Lucene search
+L
VeracodeMost viewed

38838 matches found

Veracode
Veracode
•added 2020/10/13 4:49 a.m.•41 views

Information Disclosure

apache tomcat is vulnerable to information disclosure. The HTTP headers within a request can potentially be included in a subsequent request and reveal confidential information, when the agreed maximum number of concurrent streams for a connection is exceeded...

4.3CVSS0.8AI score0.57286EPSS
SaveExploits0References10Affected Software2
Veracode
Veracode
•added 2020/10/01 3:53 a.m.•41 views

Arbitrary Code Execution

webkitgtk4 is vulnerable to arbitrary code execution. The vulnerability exists through memory corruption...

8.8CVSS3.8AI score0.04479EPSS
SaveExploits0References10Affected Software28
Veracode
Veracode
•added 2020/10/01 3:53 a.m.•41 views

Arbitrary Code Execution

webkitgtk is vulnerable to arbitrary code execution.The attacker execute the maliciously crafted web content to create multiple memory corruption issue lead to arbitrary code execution...

8.8CVSS3.8AI score0.0192EPSS
SaveExploits0References10Affected Software28
Veracode
Veracode
•added 2020/10/01 3:52 a.m.•41 views

Arbitrary Code Execution

webkitgtk is vulnerable to arbitrary code execution. The vulnerability exists through memory corruption...

8.8CVSS3.8AI score0.01556EPSS
SaveExploits0References5Affected Software28
Veracode
Veracode
•added 2020/10/01 3:52 a.m.•41 views

Arbitrary Code Execution

WebKitGTK+ is vulnerable to arbitrary code execution. Processing maliciously crafted web content may lead to arbitrary code execution...

8.8CVSS4.3AI score0.01797EPSS
SaveExploits0References10Affected Software1
Veracode
Veracode
•added 2020/10/01 3:52 a.m.•41 views

Information Disclosure

WebKitGTK+ is vulnerable to information disclosure. Processing maliciously crafted web content may result in the disclosure of process memory...

6.5CVSS1.5AI score0.01418EPSS
SaveExploits0References11Affected Software1
Veracode
Veracode
•added 2020/10/01 3:52 a.m.•41 views

Arbitrary Code Execution

WebKitGTK+ is vulnerable to arbitrary code execution. A memory corruption issue allows an attacker to execute arbitrary code on the host OS...

8.8CVSS4.4AI score0.01797EPSS
SaveExploits0References10Affected Software1
Veracode
Veracode
•added 2020/10/01 3:51 a.m.•41 views

Divide-by-zero Error

The libexif has divide-by-zero error in exifentrygetvalue function in exif-entry.c...

5.5CVSS2.9AI score0.00531EPSS
SaveExploits0References8Affected Software1
Veracode
Veracode
•added 2020/10/01 3:50 a.m.•41 views

Opren Redirect

modauthopenidc is vulnerable to open redirect. Open redirect in logout url when using URLs with leading slashes...

6.1CVSS1.3AI score0.01598EPSS
SaveExploits0References10Affected Software1
Veracode
Veracode
•added 2020/10/01 3:46 a.m.•41 views

Out-of-bounds (OOB) Read/Write

OpenEXR is vulnerable to out-of-bounds read/write. It is possible via std::vector out-of-bounds read and write in ImfTileOffsets.cpp...

5.5CVSS2.8AI score0.01793EPSS
SaveExploits1References20Affected Software1
Veracode
Veracode
•added 2020/09/21 6:38 a.m.•41 views

Denial Of Service (DoS)

graphicsmagick is vulnerable to denial of service DoS. The vulnerability exists through a NULL pointer dereference vulnerability in the function ReadCINEONImage in coders/cineon.c...

6.5CVSS2.9AI score0.01825EPSS
SaveExploits0References6Affected Software1
Veracode
Veracode
•added 2020/09/21 6:36 a.m.•41 views

Denial Of Service (DoS)

kernel is vulnerable to denial of service. The ifsdio.c module does not validate the allocworkqueue return value, resulting in a NULL pointer dereference causing a crash...

4.1CVSS6.4AI score0.00583EPSS
SaveExploits1References12Affected Software2
Veracode
Veracode
•added 2020/09/21 6:34 a.m.•41 views

Denial Of Service (DoS)

elfutils is vulnerable to denial of service DoS. The vulnerability exists as it was possible to trigger a memory allocation failure through the shoff or shsize ELF header value, throough the libelfsetrawdatawrlock function in elfgetdata.c...

5.5CVSS2.1AI score0.02884EPSS
SaveExploits0References7Affected Software2
Veracode
Veracode
•added 2020/09/21 6:34 a.m.•41 views

Denial Of Service (DoS)

graphicsmagick is vulnerable to denial of service DoS. The vulnerability exists through the length field in a header, which is passed into the ReadSUNImage function in coders/sun.c...

6.5CVSS2.1AI score0.02477EPSS
SaveExploits0References4Affected Software1
Veracode
Veracode
•added 2020/09/21 6:32 a.m.•41 views

XML External Entity (XXE)

JabRef version =4.3.1 contains a XML External Entity XXE vulnerability in MsBibImporter XML Parser that can result in disclosure of confidential data, denial of service, server side request forgery, port scanning. This attack appear to be exploitable via Specially crafted MsBib file...

10CVSS4.1AI score0.0172EPSS
SaveExploits0References2Affected Software1
Veracode
Veracode
•added 2020/09/21 6:31 a.m.•41 views

Denial Of Service (DoS)

linux is vulnerable to denial of service DoS. The vulnerability exists as aufs improperly managed inode reference counts in the vfsubdentryopen method...

5.5CVSS2.9AI score0.002EPSS
SaveExploits0References2Affected Software3
Veracode
Veracode
•added 2020/09/21 6:26 a.m.•41 views

Information Disclosure

squid3 is vulnerable to information disclosure. The vulnerability exists due to incorrect data management when processing HTTP Digest Authentication where nonce tokens that contain the raw byte value of a pointer that sits within heap memory allocation, reducing ASLR protections...

7.5CVSS0.6AI score0.40982EPSS
SaveExploits0References13Affected Software4
Veracode
Veracode
•added 2020/09/21 6:24 a.m.•41 views

Denial Of Service (DoS)

chromium-browser is vulnerable to denial of service DoS. SkPath.cpp in Skia, as used in Google Chrome on Windows and OS X and on Linux, does not properly validate the return values of ChopMonoAtY calls, which allows remote attackers to cause a denial of service uninitialized memory access and...

8.8CVSS5.2AI score0.01151EPSS
SaveExploits0References5Affected Software4
Veracode
Veracode
•added 2020/09/21 6:24 a.m.•41 views

Denial Of Service (DoS)

graphicsmagick:xenial is vulnerable to denial of service DoS. The DrawImage function in magick/render.c in GraphicsMagick does not properly look for pop keywords that are associated with push keywords, which allows remote attackers to cause a denial of service negative strncpy and application cra...

8.8CVSS7.1AI score0.02427EPSS
SaveExploits0References8Affected Software1
Veracode
Veracode
•added 2020/09/21 6:23 a.m.•41 views

Denial Of Service (DoS)

linux kernel is vulnerable to denial of service. A NULL pointer dereference in tw5864handleframe in drivers/media/pci/tw5864/tw5864-video.c allows an attacker to crash the application...

4.4CVSS3.9AI score0.00384EPSS
SaveExploits0References7Affected Software1
Veracode
Veracode
•added 2020/09/21 6:22 a.m.•41 views

Arbitrary Code Execution

squid is vulnerable to arbitrary code execution. The vulnerability exists as a heap-based buffer overflow could occur when receiving data from a remote server in response to an URN request, and when squid fails to ensure that the response can fit within the buffer...

9.8CVSS4.7AI score0.20251EPSS
SaveExploits0References11Affected Software4
Veracode
Veracode
•added 2020/09/21 6:19 a.m.•41 views

Denial Of Service (DoS)

qemu:xenial is vulnerable to denial of service DoS.The 1 v9fscreate and 2 v9fslcreate functions in hw/9pfs/9p.c in QEMU aka Quick Emulator allow local guest OS privileged users to cause a denial of service file descriptor or memory consumption via vectors related to an already in-use fid...

6CVSS5.8AI score0.00384EPSS
SaveExploits0References8Affected Software1
Veracode
Veracode
•added 2020/09/21 6:18 a.m.•41 views

Denial Of Service (DoS)

Linux kernel is vulnerable to denial of service DoS. There is a race condition bug that can be caused by a malicious USB device in the USB character device driver layer, aka CID-303911cfc5b9. This affects drivers/usb/core/file.c...

4.2CVSS3.7AI score0.00281EPSS
SaveExploits0References6Affected Software3
Veracode
Veracode
•added 2020/08/20 3:04 a.m.•41 views

Remote Code Execution (RCE)

ojdbc7 is vulnerable to remote code execution RCE. The vulnerability exists in the JDBC component of the Oracle Database Server...

8.1CVSS2.7AI score0.03482EPSS
SaveExploits0References9Affected Software2
Veracode
Veracode
•added 2020/08/06 9:39 p.m.•41 views

Validation Bypass

PowerDNS Recursor is vulnerable validation bypass. The answer section of a NXDOMAIN response lacking an SOA is not properly validated in SyncRes::processAnswer, allowing an attacker to bypass DNSSEC validation...

7.5CVSS4.8AI score0.02368EPSS
SaveExploits0References8Affected Software1
Veracode
Veracode
•added 2020/08/06 9:39 p.m.•41 views

Arbitrary Code Execution

WebKitGTK is vulnerable to arbitrary code execution. A memory corruption issue use-after-free allows an attacker to execute arbitrary code...

9.8CVSS4.9AI score0.04987EPSS
SaveExploits0References11Affected Software29
Veracode
Veracode
•added 2020/08/06 9:37 p.m.•41 views

Buffer Over-reads

tcpdump is vulnerable to a buffer over-read. The vulnerability exists due to a flaw in print-fr.c:mfrprint...

7.5CVSS2.3AI score0.03985EPSS
SaveExploits0References21Affected Software1
Veracode
Veracode
•added 2020/08/06 9:35 p.m.•41 views

Buffer Over-read

tcpdump is vulnerable to buffer over-read. The DCCP parser in tcpdump has a buffer over-read in print-dccp.c:dccpprintoption...

7.5CVSS3.6AI score0.06816EPSS
SaveExploits0References19Affected Software1
Veracode
Veracode
•added 2020/08/06 9:34 p.m.•41 views

Denial Of Service (DoS)

Perl is vulnerable to denial of service DoS. It allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow...

8.2CVSS5.1AI score0.11334EPSS
SaveExploits0References15Affected Software1
Veracode
Veracode
•added 2020/08/06 9:30 p.m.•41 views

Denial Of Service (DoS)

usrsctp is vulnerable to denial of service. An out-of-bounds read in sctploadaddressesfrominit allows an attacker to crash the application...

6.5CVSS4.1AI score0.03141EPSS
SaveExploits1References41Affected Software6
Veracode
Veracode
•added 2020/08/06 9:28 p.m.•41 views

Arbitrary Code Execution

firefox is vulnerable to arbitrary code execution. A type-confusion bug in the JIT optiomizations involving the Javascript arguments object could confuse later optimization and result in arbitrary code execution...

8.8CVSS2.3AI score0.01511EPSS
SaveExploits0References9Affected Software7
Veracode
Veracode
•added 2020/08/04 12:48 a.m.•41 views

Exposed API

foreman does not properly restrict access to APIs. A remote attacker is able to access arbitrary hosts via an API request...

7.5CVSS3.9AI score0.02395EPSS
SaveExploits0References9Affected Software170
Veracode
Veracode
•added 2020/07/30 2:02 a.m.•41 views

Denial Of Service (DoS)

grub2 is vulnerable to denial of service DoS. The vulnerability exists through integer overflow in initrd size handling...

6.4CVSS3AI score0.01588EPSS
SaveExploits1References19Affected Software5
Veracode
Veracode
•added 2020/06/26 7:34 a.m.•41 views

Denial Of Service (DoS)

tomcat-coyote is vulnerable to denial of service DoS. The vulnerability is caused due to lack of proper handling of sequence of HTTP/2 requests, leading to a high CUP consumption and an application crash...

7.5CVSS1.6AI score0.26699EPSS
SaveExploits0References46Affected Software6
Veracode
Veracode
•added 2020/06/23 3:36 a.m.•41 views

Information Disclosure

httpd is vulnerable to information disclosure. The vulnerability exists through modproxyftp use of uninitialized value...

5.3CVSS0.2AI score0.51951EPSS
SaveExploits0References42Affected Software12
Veracode
Veracode
•added 2020/06/15 5:05 a.m.•41 views

Remote Code Execution (RCE)

jackson-databind is vulnerable to deserialization of untrusted data that can lead to remote code execution. It is possible because it does not filter the untrusted serialization classes weblogic/oracle-aqjms from interaction between serialization gadgets and typing by default...

8.1CVSS4.5AI score0.04458EPSS
SaveExploits0References11Affected Software245
Veracode
Veracode
•added 2020/06/15 4:11 a.m.•41 views

Remote Code Execution (RCE)

jackson-databind is vulnerable to deserialization of untrusted data that can lead to remote code execution. It is possible because the untrusted class com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool was not filtered by default from the interaction between serialization gadgets and...

8.1CVSS4.4AI score0.08072EPSS
SaveExploits0References11Affected Software245
Veracode
Veracode
•added 2020/06/11 3:27 a.m.•41 views

Privilege Escalation

libexif is vulnerable to privilege escalation. The vulnerability exists through several buffer over-reads in EXIF MakerNote handling...

9.1CVSS3.4AI score0.02684EPSS
SaveExploits0References7Affected Software1
Veracode
Veracode
•added 2020/06/03 4:09 a.m.•41 views

Denial Of Service (DoS)

ffmpeg is vulnerable to denial of service. The flvwritepacket function in libavformat/flvenc.c does not check for an empty audio packet, leading to an assertion failure...

7.5CVSS4AI score0.03266EPSS
SaveExploits0References7Affected Software1
Veracode
Veracode
•added 2020/05/29 3:24 a.m.•41 views

Denial Of Service (DoS)

bind is vulnerable to denial of service DoS. The vulnerability exists as a logic error in code which checks TSIG validity can be used to trigger an assertion failure in tsig.c...

7.5CVSS2.6AI score0.93422EPSS
SaveExploits6References16Affected Software1
Veracode
Veracode
•added 2020/05/21 3:40 a.m.•41 views

Denial Of Service (DoS)

OpenJDK is vulnerable to denial of service. The vulnerability exists through uncaught InstantiationError exception in ObjectStreamClass which allows an attacker to cause an application crash...

3.7CVSS6.3AI score0.04211EPSS
SaveExploits0References20Affected Software6
Veracode
Veracode
•added 2020/05/15 7:15 a.m.•41 views

JMX Rebind Flaw

camel is vulnerable to JMX rebind. The vulnerability exists due to a lack of security on JMX connector configuration...

7.5CVSS8.3AI score0.13959EPSS
SaveExploits0References29Affected Software6
Veracode
Veracode
•added 2020/05/13 3:30 a.m.•41 views

Arbitrary Code Execution

kernel is vulnerable to arbitrary code execution. A double free may be caused by the function allocatetracebuffer in the file kernel/trace/trace.c...

7.8CVSS3.3AI score0.00363EPSS
SaveExploits0References6Affected Software2
Veracode
Veracode
•added 2020/05/10 11:27 p.m.•41 views

Denial Of Service (DoS)

libsndfile is vulnerable to denial of service DoS. The vulnerability exists as the flacbuffercopy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted audio file...

6.5CVSS5.4AI score0.03468EPSS
SaveExploits0References3Affected Software1
Veracode
Veracode
•added 2020/05/10 11:26 p.m.•41 views

Denial Of Service (DoS)

imagemagick6 is vulnerable to denial of service DoS. The vulnerability exists as a memory leak vulnerability in the function ReadPSImage in coders/ps.c...

6.5CVSS2.8AI score0.01901EPSS
SaveExploits1References6Affected Software2
Veracode
Veracode
•added 2020/05/10 11:25 p.m.•41 views

Information Disclosure

docker is vulnerable to information disclosure. The vulnerability exists as debug mode may sometimes add secrets to the debug log. This applies to a scenario where docker stack deploy is run to redeploy a stack that includes non external secrets. It potentially applies to other API users of the...

7.5CVSS3.1AI score0.03103EPSS
SaveExploits0References10Affected Software1
Veracode
Veracode
•added 2020/05/10 11:23 p.m.•41 views

Denial Of Service (DoS)

libsndfile is vulnerable to denial of service DoS. The vulnerability exists as an error in the flacbuffercopy function flac.c can be exploited to cause a segmentation violation with write memory access via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585...

5.5CVSS3.3AI score0.01926EPSS
SaveExploits1References3Affected Software1
Veracode
Veracode
•added 2020/05/01 1:50 a.m.•41 views

Authorization Bypass

gdm is vulnerable to authorization bypass. A lock screen bypass vulnerability exists when timed login is enabled...

6.4CVSS2.4AI score0.00528EPSS
SaveExploits1References5Affected Software29
Veracode
Veracode
•added 2020/04/29 2:39 a.m.•41 views

Information Disclosure

tcpdump is vulnerable to information disclosure. The vulnerability exists through a stack-based buffer over-read in print-hncp.c:printprefix via crafted pcap...

5.5CVSS2.6AI score0.03491EPSS
SaveExploits1References15Affected Software1
Veracode
Veracode
•added 2020/04/28 4:01 a.m.•41 views

Remote Code Execution

iotdb-server is vulnerable to remote code execution. The JMX port 31999 is exposed and allows an unauthenticated attacker to access and execute code on the system...

9.8CVSS5.2AI score0.02676EPSS
SaveExploits0References2Affected Software1
Total number of security vulnerabilities5000