Lucene search
+L
VeracodeMost viewed

38790 matches found

Veracode
Veracode
•added 2023/10/08 6:05 a.m.•40 views

Denial Of Service (DoS)

wireshark is vulnerable to Denial of Service DoS. A memory leak in the RTPS dissector allows a remote attacker to cause a denial of service DoS attack by sending a specially crafted RTPS packet...

6.5CVSS6.6AI score0.00485EPSS
SaveExploits1References6Affected Software1
Veracode
Veracode
•added 2023/10/03 5:21 a.m.•40 views

Server Side Request Forgery (SSRF)

torchserve is vulnerable to Server Side Request Forgery SSRF. The vulnerability is caused by a missing input validation check in the default configuration for the property value of allowedurls, which is used to restrict URLs used to load the PyTorch model in the application. This can lead to an...

10CVSS6.9AI score0.355EPSS
SaveExploits6References6Affected Software1
Veracode
Veracode
•added 2023/10/02 7:13 p.m.•40 views

Information Disclosure

openjdk8 is vulnerable to Information Disclosure. An attacker can access the vulnerable library through the multiple network and gain read access to the subset of Oracle Java SE, Oracle GraalVM Enterprise Edition and Oracle GraalVM...

3.7CVSS6.5AI score0.01319EPSS
SaveExploits0References6Affected Software3
Veracode
Veracode
•added 2023/10/02 5:47 p.m.•40 views

Remote Code Execution (RCE)

exim is vulnerable to Remote Code Execution RCE. The vulnerability arises from the absence of proper validation for user-supplied data in the SMTP service. This could result in a buffer overflow, enabling an attacker to inject and execute malicious code within the service account's context...

9.8CVSS9.8AI score0.09961EPSS
SaveExploits5References2Affected Software2
Veracode
Veracode
•added 2023/09/25 9:18 a.m.•40 views

Insecure Temporary Files

org.jenkins-ci.main: jenkins-core is vulnerable to Insecure Temporary Files. The vulnerability is caused by not restricting permissions to the temporary file in the system temporary directory and leaving the newly created files with default permissions which are created by the Jenkins API...

8.1CVSS7.3AI score0.008EPSS
SaveExploits0References5Affected Software1
Veracode
Veracode
•added 2023/09/20 9:06 a.m.•40 views

HTTP Request Smuggling

Jetty is vulnerable to HTTP Request Smuggling. The vulnerability is due to accepting + character proceeding the content-length in the request. This vulnerability can be exploited by the attacker to possibly conduct request smuggling attacks...

5.3CVSS6.9AI score0.01069EPSS
SaveExploits0References6Affected Software2
Veracode
Veracode
•added 2023/08/31 8:28 p.m.•40 views

Denial Of Service (DoS)

binutils is vulnerable to Denial of Service DoS attacks. The vulnerability exists in the loadseparatedebugfiles function in the dwarf2.c file. The function is responsible for loading debug information from separate ELF files. The vulnerability occurs when the function fails to properly check the...

5.5CVSS6.5AI score0.00498EPSS
SaveExploits1References5Affected Software1
Veracode
Veracode
•added 2023/08/16 12:26 a.m.•40 views

SQL Injection

postgresql is vulnerable to SQL injection. This vulnerability occurs when a user sends a specially crafted query that uses the @extowner@ function. If the query is valid, PostgreSQL could be tricked into executing arbitrary SQL code...

8.8CVSS7.9AI score0.01676EPSS
SaveExploits0References40Affected Software7
Veracode
Veracode
•added 2023/08/08 11:03 p.m.•41 views

Denial Of Service (DoS)

mariadb is vulnerable to Denial of Service DoS attacks. The vulnerability occurs when MariaDB attempts to print a warning message for a query that fails. If the query contains a NULL value, MariaDB could dereference a NULL pointer and crash...

6.5CVSS6.8AI score0.01486EPSS
SaveExploits0References8Affected Software1
Veracode
Veracode
•added 2023/08/07 1:17 a.m.•40 views

Authorization Bypass

chromium is vulnerable to Authorization Bypasses. Inappropriate implementation in Extensions API allows an attacker who convinces a user to install a malicious extension to spoof the contents of the UI via a crafted Chrome Extension...

4.3CVSS6.5AI score0.00621EPSS
SaveExploits0References6Affected Software1
Veracode
Veracode
•added 2023/08/06 5:07 p.m.•40 views

Remote Code Execution (RCE)

gitlab is vulnerable to Remote Code Execution RCE. This vulnerability occurs due to a flaw in the way that GitLab handles group SAML SSO. An attacker can exploit this vulnerability to invite arbitrary users to a group, and then change the user's email address to an attacker-controlled address. Th...

9.9CVSS7.1AI score0.15904EPSS
SaveExploits0References3Affected Software1
Veracode
Veracode
•added 2023/08/06 2:39 p.m.•40 views

Privilege Escalation

gitlab is vulnerable to Privilege Escalation. This vulnerability occurs due to a flaw in the way that GitLab handles project tokens. An attacker with the "Maintainer" role on any project can exploit this vulnerability to gain the "Internal" role on the same project, which grants them elevated...

6.5CVSS6.4AI score0.01095EPSS
SaveExploits1References4Affected Software1
Veracode
Veracode
•added 2023/08/03 5:20 a.m.•40 views

Heap-based Buffer Overflow

libopenbabel.so is vulnerable to Heap-based Buffer Overflow. The vulnerability exists in the ReadMolecule function at orcaformat.cpp when parsing an input file due to improper handling of the buffer size, which allows an attacker to provide a specially-crafted malformed file resulting in arbitrar...

9.8CVSS7.4AI score0.00804EPSS
SaveExploits1References2Affected Software1
Veracode
Veracode
•added 2023/07/26 12:52 p.m.•40 views

Path Traversal

org.apache.shiro:shiro-web is vulnerable to Path Traversal. The vulnerability exists in InvalidRequestFilter.java because it does not properly validate downloaded files for subpaths, which allows an attacker to to write to a directory outside the restricted path...

9.8CVSS6.3AI score0.02074EPSS
SaveExploits0References6Affected Software1
Veracode
Veracode
•added 2023/07/26 9:09 a.m.•40 views

Cross-Site Scripting (XSS)

copyparty is vulnerable to Cross-Site Scripting. The vulnerability exists due to a lack of user input validation in the ?k304= and ?setck= parameters which allows an attacker to inject and execute arbitrary JavaScript into the browser...

6.3CVSS7AI score0.09321EPSS
SaveExploits3References5Affected Software1
Veracode
Veracode
•added 2023/07/14 9:36 a.m.•40 views

Path Traversal

apacheairflow is vulnerable to Path Traversal. The vulnerability exists because the DagRun.runid parameter is not properly sanitized which allows an attacker to gain access to unauthorized files outside the intended directory...

6.5CVSS7AI score0.01787EPSS
SaveExploits0References4Affected Software1
Veracode
Veracode
•added 2023/07/10 12:08 p.m.•40 views

Type Confusion

qt5-qtwebengine is vulnerable to Type Confusion. A malicious attacker could remotely exploit heap corruption via a crafted HTML page...

8.8CVSS7AI score0.23855EPSS
SaveExploits1References8Affected Software2
Veracode
Veracode
•added 2023/06/27 4:12 p.m.•40 views

Denial Of Service (DoS)

libbind9.so is vulnerable to Denial Of Service. The vulnerability exists due to improper memory management in the cache, which allows an attacker to effectively bypass the max-cache-size configuration statement...

7.5CVSS6.8AI score0.03776EPSS
SaveExploits0References8Affected Software4
Veracode
Veracode
•added 2023/06/16 7:42 a.m.•40 views

Denial Of Service (DoS)

.NET is vulnerable to Denial of Service DoS attacks. The vulnerability is due to processing X.509 certificates, which allows a malicious user is to trigger an application crash by passing a crafted certificate...

7.5CVSS6.7AI score0.02627EPSS
SaveExploits0References3Affected Software18
Veracode
Veracode
•added 2023/05/21 4:19 p.m.•40 views

Denial Of Services (DoS)

libssh.so is vulnerable to Denial Of Services DoS. The vulnerability exists due to a null pointer dereference during rekeying with algorithm guessing, which allows an attacker to cause an application crash when the client initiates rekeying with the firstkexpacketfollows flag in the KEXINIT messa...

6.5CVSS6.7AI score0.01314EPSS
SaveExploits0References12Affected Software2
Veracode
Veracode
•added 2023/05/19 4:44 a.m.•40 views

Path Traversal

starlette is vulnerable to Path Traversal. A remote attacker is able to gain access to sensitive files when the file or directory is exposed via StaticFiles. The vulnerability is exploitable if the file or directory starts with the same name as the StaticFiles directory...

7.5CVSS7.2AI score0.02049EPSS
SaveExploits1References7Affected Software1
Veracode
Veracode
•added 2023/05/16 7:02 a.m.•40 views

Authentication Bypass

n8n is vulnerable to Authentication Bypass. The vulnerability is due to a lack of authentication in auth.ts when the url contains .svg, resulting in information disclosure...

7.5CVSS6.6AI score0.01214EPSS
SaveExploits2References6Affected Software1
Veracode
Veracode
•added 2023/05/16 6:19 a.m.•40 views

Directory Traversal

n8n is vulnerable to Directory Traversal. Improper input validation for the credentialType argument of the getCredentialTranslationPath function allows directory traversal via the /rest/credential-translation endpoint, resulting in file disclosure...

6.5CVSS6.9AI score0.02316EPSS
SaveExploits1References5Affected Software1
Veracode
Veracode
•added 2023/04/18 11:58 a.m.•40 views

Denial Of Service (DoS)

github.com/golang/go is vulnerable to Denial of Service DoS attacks. A malicious user is able to cause an infinite loop via integer overflows when calling any of the Parse functions which contain //line directives with very large line numbers, which can cause the application to crash...

7.5CVSS8.3AI score0.01412EPSS
SaveExploits0References10Affected Software2
Veracode
Veracode
•added 2023/04/18 5:41 a.m.•40 views

Remote Code Execution

Microsoft .NET is vulnerable to Remote Code Execution. The vulnerability exists because DLL's can be loaded from an unexpected location which allows an attacker to inject and execute malicious code into the system, resulting in DLL Hijacking...

7.8CVSS7.9AI score0.01531EPSS
SaveExploits0References2Affected Software8
Veracode
Veracode
•added 2023/04/06 7:31 p.m.•40 views

Denial Of Service (DoS)

docker is vulnerable to Denial of Service DoS attacks. The injection of arbitrary ethernet frames allow remote attackers to enable denial of service attacks, such as establishing a UDP or TCP connection or smuggling packets into the overlay network...

8.7CVSS7.8AI score0.0271EPSS
SaveExploits1References12Affected Software2
Veracode
Veracode
•added 2023/04/06 7:31 p.m.•40 views

Authorization Bypass

docker is vulnerable to Authorization Bypasses. Encrypted overlay networks can be used to inject arbitrary Ethernet frames into the network by encapsulating them in VXLAN datagrams...

6.8CVSS6.9AI score0.0144EPSS
SaveExploits0References10Affected Software2
Veracode
Veracode
•added 2023/03/24 12:48 a.m.•40 views

Denial Of Service (DoS)

eap7 is vulnerable to Denial of Service DoS attacks. A denial of service is possible due to an unexpected handshake status updated in SslConduit, where the loop never terminates...

7.5CVSS8.9AI score0.01771EPSS
SaveExploits0References22Affected Software4
Veracode
Veracode
•added 2023/03/13 5:45 a.m.•40 views

Information Disclosure

Google Chrome is vulnerable to Information Disclosure. The vulnerability exists due to the inappropriate implementation in Paint, which allows an attacker to leak cross-origin data outside an iframe via a crafted HTML page...

4.3CVSS4.9AI score0.00458EPSS
SaveExploits1References3Affected Software1
Veracode
Veracode
•added 2023/03/12 9:55 a.m.•40 views

Denial Of Service (DoS)

Google Chrome is vulnerable to Denial Of Service DoS. The vulnerability exists due to the use after free in the Web Payments API, which allows an attacker to compromise the renderer process to potentially exploit heap corruption via a crafted HTML page, leading to an application crash...

8.8CVSS8.7AI score0.00579EPSS
SaveExploits0References4Affected Software1
Veracode
Veracode
•added 2023/03/11 2:01 p.m.•40 views

Information Disclosure

389-ds-base is vulnerable to Information Disclosure. The mishandling of a filter may lead to an access control bypass, allowing remote unauthenticated users to search for database items they do not have access to, such as userPassword hashes and other sensitive data...

7.5CVSS7.3AI score0.01466EPSS
SaveExploits0References2Affected Software1
Veracode
Veracode
•added 2023/03/07 12:47 a.m.•40 views

Arbitrary Code Execution

webkitgtk is vulnerable to Arbitrary Code Execution. Processing maliciously crafted web content may lead to arbitrary code execution which allows a remote attacker to create a specially crafted web page and trick the victim into opening it, triggering type confusion, and execute arbitrary code on...

8.8CVSS9AI score0.09502EPSS
SaveExploits0References11Affected Software3
Veracode
Veracode
•added 2023/03/06 8:39 p.m.•40 views

Information Disclosure

Linux kernel is vulnerable to Information Disclosure. The vulnerability exists because the internal memory locations could be returned to userspace, allowing an attacker with permission to insert eBPF code into the kernel, which leads to a leak of internal kernel memory details when handling...

4.4CVSS2.7AI score0.00246EPSS
SaveExploits0References6Affected Software2
Veracode
Veracode
•added 2023/03/06 7:24 p.m.•40 views

Denial Of Service (DoS)

Linux Kernel is vulnerable to Denial Of Service DoS. The vulnerability exists because an attacker can cause race condition on followpagepte function of gup.c, leading to an application crash...

7.5CVSS7.4AI score0.0083EPSS
SaveExploits0References5Affected Software3
Veracode
Veracode
•added 2023/02/18 6:28 p.m.•40 views

Denial Of Service (DoS)

go is vulnerable to Denial of Service DoS attacks. Both clients and servers may send large TLS handshake records which cause servers and clients, respectively, to panic when attempting to construct responses...

7.5CVSS7.5AI score0.01111EPSS
SaveExploits0References7Affected Software17
Veracode
Veracode
•added 2023/02/09 8:56 p.m.•40 views

Type Confusion

openssl is vulnerable to type confusion. The vulnerability exists because it may allow an attacker to pass arbitrary pointers to a memcmp call, enabling them to read memory content...

7.4CVSS7.7AI score0.59501EPSS
SaveExploits0References8Affected Software10
Veracode
Veracode
•added 2023/02/03 11:00 p.m.•40 views

Denial Of Service (DoS)

kernel is vulnerable to Denial of Service DoS attacks. The vulnerability exists in the smb2ioctlqueryinfo function of fs/cifs/smb2ops.c, in Common Internet File System CIFS due to an incorrect return from the memdupuser function. This flaw allows a local, privileged attacker to crash the system...

4.4CVSS5.7AI score0.00269EPSS
SaveExploits0References10Affected Software2
Veracode
Veracode
•added 2023/01/28 4:49 p.m.•40 views

Denial Of Service (DoS)

bind is vulnerable to Denial of Service DoS. The vulnerability exists because Bind incorrectly handled a large number of UPDATE messages which allows a remote attacker to use this issue to cause Bind to consume resources, resulting in a denial of service...

7.5CVSS7.2AI score0.13213EPSS
SaveExploits0References2Affected Software4
Veracode
Veracode
•added 2023/01/20 9:08 p.m.•40 views

Privilege Escalation

sudo is vulnerable to Privilege Escalation. The vulnerability exists due to mishandled extra arguments passed in the user-provided environment variables. which allows to attacker to append arbitrary entries to the list of files to process, leading to accessing user information...

7.8CVSS7.7AI score0.55367EPSS
SaveExploits21References17Affected Software4
Veracode
Veracode
•added 2023/01/19 4:54 a.m.•40 views

Session Fixation

github.com/KubeOperator/kubepi is vulnerable to Session Fixation. The vulnerability exists due to insufficient session expiration mechanisms in the library, allowing an attacker to hijack the legitimate user sessions...

7.5CVSS6.2AI score0.00403EPSS
SaveExploits0References4Affected Software1
Veracode
Veracode
•added 2023/01/08 12:52 p.m.•40 views

Remote Code Execution (RCE)

dubbo-cluster is vulnerable to remote code execution. The vulnerability exists in the doInvoke function of BroadcastClusterInvoker.java as it does not properly handle FastJson when invoking the invoke handler and later processes in PojoUtils.realize, allowing an attacker to instantiate arbitrary...

9.8CVSS9.4AI score0.0282EPSS
SaveExploits1References5Affected Software1
Veracode
Veracode
•added 2023/01/06 11:13 a.m.•40 views

Privilege Escalation

samba is vulnerable to Privilege Escalation. The Netlogon RPC implementations uses the rc4-hmac encryption algorithm, which is considered weak and should be avoided even if the client supports more modern encryption types, which allows an attacker who knows the plain text content communicated...

8.1CVSS8AI score0.02503EPSS
SaveExploits0References7Affected Software3
Veracode
Veracode
•added 2022/12/11 5:20 a.m.•40 views

Insufficient Policy Enforcement

chromium is vulnerable to insufficient policy enforcement. The vulnerability exists because of the file system api in google chrome which allows attackers to bypass file system restrictions via a crafted HTML page...

8.8CVSS8AI score0.00662EPSS
SaveExploits0References5Affected Software1
Veracode
Veracode
•added 2022/12/09 4:11 a.m.•40 views

Denial Of Service (DoS)

libgpac.so is vulnerable to denial of service. The vulnerability exists due to unlimited length checks and user-controllable content in the smilparsetimelist function of svgattributes.c, resulting in a stack overflow...

7.8CVSS7AI score0.00431EPSS
SaveExploits1References4Affected Software2
Veracode
Veracode
•added 2022/12/08 1:48 p.m.•40 views

Improper Certification Validation

certifi is vulnerable to improper certificate validation. The vulnerability exists due to an untrustworthy certificate authority TrustCor root certificate, which are now marked as invalid...

7.5CVSS7.5AI score0.00535EPSS
SaveExploits0References4Affected Software1
Veracode
Veracode
•added 2022/11/23 9:48 a.m.•40 views

Denial Of Service (DoS)

xen is vulnerable to denial of service. The vulnerability exists due to excessive memory allocation which allows an attacker to cause an application crash due to overflows...

6.5CVSS7.1AI score0.00252EPSS
SaveExploits0References11Affected Software1
Veracode
Veracode
•added 2022/11/23 2:09 a.m.•41 views

Information Disclosure

bc-fips is vulnerable to Information Disclosure. The vulnerability exists because the temporary keys used in the module get zeroed out while still in use by the module, resulting in an error or potential information loss. This vulnerability only affects Java 13 or later...

5.5CVSS5.4AI score0.0043EPSS
SaveExploits1References4Affected Software1
Veracode
Veracode
•added 2022/11/19 4:21 p.m.•40 views

Denial Of Service (DoS)

Linux kernel’s KVM is vulnerable to denial of service. The vulnerability exists due to a NULL pointer dereference which allows an unprivileged local attacker on the host to issue specific ioctl calls, causing a kernel oops condition that results in a denial of service...

5.5CVSS5.9AI score0.00466EPSS
SaveExploits1References8Affected Software4
Veracode
Veracode
•added 2022/11/19 12:48 a.m.•40 views

Information Disclosure

rh-mysql80-mysql is vulnerable to denial of service. The vulnerability exists in the Server: Optimizer component, allowing attackers to cause an application crash and modify the critical data or all MySQL Server accessible data through multiple protocols...

6.5CVSS6.5AI score0.01225EPSS
SaveExploits0References5Affected Software1
Veracode
Veracode
•added 2022/11/14 6:29 a.m.•40 views

Integer Overflow

libtiff.so is vulnerable to integer overflow. The vulnerability is due to memory corruption in tifgetimage.c, which allows the remote attacker to crash the application...

8.8CVSS8.5AI score0.01273EPSS
SaveExploits1References9Affected Software4
Total number of security vulnerabilities5000