Authentication Bypass

matrix-js-sdk is vulnerable to authentication bypass. A malicious server admin is able to break emoji-based verification when cross-signing is in use, authenticating themselves instead of the target user being verified. The vulnerability is possible because the library confuses device IDs and...

Authentication Bypass

moodle/moodle is vulnerable to authentication bypass. The vulnerability exists in the userlogin function of auth.php due to a type juggling, which allows an attacker to access restricted domains via the external database authentication...

Heap-buffer-overflow

binutils, edge is vulnerable to a heap buffer overflow. The vulnerability exists in bfdgetl32 function when called from the stripmain function in strip-new via a malicious file...

Denial Of Service (DoS)

.NET Core is vulnerable to denial of service. The vulnerability exists due to a stack overflow which allows an attacker to send a customized payload that is parsed during model binding and cause an application crash...

Denial Of Service (DoS)

github.com/helm/helm is vulnerable to denial of service DoS attacks. A remote authenticated attacker is able to cause an out of memory panic by supplying malicious string inputs to functions in the strvals package, resulting in denial of service conditions...

Improper Input Validation

chromium is vulnerable to improper input validation. The vulnerability exists due to the library does not properly validate user input in Intents...

Denial Of Service (DoS)

moodle/moodle is vulnerable to denial of service. The vulnerability exists because the yuicombo.php does not properly limit the path length, allowing an attacker to crash the application by loading a large number of files...

Denial Of Service (DoS)

vim is vulnerable to denial of service. The vulnerability exists due to the use after free in the library, allowing an attacker to crash the application by providing a malicious input...

Denial Of Service (DoS)

chrome is vulnerable to denial of service. The vulnerability exists due to a use after free in WebGPU in Google Chrome allowing a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Out-of-bounds Write

vim:sid is vulnerable to denial of service. The vulnerability exists due to an out-of-bounds write in GitHub repository...

Denial Of Service (DoS)

undertow is vulnerable to Denial Of Service DoS. The vulnerability exists in read function in AjpServerRequestConduit.java because the exceptions are not handled properly for large AJP requests which allows an attacker to send a malicious request and trigger server errors causing an application...

Double Free

Linux kernel is vulnerable to double free. The vulnerability exists in usb8devstartxmit in drivers/net/can/usb/usb8dev.c because is no need to call devkfreeskb when usbsubmiturb fails because canputechoskb deletes original skb and canfreeechoskb deletes the cloned skb causing a double free...

Denial Of Service

libtiff.so is vulnerable to denial of service DoS attacks. A malicious user is able to cause denial of service conditions via a crafted TIFF file through TIFFVGetField function, resulting in an application crash...

Denial Of Service (DoS)

file-type is vulnerable to denial of service. The vulnerability exists in the FileTypeParser function in core.js due to a lack of input sanitization in the file type detector which allows an attacker to cause an application crash by sending mkv file...

Privilege Escalation

git is vulnerable to privilege escalation. The vulnerability exists due to a lack of validation of user inputs which allows an attacker to access the git repository perform unauthorized actions...

Privilege Escalation

github.com/argoproj/argo-cd is vulnerable to privilege escalation. Lack of enforcement of access restriction by application resource API allows an attacker to escalate the privileges to admin-level...

Regular Expression Denial Of Service (ReDoS)

org.apache.tika:tika is vulnerable to regular expression denial of service ReDoS attacks. An attacker is able to cause denial of service conditions to the users who are running the StandardsExtractingContentHandler component, due to an insecure regular expression usage in setThreshold function by...

Information Disclosure

guzzlehttp/guzzle is vulnerable to information disclosure. The vulnerability exists in serveral functions in RedirectMiddleware.php because the change in port is not considered a change in origin when sending requests with header files which allows an attacker to gain access to sensitive header...

Arbitrary Code Execution

watools is vulnerable to arbitrary code execution. The vulnerability exists because of a code execution backdoor in all the versions of watools packages available in Pypi which allows an attacker to inject and execute malicious codes...

Information Disclosure

vim is vulnerable to information disclosure. Buffer over-read in the currentquote function allows local attackers to cause information disclosure...

Information Disclosure

vim is vulnerable to information disclosure. A buffer over-read in function grabfilename is capable of crashing the software, memory modification, and possible remote execution...

Denial Of Service (DoS)

mariadb is vulnerable to denial of service. getsortbytable in MariaDB allows an application crash via certain subquery uses of ORDER BY...

Command Injection

github.com/hashicorp/go-getter is vulnerable to command injection. The vulnerability exists in clone function in gethg.go due to improper handling of user input which allows an attacker to inject and execute arbitrary commands...

Denial Of Service (DoS)

firefox is vulnerable to denial of service. The vulnerability exists due to incorrect assembly generation on arm64 leading to a register allocation problem which causes an application crash...

Heap-based Buffer Overflow

tensorflow is vulnerable to heap-based buffer overflow. The use of AllocatedBytes in the insecure hash function AbslHashValue allows local authenticated attackers to cause heap-based buffer overflows resulting in denial of service conditions...

User Impersonation Via Anonymous Access

github.com/argoproj/argo-cd is vulnerable to user impersonation. An attacker is able to send an invalid JSON Web Token JWT along with a request if anonymous access to the Argo CD instance is enabled, allowing an unauthenticated user to get access with same privilege, create, manipulate and delete...

Cross-site Scripting (XSS)

curl is vulnerable to cross-site scripting. The vulnerability exists due to the curl URL parser wrongly accepts percent-encoded URL separators like / when decoding the host name part of a URL which allows an attacker to inject and execute arbitrary javascript...

Out-of-bound Reads

linux is vulnerable to out-of bound reads. The vulnerability exists in drivers/usb/gadget/udc/udc-xilinx.c because the endpoint index is not validated and might be manipulated by the host for out-of-array access...

Information Disclosure

curl is vulnerable to information disclosure. The vulnerability exists in url.c due to the cleartext transmission of sensitive information which allows an attacker to gain access to sensitive information...

SQL Injection

mediawiki/core is vulnerable to sql injection. The vulnerability exists due to insecure quote handling in the getAllOrValues function in SDAppliedFilter.php allows an attacker to inject arbitrary queries...

Remote Code Execution (RCE)

jenkins-2-plugins is vulnerable to remote code execution. The vulnerability exists due to a sandbox bypass allowing attackers to execute arbitrary code on the system...

Denial Of Service (DoS)

github.com/golang/text is vulnerable to Denial Of Service DoS. The vulnerability exists because an incorrectly formatted language tag may cause the parse to panic due to an out of bounds read, resulting in an application crash...

Denial Of Service (DoS)

go:edge is vulnerable to denial of service DoS attacks. A malicious user is able to cause an application crash via a large amount of PEM data...

Denial Of Service (DoS)

RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...

Cross-Site Scripting (XSS)

Keycloak Core is vulnerable to reflected cross-site scripting. The vulnerability exists via the POST http requests due to lack of escaping which allows a malicious attacker to inject and execute arbitrary javascript...

Buffer Overflow

vim is vulnerable to buffer overflow. The vulnerability exists due to a lack of validation of the pointer accessing the Heap which allows an attacker to cause an application crash...

Denial Of Service (DoS)

Apache is vulnerable to denial of service. The vulnerability exists because a carefully crafted request body can cause a read to a random memory area which could cause the process to crash...

Information Disclosure

FreeTAKServer-UI is vulnerable to information disclosure. The vulnerability exists because it exposes sensitive API and Websocket keys through the leakage of the RestAPI and Websocket tokens in WebUI...

Denial Of Service (DoS)

389-ds-base is vulnerable to denial of service. The vulnerability exists due to a double-free found in the way 389-ds-base handles virtual attributes context in persistent searches allowing an attacker to crash the system by sending a series of search requests...

Denial Of Service (DoS)

Chrome is vulnerable to denial of service. The vulnerability exists due to a Use after free in WebShare...

Denial Of Service (DoS)

github.com/hashicorp/consul is vulnerable to denial of service DoS attacks. A remote attacker with service:write permission is able to register a specifically-crafted service on clusters with at least one ingress gateway configured, resulting in denial of service conditions in the server...

Information Disclosure

cobbler is vulnerable to information disclosure. The vulnerability exists because the library does not properly restrict the config file accessibility, which allows an attacker who has access to the server to open an authenticated session with a cobbler daemon...

Denial Of Service (DoS)

samba is vulnerable to information disclosure. The vulnerability exists due to a lack of sanitization of permission when adding service principals names SPNs to an account...

Denial Of Service (DoS)

libpng is vulnerable to denial of service. The vulnerability exists due to an absolute path in the export script that crashes when reading multiple zTXT chunks...

Denial Of Service (DoS)

openjdk is vulnerable to denial of service. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to...

Buffer Overflow

mruby is vulnerable to Heap-based Buffer Overflow. The vulnerability exists due to a lack of sanitization...

Insecure Cryptography

cryptsetup is vulnerable to insecure cryptography. A malicious attacker can modify on-disk metadata to simulate decryption in progress with crashed reencryption step and persistently decrypt part of the LUKS device...

Denial Of Service (DoS)

systemd is vulnerable to denial of service DoS attacks. An uncontrolled recursion in systemd-tmpfiles may lead to denial of service at boot time...

Denial Of Service (DoS)

firefox is vulnerable to denial of service. The vulnerability exists due to a heap-buffer-overflow in blendGaussianBlur allowing an attacker to crash the system by applying a CSS filter effect...

Denial Of Service (DoS)

python3 is vulnerable to denial of service. The vulnerability exists because the ftplib is using the host from the PASV response which allows an attacker to cause an application crash...