38839 matches found
Arbitrary Code Execution
hermes-engine is vulnerable to arbitrary code execution. The vulnerability exists due to a write-what-where condition caused by an integer overflow in growAndRehash function of CodeBlock.h which allows an attacker to potentially execute arbitrary code via crafted javascript...
Authorization Bypass
modsecurity-crs:sid is vulnerable to authorization bypass. The vulnerability exists due to encoded payload bypass detection, allowing an attacker to cause a specially malicious HTTP Content-Type header field...
Command Injection
snyk-go-plugin is vulnerable to command injection. The vulnerability exists in execute function of sub-process.js because shell for child processes is not properly disabled which allows an attacker to run arbitrary commands on the host system...
HTTP Request Smuggling
nodejs-current is vulnerable to HTTP request smuggling. The vulnerability exists due to incorrect parsing header fields in the library, allowing an attacker to smuggle HTTP requests by providing a maliciously crafted input...
Information Disclosure
Rancher is vulnerable to information disclosure. Confidential information such as passwords and API keys are stored in kubernetes objects using plaintext which allows an attacker with read permission to retrieve plaintext passwords using the Kubernetes API...
Remote Code Execution (RCE)
Redis is vulnerable to Remote Code Execution RCE. The vulnerability exists due to an integer overflow when executing an XAUTOCLAIM command on a stream key in a specific state, with a specially crafted COUNT argument allowing an attacker to inject maliciously crafted code into the system...
Remote Code Execution (RCE)
d8s-urls is vulnerable to remote code execution. The vulnerability exists because the library does not properly handle the package upload mechanism, allowing an attacker to inject and execute malicious packages...
Information Disclosure
thunderbird is vulnerable to information disclosure. An attacker can gain sensitive information when composing a response to an HTML email with a META refresh tag...
Denial Of Service (DoS)
.NET Core is vulnerable to denial of service. The vulnerability exists due to a stack overflow which allows an attacker to send a customized payload that is parsed during model binding and cause an application crash...
Authorization Bypass
chromium, sid is vulnerable to authorization bypass. The vulnerability exists due to an inappropriate implementation flaw was found in the extensions API component of the chromium browser...
Denial Of Service (DoS)
chrome is vulnerable to denial of service. The vulnerability exists due to a memory corruption in the functionality of the component SwiftShader allowing an attacker to crash the system via manipulation with an unknown input...
Improper Input Validation
chromium is vulnerable to improper input validation. The vulnerability exists due to the library does not properly validate user input in Intents...
Privilege Escalation
libuv.so is vulnerable to privilege escalation. The vulnerability exists in the uvprocesschildinit function in process.c due to improper configurations of group privilege downgrade which allows an attacker to gain privileges via unspecified vectors...
Denial Of Service (DoS)
vim is vulnerable to denial of service. The vulnerability exists due to the use after free in the library, allowing an attacker to crash the application by providing a malicious input...
Remote Code Execution (RCE)
chromium is vulnerable to remote code execution. The vulnerability exists due to a use after free in Extensions API allowing an attacker to inject maliciously crafted code into the system...
Denial Of Service (DoS)
sqlite3 is vulnerable to Denial Of Service DoS. The vulnerability exists because the whereKeyStats routine is unable to cope with row-value comparisons against the primary key index of a WITHOUT ROWID table which allows an attacker to cause an application crash...
Insecure Cryptography
node uses an insecure cryptographic configuration. The vulnerability exists in opensslcommon.gypi because the default openssl.cnf directory on linux is not configured properly which allows an attacker to create new files on shared systems...
DLL Hijacking
node is vulnerable to dll hijacking. The vulnerability exists due to the default open ssl configuration which allows an attacker to exploit the vulnerability by placing a malicious dll file on an affected system...
Denial Of Service (DoS)
Jetty-IO is vulnerable to denial of service. The vulnerability exists because the buffer utilization of SslConnection is not properly handled which allows an attacker to cause a memory leak leading to an application crash...
Spoofing Attacks
firefox and thunderbird are vulnerable to spoofing attacks. The vulnerability exists because a pop-up window could be resized to overlay the address bar with web content, resulting in potential user confusion or spoofing attacks...
Regular Expression Denial Of Service (ReDoS)
org.apache.tika:tika is vulnerable to regular expression denial of service ReDoS attacks. An attacker is able to cause denial of service conditions to the users who are running the StandardsExtractingContentHandler component, due to an insecure regular expression usage in setThreshold function by...
Arbitrary Code Execution
watools is vulnerable to arbitrary code execution. The vulnerability exists because of a code execution backdoor in all the versions of watools packages available in Pypi which allows an attacker to inject and execute malicious codes...
Denial Of Service (DoS)
Apache HTTP Server is vulnerable to denial of service. The vulnerability exists due to a lack of sanitization to the input size allowing an attacker to crash the system via a malicious request to a lua script that calls r:parsebody0...
Denial Of Service (DoS)
github.com/minio/minio is vulnerable to distributed denial of service attacks. The vulnerability exists in the serverMain function in server-main.go due to a lack of validation in client requests. This allows a malicious user to cause an application crash...
Denial Of Service (DoS)
.NET and Visual Studio is vulnerable to Denial of Service. The vulnerability exists due to a flaw was found in dotnet allowing an attacker to crash the system by parsing HTML forms...
User Impersonation Via Anonymous Access
github.com/argoproj/argo-cd is vulnerable to user impersonation. An attacker is able to send an invalid JSON Web Token JWT along with a request if anonymous access to the Argo CD instance is enabled, allowing an unauthenticated user to get access with same privilege, create, manipulate and delete...
Privilege Escalation
github.com/vmware-tanzu/pinniped is vulnerable to privilege escalation. The vulnerability exists in the groupSearchFilter function in upstreamldap.go due to lack of validation in search filters which allows an unauthorized user to elevate privileges...
Denial Of Service (DoS)
linux-gkeop is vulnerable to denial of service. A flaw null pointer dereference in the Linux kernel UDF file system functionality was found in the way user triggers udffilewriteiter function for the malicious UDF image. A local user could use this flaw to crash the system...
Denial Of Service (DoS)
github.com/golang/text is vulnerable to Denial Of Service DoS. The vulnerability exists because an incorrectly formatted language tag may cause the parse to panic due to an out of bounds read, resulting in an application crash...
Denial Of Service (DoS)
libxml2 is vulnerable to denial of service. The vulnerability exists due to an integer overflow in xmlmemory.c...
Arbitrary File Upload
express-fileupload is vulnerable to arbitrary file upload. The vulnerability exists due to a lack of verification of the number of files being sent to the writeStream function...
Denial Of Service (DoS)
ruby is vulnerable to denial of service. The vulnerability exists due to a Double free in Regexp compilation which allows an attacker to crash the application via malicious input...
Denial Of Service (DoS)
nekohtml is vulnerable to denial of service. The vulnerability exists due to a memory corruption allowing an attacker to crash the system via a maliciously crafted HTML markup...
Heap-based Buffer Overflow
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...
Information Exposure
topthink/think is vulnerable to information exposure. The vulnerability exists due to a lack of input validation which allows an attacker to access sensitive informations in the system...
Improper Input Validation
guzzlehttp/psr7 is vulnerable to improper input validation. The vulnerability exists in the normalizeHeaderValue function in the MessageTrait.php file allowing an attacker to modify the new line character with an untrusted value...
Denial Of Service (DoS)
Go-Ethereum is vulnerable to denial of service. An attacker is able to exploit the vulnerability and crash the system by sending an excessive amount of messages to a node...
Directory Traversal
Rust is vulnerable to directory traversal. The vulnerability exists due to a race condition which allows an attacker to access the file system of the application...
Denial Of Service (DoS)
Chrome is vulnerable to denial of service. The vulnerability exists due to a Use after free in WebShare...
Denial Of Service (DoS)
com.liferay.layout.admin.web is vulnerable to denial of service. The vulnerability exists due to improper handle of user privileges in script.jsp file allows a remote attacker to restrict system access to the legitimate users...
Denial Of Service (DoS)
libvirt.so is vulnerable to denial of service. Lack of proper handling of a locked virStoragePoolObj object to release on ACL permission failure in the function virStoragePoolLookupByTargetPath allows other users to access storage pool APIs, causing an application crash...
Denial Of Service (DoS)
libexpat.so is vulnerable to denial of service. An attacker can trigger stack exhaustion in the buildmodel function of xmlparse.c via a large nesting depth in the DTD element, leading to an application crash...
Remote Code Execution (RCE)
github.com/git-lfs/git-lfs is vulnerable to remote code execution. The vulnerability exists in 'ExecCommand' function of subprocesswindows.go which allows an attacker to inject and execute codes in the root directory of a malicious repository by simply adding an executable files...
Directory Traversal
samba is vulnerable to directory traversal. The vulnerability exists due to a NFS race to allow a directory to be created in an area of the server file system not exported under the share definition...
Information Disclosure
samba is vulnerable to information disclosure...
Denial Of Service (DoS)
libexpat.so is vulnerable to denial of service. The vulnerability exists due to the integer overflow in the XMLGetBuffer function of xmlparse.c. as it does not properly check INTMAX byte length against the XMLCONTEXTBYTES, allowing an attacker to cause an application crash through the configurati...
Use After Free
vim is vulnerable to use after free...
Denial Of Service (DoS)
libgpac is vulnerable to denial of service. The vulnerability exists due to an invalid memory address dereference via the function lsrreadid...
Remote Code Execution (RCE)
vim is vulnerable to remote code execution. The vulnerability exists due to a use-after-free allowing an attacker to execute malicious code in the system...