39270 matches found
Information Disclosure
kernel is vulnerable to information disclosure.It incorrectly writes to the /proc/sys/vm/cmmtimeout file.This flaw allows to local user see the kernel stack information leak on s390/s390x...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. The vulnerability exists due to a memory leak in the rtl8xxxusubmitinturb function which allows an attacker to crash the kernel...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS.Two memory leaks in the rtlusbprobe function in 'drivers/net/wireless/realtek/rtlwifi/usb.c' allows an attacker to crash the application...
Denial Of Service (DoS)
linux-oem-osp1 is vulnerable to denial of service DoS. The vulnerability exists through a heap based buffer overflow in the bluetooth implementation...
Information Disclosure
kernel is vulnerable to information disclosure. The vulnerability exists in net bluetooth when processing certain AMP packets...
Cross-site Scripting (XSS)
react-native-webview is vulnerable to cross-site scripting XSS. The vulnerability exists through the lack of policy enforcement that allows cross-origin iframes to execute arbitrary JavaScript in the top-level document. The vulnerability exists on all applications running on systems with an Andro...
Arbitrary Code Execution
webkitgtk4 is vulnerable to arbitrary code execution. The vulnerability exists as parsing web content can cause memory corruption...
Arbitrary Code Execution
WebKitGTK+ is vulnerable to arbitrary code execution. Processing maliciously crafted web content may lead to arbitrary code execution...
Arbitrary Code Execution
WebKitGTK+ is vulnerable to arbitrary code execution. A memory corruption issue allows an attacker to execute arbitrary code on the host OS...
HTTP Request Splitting
squid is vulnerable to HTTP Request Splitting. Insecure parsing of the Transfer-Encoding header allows an attacker to split an HTTP request and perform cache poisoning...
Denial Of Service (DoS)
brotli is vulnerable to denial of service. A buffer overflow vulnerability exists where an attacker can crash the application by controlling the input length of a one-shot decompression request to a script. This happens when copying over chunks of data larger than 2 GiB...
Injection Attacks
thunderbird is vulnerable to injection attacks. The vulnerability exists as the CSS sanitizer incorrectly rewrites a @namespace rule when pasting a tag from the clipboard into a rich text editor...
Denial Of Service (DoS)
sqlite3 is vulnerable to denial of service DoS. The vulnerability exists as the WITH stack continues to unwind even after a parsing error in selectExpander in select.c...
Denial Of Service (DoS)
linux is vulnerable to denial of service DoS. There is a net/ipv4/tcpinput.c signed integer overflow in tcpackupdatertt when userspace writes a very large integer to /proc/sys/net/ipv4/tcpminrttwlen, leading to a denial of service or possibly unspecified other impact, aka CID-19fad20d15a6...
Man-in-the-Middle (MitM)
activemq-broker is vulnerable to man-in-the-middleMitM attack. It binds the server to jmxrmi entry after creating JMX RMI registry using LocateRegistry.createRegistry, leading to the connection to the registry without authentication and allowing rebinding of jmxrmi to any other entity. Therefore,...
Denial Of Service (DoS)
mysql is vulnerable to denial of service DoS. The vulnerability exists in Server Logging...
Server-side Request Forgery (SSRF)
phpBB is vulnerable to server side request forgery SSRF. The vulnerability exists as it does not properly limit the dimensions of images posted, allowing an attacker to use the image dimension check function to send requests on behalf of the server...
Unauthorised Access
openjdk7 is vulnerable to unauthorized. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data...
NXNSAttack
Knot Resolver before 5.1.1 allows traffic amplification via a crafted DNS answer from an attacker-controlled server, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records...
Information Disclosure
php7 is vulnerable to information disclosure. The vulnerability exists while parsing EXIF data with exifreaddata function, it is possible for malicious data to cause PHP to read one byte of uninitialized memory...
Arbitrary Code Execution
firefox is vulnerable to arbitrary code execution. A type-confusion bug in the JIT optiomizations involving the Javascript arguments object could confuse later optimization and result in arbitrary code execution...
Cross-site Scripting (XSS)
webkit2gtk is vulnerable to cross-site scripting XSS. The vulnerability exists as it fail to properly restrict input in web content...
Remote Code Execution (RCE)
.NET Core is vulnerable to remote code execution RCE. The vulnerability exists in the XML source markup processing...
Authorization Bypass
actionpack is vulnerable to authorization bypass. An attacker is be able to execute any migrations that are pending for a Rails app running in production mode...
Denial Of Service (DoS)
unbound is vulnerable to denial of service DoS. The vulnerability exists due to an incomplete fix for CVE-2020-12662 in RHEL7...
Privilege Escalation
libsystemd.so are susceptible to privilege escalation. The attack exists because of an incomplete fix for CVE-2017-1000082 which does not properly handle parsing of usernames starting with a numeric digit, leading to misinterpretation of usernames into user identifiers. An attacker is able to...
Denial Of Service (DoS)
bind is vulnerable to denial of service DoS. The vulnerability exists as a logic error in code which checks TSIG validity can be used to trigger an assertion failure in tsig.c...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. A NULL pointer dereference in drivers/net/wireless/intel/iwlwifi/pcie/trans.c allow an attacker to crash the system...
Remote Code Execution (RCE)
git is vulnerable to a remote code execution vulnerability. It exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. A memory leak when idralloc fails in genlregisterfamily in net/netlink/genetlink.c allows an attacker to crash the system...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists as a NULL pointer dereference in drivers/net/wireless/ath/ath10k/usb.c leads to a crash...
Information Disclosure
tcpdump is vulnerable to information disclosure. The vulnerability exists through a stack-based buffer over-read in print-hncp.c:printprefix via crafted pcap...
Denial Of Service (DoS)
exiv2 is vulnerable to a denial of service. The vulnerability exists due to a heap-based buffer overflow in Exiv2::d2Data in types.cpp which allows an attacker to crash the application via malicious input...
Arbitrary Code Execution
httpd is vulnerable to arbitrary code execution. The vulnerability exists as an integer overflow flaw, leading to a heap-based buffer overflow, was found in the way httpd performed substitutions in regular expressions. An attacker able to set certain httpd settings, such as a user permitted to...
Privilege Escalation
glibc is vulnerable to privilege escalation. A flaw was found in the way the ldd utility identified dynamically linked libraries. If an attacker could trick a user into running ldd on a malicious binary, it could result in arbitrary code execution with the privileges of the user running ldd...
Denial Of Service (DoS)
Kernel is vulnerable to denial of service DoS. The proc file system could allow a local, unprivileged user to obtain sensitive information or possibly cause integrity issues...
Arbitrary Code Execution
ruby is vulnerable to arbitrary code execution. A flaw was found in the way large amounts of memory were allocated on 64-bit systems when using the BigDecimal class. A context-dependent attacker could use this flaw to cause memory corruption, causing a Ruby application that uses the BigDecimal...
Arbitrary Code Execution
openoffice.org is vulnerable to arbitrary code execution. The vulnerability exists as a heap-based buffer overflow flaw and an array index error were found in the way OpenOffice.org parsed certain Microsoft Office Word documents. An attacker could use these flaws to create a specially-crafted...
Arbitrary Code Execution
openoffice.org is vulnerable to arbitrary code execution. The vulnerability exists as a flaw was found in the script that launches OpenOffice.org. In some situations, a "." character could be included in the LDLIBRARYPATH variable, allowing a local attacker to execute arbitrary code with the...
Privilege Escalation
kernel is vulnerable to privilege escalation. The vulnerability exists as a flaw was found in the way the Xen hypervisor implementation checked for the upper boundary when getting a new event channel port. A privileged guest user could use this flaw to cause a denial of service or escalate their...
Denial Of Service (DoS)
Python is vulnerable to Denial of Service DoS. The attack is possible because of multiple race conditions in smtpd.py in the smtpd module, allowing a remote attackers to cause a denial of service daemon outage by establishing and then immediately closing a TCP connection, leading to the accept...
Information Disclosure
kernel is vulnerable to information disclosure. Missing initialization flaws in the Linux kernel could lead to information leaks...
Arbitrary Code Execution
dhcp is vulnerable to arbitrary code execution. It was discovered that the DHCP client daemon, dhclient, did not sufficiently sanitize certain options provided in DHCP server replies, such as the client hostname. A malicious DHCP server could send such an option with a specially-crafted value to ...
Privilege Escalation
firefox is vulnerable to privilege escalation. The vulnerability exists as a website containing malicious JavaScript could cause Firefox to execute that JavaScript with the privileges of the user running Firefox...
Denial Of Service (DoS)
mysql is vulnerable to denial of service. A flaw in the way MySQL processed EXPLAIN statements for some complex SELECT queries could allow a remote, authenticated attacker to crash mysqld...
Arbitrary Code Execution
thunderbird is vulnerable to arbitrary code execution. A flaw was found in the script that launches Thunderbird. The LDLIBRARYPATH variable was appending a "." character, which could allow a local attacker to execute arbitrary code with the privileges of a different user running Thunderbird, if...
Spoofing Attack
wget is vulnerable to spoofing attack. Wget is affected by the previously published "null prefix attack", caused by incorrect handling of NULL characters in X.509 certificates. If an attacker is able to get a carefully-crafted certificate signed by a trusted Certificate Authority, the attacker...
Cross-site Scripting (XSS)
SeaMonkey is vulnerable to cross-site scripting XSS. The attack is possible because remote attackers can perform cross-origin keystroke capture, and possibly conduct cross-site scripting XSS attacks, by using the addEventListener and setTimeout functions in conjunction with a wrapped object...
Denial Of Service (DoS)
The kernel is vulnerable to Denial Of Service DoS. A flaw was found in each of the following Intel PRO/1000 Linux drivers in the Linux kernel: e1000 and e1000e. A remote attacker using packets larger than the MTU could bypass the existing fragment check, resulting in partial, invalid frames being...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. The unixstreamconnect function in the Linux kernel did not check if a UNIX domain socket was in the shutdown state. This could lead to a deadlock. A local, unprivileged user could use this flaw to cause a denial of service...