Lucene search
+L
VeracodeMost viewed

38839 matches found

Veracode
Veracode
•added 2022/10/11 4:25 p.m.•42 views

Arbitrary Code Execution

hermes-engine is vulnerable to arbitrary code execution. The vulnerability exists due to a write-what-where condition caused by an integer overflow in growAndRehash function of CodeBlock.h which allows an attacker to potentially execute arbitrary code via crafted javascript...

9.8CVSS9.6AI score0.00982EPSS
SaveExploits0References4Affected Software1
Veracode
Veracode
•added 2022/10/10 9:11 p.m.•42 views

Authorization Bypass

modsecurity-crs:sid is vulnerable to authorization bypass. The vulnerability exists due to encoded payload bypass detection, allowing an attacker to cause a specially malicious HTTP Content-Type header field...

9.8CVSS8.7AI score0.01411EPSS
SaveExploits0References10Affected Software1
Veracode
Veracode
•added 2022/10/04 9:55 a.m.•42 views

Command Injection

snyk-go-plugin is vulnerable to command injection. The vulnerability exists in execute function of sub-process.js because shell for child processes is not properly disabled which allows an attacker to run arbitrary commands on the host system...

7.8CVSS7.4AI score0.00572EPSS
SaveExploits1References5Affected Software1
Veracode
Veracode
•added 2022/09/27 10:47 p.m.•42 views

HTTP Request Smuggling

nodejs-current is vulnerable to HTTP request smuggling. The vulnerability exists due to incorrect parsing header fields in the library, allowing an attacker to smuggle HTTP requests by providing a maliciously crafted input...

6.5CVSS7.8AI score0.02661EPSS
SaveExploits1References5Affected Software3
Veracode
Veracode
•added 2022/09/27 4:10 p.m.•42 views

Information Disclosure

Rancher is vulnerable to information disclosure. Confidential information such as passwords and API keys are stored in kubernetes objects using plaintext which allows an attacker with read permission to retrieve plaintext passwords using the Kubernetes API...

9.9CVSS8.3AI score0.04171EPSS
SaveExploits3References5Affected Software1
Veracode
Veracode
•added 2022/09/24 6:58 a.m.•42 views

Remote Code Execution (RCE)

Redis is vulnerable to Remote Code Execution RCE. The vulnerability exists due to an integer overflow when executing an XAUTOCLAIM command on a stream key in a specific state, with a specially crafted COUNT argument allowing an attacker to inject maliciously crafted code into the system...

9.8CVSS9.7AI score0.03906EPSS
SaveExploits0References7Affected Software1
Veracode
Veracode
•added 2022/09/20 9:06 a.m.•42 views

Remote Code Execution (RCE)

d8s-urls is vulnerable to remote code execution. The vulnerability exists because the library does not properly handle the package upload mechanism, allowing an attacker to inject and execute malicious packages...

9.8CVSS9.7AI score0.01328EPSS
SaveExploits1References3Affected Software1
Veracode
Veracode
•added 2022/09/19 1:00 p.m.•42 views

Information Disclosure

thunderbird is vulnerable to information disclosure. An attacker can gain sensitive information when composing a response to an HTML email with a META refresh tag...

8.1CVSS7.7AI score0.00775EPSS
SaveExploits0References4Affected Software3
Veracode
Veracode
•added 2022/09/16 12:26 p.m.•42 views

Denial Of Service (DoS)

.NET Core is vulnerable to denial of service. The vulnerability exists due to a stack overflow which allows an attacker to send a customized payload that is parsed during model binding and cause an application crash...

7.5CVSS7.4AI score0.04011EPSS
SaveExploits0References19Affected Software15
Veracode
Veracode
•added 2022/09/01 12:25 p.m.•42 views

Authorization Bypass

chromium, sid is vulnerable to authorization bypass. The vulnerability exists due to an inappropriate implementation flaw was found in the extensions API component of the chromium browser...

6.5CVSS7.2AI score0.0062EPSS
SaveExploits0References6Affected Software2
Veracode
Veracode
•added 2022/09/01 10:46 a.m.•42 views

Denial Of Service (DoS)

chrome is vulnerable to denial of service. The vulnerability exists due to a memory corruption in the functionality of the component SwiftShader allowing an attacker to crash the system via manipulation with an unknown input...

8.8CVSS8.3AI score0.00682EPSS
SaveExploits0References5Affected Software2
Veracode
Veracode
•added 2022/09/01 10:44 a.m.•42 views

Improper Input Validation

chromium is vulnerable to improper input validation. The vulnerability exists due to the library does not properly validate user input in Intents...

6.5CVSS7.3AI score0.0453EPSS
SaveExploits1References5Affected Software2
Veracode
Veracode
•added 2022/08/17 3:38 a.m.•42 views

Privilege Escalation

libuv.so is vulnerable to privilege escalation. The vulnerability exists in the uvprocesschildinit function in process.c due to improper configurations of group privilege downgrade which allows an attacker to gain privileges via unspecified vectors...

10CVSS6.6AI score0.03242EPSS
SaveExploits0References9Affected Software1
Veracode
Veracode
•added 2022/08/13 10:36 a.m.•42 views

Denial Of Service (DoS)

vim is vulnerable to denial of service. The vulnerability exists due to the use after free in the library, allowing an attacker to crash the application by providing a malicious input...

7.8CVSS7.5AI score0.0124EPSS
SaveExploits1References7Affected Software1
Veracode
Veracode
•added 2022/08/11 8:25 a.m.•42 views

Remote Code Execution (RCE)

chromium is vulnerable to remote code execution. The vulnerability exists due to a use after free in Extensions API allowing an attacker to inject maliciously crafted code into the system...

8.8CVSS8.9AI score0.00408EPSS
SaveExploits0References6Affected Software2
Veracode
Veracode
•added 2022/07/23 1:42 a.m.•42 views

Denial Of Service (DoS)

sqlite3 is vulnerable to Denial Of Service DoS. The vulnerability exists because the whereKeyStats routine is unable to cope with row-value comparisons against the primary key index of a WITHOUT ROWID table which allows an attacker to cause an application crash...

7.5CVSS7.4AI score0.21454EPSS
SaveExploits2References9Affected Software5
Veracode
Veracode
•added 2022/07/15 12:11 p.m.•42 views

Insecure Cryptography

node uses an insecure cryptographic configuration. The vulnerability exists in opensslcommon.gypi because the default openssl.cnf directory on linux is not configured properly which allows an attacker to create new files on shared systems...

5.3CVSS6.4AI score0.02146EPSS
SaveExploits1References6Affected Software2
Veracode
Veracode
•added 2022/07/14 9:21 a.m.•42 views

DLL Hijacking

node is vulnerable to dll hijacking. The vulnerability exists due to the default open ssl configuration which allows an attacker to exploit the vulnerability by placing a malicious dll file on an affected system...

7.3CVSS7.3AI score0.01752EPSS
SaveExploits1References8Affected Software1
Veracode
Veracode
•added 2022/07/08 7:05 a.m.•42 views

Denial Of Service (DoS)

Jetty-IO is vulnerable to denial of service. The vulnerability exists because the buffer utilization of SslConnection is not properly handled which allows an attacker to cause a memory leak leading to an application crash...

7.5CVSS7.2AI score0.02205EPSS
SaveExploits1References5Affected Software1
Veracode
Veracode
•added 2022/06/30 9:27 p.m.•42 views

Spoofing Attacks

firefox and thunderbird are vulnerable to spoofing attacks. The vulnerability exists because a pop-up window could be resized to overlay the address bar with web content, resulting in potential user confusion or spoofing attacks...

6.5CVSS7.9AI score0.00744EPSS
SaveExploits0References6Affected Software6
Veracode
Veracode
•added 2022/06/28 8:35 a.m.•42 views

Regular Expression Denial Of Service (ReDoS)

org.apache.tika:tika is vulnerable to regular expression denial of service ReDoS attacks. An attacker is able to cause denial of service conditions to the users who are running the StandardsExtractingContentHandler component, due to an insecure regular expression usage in setThreshold function by...

5.5CVSS5.3AI score0.0261EPSS
SaveExploits0References8Affected Software1
Veracode
Veracode
•added 2022/06/27 8:07 a.m.•42 views

Arbitrary Code Execution

watools is vulnerable to arbitrary code execution. The vulnerability exists because of a code execution backdoor in all the versions of watools packages available in Pypi which allows an attacker to inject and execute malicious codes...

9.8CVSS9.6AI score0.02042EPSS
SaveExploits1References4Affected Software1
Veracode
Veracode
•added 2022/06/12 5:52 p.m.•42 views

Denial Of Service (DoS)

Apache HTTP Server is vulnerable to denial of service. The vulnerability exists due to a lack of sanitization to the input size allowing an attacker to crash the system via a malicious request to a lua script that calls r:parsebody0...

7.5CVSS8.3AI score0.06229EPSS
SaveExploits0References10Affected Software6
Veracode
Veracode
•added 2022/06/08 8:17 a.m.•42 views

Denial Of Service (DoS)

github.com/minio/minio is vulnerable to distributed denial of service attacks. The vulnerability exists in the serverMain function in server-main.go due to a lack of validation in client requests. This allows a malicious user to cause an application crash...

7.5CVSS7AI score0.02996EPSS
SaveExploits1References5Affected Software1
Veracode
Veracode
•added 2022/06/02 8:55 p.m.•42 views

Denial Of Service (DoS)

.NET and Visual Studio is vulnerable to Denial of Service. The vulnerability exists due to a flaw was found in dotnet allowing an attacker to crash the system by parsing HTML forms...

7.5CVSS7.3AI score0.05062EPSS
SaveExploits0References12Affected Software2
Veracode
Veracode
•added 2022/05/23 4:21 a.m.•42 views

User Impersonation Via Anonymous Access

github.com/argoproj/argo-cd is vulnerable to user impersonation. An attacker is able to send an invalid JSON Web Token JWT along with a request if anonymous access to the Argo CD instance is enabled, allowing an unauthenticated user to get access with same privilege, create, manipulate and delete...

10CVSS8.9AI score0.02054EPSS
SaveExploits0References4Affected Software1
Veracode
Veracode
•added 2022/05/12 5:49 a.m.•42 views

Privilege Escalation

github.com/vmware-tanzu/pinniped is vulnerable to privilege escalation. The vulnerability exists in the groupSearchFilter function in upstreamldap.go due to lack of validation in search filters which allows an unauthorized user to elevate privileges...

6.6CVSS5.3AI score0.00972EPSS
SaveExploits0References3Affected Software1
Veracode
Veracode
•added 2022/04/27 7:21 p.m.•42 views

Denial Of Service (DoS)

linux-gkeop is vulnerable to denial of service. A flaw null pointer dereference in the Linux kernel UDF file system functionality was found in the way user triggers udffilewriteiter function for the malicious UDF image. A local user could use this flaw to crash the system...

5.5CVSS3.3AI score0.00497EPSS
SaveExploits1References10Affected Software4
Veracode
Veracode
•added 2022/04/20 8:23 a.m.•42 views

Denial Of Service (DoS)

github.com/golang/text is vulnerable to Denial Of Service DoS. The vulnerability exists because an incorrectly formatted language tag may cause the parse to panic due to an out of bounds read, resulting in an application crash...

7.5CVSS7.4AI score0.01356EPSS
SaveExploits0References7Affected Software10
Veracode
Veracode
•added 2022/04/13 10:14 a.m.•42 views

Denial Of Service (DoS)

libxml2 is vulnerable to denial of service. The vulnerability exists due to an integer overflow in xmlmemory.c...

8.8CVSS3.7AI score0.02713EPSS
SaveExploits0References12Affected Software1
Veracode
Veracode
•added 2022/04/13 8:50 a.m.•42 views

Arbitrary File Upload

express-fileupload is vulnerable to arbitrary file upload. The vulnerability exists due to a lack of verification of the number of files being sent to the writeStream function...

7.5CVSS2.5AI score0.01381EPSS
SaveExploits1References3Affected Software1
Veracode
Veracode
•added 2022/04/13 7:35 a.m.•42 views

Denial Of Service (DoS)

ruby is vulnerable to denial of service. The vulnerability exists due to a Double free in Regexp compilation which allows an attacker to crash the application via malicious input...

9.8CVSS4AI score0.02893EPSS
SaveExploits0References7Affected Software1
Veracode
Veracode
•added 2022/04/13 2:50 a.m.•42 views

Denial Of Service (DoS)

nekohtml is vulnerable to denial of service. The vulnerability exists due to a memory corruption allowing an attacker to crash the system via a maliciously crafted HTML markup...

7.5CVSS2.2AI score0.02148EPSS
SaveExploits0References3Affected Software1
Veracode
Veracode
•added 2022/04/07 9:28 a.m.•42 views

Heap-based Buffer Overflow

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...

7.8CVSS3.3AI score0.0168EPSS
SaveExploits1References11Affected Software1
Veracode
Veracode
•added 2022/03/22 7:58 a.m.•42 views

Information Exposure

topthink/think is vulnerable to information exposure. The vulnerability exists due to a lack of input validation which allows an attacker to access sensitive informations in the system...

7.5CVSS3AI score0.04748EPSS
SaveExploits1References2Affected Software1
Veracode
Veracode
•added 2022/03/22 6:41 a.m.•42 views

Improper Input Validation

guzzlehttp/psr7 is vulnerable to improper input validation. The vulnerability exists in the normalizeHeaderValue function in the MessageTrait.php file allowing an attacker to modify the new line character with an untrusted value...

7.5CVSS4.1AI score0.0248EPSS
SaveExploits0References6Affected Software2
Veracode
Veracode
•added 2022/03/22 5:57 a.m.•42 views

Denial Of Service (DoS)

Go-Ethereum is vulnerable to denial of service. An attacker is able to exploit the vulnerability and crash the system by sending an excessive amount of messages to a node...

7.5CVSS3.7AI score0.01197EPSS
SaveExploits1References1Affected Software1
Veracode
Veracode
•added 2022/03/10 12:21 a.m.•42 views

Directory Traversal

Rust is vulnerable to directory traversal. The vulnerability exists due to a race condition which allows an attacker to access the file system of the application...

7.3CVSS4.9AI score0.01376EPSS
SaveExploits1References20Affected Software2
Veracode
Veracode
•added 2022/03/07 12:11 a.m.•42 views

Denial Of Service (DoS)

Chrome is vulnerable to denial of service. The vulnerability exists due to a Use after free in WebShare...

8.8CVSS1.9AI score0.00969EPSS
SaveExploits0References4Affected Software2
Veracode
Veracode
•added 2022/03/04 8:13 p.m.•42 views

Denial Of Service (DoS)

com.liferay.layout.admin.web is vulnerable to denial of service. The vulnerability exists due to improper handle of user privileges in script.jsp file allows a remote attacker to restrict system access to the legitimate users...

7.5CVSS6AI score0.01742EPSS
SaveExploits0References4Affected Software1
Veracode
Veracode
•added 2022/03/04 7:05 a.m.•42 views

Denial Of Service (DoS)

libvirt.so is vulnerable to denial of service. Lack of proper handling of a locked virStoragePoolObj object to release on ACL permission failure in the function virStoragePoolLookupByTargetPath allows other users to access storage pool APIs, causing an application crash...

6.5CVSS3.4AI score0.01366EPSS
SaveExploits0References11Affected Software1
Veracode
Veracode
•added 2022/02/20 10:20 p.m.•42 views

Denial Of Service (DoS)

libexpat.so is vulnerable to denial of service. An attacker can trigger stack exhaustion in the buildmodel function of xmlparse.c via a large nesting depth in the DTD element, leading to an application crash...

6.5CVSS2.7AI score0.03295EPSS
SaveExploits0References15Affected Software21
Veracode
Veracode
•added 2022/02/14 9:57 a.m.•42 views

Remote Code Execution (RCE)

github.com/git-lfs/git-lfs is vulnerable to remote code execution. The vulnerability exists in 'ExecCommand' function of subprocesswindows.go which allows an attacker to inject and execute codes in the root directory of a malicious repository by simply adding an executable files...

9.8CVSS4.3AI score0.82715EPSS
SaveExploits14References10Affected Software1
Veracode
Veracode
•added 2022/02/03 8:44 p.m.•42 views

Directory Traversal

samba is vulnerable to directory traversal. The vulnerability exists due to a NFS race to allow a directory to be created in an area of the server file system not exported under the share definition...

2.5CVSS3.9AI score0.00376EPSS
SaveExploits1References5Affected Software3
Veracode
Veracode
•added 2022/02/03 11:21 a.m.•42 views

Information Disclosure

samba is vulnerable to information disclosure...

4.3CVSS0.8AI score0.01088EPSS
SaveExploits0References3Affected Software1
Veracode
Veracode
•added 2022/01/25 3:40 a.m.•42 views

Denial Of Service (DoS)

libexpat.so is vulnerable to denial of service. The vulnerability exists due to the integer overflow in the XMLGetBuffer function of xmlparse.c. as it does not properly check INTMAX byte length against the XMLCONTEXTBYTES, allowing an attacker to cause an application crash through the configurati...

9.8CVSS3.6AI score0.04563EPSS
SaveExploits0References9Affected Software23
Veracode
Veracode
•added 2022/01/22 9:00 p.m.•42 views

Use After Free

vim is vulnerable to use after free...

7.8CVSS1.5AI score0.01621EPSS
SaveExploits1References15Affected Software1
Veracode
Veracode
•added 2022/01/18 7:14 a.m.•42 views

Denial Of Service (DoS)

libgpac is vulnerable to denial of service. The vulnerability exists due to an invalid memory address dereference via the function lsrreadid...

5.5CVSS3AI score0.00724EPSS
SaveExploits1References3Affected Software2
Veracode
Veracode
•added 2022/01/15 10:11 p.m.•42 views

Remote Code Execution (RCE)

vim is vulnerable to remote code execution. The vulnerability exists due to a use-after-free allowing an attacker to execute malicious code in the system...

7.8CVSS4.9AI score0.01363EPSS
SaveExploits1References11Affected Software3
Veracode
Veracode
•added 2022/01/15 12:31 a.m.•42 views

Use After Free

Chrome is vulnerable to use after free. An attacker is able to exploit the vulnerability via a maliciously crafted HTML page...

8.8CVSS1.6AI score0.01237EPSS
SaveExploits0References7Affected Software2
Total number of security vulnerabilities5000