38839 matches found
Denial Of Service (DoS)
open-iscsi is vulnerable to denial of service DoS. The vulnerability exists through an Out-of-Bounds read in the uIP TCP/IP Stack component when calculating the checksums for IP packets in upperlayerchksum in net/ipv4/uip.c...
Arbitrary Code Execution
openjpeg is vulnerable to arbitrary code execution. A heap-based buffer-overflow write allows an attacker to execute arbitrary code on the host OS...
Denial Of Service (DoS)
Qemu is vulnerable to denial of service. The vulnerability exist because of an infinite loop via an RX descriptor with a NULL buffer address...
Arbitrary Code Injection
Apache SpamAssassin is vulnerable to arbitrary code injection. A local user is able to inject arbitrary code in the meta rule syntax...
CVE-2020-16289
Artifex Software GhostScript is vulnerable to denial of service attacks. A remote attacker could cause buffer overflows in cifprintpage in devices/gdevcif.c via a crafted PDF file resulting in denial of service conditions...
Arbitrary Code Execution
libapache2-mod-fcgid is vulnerable to arbitrary code execution. A heap-based buffer overflow in the fcgidheaderbucketread function in fcgidbucket.c allows remote attackers to execute arbitrary code on the host OS...
Denial Of Service (DoS)
Linux kernel is vulnerable to denial of service. Local attackers are able to inject conntrack netlink configuration to overflow a local buffer and cause a crash in ctnetlinkparsetuplefilter in net/netfilter/nfconntracknetlink.c...
Denial Of Service (DoS)
Node.js is vulnerable to Denial of Service. An attacker may trigger Denial of Service by sending DNS request and getting the application to resolve a DNS record with a larger number of response...
Buffer Over-read
oniguruma is vulnerable to Heap-based buffer over-read. It is possible because of a flaw in the function gb18030mbcenclen in file gb18030.c...
Information Disclosure
php is vulnerable to information disclosure. The vulnerability exists as the DirectoryIterator class accepts filenames with embedded \0 byte and treats them as terminating at that byte...
Denial Of Service (DoS)
math/big in github.com/golang/go is vulnerable to denial of service. An attacker can send a divisor or modulo argument larger than 3168 bits on 32-bit architectures or 6336 bits on 64-bit architectures to a number of math/big.Int methods Div, Exp, DivMod, Quo, Rem, QuoRem, Mod, ModInverse, ModSqr...
Privilege Escalation
Moodle is vulnerable to privilege escalation. Users students are able to add entries within groups they do not belong to...
Arbitrary Code Execution
chakracore is vulnerable to arbitrary code execution. A memory corruption vulnerability allows an attacker to execute arbitrary code on the host OS. This CVE ID is different from CVE-2020-17048...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. A use-after-free in nttyreceivebufcommon allows an attacker to crash the kernel and potentially obtain confidential information...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. The vulnerability exists due to a memory leak in the rtl8xxxusubmitinturb function which allows an attacker to crash the kernel...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS.Two memory leaks in the rtlusbprobe function in 'drivers/net/wireless/realtek/rtlwifi/usb.c' allows an attacker to crash the application...
Privilege Escalation
wordpress is vulnerable to privilege escalation. Using XML-RPC allows an unprivileged user to comment on a post as wp-includes/class-wp-xmlrpc-server.php does not enforce the permission to restrict it...
Information Disclosure
guava is vulnerable to Information Disclosure. A folder with insecure permissions is created by the function com.google.common.io.Files.createTempDir. A local user will be able to steal secrets stored in this directory...
Information Disclosure
kernel is vulnerable to information disclosure. The vulnerability exists in net bluetooth when processing certain AMP packets...
XML External Entity (XXE)
jackson-databind is vulnerable to XML external entity XXE attack. The external DTDs and doctype declarations not disabled by default and allows an attacker to perform XXE attacks against the application using the library...
Authorization Bypass
apache-ant is vulnerable to authorization bypass. The vulnerabiltiy exists through the mitigation for CVE-2020-1945 has changed the permissions of temporary files it created so that only the current user was allowed to access them, while the fixcrlf task deleted the temporary file and creates a n...
Denial Of Service (DoS)
webkitgtk4 is vulnerable to denial of service DoS. The vulnerability exists through an improper memory handling...
Arbitrary Code Execution
webkitgtk is vulnerable to arbitrary code execution. The vulnerability exists through memory corruption...
Arbitrary Code Execution
WebKitGTK+ is vulnerable to arbitrary code execution. A memory corruption issue allows an attacker to execute arbitrary code on the host OS...
Arbitrary Code Execution
WebKitGTK+ is vulnerable to arbitrary code execution. A memory corruption issue allows an attacker to execute arbitrary code on the host OS...
HTTP Request Splitting
squid is vulnerable to HTTP Request Splitting. Insecure parsing of the Transfer-Encoding header allows an attacker to split an HTTP request and perform cache poisoning...
Out-of-bounds (OOB) Read/Write
OpenEXR is vulnerable to out-of-bounds read/write. It is possible via std::vector out-of-bounds read and write in ImfTileOffsets.cpp...
Denial Of Service (DoS)
brotli is vulnerable to denial of service. A buffer overflow vulnerability exists where an attacker can crash the application by controlling the input length of a one-shot decompression request to a script. This happens when copying over chunks of data larger than 2 GiB...
Denial Of Service (DoS)
wireshark is vulnerable to denial of service. An attacker is able to crash the MIME Multipart dissector by injecting a malformed packet onto the wire or by convincing a user to read a malicious packet trace file...
Cross-site Scripting (XSS)
firefox is vulnerable to cross-site scripting XSS. The vulnerability exists when pasting a tag from the clipboard into a rich text editor, and the CSS sanitizer does not escape characters, and when a webpage subsequently copies the node's innerHTML, and assigns it to another innerHTML...
Arbitrary Code Execution
ruby is vulnerable to arbitrary code execution. An attacker is able to inject code in the first argument to the command argument to Shell or Shelltest in lib/shell.rb...
Denial Of Service (DoS)
graphicsmagick:xenial is vulnerable to denial of service DoS. A NULL pointer dereference vulnerability was found in the function ReadEnhMetaFile in coders/emf.c, which allows attackers to cause a denial of service via a crafted file...
Use-After-Free
qemu is vulnerable to use-after-free. hw/9pfs/cofile.c and hw/9pfs/9p.c in QEMU can modify an fid path while it is being accessed by a second thread, leading to for example a use-after-free outcome...
Denial Of Service (DoS)
QEMU is vulnerable to denial of service DoS. es1370transferaudio in hw/audio/es1370.c does not properly validate the frame count, which allows guest OS users to trigger an out-of-bounds access during an es1370write operation...
Denial Of Service (DoS)
graphicsmagick is vulnerable to denial of service DoS. The vulnerability exists through a NULL pointer dereference vulnerability in the function SVGStartElement in coders/svg.c...
Denial Of Service (DoS)
binutils:bionic is vulnerable to denial of service DoS. An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils. There is a heap-based buffer over-read in bfddoprnt in bfd.c because elfobjectp in elfcode.h mishandles an eshstrndx section of typ...
Denial Of Service (DoS)
openjpeg is vulnerable to denial of service. A use-after-free bug occurs in jp2/opjdecompress.c when there is a mix of valid and invalid files in a directory operated on by the decompressor...
Regular Expression Denial Of Service (ReDoS)
ua-parser-js is vulnerable to regular expression denial of service. A remote attacker is able to cause a denial of service condition by submitting a malicious string that when parsed via the Redmi and Mi Pad regexes, would result in excessive resource consumption...
Man-in-the-Middle (MitM)
ansible is vulnerable to man-in-the-middle MitM. The vulnerability exists as the dnf module does not perform validation of GPG signatures during the installation of packages...
Denial Of Service (DoS)
xorg-server is vulnerable to denial of service. The vulnerability exists as the handler for the XkbSetNames request does not validate the request length before accessing its contents, causing an integer underflow in the handler for the XIChangeHierarchy request through XkbSelectEvents...
XML External Entity (XXE)
mpxj is vulnerable to XML external entity attacks. The XMLFilter is configured with external DTDs by default, allowing an attacker to perform XXE attacks to access system files or perform requests on behalf of the server...
SQL Injection
hibernate-core is vulnerable to SQL injection. The vulnerability exists in Hibernate ORM...
Arbitrary Code Execution
Webkit2gtk is vulnerable to arbitrary code execution. The vulnerability exists as a use-after-free issue exists in WebKitGTK before 2.28.1 and WPE WebKit before 2.28.1 via crafted web content...
Denial Of Service (DoS)
xen is vulnerable to denial of service DoS. The vulnerability exists through the bad continuation handling in GNTTABOPcopy. Grant table operations are expected to return 0 for success, and a negative number for errors. The fix for CVE-2017-12135 introduced a path through grant copy handling where...
Information Disclosure
openjdk is vulnerable to information disclosure. HostnameChecker does not ensure X.509 certificate names are in normalized form, potentially resulting in an unauthorized read access...
Information Disclosure
jetty-server is vulnerable to information disclosure. An HTTP 431 error occurs when large response headers are received, causing the HTTP response headers to be released to ByteBufferPool twice. This results in a double release and memory corruption and causes confidential information to be...
Denial Of Service (DoS)
unbound is vulnerable to denial of service DoS. The vulnerability exists due to an incomplete fix for CVE-2020-12662 in RHEL7...
Remote Code Execution
jackson-databind is vulnerable to remote code execution. It was possible to use the apache-drill gadget type as a serialization gadget through polymorphic typing and execute arbitrary code on the system...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS.It is possible because of brcmfmac frame validation bypass...
Arbitrary Code Execution
kernel is vulnerable to arbitrary code execution. The vulnerability exists through a use-after-free in block/bfq-iosched.c related to bfqidleslicetimerbody...