Information Disclosure

kernel is vulnerable to information disclosure. A missing initialization flaw was found in the ethtoolgetregs function in the Linux kernel's ethtool IOCTL handler. A local user who has the CAPNETADMIN capability could use this flaw to cause an information leak...

Privilege Escalation

firefox is vulnerable to privilege escalation. The vulnerability exists as a website containing malicious JavaScript could cause Firefox to execute that JavaScript with the privileges of the user running Firefox...

Cross-site Scripting (XSS)

php is vulnerable to cross-site scripting XSS. The vulnerability exists as a numeric truncation error and an input validation flaw were found in the way the PHP utf8decode function decoded partial multi-byte sequences for some multi-byte encodings, sending them to output without them being escape...

Insecure TLS Configuration

seamonkey uses an insecure TLS configuration. It was found that the SSL DHE Diffie-Hellman Ephemeral mode implementation for key exchanges in SeaMonkey accepted DHE keys that were 256 bits in length. This update removes support for 256 bit DHE keys, as such keys are easily broken using modern...

Cross-Site Scripting (XSS)

firefox is vulnerable to cross-site scripting. A cross-site scripting XSS flaw was found in the Firefox x-mac-arabic, x-mac-farsi, and x-mac-hebrew character encodings. Certain characters were converted to angle brackets when displayed. If server-side script filtering missed these cases, it could...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. An integer overflow flaw was found in the extent range checking code in the Linux kernel's ext4 file system implementation. A local, unprivileged user with write access to an ext4-mounted file system could trigger this flaw by writing to a file at a very...

Arbitrary Code Execution

firefox is vulnerable to arbitrary code execution. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox...

Arbitrary Code Execution

wireshark is vulnerable to arbitrary code execution. The vulnerability exists as multiple buffer overflow flaws were found in the Wireshark SigComp Universal Decompressor Virtual Machine UDVM dissector. If Wireshark read a malformed packet off a network or opened a malicious dump file, it could...

Arbitrary Code Execution

thunderbird is vulnerable to arbitrary code execution. A flaw was found in the script that launches Thunderbird. The LDLIBRARYPATH variable was appending a "." character, which could allow a local attacker to execute arbitrary code with the privileges of a different user running Thunderbird, if...

Remote Code Execution (RCE)

PostgreSQL is vulnerable to remote code execution RCE. Due to a flaw found in the way PostgreSQL enforced permission checks on scripts written in PL/Tcl, if the PL/Tcl procedural language was registered on a particular database, an authenticated database user running a specially-crafted PL/Tcl...

Arbitrary Code Execution

firefox is vulnerable to arbitrary code execution. The vulnerability exists as a web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox...

Denial Of Service (DoS)

httpd is vulnerable to denial of service. It was discovered that modproxyajp incorrectly returned an "Internal Server Error" response when processing certain malformed requests, which caused the back-end server to be marked as failed in configurations where modproxy is used in load balancer mode....

Denial Of Service (DoS)

OpenSSL is vulnerable to denial of service. It was found that the OpenSSL library did not properly re-initialize its internal state in the SSLlibraryinit function after previous calls to the CRYPTOcleanupallexdata function, which would cause a memory leak for each subsequent SSL connection. This...

Information Disclosure

kernel is vulnerable to information disclosure. A flaw was found in the handling of the SWAPEXT IOCTL in the Linux kernel XFS file system implementation. A local user could use this flaw to read write-only files, that they do not own, on an XFS file system. This could lead to unintended informati...

Privilege Escalation

java is vulnerable to privilege escalation. An unspecified vulnerability allows an attacker to affect confidentiality, integrity and availability of the system via unknown vectors...

Remote Code Execution (RCE)

Mozilla Firefox is vulnerable to remote code execution RCE. Due to a use-after-free flaws were found in Firefox, visiting a web page containing malicious content could result in Firefox executing arbitrary code with the privileges of the user running Firefox...

Authorization Bypass

firefox is vulnerable to authorization bypass. The vulnerability exists as two flaws were found in the way certain content was processed. An attacker could use these flaws to create a malicious web page that could bypass the same-origin policy, or possibly run untrusted JavaScript...

Denial Of Service (DoS)

libpng is vulnerable to denial of service DoS. The vulnerability exists as a memory leak flaw was found in the way applications using the libpng library decoded PNG images that use the Physical Scale sCAL extension. An attacker could create a specially-crafted PNG image that could cause an...

Arbitrary Code Execution

libpng is vulnerable to arbitrary code execution.The vulnerability exists as a memory corruption flaw was found in the way applications, using the libpng library and its progressive reading method, decoded certain PNG images. An attacker could create a specially-crafted PNG image that, when opene...

Denial Of Service (DoS)

Mozilla Firefox is vulnerable to Denial of Service DoS. Flaws found in the processing of malformed web content allows a web page to contain malicious content, causing Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox...

Information Disclosure

jboss AS web console is vulnerable to information disclosure. Unauthenticated access to the JBoss Application Server Web Console /web-console is blocked by default. However, it was found that this block was incomplete, and only blocked GET and POST HTTP verbs. A remote attacker could use this fla...

Denial Of Service (DoS)

SeaMonkey is vulnerable to Denial Of Service DoS. Due to the flaw found in the processing of malformed web content, a web page containing malicious content could cause SeaMonkey to crash or, potentially, execute arbitrary code with the privileges of the user running SeaMonkey...

Arbitrary Code Execution

ibm java is vulnerable to arbitrary code execution. An attacker is able to execute arbitrary code by modifying certain JNLP file to point a URL to an untrusted application...

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS. The vulnerability exists as a NULL pointer dereference flaw in the NFSv4 implementation. Several NFSv4 file locking functions failed to check whether a file had been opened on the server before performing locking operations on it...

Privilege Escalation

kernel is vulnerable to privilege escalation. A local attacker with permissions to perform an eCryptfs mount could modify the metadata of the files in that eCrypfts mount to cause a buffer overflow, leading to a denial of service or privilege escalation...

Denial Of Service (DoS)

libdbs-pg-perl is vulnerable to denial of service. A memory leak flaw was found in the perl-DBD-Pg function performing the de-quoting of BYTEA type values acquired from a database. An attacker able to cause an application using perl-DBD-Pg to perform a large number of SQL queries returning BYTEA...

Arbitrary Code Execution

seamonkey is vulnerable to arbitrary code execution. A flaw was discovered in the way SeaMonkey handles certain XUL garbage collection events. A remote attacker could use this flaw to crash SeaMonkey or, potentially, execute arbitrary code as the user running SeaMonkey...

Cross-Site Scripting (XSS)

modproxyftp module in Apache is vulnerable to cross-site scripting. When Apache is configured to support ftp-over-httpd proxying, a remote attacker could perform a cross-site scripting attack...

Arbitrary Code Execution

thunderbird is vulnerable to arbitrary code execution. Several flaws were found in the processing of malformed HTML mail content. An HTML mail message containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code as the user running Thunderbird...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. The ext2 and ext3 filesystem code failed to properly handle corrupted data structures, leading to a possible local denial of service issue when read or write operations were performed...

Denial Of Service (DoS)

MySQL is vulnerable to denial of service DoS.Flaws in MySQL allowed an authenticated user to cause the MySQL daemon to crash via crafted SQL queries. This only caused a temporary denial of service, as the MySQL daemon is automatically restarted after the crash...

Arbitrary Code Execution

firefox is vulnerable to arbitrary code execution. The vulnerability exists as a web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code as the user running Firefox...

Arbitrary Code Execution

seamonkey is vulnerable to arbitrary code execution. The vulnerability exists as a web page containing malicious content could cause SeaMonkey to crash or, potentially, execute arbitrary code as the user running SeaMonkey...

Arbitrary Code Execution

kernel is vulnerable to arbitrary code execution. The vulnerability exists as a buffer overflow flaw was found in the CIFS virtual file system. A remote,authenticated user could issue a request that could lead to a denial of service...

Arbitrary Code Execution

php is vulnerable to arbitrary code execution. The vulnerability exists as an integer overflow flaw was found in the PHP chunksplit function. If a remote attacker was able to pass arbitrary data to the third argument of chunksplit they could possibly execute arbitrary code as the apache user. Not...

Arbitrary Code Execution

seamonkey is vulnerable to arbitrary code execution. The vulnerability exists as a webpage containing malicious content could cause SeaMonkey to crash, or potentially execute arbitrary code as the user running SeaMonkey...

Denial Of Service (DoS)

libpng is vulnerable to denial of service DoS. The vulnerability exists as a flaw was found in the sPLT chunk handling code in libpng. An attacker could create a carefully crafted PNG image file in such a way that it could cause an application linked with libpng to crash when the file was opened...

Information Disclosure

The Linux kernel is vulnerable to Information Disclosure.A flaw in the core-dump handling allows a local user to create core dumps from unreadable binaries via PTINTERP...

Denial Of Service (DoS)

ISC BIND Berkeley Internet Name Domain is vulnerable to Denial Of Service DoS. A use-after-free flaw was found in BIND. On servers that have recursion enabled, this could allow a remote attacker to cause a denial of service...

Denial Of Service (DoS)

Mozilla is vulnerable to denial of service DoS. The vulnerability exists through out of bounds write in GMPDecodeData when processing large images...

Denial Of Service (DoS)

imagemagick is vulnerable to denial of service DoS. The vulnerability exists through a heap-based buffer over-read in AdaptiveThresholdImage in MagickCore/threshold.c...

Denial Of Service (DoS)

squid is vulnerable to denial of service. The vulnerability exists due to incorrect pointer handling when processing ESI Responses which allows an attacker to crash the application via malicious input...

Remote Code Execution (RCE)

FasterXML jackson-databind is vulnerable to deserialization of untrusted data. There is a polymorphic typing issue because there are more than one association gadget types related to org.aoju.bus.proxy.provider.remoting.RmiProvider aka bus-proxy implementation by default...

Arbitrary Code Execution

commons-configuration2 is vulnerable to arbitrary code execution. The library allows instantiation of classes when parsing YAML files. This allows an attacker to execute arbitrary code via a malicious YAML file containing special statements that creates arbitrary Java objects...

Remote Code Execution

chakracore is vulnerable to remote code execution RCE. This is due to how the scripting engine handles objects in memory, allowing a remote attacker to execute arbitrary code in the context of the current user. This CVE ID is different from CVE-2020-0768, CVE-2020-0823, CVE-2020-0825,...

Denial Of Service (DoS)

wordpress is vulnerable to denial of service. The vulnerability exists in because an unauthenticated attacker is able to crash the application by submitting a large list of registered .js files to cause each file to be loaded multiple times, leading to excessive resource consumption...

Cross-site Scripting (XSS)

wordpress is vulnerable to cross-site scripting XSS. The vulnerability exists as wpksesbadprotocol fails to validate that uri attributes do not contain invalid/or unauthorized protocols...

Arbitrary Code Execution

openjdk is vulnerable to arbitrary code execution. Successful exploitation of the insecure serialization filter changes via jdk.serialFilter property modification results in a complete takeover of the application...

XML External Entity (XXE) Injection

pyamf is vulnerable to XML external entity XXE attacks. The attack exists because the XML parser does not disable the parsing of external DTDs, allowing a remote attacker to inject malicious external DTD entities via an Action Message Format AMF payload to retrieve system files or perform request...

Denial Of Service (DoS)

OpenJDK is vulnerable to denial of service DoS. The vulnerability exists it is possible to cause excessive memory allocation in CMap when reading TrueType font...