Remote Code Execution (RCE)

thunderbird is vulnerable to remote code execution. The vulnerability exists due to the lack of sanitization of the execution context which allows Javascript to be enabled in the composition area...

Denial Of Service (DoS)

vim is vulnerable to Stack-based Buffer Overflow...

Privilege Escalation

glib2 is vulnerable to privilege escalation. The vulnerability exists due to the use of random charset alias and lack of sanitization of the authorization, leaking content from files owned by privileged users to unprivileged ones under the right condition...

Denial Of Service (DoS)

SQLite 3.30.1 mishandles certain SELECT statements with a nonexistent VIEW, leading to an application crash...

Use-After-Free

busybox is vulnerable to use-after-free vulnerability. A remote unauthenticated attacker could craft an awk pattern and send to the evaluate function resulting in a system hang...

Denial Of Service (DoS)

libxml2.so is vulnerable to denial of service. An attacker can crash the application or execute arbitrary code through the xmlParseAttValueComplex function in parser.c by providing long XML entity name...

Denial Of Service (DoS)

vim is vulnerable denial of service. The vulnerability exists due to Heap-based Buffer Overflow...

Improper Input Validation

Java SE is vulnerable to Improper Input Validation. An attacker can perform service disruption through the Hotspot component in the oracle GraalVM enterprise edition...

Denial Of Service (DoS)

linux is vulnerable to denial of service. The vulnerability exists due to an out-of-bounds OOB memory read flaw was found in the Qualcomm IPC router protocol in the Linux kernel...

Denial Of Service (DoS)

qt5-qtwebengine is vulnerable to denial of service. The vulnerability exists due to an Inappropriate implementation in Sandbox...

Business Logic Flaws

rustc has a business logic flaw. The vulnerability exists due to the iteratorgetunchecked more than once for the same index when the underlying iterator panics in certain conditions. This bug could lead to a memory safety violation due to an unmet safety requirement for the TrustedRandomAccess...

Denial Of Service (DoS)

golang is vulnerable to denial of service. The vulnerability exists due to a data overwrite when invoking functions from WASM modules, built using GOARCH=wasm GOOS=js, passing very large arguments...

Denial Of Service (DoS)

chromium-browser:bionic is vulnerable denial of service. It allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Remote Code Execution (RCE)

mozjs78 is vulnerable to remote code execution. The vulnerability exists due to a memory safety bugs within the browser engine...

Privilege Escalation

zoneminder is vulnerable to privilege escalation. The vulnerability exists due to a Time-of-check Time-of-use TOCTOU Race Condition...

Authorization Bypass

modsecurity-crs is vulnerable to authorization bypass. An attacker is able to exploit a vulnerability in the backend that results in a CRS request body bypass that abuses trailing pathname information...

Denial Of Service

Linux kernel is vulnerable to denial of service. Linux fair scheduler has a use-after-free in shownumastats because NUMA fault statistics are inappropriately freed. A flaw was found in the Linux kernels implementation of displaying NUMA statistics, where displaying the scheduler statistics could...

Arbitrary Code Execution

adplug is vulnerable to arbitrary code execution. Multiple heap-based buffer overflow in Ca2mLoader::load in a2m.cpp allows an attacker to execute arbitrary code on the host OS...

Denial Of Service (DoS)

pillow is vulnerable to denial of service. An out-of-bounds read in J2kDecode in j2kugrayala allows an attacker to crash the application...

Denial Of Service (DoS)

pillow is vulnerable to denial of service. Lack of validation of the input layers and size of data block in PsdImagePlugin.PsdImageFile can allow an attacker to cause a denial-of-service condition on open prior to load...

Prototype Pollution

merge-deep is vulnerable to prototype pollution. The vulnerability exists as it is possible to overwrite Object.prototype with arbitrary object properties in the merge function...

Regular Expression Denial Of Service (ReDoS)

trim-newlines is vulnerable to Regular Expression Denial Of Service ReDoS. The usage of an insecure regular expression in the .end method allows an attacker to cause excessive resource consumption...

Denial Of Service (DoS)

github.com/go-gitea/gitea and x/net/html of github.com/golang/go are vulnerable to Denial Of Service DoS. An infinite loop is caused when an attacker sends a malicious input to ParseFragment...

Denial Of Service (DoS)

trousers is vulnerable to denial of service. The vulnerability exists when daemon is started with root privileges, the creation of the system.data file is prone to symlink attacks which allows the tss user to create or corrupt existing files, which could possibly lead to a DoS attack...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. The vulnerability exists due to a memory leak in the sofsetgetlargectrldata function in sound/soc/sof/ipc.c which allows an attacker to crash the application via malicious input...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. A NULL pointer dereference in drivers/tty/serial/8250/8250core.c:serial8250isainitports allows local users to cause a denial of service by using the p-serialin pointer which is uninitialized...

Denial Of Service (DoS)

sqlite is vulnerable to denial of service. The vulnerability exists due to select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant propagation...

Denial Of Service (DoS)

pillow is vulnerable to denial of service. Lack of validation and checks for the validity of return data when jumping to file offsets in the BlpImagePlugin results in a denial-of-service condition...

Information Disclosure

samba is vulnerable to information disclosure. The vulnerability exists due to a flaw that could allow an attacker to read data beyond the end of the array...

Remote Code Execution (RCE)

salt is vulnerable to remote code execution. The vulnerability exists due to local privilege escalation where the master calls the snapper.diff function which executes popen unsafely when an attacker creates a file that is backed up by snapper...

URL Spoofing

firefox:edge is vulnerable to URL spoofing. When a JavaScript URL javascript: is evaluated and the result is a string, this string is parsed to create an HTML document, which is then presented. Previously, this document's URL as reported by the document.location property, for example was the...

Denial Of Service (DoS)

github.com/containers/storage/commit is vulnerable to Denial Of Service DoS. The decompression functionality allows an attacker to crash the application by pulling in malicious tools that resembles podman or cri-o during container image pulls...

Heap Buffer Overflow

A heap buffer overflow security issue was found in the TabStrip component of the Chromium browser...

Denial Of Service(DoS)

webkit2gtk is vulnerable to denial of service. A memory corruption happens due to processing of maliciously crafted web content, leading to an arbitrary code execution...

Regular Expression Denial Of Service (ReDoS)

ua-parser-js is vulnerable to regular expression denial of service. An attacker is able to exploit the vulnerability by sending a malicious User-Agent header under the device type causing the system to process the header for an extended period of time...

Out-of-bounds Write

kernel is vulnerable to out-of-bounds write. The vulnerability exists in set of files which allows an attacker to make out-of-bounds writes...

Cross-Site Scripting (XSS)

keycloak-theme is vulnerable to cross-site scripting XSS. An attacker is able to inject and execute arbitrary Javascript in a user's browser via the referrer URL in the new account console...

OS Command Injection

react-dev-utils is vulnerable to OS command injection. An attacker is able to inject and execute arbitrary OS commands on the host OS due to the usage of childprocess.execFileSync in the function getProcessIdOnPort...

Arbitrary Code Execution

grub is vulnerable to arbitrary code execution. An attacker is able to remove address ranges from memory via the cutmem command to bypass Secure Boot protections...

Arbitrary Code Execution

grub2 is vulnerable to arbitrary code execution...

Information Disclosure

tomcat-coyote is vulnerable to information leakage. When responding to new h2c connection requests, a request mix-up occurs with h2c as the request headers and a limited amount of request body is duplicated from one request to another, resulting in the request being seen by another user...

Denial Of Service (DoS)

Linux kernel is vulnerable to denial of service DoS. It is possible because of a NULL-ptr deref in the spkttyioreceivebuf2 function in spkttyio.c...

Arbitrary Code Execution

linux is vulnerable to arbitrary code execution. The vulnerabilitye exists as the kernel PV block backend expects the kernel thread handler to reset ring-xenblkd to NULL when stopped. However, the handler may not have time to run if the frontend quickly toggles between the states connect and...

Denial Of Service (DoS)

Linux Kernel is vulnerable to denial of service DoS. The vulnerability is possible because of an issue was discovered in drivers/accessibility/speakup/spkttyio.c. Local attackers on systems with the speakup driver could cause a local denial of service attack, aka CID-d41227544427. This occurs...

Denial Of Service (DoS)

linux is vulnerable to denial of service DoS. The vulnerability exists through a use after free in the Linux kernel infiniband hfi1 driver, found in the way user calls Ioctl after open dev file and fork...

Information Disclosure

Python is vulnerable to information disclosure. The vulnerability exists because Lib/test/multibytecodecsupport.py CJK codec tests call eval on content retrieved via HTTP...

Denial Of Service (DoS)

glibc is vulnerable to denial of service DoS. The vulnerability exists through sysdeps/i386/ldbl2mpn.c where a stack-based buffer overflow occurs on the input to any of the printf family of functions is an 80-bit long double with a non-canonical bit pattern, as seen when passing a...

Privlege Escalation

kernel is vulnerable to privilege escalation. A local attacker is able to abuse this flaw to bypass checks to abuse the insecure child/parent process identification handling while filtering signal handlers, and send any signal to a privileged process...

Information Disclosure

firefox is vulnerable to information disclosure. The vulnerability exists by combining the slipstream research combined with a malicious webpage could have exposed both an internal network's hosts as well as services running on the user's local machine...

Arbitrary Code Execution

github.com/golang/go is vulnerable to arbitrary code execution. The go command may execute arbitrary code at build time when users have “.” listed explicitly in their PATH and are running “go get” or build commands outside of a module or with module mode disabled...