Privilege Escalation

kernel is vulnerable to privilege escalation. The vulnerability exists as the absence of a protection mechanism when attempting to access a critical section of code, as well as a race condition, have been found in the Linux kernel file system event notifier, dnotify. This could allow a local...

Arbitrary Code Execution

firefox is vulnerable to arbitrary code execution. The vulnerability exists as several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code as the user running Firefox...

Denial Of Service (DoS)

net-snmp is vulnerable to denial of service. A denial-of-service flaw was found in the way Net-SNMP processes SNMP GETBULK requests. A remote attacker who issued a specially-crafted request could cause the snmpd server to crash...

Arbitrary Code Execution

firefox is vulnerable to arbitrary code execution. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code as the user running Firefox...

Arbitrary Code Execution

firefox is vulnerable to arbitrary code execution. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code as the user running Firefox...

Arbitrary Code Execution

seamonkey is vulnerable to arbitrary code execution. Several flaws were found in the processing of some malformed web content. A web page containing such malicious content could cause SeaMonkey to crash or, potentially, execute arbitrary code as the user running SeaMonkey...

Cross-Site Scripting (XSS)

seamonkey is vulnerable to cross-site scripting XSS. Several flaws were found in the display of malformed web content. A web page containing specially-crafted content could, potentially, trick a SeaMonkey user into surrendering sensitive information...

Arbitrary Code Execution

seamonkey is vulnerable to arbitrary code execution. The vulnerability exists as a webpage containing malicious content could cause SeaMonkey to crash, or potentially execute arbitrary code as the user running SeaMonkey...

Arbitrary Code Execution

kernel is vulnerable to arbitrary code execution. A flaw was found in the IA32 system call emulation provided on AMD64 and Intel 64 platforms. An improperly validated 64-bit value could be stored in the %RAX register, which could trigger an out-of-bounds system call table access. An untrusted loc...

Segmentation Fault

qt5-qtsvg is vulnerable to segmentation fault. The vulnerability is possible because of an Invalid parsing of malformed url reference resulting in a denial of service...

Denial Of Service (DoS)

squid is vulnerable to denial of service. The vulnerability exists due to incorrect pointer handling when processing ESI Responses which allows an attacker to crash the application via malicious input...

Remote Code Execution (RCE)

FasterXML jackson-databind is vulnerable to deserialization of untrusted data. There is a polymorphic typing issue because there are more than one association gadget types related to org.aoju.bus.proxy.provider.remoting.RmiProvider aka bus-proxy implementation by default...

Arbitrary Code Execution

thunderbird is vulnerable to arbitrary code execution. The vulnerability exists as the Message ID calculation was based on uninitialized data...

Use After Free (UAF)

github.com/proglottis/gpgme is vulnerable to use-after-free. The attack is possible because it allows malicious use for container image pulls by Docker or CRI-O, leading to an application crash or arbitrary code execution during GPG signature verification...

Authorization Bypass

node is vulnerable to authorization bypass. Trailing OWS from header values are not stripped, potentially allowing a remote attacker to bypass access controls...

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS. The vulnerability exists due to a use-after-free error in fs/xfs/xfssuper.c...

Denial Of Service (DoS)

Mozilla firefox is vulnerable to denial of service DoS. The vulnerability exists due to ,emory safety bugs fixed in Firefox 71 and Firefox ESR 68.3...

Authorization Bypass

infinispan is vulnerable to authorization bypass. The vulnerability exists as the invokeAccessibly method in the ReflectionUtil class allows the invokation of any private methods with Infinispan's privileges...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. Due to the way found in which Intel CPUs handle inconsistency between virtual to physical memory address translations in CPU's local cache and system software's Paging structure entries, a privileged guest user may use this flaw to induce a hardware...

Arbitrary Code Execution

qt5-qtbase is vulnerable to arbitrary code execution. The vulnerability exists through a QImage allocation failure in qgifhandler when parsing a malformed GIF...

Server-Side Request Forgery (SSRF)

wordpress is vulnerable to server-side request forgery SSRF. The URL validation does not consider the interpretation of a name as a series of hex characters, allowing a remote attacker to bypass the URL validation using hex values in the URL...

Authentication Bypass

github.com/goharbor/harbor is vulnerable to authentication bypass. The vulnerability exists as an admin is able to create a robot account in another project through the Harbor API, leading to unauthorized access to push/pull/modify images in the target project...

Denial Of Service (DoS)

openjdk is vulnerable to denial of service. An unexpected exception thrown by XPathParser processing malicious XPath expression allows an attacker to crash the application...

Use-after-Free

Kernel is vulnerable to use-after-free in blkdrainqueue function in block/blk-core.c...

Remote Code Execution (RCE)

jackson-databind is vulnerable to remote code execution. The vulnerability exists as it does not stop classes from the commons-dbcp package from being used as deserialization gadgets...

Denial Of Service (DoS)

nodejs is vulnerable to denial of service. A remote attacker is able to crash the application by flooding the server with empty frames which results in excessive resource consumption...

HTTP Request Smuggling

Netty is vulnerable to HTTP request smuggling. The attack is possible because it fails to correctly handle white spaces in HTTP header names...

Arbitrary Code Execution

libcurl.so is vulnerable to arbitrary code execution. A heap-based buffer overflow in the function tftpreceivepacket that receives data from a TFTP server could potentially allow an attacker to execute arbitrary code by sending an OACK without the BLKSIZE option, when a BLKSIZE smaller than 512...

Denial Of Service (Dos)

libexpat.so is vulnerable to denial of service. A heap-based buffer overflow occurs when an attacker sends a malicious XML which switches the DTD parsing to document parsing immaturely, leading to repeated calls of XMLGetCurrentLineNumber or XMLGetCurrentColumnNumber function that results in an...

Denial Of Service (DoS)

qemu is vulnerable to denial of service. A NULL pointer dereference while releasing spice resources allows an attacker to crash the application...

SQL Injection

GORM is vulnerable to sql injection attacks. The attacks are possible because the library does not properly check for incomplete parentheses, allowing remote attackers to inject and execute arbitrary SQL...

Information Disclosure

php is vulnerable to information disclosure. An uninitialized read in the function exifprocessIFDinMAKERNOTE due to mishandling of the datalen variable allows an attacker to read past allocated buffer and potentially obtain confidential information...

Arbitrary Code Execution

php is vulnerable to arbitrary code execution. A heap-based buffer over-read in the PHAR reading functions allows an attacker to execute arbitrary code on the system...

Denial Of Service (Dos)

binutils is vulnerable to denial of service. A NULL pointer dereference in the function workstuffcopytofrom in cplus-dem.c which can occur during execution of objdump allows an attacker to crash the application...

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS. The vulnerability exists through a use-after-free issue in ucmaleavemulticast in drivers/infiniband/core/ucma.c...

Denial Of Service (DoS)

Exiv2 is vulnerable to denial of service DoS. The Exiv2::DataValue::copy in value.cpp causes a null pointer dereference when a malicious input is provided, causing an application crash...

Arbitrary File Write

github.com/containers/libpod is vulnerable to arbitrary file write. The vulnerability exists through a symlink attack where an administrator can copy a file from the container to the host system...

Denial Of Service (DoS)

openjdk is vulnerable to denial of service. It was discovered that the implementation of the Throwable class in the Utilities component of OpenJDK did not sufficiently validate serial stream before deserializing suppressed exceptions. A specially-crafted input could cause a Java application to...

Remote Code Execution (RCE)

Microsoft ChakraCore is vulnerable to remote code execution. This could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user, potentially taking over the system with full user rights...

Denial Of Service (DoS)

imagemagick is vulnerable to denial of service. A use of uninitialized value flaw in the function ReadCUTImage in coders/cut.c allows an attacker to crash the application...

Cross-site Scripting (XSS)

mantisbt is vulnerable to cross-site scripting XSS. The attack exists because the function stringinserthrefs does not check the protocol, allowing an attacker to inject 'javascript://' to execute arbitrary code...

Information Disclosure

firefox/thunderbird is vulnerable to information disclosure. Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImageBitmap method...

Information Disclosure

Linux kernel is vulnerable to information disclosure vulnerability. The vulnerability exists in the procpidstack function in fs/proc/base.c in the Linux kernel. Local attackers could obtain kernel task stack contents that may lead to further attacks...

Denial Of Service (DoS)

Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the RPM packages for Red Hat OpenShift Container Platform 3.11.59. See the following advisory for the container...

Denial Of Service (DoS)

Linux kernel is vulnerable to denial of serviceDoS attacks. A local user could exploit a flaw in the madvisewillneed function in mm/madvise.c to cause application crash by triggering use of MADVISEWILLNEED for a DAX mapping...

Denial Of Service (DoS)

Linux kernel is vulnerable to denial of serviceDoS attacks. This is because Salsa20 encryption algorithm does not correctly handle zero-length inputs. This allows a local attacker to use the AFALG-based skcipher interface to cause a denial of service uninitialized-memory free and kernel crash or...

Denial Of Service (DoS)

Linux kernel is vulnerable to denial of serviceDoS attacks. This is because getnetnsbyid function in net/core/netnamespace.c does not check for the net::count value after it has found a peer network in netnsids idr. This could allow an unprivileged local user to induce kernel memory corruption on...

Information Disclosure

Linux kernel is vulnerable to information disclosure vulnerability. This is because the movepages system call in mm/migrate.c in the Linux kernel doesn't check the effective uid of the target process. A local attacker could learn the memory layout of a setuid executable allowing mitigation of ASL...

Denial Of Service (DoS)

Linux kernel is vulnerable to denial of service attacks. A local, authenticated attacker could exploit the flawed Keyring Handler component and create keyrings for other users via keyctl commands...

Denial Of Service (DoS)

Linux kernel is vulnerable to denial of service attacks. A local authenticated attacker is able exhaust kernel memory via a flaw in the keyctlsetreqkeykeyring function leading to denial of service conditions...