Lucene search
+L
VeracodeMost viewed

38838 matches found

Veracode
Veracode
•added 2020/08/06 9:39 p.m.•41 views

Arbitrary Code Execution

WebKitGTK is vulnerable to arbitrary code execution. A memory corruption issue use-after-free allows an attacker to execute arbitrary code...

9.8CVSS4.9AI score0.04987EPSS
SaveExploits0References11Affected Software29
Veracode
Veracode
•added 2020/08/06 9:37 p.m.•41 views

Buffer Over-reads

tcpdump is vulnerable to a buffer over-read. The vulnerability exists due to a flaw in print-fr.c:mfrprint...

7.5CVSS2.3AI score0.03985EPSS
SaveExploits0References21Affected Software1
Veracode
Veracode
•added 2020/08/06 9:35 p.m.•41 views

Buffer Over-read

tcpdump is vulnerable to buffer over-read. The DCCP parser in tcpdump has a buffer over-read in print-dccp.c:dccpprintoption...

7.5CVSS3.6AI score0.06816EPSS
SaveExploits0References19Affected Software1
Veracode
Veracode
•added 2020/08/06 9:34 p.m.•41 views

Denial Of Service (DoS)

Perl is vulnerable to denial of service DoS. It allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow...

8.2CVSS5.1AI score0.11334EPSS
SaveExploits0References15Affected Software1
Veracode
Veracode
•added 2020/08/06 9:28 p.m.•41 views

Arbitrary Code Execution

firefox is vulnerable to arbitrary code execution. A type-confusion bug in the JIT optiomizations involving the Javascript arguments object could confuse later optimization and result in arbitrary code execution...

8.8CVSS2.3AI score0.01511EPSS
SaveExploits0References9Affected Software7
Veracode
Veracode
•added 2020/08/04 12:48 a.m.•41 views

Exposed API

foreman does not properly restrict access to APIs. A remote attacker is able to access arbitrary hosts via an API request...

7.5CVSS3.9AI score0.02395EPSS
SaveExploits0References9Affected Software170
Veracode
Veracode
•added 2020/07/30 2:02 a.m.•41 views

Denial Of Service (DoS)

grub2 is vulnerable to denial of service DoS. The vulnerability exists through integer overflow in initrd size handling...

6.4CVSS3AI score0.01588EPSS
SaveExploits1References19Affected Software5
Veracode
Veracode
•added 2020/07/17 5:32 a.m.•41 views

Information Disclosure

openjdk is vulnerable to information disclosure. HostnameChecker does not ensure X.509 certificate names are in normalized form, potentially resulting in an unauthorized read access...

3.7CVSS1.6AI score0.03284EPSS
SaveExploits0References20Affected Software6
Veracode
Veracode
•added 2020/06/26 7:34 a.m.•41 views

Denial Of Service (DoS)

tomcat-coyote is vulnerable to denial of service DoS. The vulnerability is caused due to lack of proper handling of sequence of HTTP/2 requests, leading to a high CUP consumption and an application crash...

7.5CVSS1.6AI score0.26699EPSS
SaveExploits0References46Affected Software6
Veracode
Veracode
•added 2020/06/23 3:36 a.m.•41 views

Information Disclosure

httpd is vulnerable to information disclosure. The vulnerability exists through modproxyftp use of uninitialized value...

5.3CVSS0.2AI score0.51951EPSS
SaveExploits0References42Affected Software12
Veracode
Veracode
•added 2020/06/15 5:05 a.m.•41 views

Remote Code Execution (RCE)

jackson-databind is vulnerable to deserialization of untrusted data that can lead to remote code execution. It is possible because it does not filter the untrusted serialization classes weblogic/oracle-aqjms from interaction between serialization gadgets and typing by default...

8.1CVSS4.5AI score0.04458EPSS
SaveExploits0References11Affected Software245
Veracode
Veracode
•added 2020/06/15 4:11 a.m.•41 views

Remote Code Execution (RCE)

jackson-databind is vulnerable to deserialization of untrusted data that can lead to remote code execution. It is possible because the untrusted class com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool was not filtered by default from the interaction between serialization gadgets and...

8.1CVSS4.4AI score0.08072EPSS
SaveExploits0References11Affected Software245
Veracode
Veracode
•added 2020/06/11 3:27 a.m.•41 views

Privilege Escalation

libexif is vulnerable to privilege escalation. The vulnerability exists through several buffer over-reads in EXIF MakerNote handling...

9.1CVSS3.4AI score0.02684EPSS
SaveExploits0References7Affected Software1
Veracode
Veracode
•added 2020/06/03 4:09 a.m.•41 views

Denial Of Service (DoS)

ffmpeg is vulnerable to denial of service. The flvwritepacket function in libavformat/flvenc.c does not check for an empty audio packet, leading to an assertion failure...

7.5CVSS4AI score0.03266EPSS
SaveExploits0References7Affected Software1
Veracode
Veracode
•added 2020/05/29 3:24 a.m.•41 views

Denial Of Service (DoS)

bind is vulnerable to denial of service DoS. The vulnerability exists as a logic error in code which checks TSIG validity can be used to trigger an assertion failure in tsig.c...

7.5CVSS2.6AI score0.93422EPSS
SaveExploits6References16Affected Software1
Veracode
Veracode
•added 2020/05/21 3:40 a.m.•41 views

Denial Of Service (DoS)

OpenJDK is vulnerable to denial of service. The vulnerability exists through uncaught InstantiationError exception in ObjectStreamClass which allows an attacker to cause an application crash...

3.7CVSS6.3AI score0.04211EPSS
SaveExploits0References20Affected Software6
Veracode
Veracode
•added 2020/05/15 7:15 a.m.•41 views

JMX Rebind Flaw

camel is vulnerable to JMX rebind. The vulnerability exists due to a lack of security on JMX connector configuration...

7.5CVSS8.3AI score0.13959EPSS
SaveExploits0References29Affected Software6
Veracode
Veracode
•added 2020/05/13 3:30 a.m.•41 views

Arbitrary Code Execution

kernel is vulnerable to arbitrary code execution. A double free may be caused by the function allocatetracebuffer in the file kernel/trace/trace.c...

7.8CVSS3.3AI score0.00363EPSS
SaveExploits0References6Affected Software2
Veracode
Veracode
•added 2020/05/10 11:27 p.m.•41 views

Denial Of Service (DoS)

libsndfile is vulnerable to denial of service DoS. The vulnerability exists as the flacbuffercopy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted audio file...

6.5CVSS5.4AI score0.03468EPSS
SaveExploits0References3Affected Software1
Veracode
Veracode
•added 2020/05/10 11:26 p.m.•41 views

Denial Of Service (DoS)

imagemagick6 is vulnerable to denial of service DoS. The vulnerability exists as a memory leak vulnerability in the function ReadPSImage in coders/ps.c...

6.5CVSS2.8AI score0.01901EPSS
SaveExploits1References6Affected Software2
Veracode
Veracode
•added 2020/05/10 11:25 p.m.•41 views

Information Disclosure

docker is vulnerable to information disclosure. The vulnerability exists as debug mode may sometimes add secrets to the debug log. This applies to a scenario where docker stack deploy is run to redeploy a stack that includes non external secrets. It potentially applies to other API users of the...

7.5CVSS3.1AI score0.03103EPSS
SaveExploits0References10Affected Software1
Veracode
Veracode
•added 2020/05/10 11:23 p.m.•41 views

Denial Of Service (DoS)

libsndfile is vulnerable to denial of service DoS. The vulnerability exists as an error in the flacbuffercopy function flac.c can be exploited to cause a segmentation violation with write memory access via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585...

5.5CVSS3.3AI score0.01926EPSS
SaveExploits1References3Affected Software1
Veracode
Veracode
•added 2020/05/01 1:50 a.m.•41 views

Authorization Bypass

gdm is vulnerable to authorization bypass. A lock screen bypass vulnerability exists when timed login is enabled...

6.4CVSS2.4AI score0.00528EPSS
SaveExploits1References5Affected Software29
Veracode
Veracode
•added 2020/04/29 2:39 a.m.•41 views

Information Disclosure

tcpdump is vulnerable to information disclosure. The vulnerability exists through a stack-based buffer over-read in print-hncp.c:printprefix via crafted pcap...

5.5CVSS2.6AI score0.03491EPSS
SaveExploits1References15Affected Software1
Veracode
Veracode
•added 2020/04/28 4:01 a.m.•41 views

Remote Code Execution

iotdb-server is vulnerable to remote code execution. The JMX port 31999 is exposed and allows an unauthenticated attacker to access and execute code on the system...

9.8CVSS5.2AI score0.02676EPSS
SaveExploits0References2Affected Software1
Veracode
Veracode
•added 2020/04/24 2:52 a.m.•41 views

Denial Of Service (DoS)

pillow is vulnerable to denial of service DoS. The vulnerability exists through multiple out of bounds roads in ImagingFliDecode in FliDecode.c...

5.5CVSS2.8AI score0.0148EPSS
SaveExploits0References14Affected Software1
Veracode
Veracode
•added 2020/04/10 1:10 a.m.•41 views

Arbitrary Code Execution

rpm is vulnerable to arbitrary code execution. An attacker could create a specially-crafted RPM package that, when its package header was accessed, or during package signature verification, could cause an application using the RPM library such as the rpm command line tool, or the yum and up2date...

6.8CVSS5.3AI score0.04342EPSS
SaveExploits0References25Affected Software1
Veracode
Veracode
•added 2020/04/10 1:08 a.m.•41 views

Privilege Escalation

glibc is vulnerable to privilege escalation. A flaw was found in the way the ldd utility identified dynamically linked libraries. If an attacker could trick a user into running ldd on a malicious binary, it could result in arbitrary code execution with the privileges of the user running ldd...

6.9CVSS4AI score0.00522EPSS
SaveExploits1References16Affected Software1
Veracode
Veracode
•added 2020/04/10 1:07 a.m.•41 views

Arbitrary Code Execution

firefox is vulnerable to arbitrary code execution. The vulnerability exists as two flaws were found in the way Firefox parsed certain Scalable Vector Graphics SVG image files. A web page containing a malicious SVG image file could cause an information leak, or cause Firefox to crash or,...

9.3CVSS3.2AI score0.06585EPSS
SaveExploits0References34Affected Software3
Veracode
Veracode
•added 2020/04/10 1:07 a.m.•41 views

Arbitrary Code Execution

firefox is vulnerable to arbitrary code execution. The vulnerability exists as a flaw was found in the way Firefox parsed certain Scalable Vector Graphics SVG image files that contained eXtensible Style Sheet language Transformations XSLT. A web page containing a malicious SVG image file could...

9.3CVSS2.9AI score0.05735EPSS
SaveExploits0References16Affected Software3
Veracode
Veracode
•added 2020/04/10 1:01 a.m.•41 views

Denial Of Service (DoS)

subversion is vulnerable to denial of service. An infinite loop flaw was found in the way the moddavsvn module processed certain data sets. If the SVNPathAuthz directive was set to "shortcircuit", and path-based access control for files and directories was enabled, a malicious, remote user could...

4.3CVSS2.1AI score0.08483EPSS
SaveExploits2References23Affected Software1
Veracode
Veracode
•added 2020/04/10 1:01 a.m.•41 views

Insecure Resource Limit Verification

samba does not properly verify resource limits. It was found that the mount.cifs tool did not handle certain errors correctly when updating the mtab file. If mount.cifs had the setuid bit set, a local attacker could corrupt the mtab file by setting a small file size limit before running mount.cif...

3.3CVSS1.7AI score0.00531EPSS
SaveExploits2References21Affected Software3
Veracode
Veracode
•added 2020/04/10 12:59 a.m.•41 views

Arbitrary Code Execution

qemu-kvm is vulnerable to arbitrary code execution. The vulnerability exists as it was found that the virtio-blk driver in qemu-kvm did not properly validate read and write requests from guests. A privileged guest user could use this flaw to crash the guest or, possibly, execute arbitrary code on...

7.4CVSS2.8AI score0.00718EPSS
SaveExploits0References22Affected Software1
Veracode
Veracode
•added 2020/04/10 12:59 a.m.•41 views

Arbitrary Code Execution

ruby is vulnerable to arbitrary code execution. A flaw was found in the way large amounts of memory were allocated on 64-bit systems when using the BigDecimal class. A context-dependent attacker could use this flaw to cause memory corruption, causing a Ruby application that uses the BigDecimal...

6.8CVSS3.6AI score0.03025EPSS
SaveExploits0References16Affected Software1
Veracode
Veracode
•added 2020/04/10 12:58 a.m.•41 views

Denial Of Service (DoS)

kernel is vulnerable to denial of service. A divide-by-zero flaw was found in the tcpselectinitialwindow function in the Linux kernel's TCP/IP protocol suite implementation. A local, unprivileged user could use this flaw to trigger a denial of service by calling setsockopt with certain options...

4.9CVSS3.7AI score0.0148EPSS
SaveExploits15References27Affected Software2
Veracode
Veracode
•added 2020/04/10 12:58 a.m.•41 views

Arbitrary Code Execution

thunderbird/firefox is vulnerable to arbitrary code execution. Several flaws were found in the processing of malformed HTML content. Malicious HTML content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird...

10CVSS2.9AI score0.05772EPSS
SaveExploits0References18Affected Software4
Veracode
Veracode
•added 2020/04/10 12:57 a.m.•41 views

Denial Of Service (DoS)

kernel is vulnerabel to denial of service. Missing boundary checks in the block layer implementation could allow a local, unprivileged user to cause a denial of service...

4.7CVSS3.9AI score0.00393EPSS
SaveExploits1References24Affected Software2
Veracode
Veracode
•added 2020/04/10 12:56 a.m.•41 views

Arbitrary Code Execution

thunderbird is vulnerable to arbitrary code execution. The vulnerability exists through as a HTML mail message containing malicious content could possibly lead to arbitrary code execution with the privileges of the user running Thunderbird...

10CVSS3.1AI score0.05118EPSS
SaveExploits0References13Affected Software3
Veracode
Veracode
•added 2020/04/10 12:55 a.m.•41 views

Information Disclosure

kernel is vulnerable to information disclosure. Missing initialization flaws in the Linux kernel could lead to information leaks...

1.9CVSS1.2AI score0.01478EPSS
SaveExploits8References37Affected Software2
Veracode
Veracode
•added 2020/04/10 12:54 a.m.•41 views

Information Disclosure

kernel is vulnerable to information disclosure. A missing initialization flaw was found in the ethtoolgetregs function in the Linux kernel's ethtool IOCTL handler. A local user who has the CAPNETADMIN capability could use this flaw to cause an information leak...

5.5CVSS0.2AI score0.00397EPSS
SaveExploits1References18Affected Software2
Veracode
Veracode
•added 2020/04/10 12:54 a.m.•41 views

Command Injection

postfix is vulnerable to command injection. It was discovered that Postfix did not flush the received SMTP commands buffer after switching to TLS encryption for an SMTP session. A man-in-the-middle attacker could use this flaw to inject SMTP commands into a victim's session during the plain text...

6.8CVSS1.9AI score0.16334EPSS
SaveExploits1References25Affected Software1
Veracode
Veracode
•added 2020/04/10 12:53 a.m.•41 views

Authorization Bypass

php is vulnerable to authorization bypass. The vulnerability exists as an input validation flaw was discovered in the PHP session serializer. If a PHP script generated session variable names from untrusted user input, a remote attacker could use this flaw to inject an arbitrary variable into the...

5CVSS2.8AI score0.02453EPSS
SaveExploits1References9Affected Software1
Veracode
Veracode
•added 2020/04/10 12:53 a.m.•41 views

Denial Of Service (DoS)

mysql is vulnerable to denial of service. A flaw in the way MySQL processed EXPLAIN statements for some complex SELECT queries could allow a remote, authenticated attacker to crash mysqld...

4CVSS4.4AI score0.1144EPSS
SaveExploits2References28Affected Software1
Veracode
Veracode
•added 2020/04/10 12:53 a.m.•41 views

Denial Of Service (DoS)

mysql is vulnerable to denial of service DoS. The vulnerability exists as a flaw in the way MySQL processed SQL queries containing IN or CASE statements, when a NULL argument was provided as one of the arguments to the query, could allow a remote, authenticated attacker to crash mysqld...

4CVSS4.1AI score0.12229EPSS
SaveExploits2References17Affected Software1
Veracode
Veracode
•added 2020/04/10 12:53 a.m.•41 views

Denial Of Service (DoS)

WebKitGTK+ is vulnerable to denial of service DoS. Due use-after-free flaws caused by vectors involving selections, malicious web content leads an application using WebKitGTK+ to crash or, potentially, execute arbitrary code with the privileges of the user running the application...

9.3CVSS6.1AI score0.61319EPSS
SaveExploits13References24Affected Software1
Veracode
Veracode
•added 2020/04/10 12:52 a.m.•41 views

Arbitrary Code Execution

firefox is vulnerable to arbitrary code execution. A flaw was found in the way Firefox handled malformed JavaScript. A website with an object containing malicious JavaScript could cause Firefox to execute that JavaScript with the privileges of the user running Firefox...

6.8CVSS1.7AI score0.02316EPSS
SaveExploits0References22Affected Software2
Veracode
Veracode
•added 2020/04/10 12:52 a.m.•41 views

Denial Of Service (DoS)

kernel is vulnerable to denial of service. An integer overflow flaw was found in the extent range checking code in the Linux kernel's ext4 file system implementation. A local, unprivileged user with write access to an ext4-mounted file system could trigger this flaw by writing to a file at a very...

4.7CVSS4.1AI score0.00376EPSS
SaveExploits0References27Affected Software1
Veracode
Veracode
•added 2020/04/10 12:50 a.m.•41 views

Arbitrary Code Execution

seamonkey is vulnerable to arbitrary code excution. A flaw was found in the way SeaMonkey loaded Java LiveConnect scripts. Malicious web content could load a Java LiveConnect script in a way that would result in the plug-in object having elevated privileges, allowing it to execute Java code with...

9.3CVSS3.4AI score0.03796EPSS
SaveExploits1References23Affected Software3
Veracode
Veracode
•added 2020/04/10 12:49 a.m.•41 views

Buffer Overflow

FreeType is vulnerable to Buffer overflow. Several buffer overflow flaws were found in the way the FreeType font engine processed font files. If a user loaded a carefully-crafted font file with an application linked against FreeType, it could cause the application to crash or, possibly, execute...

6.8CVSS4.2AI score0.06194EPSS
SaveExploits1References18Affected Software1
Veracode
Veracode
•added 2020/04/10 12:48 a.m.•41 views

Arbitrary Code Execution

thunderbird is vulnerable to arbitrary code execution. Several flaws were found in the processing of malformed HTML mail content. An HTML mail message containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running...

9.3CVSS3.1AI score0.04644EPSS
SaveExploits0References23Affected Software5
Total number of security vulnerabilities5000