Lucene search
+L
VeracodeMost viewed

38838 matches found

Veracode
Veracode
•added 2023/03/12 4:42 a.m.•41 views

Information Disclosure

netdata is vulnerable to Information Disclosure. Netdata Agents have an automatically generated MACHINE GUID that is saved to disk and can persist across restarts and reboots. Streaming is a feature that allows a Netdata Agent to act as parent for other Netdata Agents children, offloading childre...

9.1CVSS8.7AI score0.0068EPSS
SaveExploits1References3Affected Software1
Veracode
Veracode
•added 2023/03/10 8:22 p.m.•42 views

Denial Of Service (DoS)

Linux kernel is vulnerable to Denial Of Service DoS. The vulnerability exists due to the use after free in the SGI GRU driver because of the way the first grufileunlockedioctl function is called by the user, where a failed pass occurs in the grucheckchipletassignment function, allowing an attacke...

7.8CVSS7.6AI score0.0024EPSS
SaveExploits0References9Affected Software2
Veracode
Veracode
•added 2023/03/07 12:47 a.m.•41 views

Arbitrary Code Execution

webkitgtk is vulnerable to Arbitrary Code Execution. Processing maliciously crafted web content may lead to arbitrary code execution which allows a remote attacker to create a specially crafted web page and trick the victim into opening it, triggering type confusion, and execute arbitrary code on...

8.8CVSS9AI score0.09502EPSS
SaveExploits0References11Affected Software3
Veracode
Veracode
•added 2023/02/18 6:28 p.m.•41 views

Denial Of Service (DoS)

go is vulnerable to Denial of Service DoS attacks. Both clients and servers may send large TLS handshake records which cause servers and clients, respectively, to panic when attempting to construct responses...

7.5CVSS7.5AI score0.01111EPSS
SaveExploits0References7Affected Software17
Veracode
Veracode
•added 2023/02/09 8:56 p.m.•41 views

Type Confusion

openssl is vulnerable to type confusion. The vulnerability exists because it may allow an attacker to pass arbitrary pointers to a memcmp call, enabling them to read memory content...

7.4CVSS7.7AI score0.59501EPSS
SaveExploits0References8Affected Software10
Veracode
Veracode
•added 2023/02/03 11:00 p.m.•41 views

Denial Of Service (DoS)

kernel is vulnerable to Denial of Service DoS attacks. The vulnerability exists in the smb2ioctlqueryinfo function of fs/cifs/smb2ops.c, in Common Internet File System CIFS due to an incorrect return from the memdupuser function. This flaw allows a local, privileged attacker to crash the system...

4.4CVSS5.7AI score0.00269EPSS
SaveExploits0References10Affected Software2
Veracode
Veracode
•added 2023/02/01 3:07 a.m.•41 views

IP Spoofing

parse-server is vulnerable to IP Spoofing Attack Via HTTP Request Header. The vulnerability exists due to the incorrect implementation of the client IP address in the parse server option masterKeyIps of the library, which sets the allowed IP address to the the x-forwarded-for header value, allowi...

8.7CVSS7.7AI score0.00664EPSS
SaveExploits0References5Affected Software1
Veracode
Veracode
•added 2023/01/28 12:46 a.m.•41 views

Denial Of Service (DoS)

kernel is vulnerable to Denial of Service DoS attacks. A race condition may lead to a NULL pointer dereference and general protection fault via VTRESIZEX ioctl, resulting in an application crash...

5.1CVSS6.1AI score0.0031EPSS
SaveExploits1References8Affected Software2
Veracode
Veracode
•added 2023/01/17 7:04 p.m.•41 views

Denial Of Service (DoS)

Linux Kernel is vulnerable to Denial Of Service DoS. The vulnerability exists in the i740 driver because the Userspace program could pass any values to the driver through the ioctl interface, which doesn't check the value of pixclock, causing a divide by zero error...

5.5CVSS6.3AI score0.00285EPSS
SaveExploits0References4Affected Software2
Veracode
Veracode
•added 2022/12/24 7:33 a.m.•41 views

Remote Code Execution

xwayland is vulnerable to remote code execution. The handler for the ScreenSaverSetAttributes request may write to memory after it has been freed leading to local privileges elevation on systems where the server is running privileged and remote code execution for ssh X forwarding sessions...

8.8CVSS9AI score0.02367EPSS
SaveExploits0References14Affected Software6
Veracode
Veracode
•added 2022/12/23 7:07 a.m.•41 views

Unrestricted Key Type

jsonwebtoken uses unrestricted key type. A remote attacker is able to bypass signature verification if the library is misconfigured so that legacy, insecure key types are used for the verification. The user is affected if the library uses an algorithm and a key type other than a combination liste...

8.1CVSS7.8AI score0.00479EPSS
SaveExploits0References4Affected Software1
Veracode
Veracode
•added 2022/12/15 2:04 a.m.•41 views

Regular Expression Denial Of Service (ReDoS)

rails-html-sanitizer is vulnerable to regular expression denial of service. The vulnerability exists due to the insecure regex pattern used for the attrnode.value attribute in the scrubattributes function of scrubbers.rb, allowing an attacker to crash the application by providing malicious SVG...

7.5CVSS7.3AI score0.01454EPSS
SaveExploits0References7Affected Software3
Veracode
Veracode
•added 2022/12/12 4:21 a.m.•41 views

Arbitrary Code Injection

akeneo/pim-community-dev is vulnerable to arbitrary code injection. The vulnerability exists in Location parameter in httpd.conf because of not properly validate user inputs which allows an attacker to inject and execute malicious code into the system...

8.8CVSS8.9AI score0.01447EPSS
SaveExploits1References6Affected Software1
Veracode
Veracode
•added 2022/12/08 1:48 p.m.•41 views

Improper Certification Validation

certifi is vulnerable to improper certificate validation. The vulnerability exists due to an untrustworthy certificate authority TrustCor root certificate, which are now marked as invalid...

7.5CVSS7.5AI score0.0056EPSS
SaveExploits0References4Affected Software1
Veracode
Veracode
•added 2022/11/23 9:48 a.m.•41 views

Denial Of Service (DoS)

xen is vulnerable to denial of service. The vulnerability exists due to excessive memory allocation which allows an attacker to cause an application crash due to overflows...

6.5CVSS7.1AI score0.00252EPSS
SaveExploits0References11Affected Software1
Veracode
Veracode
•added 2022/11/19 4:21 p.m.•41 views

Denial Of Service (DoS)

Linux kernel’s KVM is vulnerable to denial of service. The vulnerability exists due to a NULL pointer dereference which allows an unprivileged local attacker on the host to issue specific ioctl calls, causing a kernel oops condition that results in a denial of service...

5.5CVSS5.9AI score0.00466EPSS
SaveExploits1References8Affected Software4
Veracode
Veracode
•added 2022/11/19 12:48 a.m.•41 views

Information Disclosure

rh-mysql80-mysql is vulnerable to denial of service. The vulnerability exists in the Server: Optimizer component, allowing attackers to cause an application crash and modify the critical data or all MySQL Server accessible data through multiple protocols...

6.5CVSS6.5AI score0.0134EPSS
SaveExploits0References5Affected Software1
Veracode
Veracode
•added 2022/11/14 6:29 a.m.•41 views

Integer Overflow

libtiff.so is vulnerable to integer overflow. The vulnerability is due to memory corruption in tifgetimage.c, which allows the remote attacker to crash the application...

8.8CVSS8.5AI score0.01331EPSS
SaveExploits1References9Affected Software4
Veracode
Veracode
•added 2022/11/03 4:42 a.m.•41 views

Cross-Site Scripting (XSS)

apacheairflow is vulnerable to cross-site scripting. The vulnerability is due to the origin query argument in the getsafeurl function of views.py which allows an attacker to inject and execute arbitrary scripts...

6.1CVSS6.2AI score0.0153EPSS
SaveExploits0References4Affected Software1
Veracode
Veracode
•added 2022/10/21 3:21 p.m.•41 views

Prototype Pollution

uglify-js is vulnerable to prototype pollution. The vulnerability exists in DEFNODE function of ast.js via the name variable which allows an attacker to inject malicious property resulting in prototype pollution...

9.8CVSS8.8AI score0.01438EPSS
SaveExploits1References5Affected Software2
Veracode
Veracode
•added 2022/10/14 11:52 a.m.•41 views

HTTP Request Smuggling

Go is vulnerable to HTTP request smuggling. The vulnerability is due to a lack of sanitizations in the query parameter for ReverseProxy. Remote attackers can cause query parameter smuggling when a go proxy forwards a parameter with an unparseable value...

7.5CVSS7.6AI score0.0117EPSS
SaveExploits1References15Affected Software17
Veracode
Veracode
•added 2022/10/10 9:08 p.m.•41 views

Authorization Bypass

modsecurity-crs:sid is vulnerable to authorization bypass. The vulnerability exists due to repeated payloads with a HTTP range header field, allowing an attacker to do a response body bypass by accessing to restricted resources...

7.5CVSS8.4AI score0.01224EPSS
SaveExploits0References10Affected Software1
Veracode
Veracode
•added 2022/10/10 8:18 p.m.•41 views

Improper Access Control

chromium is vulnerable to improper access control. The vulnerability is because of an incorrect security ui due to a flaw found in the Full Screen of the Chromium browser which allows an attacker to perform unauthorized actions...

6.5CVSS7.2AI score0.00669EPSS
SaveExploits0References4Affected Software1
Veracode
Veracode
•added 2022/09/30 5:24 a.m.•41 views

Authentication Bypass

moodle/moodle is vulnerable to authentication bypass. The vulnerability exists in the userlogin function of auth.php due to a type juggling, which allows an attacker to access restricted domains via the external database authentication...

6.5CVSS5.1AI score0.00825EPSS
SaveExploits0References6Affected Software1
Veracode
Veracode
•added 2022/09/21 5:27 p.m.•41 views

Heap-buffer-overflow

binutils, edge is vulnerable to a heap buffer overflow. The vulnerability exists in bfdgetl32 function when called from the stripmain function in strip-new via a malicious file...

5.5CVSS5.9AI score0.0033EPSS
SaveExploits0References13Affected Software4
Veracode
Veracode
•added 2022/09/19 1:00 p.m.•41 views

Information Disclosure

thunderbird is vulnerable to information disclosure. An attacker can gain sensitive information when composing a response to an HTML email with a META refresh tag...

8.1CVSS7.7AI score0.00775EPSS
SaveExploits0References4Affected Software3
Veracode
Veracode
•added 2022/09/09 2:16 a.m.•41 views

Denial Of Service (DoS)

sdk-server is vulnerable to denial of service. The vulnerability exists because the maximum number of monitored items per session does not properly configure in the getMaxMonitoredItems function of OpcUaServerConfigLimits.java, allowing an attacker to cause an application crash by sending multipl...

7.5CVSS7.3AI score0.01248EPSS
SaveExploits0References3Affected Software1
Veracode
Veracode
•added 2022/09/08 7:24 a.m.•41 views

Denial Of Service (DoS)

github.com/helm/helm is vulnerable to denial of service DoS attacks. A remote authenticated attacker is able to cause an out of memory panic by supplying malicious string inputs to functions in the strvals package, resulting in denial of service conditions...

6.5CVSS6.5AI score0.01047EPSS
SaveExploits0References3Affected Software1
Veracode
Veracode
•added 2022/09/01 12:27 p.m.•41 views

Denial Of Service (DoS)

libtiff.so is vulnerable to denial of service. The vulnerability exists due a heap buffer overflow in TIFFReadRawDataStriped function in tiffinfo.c which allows an attacker to cause an application crash via a crafted TIFF file...

5.5CVSS6.2AI score0.00556EPSS
SaveExploits1References10Affected Software2
Veracode
Veracode
•added 2022/09/01 12:25 p.m.•41 views

Denial Of Service (DoS)

vim is vulnerable to remote code execution. The vulnerability exists due to a use after free allowing an attacker to crash the system via memory corruption...

7.8CVSS8.2AI score0.00902EPSS
SaveExploits1References6Affected Software1
Veracode
Veracode
•added 2022/08/19 6:03 a.m.•41 views

Privilege Escalation

ansible is vulnerable to privilege escalation. A remote authenticated attacker with change user permissions is able to modify the account settings of the superuser account and/or remove the superuser privileges...

6.5CVSS6.2AI score0.00871EPSS
SaveExploits1References6Affected Software3
Veracode
Veracode
•added 2022/08/12 7:02 p.m.•41 views

Out-of-bounds Write

vim is vulnerable to out-of-bounds write. The vulnerability exists due to invalid memory access after diff buffer manipulations in 1diffmarkadjusttp function in diff.c...

7.8CVSS7.6AI score0.01395EPSS
SaveExploits1References9Affected Software1
Veracode
Veracode
•added 2022/08/12 4:59 a.m.•41 views

SQL Injection

loopback-connector-postgresql is vulnerable to sql injection attacks. The vulnerability exists in buildExpression function in postgresql.js because the user provided inputs for contains loopback filter are not properly sanitized which allows an attacker to inject and execute arbitrary sql command...

10CVSS9.5AI score0.00624EPSS
SaveExploits0References4Affected Software1
Veracode
Veracode
•added 2022/08/11 6:50 a.m.•41 views

Denial Of Service (DoS)

vim is vulnerable to denial of service. The vulnerability exists due to an Out-of-bounds Read allowing an attacker to crash the system with a maliciously crafted string constant...

7.8CVSS7.2AI score0.005EPSS
SaveExploits1References3Affected Software1
Veracode
Veracode
•added 2022/07/25 10:12 a.m.•41 views

Out-Of-Bounds Write

net-snmp is vulnerable to out of bounds write. The vulnerability exists due to a boundary error in a SET request to SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable. A remote user is able to pass a malformed OID in a SET request, trigger an out-of-bounds write and execute arbitrary code on the target...

6.5CVSS3.4AI score0.01008EPSS
SaveExploits0References13Affected Software1
Veracode
Veracode
•added 2022/07/23 2:53 p.m.•41 views

Heap-Buffer Overflow

lua5.4 is vulnerable to heap-buffer overflow. The vulnerability exists in the component luaGrunerror when a recursive error occurs which allows an attacker to cause an application crash...

7.5CVSS7.3AI score0.02841EPSS
SaveExploits1References11Affected Software1
Veracode
Veracode
•added 2022/07/18 1:53 p.m.•41 views

Denial Of Service (DoS)

vim is vulnerable to denial of service. An attacker can crash the application through the use after free...

7.8CVSS7.3AI score0.01342EPSS
SaveExploits1References9Affected Software1
Veracode
Veracode
•added 2022/07/15 4:59 p.m.•41 views

Command Injection

python is vulnerable to command injection. The vulnerability exist due to mailcap module does not add escape characters into commands discovered in the system mailcap file. This may allow attackers to inject shell commands into applications that call mailcap.findmatch with untrusted input...

7.6CVSS8.2AI score0.07074EPSS
SaveExploits1References52Affected Software8
Veracode
Veracode
•added 2022/07/14 9:21 a.m.•41 views

DLL Hijacking

node is vulnerable to dll hijacking. The vulnerability exists due to the default open ssl configuration which allows an attacker to exploit the vulnerability by placing a malicious dll file on an affected system...

7.3CVSS7.3AI score0.01752EPSS
SaveExploits1References8Affected Software1
Veracode
Veracode
•added 2022/07/13 9:10 a.m.•41 views

Privilege Escalation

github.com/argoproj/argo-cd is vulnerable to privilege escalation. Lack of enforcement of access restriction by application resource API allows an attacker to escalate the privileges to admin-level...

8.8CVSS8.4AI score0.01306EPSS
SaveExploits1References8Affected Software1
Veracode
Veracode
•added 2022/07/06 8:23 a.m.•41 views

Denial Of Service (DoS)

ujson is vulnerable to denial of service. The vulnerability exists in decodestring function in ultrajsondec.c when reallocation of buffer fails during string decoding which frees the buffer twice causing an application crash...

5.9CVSS6.5AI score0.01876EPSS
SaveExploits0References7Affected Software3
Veracode
Veracode
•added 2022/06/28 3:49 a.m.•41 views

Information Disclosure

guzzlehttp/guzzle is vulnerable to information disclosure. The vulnerability exists because the checkRedirect function of RedirectMiddleware.php does not properly clear the CURLOPTHTTPAUTH option on a change of origin, allowing an attacker to get sensitive information through the Authorization...

7.7CVSS6.9AI score0.01916EPSS
SaveExploits0References7Affected Software2
Veracode
Veracode
•added 2022/06/26 4:25 p.m.•41 views

Use After Free

A use-after-free vulnerability exists in the RS-274X aperture definition tokenization functionality of Gerbv 2.7.0 and dev commit b5f1eacd and Gerbv forked 2.7.1. A specially-crafted gerber file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

8.6CVSS3.1AI score0.01324EPSS
SaveExploits1References5Affected Software1
Veracode
Veracode
•added 2022/06/12 6:45 p.m.•41 views

Privilege Escalation

xen is vulnerable to privilege escalation. The vulnerability exists due to non-coherent mappings allowing an attacker to control the whole system because the system safety logic doesn't account for CPU-induced cache...

6.7CVSS7.1AI score0.00498EPSS
SaveExploits3References11Affected Software1
Veracode
Veracode
•added 2022/06/02 8:55 p.m.•41 views

Denial Of Service (DoS)

.NET and Visual Studio is vulnerable to Denial of Service. The vulnerability exists due to a flaw was found in dotnet allowing an attacker to crash the system by parsing HTML forms...

7.5CVSS7.3AI score0.05062EPSS
SaveExploits0References12Affected Software2
Veracode
Veracode
•added 2022/06/02 8:45 p.m.•41 views

Denial Of Service (DoS)

servicemesh-proxy is vulnerable to denial of service. The vulnerability exists due to a lack of sanitization which allows an attacker to crash the system via a NULL pointer dereference when using a WT filter saferegex match via a crafted request...

7.5CVSS3.7AI score0.01062EPSS
SaveExploits0References5Affected Software1
Veracode
Veracode
•added 2022/06/02 11:26 a.m.•41 views

Command Injection

github.com/hashicorp/go-getter is vulnerable to command injection. The vulnerability exists in clone function in gethg.go due to improper handling of user input which allows an attacker to inject and execute arbitrary commands...

9.8CVSS9.5AI score0.01722EPSS
SaveExploits0References5Affected Software1
Veracode
Veracode
•added 2022/06/01 9:52 a.m.•41 views

Denial Of Service (DoS)

protobuf is vulnerable to denial of service. The vulnerability exists due to a lack of sanitization in google.protobuf.UnknownFieldSet parameter which allows a remote attacker to inject a malicious javascript into the system and crash. which allowing an attacker to...

7.5CVSS6.2AI score0.01669EPSS
SaveExploits1References8Affected Software3
Veracode
Veracode
•added 2022/05/30 3:13 p.m.•41 views

Use-After-Free

vim is vulnerable to use-after-free. The vulnerability exists in appendcommand which allows an attacker to cause a memory corruption which then leads to an application crash...

7.8CVSS7.6AI score0.02712EPSS
SaveExploits1References16Affected Software1
Veracode
Veracode
•added 2022/05/30 11:03 a.m.•41 views

Prototype Pollution

protobufjs is vulnerable to Prototype Pollution. An attacker is able to add/modify properties of the Object.prototype by parsing/loading .proto files or via providing untrusted user input to util.setProperty or to ReflectionObject.setParsedOption functions, resulting in prototype pollution...

8.2CVSS8.3AI score0.02338EPSS
SaveExploits1References3Affected Software1
Total number of security vulnerabilities5000