39637 matches found
Spoofing Attack
nspr is vulnerable to spoofing attacks. Dan Kaminsky found that browsers still accept certificates with MD2 hash signatures, even though MD2 is no longer considered a cryptographically strong algorithm. This could make it easier for an attacker to create a malicious certificate that would be...
Denial Of Service (DoS)
httpd is vulnerable to denial of service DoS. The vulnerability exists as a flaw was found in the handling of compression structures between modssl and OpenSSL. If too many connections were opened in a short period of time, all system memory and swap space would be consumed by httpd, negatively...
Denial Of Service (DoS)
libdbs-pg-perl is vulnerable to denial of service. A memory leak flaw was found in the perl-DBD-Pg function performing the de-quoting of BYTEA type values acquired from a database. An attacker able to cause an application using perl-DBD-Pg to perform a large number of SQL queries returning BYTEA...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists as a deficiency was found in the Remote BIOS Update RBU driver for Dell systems. This could allow a local, unprivileged user to cause a denial of service by reading zero bytes from the imagetype or packetsize files in...
Information Disclosure
jbossws is vulnerable to information disclosure. The request handler in JBossWS did not correctly verify the resource path when serving WSDL files for custom web service endpoints. This allowed remote attackers to read arbitrary XML files with the permissions of the EAP processs...
Arbitrary Code Execution
seamonkey is vulnerable to arbitrary code execution. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause SeaMonkey to crash or, potentially, execute arbitrary code as the user running SeaMonkey...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists as a flaw was found in the Asynchronous Transfer Mode ATM subsystem. A local, unprivileged user could use the flaw to listen on the same socket more than once, possibly causing a denial of service...
Denial Of Service (DoS)
MySQL is vulnerable to denial of service DoS.Flaws in MySQL allowed an authenticated user to cause the MySQL daemon to crash via crafted SQL queries. This only caused a temporary denial of service, as the MySQL daemon is automatically restarted after the crash...
Cross-Site Scripting (XSS)
jsf is vulnerable to cross-site scripting XSS. The JavaServer Faces JSF component was vulnerable to multiple cross-site scripting XSS vulnerabilities. An attacker could use these flaws to inject arbitrary web script or HTML...
Arbitrary Code Execution
xorg-x11-server is vulnerable to arbitrary code execution. The vulnerability exists as a malicious authorized client could exploit this issue to cause a denial of service crash, or potentially execute arbitrary code with root privileges on the X.Org server...
Cross-Site Scripting (XSS)
seamonkey is vulnerable to cross-site scripting XSS. Several flaws were found in the display of malformed web content. A web page containing specially-crafted content could, potentially, trick a SeaMonkey user into surrendering sensitive information...
Information Disclosure
The Linux kernel is vulnerable to Information Disclosure.A flaw in the core-dump handling allows a local user to create core dumps from unreadable binaries via PTINTERP...
Denial Of Service (DoS)
The kernel-rt packages is vulnerable to denial of service DoS due to a race condition in perfeventopen...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. The vulnerability exists through ioctl call in network tun handling...
Denial Of Service (DoS)
imagemagick is vulnerable to denial of service. A heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c allows an attacker to crash the application via a malicious image file and potentially access confidential information in memory...
URL Mishandling
Mailman is vulnerable to URL mishandling. The Utils.py:GetPathPieces allows attackers to display arbitrary text on trusted sites since it does not correctly handle the URL...
Denial Of Service (DoS)
ImageMagick is vulnerable to denial of service DoS. A flaw in MagickWand/mogrify.c causes memory leaks, allowing an attacker to input a malicious image file to trigger an application crash...
Remote Code Execution (RCE)
jsreport is vulnerable to remote code execution RCE. Of a variety of packages it consists, the Script-manager utilized for running user's scripts in a sandbox has an unintended require vulnerability and Puppeteer utilized for turning user's HTML into pdf files has SSRF Server Side Request Forgery...
Authorization Bypass
node is vulnerable to authorization bypass. Trailing OWS from header values are not stripped, potentially allowing a remote attacker to bypass access controls...
Denial Of Service (DoS)
wordpress is vulnerable to denial of service. The vulnerability exists in because an unauthenticated attacker is able to crash the application by submitting a large list of registered .js files to cause each file to be loaded multiple times, leading to excessive resource consumption...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists due to a use-after-free error in fs/xfs/xfssuper.c...
Arbitrary Code Execution
openjdk is vulnerable to arbitrary code execution. Successful exploitation of the insecure serialization filter changes via jdk.serialFilter property modification results in a complete takeover of the application...
XML External Entity (XXE) Injection
pyamf is vulnerable to XML external entity XXE attacks. The attack exists because the XML parser does not disable the parsing of external DTDs, allowing a remote attacker to inject malicious external DTD entities via an Action Message Format AMF payload to retrieve system files or perform request...
Authorization Bypass
infinispan is vulnerable to authorization bypass. The vulnerability exists as the invokeAccessibly method in the ReflectionUtil class allows the invokation of any private methods with Infinispan's privileges...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. Due to the way found in which Intel CPUs handle inconsistency between virtual to physical memory address translations in CPU's local cache and system software's Paging structure entries, a privileged guest user may use this flaw to induce a hardware...
Authentication Bypass
github.com/goharbor/harbor is vulnerable to authentication bypass. The vulnerability exists as an admin is able to create a robot account in another project through the Harbor API, leading to unauthorized access to push/pull/modify images in the target project...
Remote Code Execution
ReportLab is vulnerable to remote code execution. This is due to the usage of toColorevalarg in colors.py, allowing a remote attacker to execute arbitrary Python code using a malicious XML document that utilizes 'span color="' followed by arbitrary Python code...
Denial Of Service (DoS)
openjdk is vulnerable to denial of service. An unexpected exception thrown by pattern processing malicious regular expression allows an attacker to crash the application...
Use-after-Free
Kernel is vulnerable to use-after-free in blkdrainqueue function in block/blk-core.c...
Denial Of Service (DoS)
libpcap.so is vulnerable to denial of service. PCAPNG reader does not perform sanity checks before doing malloc, causing buffer-overflow if there are errors in pcapng reading...
Remote Code Execution (RCE)
jackson-databind is vulnerable to remote code execution. The vulnerability exists as it does not stop classes from the commons-dbcp package from being used as deserialization gadgets...
Denial Of Service (DoS)
nodejs is vulnerable to denial of service. A remote attacker is able to crash the application by flooding the server with empty frames which results in excessive resource consumption...
HTTP Request Smuggling
github.com/golang/go is vulnerable to HTTP request smuggling. The vulnerability exists as invalid HTTP/1.1 headers were accepted and normalized with a space before the colon, allowing a reverse proxy to interpret the headers differently...
Use-After-Free
firefox is vulnerable to use-after-free. The vulnerability exists due to the manipulating video elements which allows an attacker to do a potentially exploitable crash in the application...
SQL Injection
GORM is vulnerable to sql injection attacks. The attacks are possible because the library does not properly check for incomplete parentheses, allowing remote attackers to inject and execute arbitrary SQL...
Information Disclosure
PHP is vulnerable to Information disclosure. When an attacker supplies malicious data, it causes the funciton gdImageCreateFromXbm to use the value of uninitialized variable...
Denial Of Service (DoS)
PHP is vulnerable to denial of service DoS. An infinite loop is possible in ext/iconv/iconv.c when streaming filter with convert.incov on invalid sequence, leading to an application crash...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists through a use-after-free issue in ucmaleavemulticast in drivers/infiniband/core/ucma.c...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists through a NULL pointer dereference in lookupslow function...
Arbitrary File Read
podman is vulnerable to arbitrary file read. The vulnerability exists through an improper symlink resolution allows access to host files when executing podman cp on running containers...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists through a use-after-free in drivers/char/ipmi/ipmisiintf.c, ipmisimemio.c, ipmisiportio.c...
Denial Of Service (DoS)
Django is vulnerable to denial of service DoS. It does not properly handle HTML entities in the function striptags, causing excessive HTMLParser recursions...
Denial Of Service (DoS)
openjdk is vulnerable to denial of service. It was discovered that crypto provider implementations in the JCE component of OpenJDK for crypto algorithms such as AES or SHA did not perform array bounds checks. This can lead to out-of-bounds access if compiler intrinsics were used instead of the Ja...
Denial Of Service (DoS)
openjdk is vulnerable to denial of service. It was discovered that the implementation of the Throwable class in the Utilities component of OpenJDK did not sufficiently validate serial stream before deserializing suppressed exceptions. A specially-crafted input could cause a Java application to...
Authorization Bypass
python is vulnerable to authorization bypass. The localfile: scheme allows for remote attackers to bypass protection mechanisms that blacklist file: URIs, as demonstrated by triggering a urllib.urlopen'localfile:///etc/passwd' call...
OS Command Injection
vim is vulnerable to OS command injection. The :source! command in a modeline allows remote attackers to execute arbitrary OS commands...
Denial Of Service (DoS)
.NET Core and ASP.NET Core is vulnerable to denial of service. The vulnerability exists due to the improper handling of web requests. A remote attacker could issue a malicious web request to exploit crash the process...
Denial Of Service (DoS)
Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the RPM packages for Red Hat OpenShift Container Platform 3.11.59. See the following advisory for the container...
Memory Corruption
Linux kernel is vulnerable to memory corruption attacks. An attacker could exploit a flaw in the ext4 filesystem to cause an out-of-bounds write and a denial of service or unspecified other impact is possible by mounting and operating a crafted ext4 filesystem image...
Denial Of Service (DoS)
PHP is vulnerable to denial of serviceDoS attacks. This is because an invalid free in the WDDX deserialization of boolean parameters. An attacker could inject XML for deserialization to crash the PHP interpreter which occurs in ext/wddx/wddx.c file...