38790 matches found
Arbitrary Code Execution
openoffice.org is vulnerable to arbitrary code execution. The vulnerability exists as a numeric truncation error was found in the OpenOffice.org memory allocator. If a carefully crafted file was opened by a victim, an attacker could use this flaw to crash OpenOffice.org or, possibly, execute...
Arbitrary Code Execution
kernel is vulnerable to arbitrary code execution. A flaw was found in the IA32 system call emulation provided on AMD64 and Intel 64 platforms. An improperly validated 64-bit value could be stored in the %RAX register, which could trigger an out-of-bounds system call table access. An untrusted loc...
Information Disclosure
kernel is vulnerable to information disclosure. The vulnerability exists as a bug in the random number generator that prevented the manual seeding of the entropy pool...
Arbitrary Code Execution
php is vulnerable to arbitrary code execution. A buffer overflow flaw was found in the PHP 'soap' extension, regarding the handling of an HTTP redirect response when using the SOAP client provided by this extension with an untrusted SOAP server...
Denial Of Service (DoS)
ISC BIND is vulnerable to denial of service DoS. A flaw was found in the way BIND generates outbound DNS query ids. If an attacker is able to acquire a finite set of query IDs, it becomes possible to accurately predict future query IDs. Future query ID prediction may allow an attacker to conduct ...
Arbitrary Memory Read
The Linux kernel is vulnerable to arbitrary memory read. A flaw in the IPv6 socket option handling allows a local user to read arbitrary kernel memory...
Arbitrary Code Execution
php is vulnerable to arbitrary code execution. A buffer over-read flaw was discovered in PHP's gd extension. A script that could be forced to write arbitrary strings using a JIS font from an untrusted source could cause the PHP interpreter to crash...
Arbitrary Code Execution
poppler is vulnerable to arbitrary code execution. An integer overflow flaw in the processing of PDF files allows an attacker to create a malicious PDF file that would cause an application linked with poppler to crash or potentially execute arbitrary code when opened...
Authorization Bypass
openssh is vulnerable to authorization bypass. The vulnerability exists as a flaw was found in the way the ssh server wrote account names to the audit subsystem. An attacker could inject strings containing parts of audit messages, which could possibly mislead or confuse audit log parsing tools...
Remote Code Execution (RCE)
Mozilla Thunderbird is vulnerable to Remote Code Execution RCE. A malicious web page could cause the execution of Javascript code in such a way that could cause Thunderbird to crash or execute arbitrary code as the user running Thunderbird. JavaScript support is disabled by default in Thunderbird...
Information Disclosure
Mozilla is vulnerable to information disclosure. The vulnerability exists as uninitialized memory could be read when using the WebGL copyTexSubImage method...
Memory Leaks
ImageMagick is vulnerable to memory leaks in the function AcquireMagickMemory because of an AnnotateImage error...
Remote Code Execution
pyyaml is vulnerable to arbitrary code execution. The vulnerability exists as .yaml files are parsed by FullLoader uses the unsafe yaml.load by default...
Remote Code Execution (RCE)
jsreport is vulnerable to remote code execution RCE. Of a variety of packages it consists, the Script-manager utilized for running user's scripts in a sandbox has an unintended require vulnerability and Puppeteer utilized for turning user's HTML into pdf files has SSRF Server Side Request Forgery...
Denial Of Service (DoS)
ecstatic is vulnerable to a denial of service DoS. When an attacker provides a URL parameter with symbols such as \x0c, it leads to a redirection from /existing-dir-name?\x0cfoo to /existing-dir-name/?\x0cfoo and causes TypeError: The header content contains invalid characters error, possibly...
Denial Of Service (DoS)
Mozilla firefox is vulnerable to denial of service DoS. The vulnerability exists through a use-after-free error when performing device orientation checks...
Timing Attack
symfony/symfony is vulnerable to timing attack. When checking the signature of an URI an ESI fragment URL for instance, the URISigner did not used a constant time string comparison function, allowing a remote attacker to guess the URI by analyzing the server response time...
Information Disclosure
kernel is vulnerable to information disclosure. Due to the way Intel CPUs handle speculative execution of instructions when the TSX Asynchronous Abort TAA error occur, a local authenticated attacker with the ability to monitor execution times could infer the TSX memory state by comparing abort...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists through a memory leak in registerqueuekobjects in net/core/net-sysfs.c...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists through a null-pointer dereference in hciuartsetflowcontrol...
Authentication Bypass
github.com/goharbor/harbor is vulnerable to authentication bypass. The vulnerability exists as an admin is able to create a robot account in another project through the Harbor API, leading to unauthorized access to push/pull/modify images in the target project...
Remote Code Execution
ReportLab is vulnerable to remote code execution. This is due to the usage of toColorevalarg in colors.py, allowing a remote attacker to execute arbitrary Python code using a malicious XML document that utilizes 'span color="' followed by arbitrary Python code...
Denial Of Service (DoS)
OpenJDK is vulnerable to denial of service DoS. The vulnerability exists it is possible to cause excessive memory allocation in CMap when reading TrueType font...
Remote Code Execution (RCE) Via Partial Denial Of Service (DoS)
OpenJDK is vulnerable to remote code execution RCE. It is possible because it causes an unexpected exception thrown during Font object deserialization, leading to a partial denial of service DoS of Java SE. A client using a Java sandbox or using a Java web service with data supplies to APIs can b...
Denial Of Service (DoS)
OpenJDK is vulnerable to denial of service DoS. The vulnerability exists through an Integer overflow in bounds check in SunGraphics2D...
Brute-force Attack
kernel is vulnerable to brute-force attacks. The vulnerability exists as bluetooth BR/EDR up to version 5.1 allows sufficiently low encryption key length and also allows an attacker to select a key length during negotiation...
Information Disclosure
undertow is vulnerable to information disclosure. The vulnerability exists as the DEBUG log for io.undertow.request.security leaks credentials to log files if it is enabled...
Information Disclosure
cri-o is vulnerable to information disclosure. The vulnerability exists as it does not enforce TLS when sending username+password credentials to token servers leading to credential disclosure...
Out-of-Bounds Access
PHP is vulnerable to Out of bounds access. It is possible when a call with malicious pregreplace is made, causing an OOB access in the phppcre.c:phppcrereplaceimpl function...
Denial Of Service (DoS)
elfutils is vulnerable to denial of service DoS. It causes a heap-based buffer over-read in libdw/dwarfgetaranges.c:dwarfgetaranges via a malicious file...
Information Disclosure
kernel is vulnerable to information disclosure. The vulnerability exists as the Bluetooth implementations may not sufficiently validate elliptic curve parameters during Diffie-Hellman key exchange...
Denial Of Service (Dos)
patch is vulnerable to denial of service. An out-of-bounds access in the function pchwriteline in pch.c allows an attacker to crash the application using a malicious file...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists through vfio DMA mappings...
Denial Of Service (Dos)
binutils is vulnerable to denial of service. A NULL pointer dereference in the function workstuffcopytofrom in cplus-dem.c which can occur during execution of objdump allows an attacker to crash the application...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists through a NULL pointer dereference in xfsdashrinkinode function...
Buffer Overflow
libpng is vulnerable to buffer overflow. The attack exists because of a flaw in PNM decoding which causes a stack overflow in the function gettoken in pnm2png.c in pnm2png...
Arbitrary File Read
podman is vulnerable to arbitrary file read. The vulnerability exists through an improper symlink resolution allows access to host files when executing podman cp on running containers...
Denial Of Service (DoS)
libopenjpeg.so is vulnerable to denial of service DoS. The functions pinextpcrl, pinextcprl, and pinextrpcl in openmj2/pi.c cause Division-by-zero error, leading to an application crash...
Denial Of Service (DoS)
Oracle Java SE is vulnerable to denial of service DoS attacks. The vulnerability exists in Deployment component in the Java SE component of Oracle Java SE. An unauthenticated attacker with network access via multiple protocols could cause denial of service condition with the aid of human...
Denial Of Service (DoS)
Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the RPM packages for Red Hat OpenShift Container Platform 3.11.82. See the following advisory for the container...
Privilege Escalation
Apache HTTP Server is vulnerable to privilege escalation vulnerability. The vulnerability exists due to an improper input validation flaw in an unknown code block of the component modsessionin in the way it handles HTTP session headers in some configurations. A remote attacker could influence the...
Denial Of Service (DoS)
Linux kernel is vulnerable to denial of serviceDoS attacks. This exists in the sassmpgetphyevents function in drivers/scsi/libsas/sasexpander.c which allows local users to cause a denial of service kernel memory exhaustion via multiple read accesses to files in the /sys/class/sasphy directory...
Privilege Escalation
Linux kernel is vulnerable to privilege escalation vulnerability. The vulnerability exists in an unknown function of the component Speculative Execution. An attacker could execute and/ read privileged memory by conducting targeted cache side-channel attacks...
Denial Of Service (DoS)
Oniguruma is vulnerable to denial-of-service attacks. A remote unauthenticated attacker could exploit the flawed function leftadjustcharhead of the component Regular Expressionresult causing an invalid pointer dereference resulting in denial-of-service conditions...
Denial Of Service (DoS)
PHP is vulnerable to denial of service DoS attacks. The vulnerability exists in the ext/intl/msgformat/msgformatformat.c in PHP. Remote attackers could cause a denial of service or possibly have unspecified other impact via a MessageFormatter::formatMessage call with a long first argument...
Denial Of Service (DoS)
Oracle MySQL is vulnerable to denial of serviceDoS attacks. A remote user could exploit a flaw in the Client programs component which leads to unauthorized attacker to cause a hang or frequently repeatable crash complete DoS...
Arbitrary Code Execution
GNU C Library is vulnerable to arbitrary code execution. A remote unauthenticated attacker could cause a buffer overflow during unescaping of user names with the operator resulting in denial of service conditions and code execution attacks...
Denial Of Service (DoS)
Oracle MySQL is vulnerable to denial of service attacks. A remote authenticated user with low privileges could compromise MySQL Server via multiple protocols resulting in a system crash. Affected is the component DDL...
Improper Access Control
Oracle Java SE is vulnerable to improper access control vulnerability. This occurs in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: AWT. An unauthenticated attacker with network access via multiple protocols could compromise Java SE, Java SE Embedded with the help of...
Information Disclosure
MySQL is vulnerable to information disclosure vulnerability. A low privileged attacker with network access via multiple protocols could compromise MySQL Server resulting in unauthorized read access to a subset of MySQL Server accessible data...