Information Disclosure

guzzlehttp/guzzle is vulnerable to information disclosure. The vulnerability exists because the modifyRequest function of RedirectMiddleware.php does not properly strip the authorization header or cookie header on a change in host or HTTP downgrade, allowing an attacker to get sensitive informati...

Privilege Escalation

xen is vulnerable to privilege escalation. The vulnerability exists due to non-coherent mappings allowing an attacker to control the whole system because the system safety logic doesn't account for CPU-induced cache...

Integer Underflow

ntfs is vulnerable to integer underflow. The vulnerability exists in fuselibreaddir which allows an attacker to read arbitrary memory read operations in NTFS-3G when using libfuse-lite...

Cross-site Scripting (XSS)

jenkins is vulnerable to cross site scripting. The vulnerability exists due to a lack of sanitization of the name and description of Jira Issue and Jira Release Version parameters on views displaying parameters...

Denial Of Service (DoS)

servicemesh-proxy is vulnerable to denial of service. The vulnerability exists due to a lack of sanitization which allows an attacker to crash the system via a NULL pointer dereference when using a WT filter saferegex match via a crafted request...

Cross-site Scripting (XSS)

spip is vulnerable to cross-site scripting. An attacker can inject and execute malicious javascript through the spip.php...

Use-After-Free

vim is vulnerable to use-after-free. The vulnerability exists in appendcommand which allows an attacker to cause a memory corruption which then leads to an application crash...

Use-After-Free

mariadb is vulnerable to use-after-free. The vulnerability exists in the component mystrcasecmp8bit which allows an attacker to cause a crash via specially crafted SQL statements...

Heap-based Buffer Overflow

pillow is vulnerable to a heap buffer overflow. The vulnerability exists in the ImagingTgaRleDecode of TgaRleDecode.c due to a lack of input validation which allows an attacker to inject maliciously crafted tga image and crash the system...

OS Command Injection

maven-shared-utils is vulnerable to OS command injection. The vulnerability exists due to the use of double-quoted strings without proper escaping which allows an attacker to execute shell commands...

Command Injection

fribidi is vulnerable to command injection. The vulnerability exists in fribidi which allows an attacker to inject and execute arbitrary codes...

Use After Free

chromium is vulnerable to use after free. The vulnerability exists in ANGLE which causes a memory corruption allowing a malicious attacker to cause a denial of service...

Information Disclosure

curl is vulnerable to information disclosure. The vulnerability exists due to an Auth/cookie leak on redirect to the same host but another port number...

Cross-Site Scripting (XSS)

actionpack is vulnerable to cross-site scripting. The vulnerability exists in call function in contentsecuritypolicy.rb because the API requests are not sent along with CSP headers but responses which allows an attacker to inject and execute javascript...

Denial Of Service (DoS)

linux-gkeop is vulnerable to denial of service. A flaw null pointer dereference in the Linux kernel UDF file system functionality was found in the way user triggers udffilewriteiter function for the malicious UDF image. A local user could use this flaw to crash the system...

Denial Of Service (DoS)

Linux is vulnerable to denial of service. The vulnerability exists due to a memory leak in yamsiocdevprivate in drivers/net/hamradio/yam.c...

Path Traversal

org.owasp.esapi:esapi is vulnerable to path traversal. A remote authenticated user is able to break out of expected directory via a crafted input through getValidDirectoryPath function, because it may incorrectly treat the tested input string as a child of the specified parent directory...

Privilege Escalation

qemu is vulnerable to privilege escalation. The vulnerability exists due to a lack of validation of authorization which allows an attacker to create files in the directories shared by virtio-fs with unintended group ownership in a scenario where a directory is SGID to a certain group and is...

XML External Entity (XXE) Injection

Opensagres XDocReport Document is vulnerable to XML external entity injection. The vulnerability exists in preprocess function in SAXXDocPreprocessor because the XML parser is not properly configured which allows an attacker to inject malicious XML input via weakly configured parser...

Denial Of Service (DoS)

htmlunit is vulnerable to denial of service. An attacker can cause excessive heap memory consumption by providing malicious processing instructions to the compileString function of HtmlUnitContextFactory.java, leading to an application crash...

Privilege Escalation

jenkins-2-plugins is vulnerable to privilege escalation. The vulnerability exists due to a lack of sanitization of the path allowing an attacker to configure Pipelines permission to read arbitrary files on the Jenkins controller file system...

Use After Free

linux is vulnerable to use-after-free. The vulnerability exists in the Linux Kernel in "tcnewtfilter" which allows a local attacker to gain privilege escalation which can lead to sensitive information disclosure, modification or a potential ddos attack...

Denial Of Service (DoS)

subversion is vulnerable to denial of service. The vulnerability exists due to a use after free memory corruption...

Denial Of Service (DoS)

libxml2 is vulnerable to denial of service. The vulnerability exists due to an integer overflow in xmlmemory.c...

Remote Code Execution (RCE)

laravel/laravel is vulnerable to remote code execution. The vulnerability exists in destruct in PendingResourceRegistration.php, Manager.php, and ClosureWrapper.php which allows an attacker is able to inject malicious code via an unserialize pop chain...

Arbitrary File Write

libarchive is vulnerable to arbitrary file write. An improper link resolution flaw can occur while extracting an archive leading to changing modes, times, access control lists, and flags of a file outside of the archive. An attacker may provide a malicious archive to a victim user, who would...

Symlink Attack

github.com/beego/beego is vulnerable to symlink attack. Lack of sufficient check for the existence of files created allows an attacker to use MemProf and GetCPUProfile commands to trigger the symbolic link attack locally...

Buffer Overflow

jhead is vulnerable to buffer overflow. The vulnerability exists due to a Heap-based Buffer Overflow vulnerability exists in jhead via the RemoveSectionType function in jpgfile.c...

Cross-Site Scripting (XSS)

Keycloak Core is vulnerable to reflected cross-site scripting. The vulnerability exists via the POST http requests due to lack of escaping which allows a malicious attacker to inject and execute arbitrary javascript...

Authentication Bypass

github.com/moby/moby is vulnerable to authentication bypass. The vulnerability exists because the default inheritable capabilities for linux container is not empty which allows an unauthorized user to bypass access restrictions...

Use After Free

chrome is vulnerable to use after free. The vulnerability exists due to a memory corruption in the Browser UI which allows an attacker to cause an application crash...

Information Exposure

topthink/think is vulnerable to information exposure. The vulnerability exists due to a lack of input validation which allows an attacker to access sensitive informations in the system...

Improper Signature Verification

node-forge uses improper signature verification. Leniency in checking the digest algorithm structure allows remote attackers to specifically craft a structure that steals padding bytes and uses unchecked portion of the PKCS1 encoded message to forge a signature when a low public exponent is being...

Privilege Escalation

MariaDB is vulnerable to privilege escalation. The vulnerability exists due to a Heap-based Buffer Overflow Privilege Escalation Vulnerability...

Buffer Overflow

pjproject is vulnerable to buffer overflow. The vulnerability exists due to a stack overflow in PJSUA API when calling pjsuaplayercreate...

Remote Code Execution (RCE)

cyrus-sasl is vulnerable to remote code execution. The vulnerability exists due to an unescaped password for a SQL INSERT or UPDATE statement...

Directory Traversal

Rust is vulnerable to directory traversal. The vulnerability exists due to a race condition which allows an attacker to access the file system of the application...

Remote Code Execution (RCE)

razorengine is vulnerable to remote code execution. The vulnerability exists because it does not sanitize the CAS code access security of an insecure sandboxed environment, allowing an attacker to execute maliciously crafted .NET code into the system...

Information Disclosure

github.com/containerd/containerd is vulnerable to information disclosure. Remote unauthenticated attackers are able to gain access read-only copies of arbitrary files and directories on the host via a specially-crafted image configuration resulting in disclosure of sensitive information...

Use-After-Free

A use-after-free flaw was found in ncirequest in net/nfc/nci/core.c in NFC Controller Interface NCI in the Linux kernel. This flaw could allow a local attacker with user privileges to cause a data race problem while the device is getting removed, leading to a privilege escalation problem...

Denial Of Service (DoS)

libexpat.so is vulnerable to denial of service. The vulnerability exists due to the heap overflow in the resolveinstalled function of solver.c, allowing an attacker to cause an application crash...

Denial Of Service (DoS)

policykit-1:sid is vulnerable to denial of service. Lack of proper handling of call returns causes the process file descriptor exhaustion...

Information Disclosure

cobbler is vulnerable to information disclosure. The vulnerability exists because the library does not properly restrict the config file accessibility, which allows an attacker who has access to the server to open an authenticated session with a cobbler daemon...

DNS Spoofing

mellium.im/xmpp is vulnerable to DNS spoofing. The vulnerability exists due to a lack of verification of the host name allowing an attacker to potentially deceive the user with a malicious DNS ID because the library does not properly verify TLS certification...

Authorization Bypass

url-parse is vulnerable to authorization bypass. The vulnerability exists in Url function of index.js because the user name and password are not properly handled which allows a malicious user to modify user information...

Information Disclosure

github.com/portainer/agent is vulnerable to information disclosure. The API server may continue running even after the associated Portainer instance connection is terminated allowing remote attackers to gain access to sensitive information...

Remote Code Execution (RCE)

github.com/git-lfs/git-lfs is vulnerable to remote code execution. The vulnerability exists in 'ExecCommand' function of subprocesswindows.go which allows an attacker to inject and execute codes in the root directory of a malicious repository by simply adding an executable files...

Information Disclosure

puma is vulnerable to information disclosure. Puma not closing the body, enables remote attackers to gain access to sensitive information because the library depends on the response body being closed in order for its CurrentAttributes implementation to work correctly...

Denial Of Service (DoS)

vim is vulnerable to denial of service. The vulnerability exists due to a use After Free...

Denial Of Service (DoS)

openexr is vulnerable to denial of service.The vulnerability exists in CompositeDeepScanLine::setFrameBuffer function of ImfCompositeDeepScanLine.cpp due to a heap-based buffer overflow which allows an attacker to crash the application via malicious input...