrary code execution. The vulnerability exists as a heap-based buffer overflow flaw and an array index error were found in the way OpenOffice.org parsed certain Microsoft Office Word documents. An attacker could use these flaws to create a specially-crafted...

Arbitrary Code Execution

gimp is vulnerable to arbitrary code execution. A stack-based buffer overflow flaw was found in the GIMP's Lightning, Sphere Designer, and Gfig image filters. An attacker could create a specially-crafted Lightning, Sphere Designer, or Gfig filter configuration file that, when opened, could cause...

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS. The vulnerability exists as a heap overflow flaw in the Linux kernel's EFI GUID Partition Table GPT implementation could allow a local attacker to cause a denial of service by mounting a disk that contains specially-crafted partition tables...

Denial Of Service (DoS)

Kernel is vulnerable to denial of service DoS. The attack is possible due to a missing validation of a null-terminated string data structure element in the bnepsockioctl function, allowing a local user to cause an information leak or a denial of service...

Denial Of Service (DoS)

Python is vulnerable to Denial of Service DoS. The attack is possible because of multiple race conditions in smtpd.py in the smtpd module, allowing a remote attackers to cause a denial of service daemon outage by establishing and then immediately closing a TCP connection, leading to the accept...

Arbitrary Code Execution

firefox is vulnerable to arbitrary code execution. A flaw was found in the way Firefox handled malformed JPEG images. A website containing a malicious JPEG image could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox...

Privilege Escalation

firefox is vulnerable to privilege escalation. The vulnerability exists as a website containing malicious JavaScript could cause Firefox to execute that JavaScript with the privileges of the user running Firefox...

Arbitrary Code Execution

webkitgtk is vulnerable to arbitrary code execution. Multiple memory corruption flaws were found in WebKit. Malicious web content could cause an application using WebKitGTK+ to crash or, potentially, execute arbitrary code with the privileges of the user running the application...

Privilege Escalation

java-1.6.0-ibm is vulnerable to privilege escalation. The vulnerability exists in the IBM Java 2 Runtime Environment...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. An integer overflow flaw was found in the extent range checking code in the Linux kernel's ext4 file system implementation. A local, unprivileged user with write access to an ext4-mounted file system could trigger this flaw by writing to a file at a very...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. A missing integer overflow check in sndctlnew in the Linux kernel's sound subsystem could allow a local, unprivileged user on a 32-bit system to cause a denial of service or escalate their privileges...

Arbitrary Code Execution

wireshark is vulnerable to arbitrary code execution. The vulnerability exists as multiple buffer overflow flaws were found in the Wireshark SigComp Universal Decompressor Virtual Machine UDVM dissector. If Wireshark read a malformed packet off a network or opened a malicious dump file, it could...

Arbitary Code Execution

krb5 is vulnerable to arbitrary code execution. Multiple integer underflow flaws, leading to heap-based corruption, were found in the way the MIT Kerberos Key Distribution Center KDC decrypted ciphertexts encrypted with the Advanced Encryption Standard AES and ARCFOUR RC4 encryption algorithms. I...

Information Leakage

The kernel packages is vulnerable to an information leakage. A flaw was found in the printfatalsignal implementation in the Linux kernel. When "/proc/sys/kernel/print-fatal-signals" is set to 1 the default value is 0, memory that is reachable by the kernel could be leaked to user-space. This issu...

Denial Of Service (DoS)

libpng is vulnerable to denial of service DoS. The vulnerability exists as a memory leak flaw was found in the way applications using the libpng library decoded PNG images that use the Physical Scale sCAL extension. An attacker could create a specially-crafted PNG image that could cause an...

Use-after-free

Mozilla Firefox is vulnerable to Use-after-free. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox...

Buffer Overflows

The kernel package is vulnerable to buffer overflow. The flaw in the hfsbnoderead function in the HFS file system implementation leads to a denial of service if a user browsed a specially-crafted HFS file system, for example, by running "ls"...

Denial Of Service (DoS)

Mozilla Firefox is vulnerable to Denial of Service DoS. Due to flaws found in the processing of malformed web content, a web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code as the user running Firefox...

Arbitrary Code Execution

openoffice.org is vulnerable to arbitrary code execution. An integer underflow flaw and a boundary error flaw, both possibly leading to a heap-based buffer overflow, were found in the way OpenOffice.org parses certain records in Microsoft Word documents. An attacker could create a specially-craft...

Denial Of Service (DoS)

The kernel package is vulnerable to denial of service DoS. The possibility of a timeout value overflow was found in the Linux kernel high-resolution timers functionality, hrtimers. This could allow a local, unprivileged user to execute arbitrary code, or cause a denial of service kernel panic...

Integer Overflow

The kernel-rt is vulnerable to Integer Overflow. A flaw was found in the Intel PRO/1000 network driver in the Linux kernel. Frames with sizes near the MTU of an interface may be split across multiple hardware receive descriptors. Receipt of such a frame could leak through a validation check,...

Denial Of Service (DoS)

libdbs-pg-perl is vulnerable to denial of service. A memory leak flaw was found in the perl-DBD-Pg function performing the de-quoting of BYTEA type values acquired from a database. An attacker able to cause an application using perl-DBD-Pg to perform a large number of SQL queries returning BYTEA...