Information Disclosure

opensshkeyparser is vulnerable to information disclosure. The vulnerability exists in readfixedbytes function in pascalstylebytestream.py because the exception message is not properly handled which allows an attacker to gain access to view and modify the length of a raw field value of a key...

Remote Code Execution

ldap-account-manager is vulnerable to remote code execution. An attacker is able to inject the first constructor argument leading to code execution if non-LAM classes are instantiated during object creation...

Remote Code Execution

getgrav/grav is vulnerable to remote code execution. An authenticated remote attacker is able to cause server side template injection via Twig which renders risky functions by default, such as system...

Information Disclosure

guzzlehttp/guzzle is vulnerable to information disclosure. The vulnerability exists in serveral functions in RedirectMiddleware.php because the change in port is not considered a change in origin when sending requests with header files which allows an attacker to gain access to sensitive header...

Arbitrary Code Execution

watools is vulnerable to arbitrary code execution. The vulnerability exists because of a code execution backdoor in all the versions of watools packages available in Pypi which allows an attacker to inject and execute malicious codes...

Information Disclosure

kernel is vulnerable to information disclosure. The vulnerability exists due to a userland application can read the contents of the sigpage, which leaks kernel memory contents allowing an attacker to read a process’s memory at a specific offset...

Information Disclosure

guzzlehttp/guzzle is vulnerable to information disclosure. The vulnerability exists because the modifyRequest function of RedirectMiddleware.php does not properly strip the authorization header or cookie header on a change in host or HTTP downgrade, allowing an attacker to get sensitive informati...

Denial Of Service (DoS)

Apache HTTP Server is vulnerable to denial of service. The vulnerability exists due to a lack of sanitization to the input size allowing an attacker to crash the system via a malicious request to a lua script that calls r:parsebody0...

Buffer Overflow

jhead is vulnerable to buffer overflow. The vulnerability exists due to a Heap-based Buffer Overflow vulnerability exists in jhead via the RemoveSectionType function in jpgfile.c...

Buffer Overflow

vim is vulnerable to buffer overflow. The vulnerability exists due to a lack of validation of the pointer accessing the Heap which allows an attacker to cause an application crash...

Authentication Bypass

github.com/moby/moby is vulnerable to authentication bypass. The vulnerability exists because the default inheritable capabilities for linux container is not empty which allows an unauthorized user to bypass access restrictions...

Improper Input Validation

guzzlehttp/psr7 is vulnerable to improper input validation. The vulnerability exists in the normalizeHeaderValue function in the MessageTrait.php file allowing an attacker to modify the new line character with an untrusted value...

Side-Channel Attacks

hostapd is vulnerable to side channel attack. The vulnerability exists due to cache access patterns...

Use-After-Free

A use-after-free flaw was found in ncirequest in net/nfc/nci/core.c in NFC Controller Interface NCI in the Linux kernel. This flaw could allow a local attacker with user privileges to cause a data race problem while the device is getting removed, leading to a privilege escalation problem...

Denial Of Service (DoS)

libexpat.so is vulnerable to denial of service. An attacker can trigger stack exhaustion in the buildmodel function of xmlparse.c via a large nesting depth in the DTD element, leading to an application crash...

Denial Of Service (DoS)

openexr is vulnerable to denial of service.The vulnerability exists in CompositeDeepScanLine::setFrameBuffer function of ImfCompositeDeepScanLine.cpp due to a heap-based buffer overflow which allows an attacker to crash the application via malicious input...

Remote Code Execution

h2 is vulnerable to remote code execution. The vulnerability exists due to a lack of secure input validation in DatabaseMetaLocal.java , allowing remote authenticated attackers to execute arbitrary code in the server...

Insecure Cryptography

cryptsetup is vulnerable to insecure cryptography. A malicious attacker can modify on-disk metadata to simulate decryption in progress with crashed reencryption step and persistently decrypt part of the LUKS device...

Denial Of Service (DoS)

libgpac is vulnerable to denial of service. The vulnerability exists due to an invalid memory address dereference via the function lsrreadid...

Denial Of Service (DoS)

systemd is vulnerable to denial of service DoS attacks. An uncontrolled recursion in systemd-tmpfiles may lead to denial of service at boot time...

Improper Input Validation

smarty/smarty is vulnerable to improper input validation. The vulnerability exists in smartyinternaltemplateparser.php because the security settings are not properly defined which allows an attacker to the restricted code through dynamic static class...

Denial Of Service (DoS)

protobuf is vulnerable to Denial of Service DoS. The library does not properly handle unknown fields in the UnknownFieldSet function in UnknownFieldSet.java, allowing an attacker to crash the application through many short-lived objects by providing malicious payload...

Insecure Token

jakarta.el is vulnerable to Insecure Token. The vulnerability exists due to a bug in the ELParserTokenManager which enables invalid EL expressions to be evaluated as if they were valid...

Cross-site Scripting (XSS)

webkit2gtk is vulnerable to cross-site scripting. The vulnerability exists due to a logic issue...

Denial Of Service (DoS)

libsepol is vulnerable to denial of service. The CIL compiler in SELinux has a heap-based buffer over-read in ebitmapmatchany called indirectly from cilcheckneverallow. This occurs because there is sometimes a lack of checks for invalid statements in an optional block...

Use After Free

libsepol is vulnerable to use after free. The vulnerability exists due to a lack of setting the set field of cilresetclasspermission to NULL instead of resetting the classpermission when freeing the pointer...

Privilege Escalation

glib2 is vulnerable to privilege escalation. The vulnerability exists due to the use of random charset alias and lack of sanitization of the authorization, leaking content from files owned by privileged users to unprivileged ones under the right condition...

Denial Of Service (DoS)

SQLite 3.30.1 mishandles certain SELECT statements with a nonexistent VIEW, leading to an application crash...

Privilege Escalation

samba is vulnerable to escalation of privilege. The vulnerability exists due to the lack of sanitization of user's authorization when RODC read-only domain controller is used when printing administration ticket...

Use-After-Free

busybox is vulnerable to use-after-free vulnerability. A remote unauthenticated attacker could craft an awk pattern and send to the evaluate function resulting in a system hang...

Denial Of Service (DoS)

rh-mysql80-mysql is vulnerable to denial of service. An attacker can crash the application via the Server: Optimizer component...

Denial Of Service (DoS)

chromium-browser:bionic is vulnerable denial of service. It allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Remote Code Execution (RCE)

mozjs78 is vulnerable to remote code execution. The vulnerability exists due to a memory safety bugs within the browser engine...

Authentication Bypass

pterodactyl/panel is vulnerable to authentication bypass. The library does not properly verify the user-provided security token, allowing an attacker to bypass the two-factor authentication...

Denial Of Service(DoS)

netty-codec is vulnerable to denial of service. The vulnerability exists due to lack of allocation size restriction on the decompressed output data in the Bzip2 decompression decoder function, leading to an OOME...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. The vulnerability exists due to the system allowing OS users to cause host OS memory corruption via rtasargs.nargs...

Privilege Escalation

github.com/hashicorp/consul is vulnerable to Privilege Escalation. The vulnerability exists in Txn.Apply function because it's missing an authorization check in the Endpoint which allows an attacker to gain access to the system and perform unauthorized actions...

Remote Code Execution (RCE)

ntfs-3g is vulnerable to Remote Code Execution RCE. The vulnerability exists due to a stack buffer overflow...

Remote Code Execution (RCE)

xstream is vulnerable to remote code execution. An attacker is able to exploit the vulnerability injecting arbitrary code via the processed input stream...

Denial Of Service (DoS)

nodejs-current is vulnerable to Denial Of Service DoS. The vulnerability exists due to missing input validation of host names returned by Domain Name Servers in Node.js dns library which can lead to output of wrong hostnames...

Denial Of Service (DoS)

nodejs is vulnerable to Denial Of Service DoS. A use-after-free allows an attacker to corrupt memory that would cause an application crash and potentially allow arbitrary code execution...

Remote Code Execution (RCE)

webkit2gtk is vulnerable to remote code execution. The vulnerability exists due to a use-after-free vulnerability exists in WebKitGTK browser...

Denial Of Service (DoS)

openexr:stretch is vulnerable to denial of service. An integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEX. An attacker could use this flaw to crash an application compiled with OpenEXR...

Denial Of Service (DoS)

htmldoc is vulnerable to denial of service. The vulnerability exists due to a NULL pointer dereference in the function imageloadjpeg in image.cxx...

Cross-site Scripting (XSS)

ckeditor4 is vulnerable to cross-site scripting. An attacker is able to inject malicious script via the comment because --! is not handled...

Remote Code Execution (RCE)

zope is vulnerable to remote code execution. The vulnerability exists due to untrusted modules available indirectly through Python modules...

Regular Expression Denial Of Service (ReDoS)

ws is vulnerable to regular expression denial of service. An attacker is able to cause excessive CPU consumption that can lead to an application crash by submitting a malicious value of Sec-Websocket-Protocol...

Denial Of Service (DoS)

linux kernel is vulnerable to denial of service. The vulnerability exists due to a NULL pointer dereference flaw was found in the Linux kernel's GPU Nouveau driver functionality...

Arbitrary Code Execution

unbound is vulnerable to arbitrary code execution. An integer overflow in the regional allocator via the ALIGNUP macro allows an attacker to execute arbitrary code on the host OS...

Information Disclosure

bouncycastle is vulnerable to information disclosure. The vulnerability exists due to a timing issue within the EC math library that can expose information about the private key when an attacker is able to observe timing information for the generation of multiple deterministic ECDSA signatures...