38838 matches found
Information Disclosure
openSSH is vulnerable to information disclosure. An attacker is able to conduct a man-in-the-middle attack to initial connections attempts due to a observable discrepancy in the algorithm negotiation...
Denial Of Service (DoS)
openldap is vulnerable to denial of service. A NULL pointer dereference during a request for renaming RDNs allows an unauthenticated remote attacker to crash the slapd process by sending a malicious request...
Denial Of Service (DoS)
ghostscript is vulnerable to denial of service. An attacker is able to crash the application via a malicious PDF file that results in a long running computation...
Denial Of Service (DoS)
qemu is vulnerable to denial of service DoS. The vulnerability exists in hw/pci/msix.c, allowing a malicious user to trigger an out-of-bounds access via a crafted address in an msi-x mmio operation...
Denial Of Service (DoS)
ghostscript is vulnerable to denial of service DoS. The vulnerability exists due to the heap-buffer-overflow in the lprnisblack function in contrib/lips4/gdevlprn.c, allowing an attacker to crash the application via a crafted PDF file...
CVE-2020-16289
Artifex Software GhostScript is vulnerable to denial of service attacks. A remote attacker could cause buffer overflows in cifprintpage in devices/gdevcif.c via a crafted PDF file resulting in denial of service conditions...
Remote Code Execution (RCE)
Dropbear is vulnerable to remote code execution. The vulnerability existed because of a double free in cleanup of TCP listeners when the -a option is enabled...
Privilege Escalation
linux kernel is vulnerable to privilege escalation. A local attacker with monitor perf events permissions is able to corrupt memory and obtain higher privileges...
Denial Of Service (DoS)
qemu is vulnerable to denial of service. The vulnerability exists through hw/usb/hcd-ohci.c due to an infinite loop when a TD list has a loop allowing an attacker to cause an application crash...
Privilege Escalation
linux-kvm is vulnerable to privilege escalation. The vulnerability exists as the rbd block device driver in drivers/block/rbd.c used incomplete permission checking for access to rbd devices, which could be leveraged by local attackers to map or unmap rbd block devices...
Denial Of Service (DoS)
nsd is vulnerable to denial of service. An attacker is able to overwrite the PID file via a local symlink attack which will cause the application to crash...
Denial Of Service (DoS)
Node.js is vulnerable to Denial of Service. An attacker may trigger Denial of Service by sending DNS request and getting the application to resolve a DNS record with a larger number of response...
Denial Of Service (DoS)
ImageMagick is vulnerable to denial of service. An attacker is allowed to send an input value which is outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c to trigger an application crash...
Missing Security UI
firefox is missing security UI. It was possible to cause the browser to enter fullscreen mode without displaying the security UI; thus making it possible to attempt a phishing attack or otherwise confuse the user...
Remote Code Execution
unomi-plugins-base is vulnerable to arbitrary code execution. An insufficient fix for CVE-2020-11975 allows an attacker to bypass the allowlist and blocklist and remotely execute arbitrary code...
Open Redirection
werkzeug is vulnerable to open redirection. An attacker is able to redirect a user to a malicious site via double slashes in the URL...
Cross-site Scripting (XSS)
typo3/fluid is vulnerable to cross-site scripting XSS. An attacker is able to inject and execute malicious script in a user's browser via 1 additionalAttributes arrays 2 ViewHelpers 3 Subclasses of AbstractConditionViewHelper...
Arbitrary Code Execution
chakracore is vulnerable to arbitrary code execution. A memory corruption vulnerability allows an attacker to execute arbitrary code on the host OS. This CVE ID is different from CVE-2020-17048...
XML Entity Expansion (XEE)
Qt is is vulnerable to XML entity expansion. The vulnerability exists due to mishandling of 'QXmlStreamReader' allowing a malicious attacker to send crafted SVG to cause an xml bomb attack...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. A use-after-free in nttyreceivebufcommon allows an attacker to crash the kernel and potentially obtain confidential information...
Use-after-free
kernel is vulnerable to use-after-free. It is possible because of a flaw in drivers/bluetooth/hcildisc.c...
Information Disclosure
kernel is vulnerable to information disclosure. The vulnerability exists in net bluetooth when processing certain AMP packets...
Information Disclosure
apache tomcat is vulnerable to information disclosure. The HTTP headers within a request can potentially be included in a subsequent request and reveal confidential information, when the agreed maximum number of concurrent streams for a connection is exceeded...
Denial Of Service (DoS)
webkitgtk4 is vulnerable to denial of service DoS. The vulnerability exists through an improper memory handling...
Arbitrary Code Execution
webkitgtk is vulnerable to arbitrary code execution.The attacker execute the maliciously crafted web content to create multiple memory corruption issue lead to arbitrary code execution...
Arbitrary Code Execution
webkitgtk is vulnerable to arbitrary code execution. The vulnerability exists through memory corruption...
Arbitrary Code Execution
WebKitGTK+ is vulnerable to arbitrary code execution. Processing maliciously crafted web content may lead to arbitrary code execution...
Information Disclosure
WebKitGTK+ is vulnerable to information disclosure. Processing maliciously crafted web content may result in the disclosure of process memory...
Arbitrary Code Execution
WebKitGTK+ is vulnerable to arbitrary code execution. A memory corruption issue allows an attacker to execute arbitrary code on the host OS...
Divide-by-zero Error
The libexif has divide-by-zero error in exifentrygetvalue function in exif-entry.c...
Opren Redirect
modauthopenidc is vulnerable to open redirect. Open redirect in logout url when using URLs with leading slashes...
Out-of-bounds (OOB) Read/Write
OpenEXR is vulnerable to out-of-bounds read/write. It is possible via std::vector out-of-bounds read and write in ImfTileOffsets.cpp...
Denial Of Service (DoS)
graphicsmagick is vulnerable to denial of service DoS. The vulnerability exists through a NULL pointer dereference vulnerability in the function ReadCINEONImage in coders/cineon.c...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. The ifsdio.c module does not validate the allocworkqueue return value, resulting in a NULL pointer dereference causing a crash...
Denial Of Service (DoS)
elfutils is vulnerable to denial of service DoS. The vulnerability exists as it was possible to trigger a memory allocation failure through the shoff or shsize ELF header value, throough the libelfsetrawdatawrlock function in elfgetdata.c...
Denial Of Service (DoS)
graphicsmagick is vulnerable to denial of service DoS. The vulnerability exists through the length field in a header, which is passed into the ReadSUNImage function in coders/sun.c...
XML External Entity (XXE)
JabRef version =4.3.1 contains a XML External Entity XXE vulnerability in MsBibImporter XML Parser that can result in disclosure of confidential data, denial of service, server side request forgery, port scanning. This attack appear to be exploitable via Specially crafted MsBib file...
Denial Of Service (DoS)
linux is vulnerable to denial of service DoS. The vulnerability exists as aufs improperly managed inode reference counts in the vfsubdentryopen method...
Information Disclosure
squid3 is vulnerable to information disclosure. The vulnerability exists due to incorrect data management when processing HTTP Digest Authentication where nonce tokens that contain the raw byte value of a pointer that sits within heap memory allocation, reducing ASLR protections...
Denial Of Service (DoS)
chromium-browser is vulnerable to denial of service DoS. SkPath.cpp in Skia, as used in Google Chrome on Windows and OS X and on Linux, does not properly validate the return values of ChopMonoAtY calls, which allows remote attackers to cause a denial of service uninitialized memory access and...
Denial Of Service (DoS)
graphicsmagick:xenial is vulnerable to denial of service DoS. The DrawImage function in magick/render.c in GraphicsMagick does not properly look for pop keywords that are associated with push keywords, which allows remote attackers to cause a denial of service negative strncpy and application cra...
Denial Of Service (DoS)
QEMU is vulnerable to denial of service DoS. es1370transferaudio in hw/audio/es1370.c does not properly validate the frame count, which allows guest OS users to trigger an out-of-bounds access during an es1370write operation...
Denial Of Service (DoS)
linux kernel is vulnerable to denial of service. A NULL pointer dereference in tw5864handleframe in drivers/media/pci/tw5864/tw5864-video.c allows an attacker to crash the application...
Arbitrary Code Execution
squid is vulnerable to arbitrary code execution. The vulnerability exists as a heap-based buffer overflow could occur when receiving data from a remote server in response to an URN request, and when squid fails to ensure that the response can fit within the buffer...
Denial Of Service (DoS)
qemu:xenial is vulnerable to denial of service DoS.The 1 v9fscreate and 2 v9fslcreate functions in hw/9pfs/9p.c in QEMU aka Quick Emulator allow local guest OS privileged users to cause a denial of service file descriptor or memory consumption via vectors related to an already in-use fid...
Denial Of Service (DoS)
Linux kernel is vulnerable to denial of service DoS. There is a race condition bug that can be caused by a malicious USB device in the USB character device driver layer, aka CID-303911cfc5b9. This affects drivers/usb/core/file.c...
Regular Expression Denial Of Service (ReDoS)
ua-parser-js is vulnerable to regular expression denial of service. A remote attacker is able to cause a denial of service condition by submitting a malicious string that when parsed via the Redmi and Mi Pad regexes, would result in excessive resource consumption...
Remote Code Execution (RCE)
ojdbc7 is vulnerable to remote code execution RCE. The vulnerability exists in the JDBC component of the Oracle Database Server...
Validation Bypass
PowerDNS Recursor is vulnerable validation bypass. The answer section of a NXDOMAIN response lacking an SOA is not properly validated in SyncRes::processAnswer, allowing an attacker to bypass DNSSEC validation...