39248 matches found
Denial Of Service (DoS)
Insufficient access control in the IntelR PROSet/Wireless WiFi Software driver before version 21.10 may allow an unauthenticated user to potentially enable denial of service via adjacent access...
Denial Of Service (DoS)
kernel-rt is vulnerable to denial of service DoS attacks. A flaw out of bounds memory access in the Linux kernel bluetooth subsystem was found in the way when some data being read about the bluetooth device with the hciextendedinquiryresultevt call. A local user could use this flaw to crash the...
Privilege Escalation
samba is vulnerable to escalation of privilege. The vulnerability exists due to the lack of sanitization of user's authorization when RODC read-only domain controller is used when printing administration ticket...
Man-in-the-Middle (MitM)
amba:edge is vulnerable to man-in-the-middle MitM attacks.An attacker can force the client side SMB1 code to fall-back to plaintext or NTLM based authentication...
Denial Of Service (DoS)
jbcs-httpd24 is vulnerable to denial of service DoS attacks. An attacker is able to perform a buffer over-read in JIT when UTF is disabled, and \X or \R has more than one fixed quantifier, resulting in a system hang...
Directory Traversal
chrome is vulnerable to directory traversal. The vulnerability exists due to Insufficient validation of untrusted input Downloads...
Denial Of Service (DoS)
vim is vulnerable denial of service. The vulnerability exists due to Heap-based Buffer Overflow...
LDAP Injection
github.com/stevenweathers/thunderdome-planning-poker is vulnerable to LDAP injection. Lack of an escape filter allows remote attackers to inject specially crafted values through UserName parameter resulting in LDAP injection vulnerability. Successful attackers are able to read, modify or delete...
Regular Expression Denial Of Service (ReDoS)
validator is vulnerable to regular expression denial of service ReDoS. An attacker is able to slow down the application or causes an application crash via a malicious string and regex /\s+$/g via the rtrim function due to lack of safer regular expression to escape the string input from attacker...
Denial Of Service (DoS)
linux is vulnerable to denial of service. The vulnerability exists due to a race condition in ext4writeinlinedataend in fs/ext4/inline.c in the ext4 subsystem in the Linux kernel...
Denial Of Service (DoS)
linux is vulnerable to denial of service. The vulnerability exists due to an out-of-bounds OOB memory read flaw was found in the Qualcomm IPC router protocol in the Linux kernel...
Denial Of Service (DoS)
qt5-qtwebengine:edge is vulnerable to denial of service...
Denial Of Service (DoS)
rh-mysql80-mysql is vulnerable to denial of service. An attacker can crash the application via the Server: Optimizer component...
Business Logic Flaws
rustc has a business logic flaw. The vulnerability exists due to the iteratorgetunchecked more than once for the same index when the underlying iterator panics in certain conditions. This bug could lead to a memory safety violation due to an unmet safety requirement for the TrustedRandomAccess...
Denial Of Service (DoS)
chromium is vulnerable to denial of service. An attacker is able to crash the system by exploiting a heap corruption via a maliciously crafted HTML page...
Authentication Bypass
pterodactyl/panel is vulnerable to authentication bypass. The library does not properly verify the user-provided security token, allowing an attacker to bypass the two-factor authentication...
Bypass Of Secure Validation
Apache Santuario is vulnerable to bypass of secure validation. Lack of secure handling of secureValidation property allows an attacker to abuse an XPath Transform and to extract any local .xml files in a RetrievalMethod element during the creation of a KeyInfo from a KeyInfoReference element...
Prototype Pollution
object-path is vulnerable to Prototype Pollution. An attacker is able to exploit the vulnerability to inject arbitrary properties into existing construct prototypes and modify attributes such as proto, constructor and prototype via the del function...
Denial Of Service (DoS)
chromium is vulnerable to denial of service. The vulnerability exists due to an Out of bounds write in V8...
Remote Code Execution (RCE)
xstream is vulnerable to remote code execution. An attacker is able to exploit the vulnerability injecting arbitrary code via the processed input stream...
Denial Of Service
FFmpeg is vulnerable to denial of service. The vulnerability exists due to a null pointer dereference passed as argument to libavformat/aviobuf.c...
Denial Of Service
qemu is vulnerable to denial of service. The vulnerability exists when dropping packets during a bulk transfer from a SPICE client due to the packet queue being full, a malicious SPICE client could use this flaw to make QEMU call free with faked heap chunk metadata, resulting in a crash of QEMU...
Information Disclosure
postgresql is vulnerable to information disclosure. A malicious query can be used to read arbitrary bytes of server memory. In the default configuration, any authenticated database user is able to exploit the vulnerability...
Denial Of Service (DoS)
qemu:devel is vulnerable to denial of serivce. A NULL pointer dereference flaw was found in the am53c974 SCSI host bus adapter emulation of QEMU in versions before 6.0.0. This issue occurs while handling the 'Information Transfer' command. This flaw allows a privileged guest user to crash the QEM...
Arbitrary Code Execution
virtualbox is vulnerable to arbitrary code execution. A difficult to exploit vulnerability allows a low privileged attacker with logon to the infrastructure to execute arbitrary code on the host OS...
Remote Code Execution (RCE)
java openjdk is vulnerable to remote code execution. It has a flaw was found in the way the Hotspot component of OpenJDK performed range check elimination. An untrusted Java application or applet could use this flaw to bypass Java sandbox restrictions...
Denial Of Service (DoS)
qemuis vulnerable to denial of service. The vulnerability exists while handling a "PVRDMAREGDSRHIGH" write from the guest which may result in a crash of QEMU due to the access of an uninitialized pointer, which allows an attacker to crash the application via malicious input...
Denial Of Service (DoS)
chromium:edge is vulnerable to denial of service...
Denial Of Service (DoS)
pillow is vulnerable to denial of service. An out-of-bounds read in J2kDecode in j2kugrayala allows an attacker to crash the application...
Denial Of Service (DoS)
pillow is vulnerable to denial of service. Lack of validation of the input layers and size of data block in PsdImagePlugin.PsdImageFile can allow an attacker to cause a denial-of-service condition on open prior to load...
Regular Expression Denial Of Service (ReDoS)
normalize-url is vulnerable to regular expression denial of service. The usage of an insecure regex allows an attacker to cause a denial of service condition via a malicious URL string...
Denial Of Service (DoS)
linux kernel is vulnerable to denial of service. The vulnerability exists due to a NULL pointer dereference flaw was found in the Linux kernel's GPU Nouveau driver functionality...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. The vulnerability exists due to a memory leak in the sofsetgetlargectrldata function in sound/soc/sof/ipc.c which allows an attacker to crash the application via malicious input...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. A NULL pointer dererence in ov511modeinitregs and ov518modeinitregs when there are zero endpoints allows an attacker with the ability to induce the error conditions to crash the system...
Denial Of Service (DoS)
Unbound is vulnerable to denial of service. It allows an assertion failure and denial of service in dnamepktcopy via an invalid packet. A flaw was found in unbound. A reachable assertion in the dnamepktcopy function can be triggered by sending invalid packets to the server...
Remote Code Execution
xstream is vulnerable to remote code execution. A remote attacker with sufficient rights is able to execute arbitrary code on the host by manipulating the processed input stream...
Denial Of Service (DoS)
qemu is vulnerable to denial of service. The vulnerability exists due to a flaw was found in the USB redirector device usb-redir of QEMU where small USB packets are combined into a single boundless large transfer request to reduce the overhead and improve performance...
Denial Of Service (DoS)
Rust is vulnerable to denial of service. The optimization for joining strings can cause uninitialized bytes to be exposed or lead to an application crash...
Privilege Escalation
exim4 is vulnerable to privilege escalation. The vulnerability exists due to insufficient validation of user-supplied input when processing new line characters. A remote attacker can inject a new line character into the spool header file and modify the mail queue...
Arbitrary Code Execution
exim4 is vulnerable to arbitrary code execution. An integer overflow in receiveaddrecipient could potentially allow an attacker to execute arbitrary code on the host OS...
Privilege Escalation
exim4 is vulnerable to privilege escalation. An attacker with the privileges of the exim user can create a symlink/hardlink in the log directory and append arbitrary contents to an arbitrary file such as /etc/passwd to obtain full root privileges...
Remote Code Execution (RCE)
webkit2gtk is vulnerable to remote code execution. The vulnerability exists due to a use after free issue which is processed from a crafted web content...
URL Spoofing
firefox:edge is vulnerable to URL spoofing. When a JavaScript URL javascript: is evaluated and the result is a string, this string is parsed to create an HTML document, which is then presented. Previously, this document's URL as reported by the document.location property, for example was the...
Insecure Temporary File
org.openapitools, openapi-generator-maven-plugin uses insecure temporary file. The vulnerability exists due to the usage of the function File.createTempFile which allows an attacker can predict the name of the temporary file and potentially gain access to confidential information...
Remote Code Execution
tapestry-core is vulnerable to remote code execution. Access to the classpath asset files is not restricted, allowing an attacker to guess the path to a known file in the classpath and retrieve the contents. It can also potentially allow the attacker to perform a Java serialization attack if the...
Out-of-Bounds Write
cairo is vulnerable to out-of-bound write. An attacker may exploit a malicious input file to cairo's image-compositor to cause a stack buffer overflow leading to an out-of-bounds write...
Denial Of Service (DoS)
github.com/containers/storage/commit is vulnerable to Denial Of Service DoS. The decompression functionality allows an attacker to crash the application by pulling in malicious tools that resembles podman or cri-o during container image pulls...
Privilege Escalation
kernel-rt is vulnerable to privilege escalation. The vulnerability exists due to an out-of-bounds read in the Linux kernel drivers/scsi/scsitransportiscsi.c which is adversely affected by the ability of an unprivileged user to craft Netlink messages...