Out-of-bounds Memory Access When Inserting Text In Edit Mode

firefox is vulnerable to Out of bounds Access. An attacker is able to exploit the vulnerability by inserting text in Edit mode...

Denial Of Service (DoS)

firefox is vulnerable to denial of service. The vulnerability exists due to a heap-buffer-overflow in blendGaussianBlur allowing an attacker to crash the system by applying a CSS filter effect...

Denial Of Service (DoS)

protobuf is vulnerable to Denial of Service DoS. The library does not properly handle unknown fields in the UnknownFieldSet function in UnknownFieldSet.java, allowing an attacker to crash the application through many short-lived objects by providing malicious payload...

Remote Code Execution (RCE)

thunderbird is vulnerable to remote code execution. The vulnerability exists due to a boundary error when handling DER-encoded DSA or RSA-PSS signatures within Mozilla NSS library...

Insecure Token

jakarta.el is vulnerable to Insecure Token. The vulnerability exists due to a bug in the ELParserTokenManager which enables invalid EL expressions to be evaluated as if they were valid...

Denial Of Service (DoS)

Undertow AJP connector is vulnerable to denial of service. Malicious requests and abrupt connection closes could be triggered by an attacker using query strings with non-RFC compliant characters resulting in a denial of service. The highest threat from this vulnerability is to system availability...

Cross-site Scripting (XSS)

webkit2gtk is vulnerable to cross-site scripting. The vulnerability exists due to a logic issue...

Spoofing Attack

Thunderbird and Firefox are vulnerable to spoofing attack. The vulnerability exists due to a misuse of a race in the notification code allowing an attacker to forcefully hide the notification for pages that had received full screen and pointer lock access...

Use After Free

libsepol is vulnerable to use after free. The vulnerability exists due to a lack of setting the set field of cilresetclasspermission to NULL instead of resetting the classpermission when freeing the pointer...

Denial Of Service (DoS)

Insufficient access control in the IntelR PROSet/Wireless WiFi Software driver before version 21.10 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

Privilege Escalation

samba:edge is vulnerable to privilege escalation. The vulnerability exists in the component AD Domain Handler resulting in escalation of privileges...

Man-in-the-Middle (MitM)

amba:edge is vulnerable to man-in-the-middle MitM attacks.An attacker can force the client side SMB1 code to fall-back to plaintext or NTLM based authentication...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service DoS. The vulnerability exists because the API can be made to deadlock when two tf.function functions are mutually recursive by using Lock Python object, allowing an attacker to crash the application by calling a recursive tf.function...

LDAP Injection

github.com/stevenweathers/thunderdome-planning-poker is vulnerable to LDAP injection. Lack of an escape filter allows remote attackers to inject specially crafted values through UserName parameter resulting in LDAP injection vulnerability. Successful attackers are able to read, modify or delete...

Denial Of Service (DoS)

linux is vulnerable to denial of service. The vulnerability exists due to a race condition in ext4writeinlinedataend in fs/ext4/inline.c in the ext4 subsystem in the Linux kernel...

Denial Of Service (DoS)

ffmpeg is vulnerable to denial of service. The vulnerability exists due to a memory leak in avcodecalloccontext3 at options.c...

Denial Of Service (DoS)

rh-mysql80-mysql is vulnerable to denial of service. An attacker can crash the application via the Server: Optimizer component...

Denial Of Service (DoS)

chromium is vulnerable to denial of service. An attacker is able to crash the system by exploiting a heap corruption via a maliciously crafted HTML page...

Remote Code Execution (RCE)

mozjs78 is vulnerable to remote code execution. The vulnerability exists due to a memory safety bugs within the browser engine...

Denial Of Service (DoS)

chromium:edge is vulnerable to denial of service. Use after free in Extensions API in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Privilege Escalation

github.com/hashicorp/consul is vulnerable to Privilege Escalation. The vulnerability exists in Txn.Apply function because it's missing an authorization check in the Endpoint which allows an attacker to gain access to the system and perform unauthorized actions...

Information Disclosure

postgresql is vulnerable to information disclosure. A malicious query can be used to read arbitrary bytes of server memory. In the default configuration, any authenticated database user is able to exploit the vulnerability...

Denial Of Service (DoS)

curl is vulnerable to denial of service. The SSL backend fails to secure the CURLOPTSSLCERT against current directory file overriding the keychain nickname specified, potentially resulting in the overriding the CURLOPTSSLCERT specified certificate and thus causing denial of service...

Remote Code Execution (RCE)

java openjdk is vulnerable to remote code execution. It has a flaw was found in the way the Hotspot component of OpenJDK performed range check elimination. An untrusted Java application or applet could use this flaw to bypass Java sandbox restrictions...

Denial Of Service (DoS)

cxf-rt-rs-json-basic is vulnerable to denial of service. An attacker is able to cause a thread to be stuck in an infinite loop due to an insecure parsing of JSON in JsonMapObjectReaderWriter...

Denial Of Service (DoS)

chromium:edge is vulnerable to denial of service...

Arbtirary Code Execution

chromium is vulnerable to arbitrary code execution. An out-of-bounds write in Angle allows an attacker to execute arbtirary code on the host OS...

Denial Of Service (DoS)

Apache HTTP Server is vulnerable to denial of service. The modproxyhttp can be made to crash via a NULL pointer dereference via malicious requests using both Content-Length and Transfer-Encoding headers...

Arbitrary Code Execution

htmldoc is vulnerable to arbitrary code execution. A double-free in the function pspdfexport in ps-pdf.cxx may result in a write-what-where condition, allowing an attacker to execute arbitrary code and denial of service...

Denial Of Service (DoS)

pillow is vulnerable to denial of service. An out-of-bounds read in J2kDecode in j2kugrayala allows an attacker to crash the application...

Regular Expression Denial Of Service (ReDoS)

normalize-url is vulnerable to regular expression denial of service. The usage of an insecure regex allows an attacker to cause a denial of service condition via a malicious URL string...

Denial Of Service (DoS)

linux-aws:groovy is vulnerable to denial of service. eBPF implementation in the Linux kernel did not properly verify that a BPF program only reserved as much memory for a ring buffer as was allocated. A local attacker could use this to cause a denial of service system crash or execute arbitrary...

Denial Of Service (DoS)

linux kernel is vulnerable to denial of service. The vulnerability exists due to a NULL pointer dereference flaw was found in the Linux kernel's GPU Nouveau driver functionality...

Denial Of Service (DoS)

pillow is vulnerable to denial of service. Lack of validation and checks for the validity of return data when jumping to file offsets in the EpsImagePlugin results in a denial-of-service condition...

Denial Of Service (DoS)

pillow is vulnerable to denial of service. Lack of validation and checks for the validity of return data when jumping to file offsets in the BlpImagePlugin results in a denial-of-service condition...

Denial Of Service (DoS)

ceph is vulnerable to denial of service. A NULL pointer exception allows an attacker to crash the RGW process via a malicious tagging XML...

Buffer Overflow

exiv2 is vulnerable to buffer overflow. The vulnerability exists due to improper input validation of the rawData.size property in Jp2Image::readMetadata in jp2image.cpp can lead to a heap-based buffer overflow via a crafted JPG image containing malicious EXIF data...

Arbitrary Code Execution

exim4 is vulnerable to arbitrary code execution. An integer overflow in receiveaddrecipient could potentially allow an attacker to execute arbitrary code on the host OS...

Remote Code Execution (RCE)

salt is vulnerable to remote code execution. The vulnerability exists due to local privilege escalation where the master calls the snapper.diff function which executes popen unsafely when an attacker creates a file that is backed up by snapper...

Remote Code Execution (RCE)

webkit2gtk is vulnerable to remote code execution, the vulnerability exists due to an out-of-bounds write issue...

Remote Code Execution (RCE)

webkit2gtk is vulnerable to remote code execution. The vulnerability exists due to a use after free issue which is processed from a crafted web content...

Denial Of Service (DoS)

github.com/containers/storage/commit is vulnerable to Denial Of Service DoS. The decompression functionality allows an attacker to crash the application by pulling in malicious tools that resembles podman or cri-o during container image pulls...

Authorization Bypass

moodle/moodle is vulnerable to authorization bypass. When creating a user account, it was possible to verify the account without having access to the verification email link/secret...

Cross-site Scripting (XSS)

pki-core is vulnerable to cross-site scripting XSS. An attacker could inject a specially crafted value that will be executed on the victim's browser if an attacker has a valid nonce...

Out-of-Bounds Access

openjpeg is vulnerable to out-of-bounds write. An attacker is able to inject a malicious input during conversion and encoding, causing an out-of-bounds write...

Information Disclosure

ceph is vulnerable to information disclosure. The vulnerability exists due to the password stored in mgr logs for gradana and dashboard...

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service DoS. An attacker is able to send a malicious file to trigger undefined behavior in the form of math division by zero...

Denial Of Service (DoS)

Linux kernel is vulnerable to denial of service DoS. It is possible because of a NULL-ptr deref in the spkttyioreceivebuf2 function in spkttyio.c...

Denial Of Service (DoS)

linux is vulnerable to denial of service DoS. The vulnerability exists through a use after free in the Linux kernel infiniband hfi1 driver, found in the way user calls Ioctl after open dev file and fork...

Heap Buffer Overflow

BusyBox is vulnerable to heap-based buffer overflow in the DHCP client udhcpc. It allows remote attackers to have unspecified impact via vectors involving OPTION6RD parsing...