38790 matches found
Denial Of Service (DoS)
ImageMagick is vulnerable to denial of service. An attacker is allowed to send an input value which is outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c to trigger an application crash...
Missing Security UI
firefox is missing security UI. It was possible to cause the browser to enter fullscreen mode without displaying the security UI; thus making it possible to attempt a phishing attack or otherwise confuse the user...
Remote Code Execution
unomi-plugins-base is vulnerable to arbitrary code execution. An insufficient fix for CVE-2020-11975 allows an attacker to bypass the allowlist and blocklist and remotely execute arbitrary code...
Open Redirection
werkzeug is vulnerable to open redirection. An attacker is able to redirect a user to a malicious site via double slashes in the URL...
Denial Of Service (DoS)
kernel is vulnerable to denial-of-service DoS attacks. The vulnerability exists in dlparparseccproperty in arch/powerpc/platforms/pseries/dlpar.c due to an unchecked kstrdup of prop-name allowing an attacker to cause an application crash...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. A use-after-free in nttyreceivebufcommon allows an attacker to crash the kernel and potentially obtain confidential information...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. The vulnerability exists due to a memory leak in the rtl8xxxusubmitinturb function which allows an attacker to crash the kernel...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS.Two memory leaks in the rtlusbprobe function in 'drivers/net/wireless/realtek/rtlwifi/usb.c' allows an attacker to crash the application...
Use-after-free
kernel is vulnerable to use-after-free. It is possible because of a flaw in drivers/bluetooth/hcildisc.c...
Privilege Escalation
wordpress is vulnerable to privilege escalation. Using XML-RPC allows an unprivileged user to comment on a post as wp-includes/class-wp-xmlrpc-server.php does not enforce the permission to restrict it...
Information Disclosure
apache tomcat is vulnerable to information disclosure. The HTTP headers within a request can potentially be included in a subsequent request and reveal confidential information, when the agreed maximum number of concurrent streams for a connection is exceeded...
Authorization Bypass
apache-ant is vulnerable to authorization bypass. The vulnerabiltiy exists through the mitigation for CVE-2020-1945 has changed the permissions of temporary files it created so that only the current user was allowed to access them, while the fixcrlf task deleted the temporary file and creates a n...
Arbitrary Code Execution
webkitgtk is vulnerable to arbitrary code execution.The attacker execute the maliciously crafted web content to create multiple memory corruption issue lead to arbitrary code execution...
Information Disclosure
WebKitGTK+ is vulnerable to information disclosure. Processing maliciously crafted web content may result in the disclosure of process memory...
Opren Redirect
modauthopenidc is vulnerable to open redirect. Open redirect in logout url when using URLs with leading slashes...
Out-of-bounds (OOB) Read/Write
OpenEXR is vulnerable to out-of-bounds read/write. It is possible via std::vector out-of-bounds read and write in ImfTileOffsets.cpp...
Denial Of Service (DoS)
wireshark is vulnerable to denial of service. An attacker is able to crash the MIME Multipart dissector by injecting a malformed packet onto the wire or by convincing a user to read a malicious packet trace file...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. The ifsdio.c module does not validate the allocworkqueue return value, resulting in a NULL pointer dereference causing a crash...
Denial Of Service (DoS)
linux is vulnerable to denial of service DoS. The vulnerability exists as aufs improperly managed inode reference counts in the vfsubdentryopen method...
Information Disclosure
squid3 is vulnerable to information disclosure. The vulnerability exists due to incorrect data management when processing HTTP Digest Authentication where nonce tokens that contain the raw byte value of a pointer that sits within heap memory allocation, reducing ASLR protections...
Denial Of Service (DoS)
chromium-browser is vulnerable to denial of service DoS. SkPath.cpp in Skia, as used in Google Chrome on Windows and OS X and on Linux, does not properly validate the return values of ChopMonoAtY calls, which allows remote attackers to cause a denial of service uninitialized memory access and...
Use-After-Free
qemu is vulnerable to use-after-free. hw/9pfs/cofile.c and hw/9pfs/9p.c in QEMU can modify an fid path while it is being accessed by a second thread, leading to for example a use-after-free outcome...
Remote Code Execution (RCE)
opensmtpd:bionic is vulnerable to denial of service DoS. smtpmailaddr in smtpsession.c allows remote attackers to execute arbitrary commands as root via a crafted SMTP session, as demonstrated by shell metacharacters in a MAIL FROM field. This affects the "uncommented" default configuration. The...
Privilege Escalation
linux is vulnerable to privilege escalation. The vulnerability exists as a reference count is mishandled in rxqueueaddkobject and netdevqueueaddkobject in net/core/net-sysfs.c...
Denial Of Service (DoS)
QEMU is vulnerable to denial of service DoS. es1370transferaudio in hw/audio/es1370.c does not properly validate the frame count, which allows guest OS users to trigger an out-of-bounds access during an es1370write operation...
Denial Of Service (DoS)
Linux kernel is vulnerable to denial of service DoS. There is a race condition bug that can be caused by a malicious USB device in the USB character device driver layer, aka CID-303911cfc5b9. This affects drivers/usb/core/file.c...
Regular Expression Denial Of Service (ReDoS)
ua-parser-js is vulnerable to regular expression denial of service. A remote attacker is able to cause a denial of service condition by submitting a malicious string that when parsed via the Redmi and Mi Pad regexes, would result in excessive resource consumption...
Denial Of Service (DoS)
xorg-server is vulnerable to denial of service. The vulnerability exists as the handler for the XkbSetNames request does not validate the request length before accessing its contents, causing an integer underflow in the handler for the XIChangeHierarchy request through XkbSelectEvents...
Remote Code Execution (RCE)
ojdbc7 is vulnerable to remote code execution RCE. The vulnerability exists in the JDBC component of the Oracle Database Server...
Validation Bypass
PowerDNS Recursor is vulnerable validation bypass. The answer section of a NXDOMAIN response lacking an SOA is not properly validated in SyncRes::processAnswer, allowing an attacker to bypass DNSSEC validation...
Buffer Over-read
tcpdump is vulnerable to buffer over-read. The DCCP parser in tcpdump has a buffer over-read in print-dccp.c:dccpprintoption...
Denial Of Service (DoS)
Perl is vulnerable to denial of service DoS. It allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow...
Exposed API
foreman does not properly restrict access to APIs. A remote attacker is able to access arbitrary hosts via an API request...
Denial Of Service (DoS)
grub2 is vulnerable to denial of service DoS. The vulnerability exists through integer overflow in initrd size handling...
Information Disclosure
openjdk is vulnerable to information disclosure. HostnameChecker does not ensure X.509 certificate names are in normalized form, potentially resulting in an unauthorized read access...
Denial Of Service (DoS)
firefox is vulnerable to denial of service. Memory corruption due to missing sign-extension for ValueTags on ARM64 allows an attacker to crash the application...
Denial Of Service (DoS)
unbound is vulnerable to denial of service DoS. The vulnerability exists due to an incomplete fix for CVE-2020-12662 in RHEL7...
Arbitrary Code Execution
kernel is vulnerable to arbitrary code execution. The vulnerability exists through a use-after-free in block/bfq-iosched.c related to bfqidleslicetimerbody...
Denial Of Service (DoS)
ffmpeg is vulnerable to denial of service. The flvwritepacket function in libavformat/flvenc.c does not check for an empty audio packet, leading to an assertion failure...
Denial Of Service (DoS)
OpenJDK is vulnerable to denial of service. The vulnerability exists through uncaught InstantiationError exception in ObjectStreamClass which allows an attacker to cause an application crash...
JMX Rebind Flaw
camel is vulnerable to JMX rebind. The vulnerability exists due to a lack of security on JMX connector configuration...
Arbitrary Code Execution
kernel is vulnerable to arbitrary code execution. A double free may be caused by the function allocatetracebuffer in the file kernel/trace/trace.c...
Incorrect Number Generator
nss is vulnerable to incorrect number generation. The vulnerability exists as a flaw in DRBG number generation within the Network Security Services NSS library where the internal state V does not correctly carry bits over. The NSS library has been updated to fix this issue to address this issue a...
Information Disclosure
docker is vulnerable to information disclosure. The vulnerability exists as debug mode may sometimes add secrets to the debug log. This applies to a scenario where docker stack deploy is run to redeploy a stack that includes non external secrets. It potentially applies to other API users of the...
Arbitrary Code Execution
openjpeg is vulnerable to arbitrary code execution. A heap-based buffer overflow was discovered in the opjt2encodepacket function in lib/openjp2/t2.c which may lead to remote denial of service or potentially allow an attacker to execute arbitrary code on the system...
Authorization Bypass
gdm is vulnerable to authorization bypass. A lock screen bypass vulnerability exists when timed login is enabled...
Information Disclosure
git is vulnerable to information disclosure. A malicious URL containing new lines, empty host or lacks a scheme can cause credential leak...
Information Disclosure
tcpdump is vulnerable to information disclosure. The vulnerability exists through a stack-based buffer over-read in print-hncp.c:printprefix via crafted pcap...
Denial Of Service (DoS)
pillow is vulnerable to denial of service DoS. The vulnerability exists through multiple out of bounds roads in ImagingFliDecode in FliDecode.c...
Arbitrary Code Execution
rpm is vulnerable to arbitrary code execution. An attacker could create a specially-crafted RPM package that, when its package header was accessed, or during package signature verification, could cause an application using the RPM library such as the rpm command line tool, or the yum and up2date...