Arbitrary Code Execution

libpng is vulnerable to arbitrary code execution.The vulnerability exists as a memory corruption flaw was found in the way applications, using the libpng library and its progressive reading method, decoded certain PNG images. An attacker could create a specially-crafted PNG image that, when opene...

Denial Of Service (DoS)

Mozilla Firefox is vulnerable to Denial Of Service DoS. It happens due to integer overflow flaws in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox...

Denial Of Service (DoS)

The kernel package is vulnerable to Denial Of Service DoS. A divide-by-zero flaw was found in the ext4 file system code. A local attacker could use this flaw to cause a denial of service by mounting a specially-crafted ext4 file system...

Information Disclosure

jboss AS web console is vulnerable to information disclosure. Unauthenticated access to the JBoss Application Server Web Console /web-console is blocked by default. However, it was found that this block was incomplete, and only blocked GET and POST HTTP verbs. A remote attacker could use this fla...

Spoofing Attack

wget is vulnerable to spoofing attack. Wget is affected by the previously published "null prefix attack", caused by incorrect handling of NULL characters in X.509 certificates. If an attacker is able to get a carefully-crafted certificate signed by a trusted Certificate Authority, the attacker...

Denial Of Service (DoS)

OpenSSL is vulnerable to denial of service flaw. Flaws in OpenSSL's DTLS implementation allows a remote attacker to cause a DTLS server to use excessive amounts of memory, or crash on an invalid memory access or NULL pointer dereference...

Arbitrary Code Execution

ibm java is vulnerable to arbitrary code execution. An attacker is able to execute arbitrary code by modifying certain JNLP file to point a URL to an untrusted application...

Denial Of Service (DoS)

Samba is vulnerable to Denial of Service DoS. A denial of service flaw was found in the Samba smbd daemon. An authenticated, remote user could send a specially-crafted response that would cause an smbd child process to enter an infinite loop. An authenticated, remote user could use this flaw to...

Information Disclosure

The kernel package is vulnerable to Information Disclosure. An information leak was found in the Linux kernel. On AMD64 systems, 32-bit processes could access and read certain 64-bit registers by temporarily switching themselves to 64-bit mode...

Privilege Escalation

kernel is vulnerable to privilege escalation. The vulnerability exists as a flaw was found in the NFSv4 implementation. The kernel would do an unnecessary permission check after creating a file. This check would usually fail and leave the file with the permission bits set to random values...

Privilege Escalation

Sun Java web start is vulnerable to privilege escalation. An integer overflow flaw was found in the way the JRE processes JPEG images. An untrusted application could use this flaw to extend its privileges, allowing it to read and write local files, as well as to execute local applications with th...

Authorization Bypass

openjdk is vulnerable to authorization bypass. It was discovered that OpenType checks can be bypassed. This could allow a rogue application to bypass access restrictions by acquiring references to privileged objects through finalizer resurrection...

Privilege Escalation

kernel is vulnerable to privilege escalation. A local attacker with permissions to perform an eCryptfs mount could modify the metadata of the files in that eCrypfts mount to cause a buffer overflow, leading to a denial of service or privilege escalation...

Spoofing Attack

nspr is vulnerable to spoofing attacks. Dan Kaminsky found that browsers still accept certificates with MD2 hash signatures, even though MD2 is no longer considered a cryptographically strong algorithm. This could make it easier for an attacker to create a malicious certificate that would be...

Denial Of Service (DoS)

httpd is vulnerable to denial of service DoS. The vulnerability exists as a flaw was found in the handling of compression structures between modssl and OpenSSL. If too many connections were opened in a short period of time, all system memory and swap space would be consumed by httpd, negatively...

Arbitrary Code Execution

seamonkey is vulnerable to arbitrary code execution. The vulnerability exists as a web page containing malicious content could cause SeaMonkey to crash or, potentially, execute arbitrary code as the user running SeaMonkey...

Denial Of Service (DoS)

libdbs-pg-perl is vulnerable to denial of service. A memory leak flaw was found in the perl-DBD-Pg function performing the de-quoting of BYTEA type values acquired from a database. An attacker able to cause an application using perl-DBD-Pg to perform a large number of SQL queries returning BYTEA...

Denial Of Service (DoS)

The ipsec-tools package is vulnerable to Denial Of Service DoS. It was possible for a remote attacker to cause the racoon daemon to consume all available memory...

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS. The vulnerability exists as a deficiency was found in the Remote BIOS Update RBU driver for Dell systems. This could allow a local, unprivileged user to cause a denial of service by reading zero bytes from the imagetype or packetsize files in...

Information Disclosure

jbossws is vulnerable to information disclosure. The request handler in JBossWS did not correctly verify the resource path when serving WSDL files for custom web service endpoints. This allowed remote attackers to read arbitrary XML files with the permissions of the EAP processs...

Arbitrary Code Execution

seamonkey is vulnerable to arbitrary code execution. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause SeaMonkey to crash or, potentially, execute arbitrary code as the user running SeaMonkey...

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS. The vulnerability exists as a flaw was found in the Asynchronous Transfer Mode ATM subsystem. A local, unprivileged user could use the flaw to listen on the same socket more than once, possibly causing a denial of service...

Denial Of Service (DoS)

MySQL is vulnerable to denial of service DoS.Flaws in MySQL allowed an authenticated user to cause the MySQL daemon to crash via crafted SQL queries. This only caused a temporary denial of service, as the MySQL daemon is automatically restarted after the crash...

Cross-Site Scripting (XSS)

jsf is vulnerable to cross-site scripting XSS. The JavaServer Faces JSF component was vulnerable to multiple cross-site scripting XSS vulnerabilities. An attacker could use these flaws to inject arbitrary web script or HTML...

Arbitrary Code Execution

xorg-x11-server is vulnerable to arbitrary code execution. The vulnerability exists as a malicious authorized client could exploit this issue to cause a denial of service crash, or potentially execute arbitrary code with root privileges on the X.Org server...

Cross-Site Scripting (XSS)

seamonkey is vulnerable to cross-site scripting XSS. Several flaws were found in the display of malformed web content. A web page containing specially-crafted content could, potentially, trick a SeaMonkey user into surrendering sensitive information...

Information Disclosure

The Linux kernel is vulnerable to Information Disclosure.A flaw in the core-dump handling allows a local user to create core dumps from unreadable binaries via PTINTERP...

Denial Of Service (DoS)

The kernel-rt packages is vulnerable to denial of service DoS due to a race condition in perfeventopen...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. The vulnerability exists through ioctl call in network tun handling...

Denial Of Service (DoS)

imagemagick is vulnerable to denial of service. A heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c allows an attacker to crash the application via a malicious image file and potentially access confidential information in memory...

URL Mishandling

Mailman is vulnerable to URL mishandling. The Utils.py:GetPathPieces allows attackers to display arbitrary text on trusted sites since it does not correctly handle the URL...

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service DoS. A flaw in MagickWand/mogrify.c causes memory leaks, allowing an attacker to input a malicious image file to trigger an application crash...

Remote Code Execution (RCE)

jsreport is vulnerable to remote code execution RCE. Of a variety of packages it consists, the Script-manager utilized for running user's scripts in a sandbox has an unintended require vulnerability and Puppeteer utilized for turning user's HTML into pdf files has SSRF Server Side Request Forgery...

Authorization Bypass

node is vulnerable to authorization bypass. Trailing OWS from header values are not stripped, potentially allowing a remote attacker to bypass access controls...

Denial Of Service (DoS)

wordpress is vulnerable to denial of service. The vulnerability exists in because an unauthenticated attacker is able to crash the application by submitting a large list of registered .js files to cause each file to be loaded multiple times, leading to excessive resource consumption...

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS. The vulnerability exists due to a use-after-free error in fs/xfs/xfssuper.c...

Arbitrary Code Execution

openjdk is vulnerable to arbitrary code execution. Successful exploitation of the insecure serialization filter changes via jdk.serialFilter property modification results in a complete takeover of the application...

XML External Entity (XXE) Injection

pyamf is vulnerable to XML external entity XXE attacks. The attack exists because the XML parser does not disable the parsing of external DTDs, allowing a remote attacker to inject malicious external DTD entities via an Action Message Format AMF payload to retrieve system files or perform request...

Authorization Bypass

infinispan is vulnerable to authorization bypass. The vulnerability exists as the invokeAccessibly method in the ReflectionUtil class allows the invokation of any private methods with Infinispan's privileges...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. Due to the way found in which Intel CPUs handle inconsistency between virtual to physical memory address translations in CPU's local cache and system software's Paging structure entries, a privileged guest user may use this flaw to induce a hardware...

Authentication Bypass

github.com/goharbor/harbor is vulnerable to authentication bypass. The vulnerability exists as an admin is able to create a robot account in another project through the Harbor API, leading to unauthorized access to push/pull/modify images in the target project...

Remote Code Execution

ReportLab is vulnerable to remote code execution. This is due to the usage of toColorevalarg in colors.py, allowing a remote attacker to execute arbitrary Python code using a malicious XML document that utilizes 'span color="' followed by arbitrary Python code...

Denial Of Service (DoS)

openjdk is vulnerable to denial of service. An unexpected exception thrown by pattern processing malicious regular expression allows an attacker to crash the application...

Use-after-Free

Kernel is vulnerable to use-after-free in blkdrainqueue function in block/blk-core.c...

Denial Of Service (DoS)

libpcap.so is vulnerable to denial of service. PCAPNG reader does not perform sanity checks before doing malloc, causing buffer-overflow if there are errors in pcapng reading...

Remote Code Execution (RCE)

jackson-databind is vulnerable to remote code execution. The vulnerability exists as it does not stop classes from the commons-dbcp package from being used as deserialization gadgets...

Denial Of Service (DoS)

nodejs is vulnerable to denial of service. A remote attacker is able to crash the application by flooding the server with empty frames which results in excessive resource consumption...

HTTP Request Smuggling

github.com/golang/go is vulnerable to HTTP request smuggling. The vulnerability exists as invalid HTTP/1.1 headers were accepted and normalized with a space before the colon, allowing a reverse proxy to interpret the headers differently...

Use-After-Free

firefox is vulnerable to use-after-free. The vulnerability exists due to the manipulating video elements which allows an attacker to do a potentially exploitable crash in the application...

SQL Injection

GORM is vulnerable to sql injection attacks. The attacks are possible because the library does not properly check for incomplete parentheses, allowing remote attackers to inject and execute arbitrary SQL...