38838 matches found
Privilege Escalation
kernel is vulnerable to privilege escalation. The vulnerability exists as multiple NULL pointer dereferences were found in various Linux kernel network drivers. These drivers were missing checks for terminal validity, which could allow privilege escalation...
Denial Of Service (DoS)
mysql is vulnerable to denial of service DoS. The vulnerability exists as a flaw in MySQL allowed an authenticated user to cause the MySQL daemon to crash via crafted SQL queries. This only caused a temporary denial of service, as the MySQL daemon is automatically restarted after the crash...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists as two buffer overflow flaws were found in ISDN subsystem. A local unprivileged user could use these flaws to cause a denial of service...
Arbitrary Code Execution
php is vulnerable to arbitrary code execution. The vulnerability exists as an integer overflow flaw was found in the PHP chunksplit function. If a remote attacker was able to pass arbitrary data to the third argument of chunksplit they could possibly execute arbitrary code as the apache user. Not...
Spoofing Attack
kernel is vulnerable to spoofing attacks. A flaw in the CIFS handling of the mount option sec= that didn't enable integrity checking and didn't produce any error message...
Information Disclosure
seamonkey is vulnerable to information disclosure. The vulnerability exists as a webpage containing specially-crafted content could trick a user into surrendering sensitive information...
Arbitrary Code Execution
kernel is vulnerable to arbitrary code execution. A flaw was found in the IA32 system call emulation provided on AMD64 and Intel 64 platforms. An improperly validated 64-bit value could be stored in the %RAX register, which could trigger an out-of-bounds system call table access. An untrusted loc...
Information Disclosure
kernel is vulnerable to information disclosure. The vulnerability exists as a bug in the random number generator that prevented the manual seeding of the entropy pool...
Arbitrary Memory Read
The Linux kernel is vulnerable to arbitrary memory read. A flaw in the IPv6 socket option handling allows a local user to read arbitrary kernel memory...
Arbitrary Code Execution
php is vulnerable to arbitrary code execution. A buffer over-read flaw was discovered in PHP's gd extension. A script that could be forced to write arbitrary strings using a JIS font from an untrusted source could cause the PHP interpreter to crash...
Arbitrary Code Execution
poppler is vulnerable to arbitrary code execution. An integer overflow flaw in the processing of PDF files allows an attacker to create a malicious PDF file that would cause an application linked with poppler to crash or potentially execute arbitrary code when opened...
Information Disclosure
The kdebase is vulnerable to information disclosure. A problem with the interaction between the Flash Player and the Konqueror web browser was found. The problem could lead to key presses leaking to the Flash Player applet instead of the browser...
Denial Of Service (DoS)
The kernel-rt packages is vulnerable to denial of service DoS due to a race condition in perfeventopen...
Denial Of Service (DoS)
imagemagick is vulnerable to denial of service. A memory leak in AcquireMagickMemory due to improper handling of the NoSuchImage error allows an attacker to crash the application...
Remote Code Execution
pyyaml is vulnerable to arbitrary code execution. The vulnerability exists as .yaml files are parsed by FullLoader uses the unsafe yaml.load by default...
Denial Of Service (DoS)
wordpress is vulnerable to denial of service. The vulnerability exists in because an unauthenticated attacker is able to crash the application by submitting a large list of registered .js files to cause each file to be loaded multiple times, leading to excessive resource consumption...
Denial Of Service (DoS)
OpenJDK is vulnerable to denial of service DoS. The vulnerability exists through excessive memory usage in OID processing in X.509 certificate parsing...
Denial Of Service (DoS)
ecstatic is vulnerable to a denial of service DoS. When an attacker provides a URL parameter with symbols such as \x0c, it leads to a redirection from /existing-dir-name?\x0cfoo to /existing-dir-name/?\x0cfoo and causes TypeError: The header content contains invalid characters error, possibly...
Denial Of Service (DoS)
Mozilla firefox is vulnerable to denial of service DoS. The vulnerability exists through a use-after-free error when performing device orientation checks...
OS Command Injection
Ansible is vulnerable to OS command injection. The attack is possible because the module nxosfilecopy does not validate the remotefile parameter and directly uses the filenames from the parameter to copy files to a flash or bootflash on NXOS devices, allowing an attacker to inject malicious comma...
Timing Attack
symfony/symfony is vulnerable to timing attack. When checking the signature of an URI an ESI fragment URL for instance, the URISigner did not used a constant time string comparison function, allowing a remote attacker to guess the URI by analyzing the server response time...
Information Disclosure
kernel is vulnerable to information disclosure. Due to the way Intel CPUs handle speculative execution of instructions when the TSX Asynchronous Abort TAA error occur, a local authenticated attacker with the ability to monitor execution times could infer the TSX memory state by comparing abort...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists through a memory leak in registerqueuekobjects in net/core/net-sysfs.c...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists through a null-pointer dereference in hciuartsetflowcontrol...
Denial Of Service (DoS)
Mozilla Firefox is vulnerable to denial of service DoS. The attack exists because it causes a Stack buffer overflow in WebRTC networking...
Denial Of Service (DoS)
OpenJDK is vulnerable to denial of service DoS. The vulnerability exists it is possible to cause excessive memory allocation in CMap when reading TrueType font...
Remote Code Execution (RCE) Via Partial Denial Of Service (DoS)
OpenJDK is vulnerable to remote code execution RCE. It is possible because it causes an unexpected exception thrown during Font object deserialization, leading to a partial denial of service DoS of Java SE. A client using a Java sandbox or using a Java web service with data supplies to APIs can b...
Denial Of Service (DoS)
OpenJDK is vulnerable to denial of service DoS. The vulnerability exists through an Integer overflow in bounds check in SunGraphics2D...
Denial Of Service (DoS)
openjdk is vulnerable to denial of service. An unexpected exception thrown by pattern processing malicious regular expression allows an attacker to crash the application...
Information Disclosure
undertow is vulnerable to information disclosure. The vulnerability exists as the DEBUG log for io.undertow.request.security leaks credentials to log files if it is enabled...
HTTP Request Smuggling
github.com/golang/go is vulnerable to HTTP request smuggling. The vulnerability exists as invalid HTTP/1.1 headers were accepted and normalized with a space before the colon, allowing a reverse proxy to interpret the headers differently...
Information Disclosure
cri-o is vulnerable to information disclosure. The vulnerability exists as it does not enforce TLS when sending username+password credentials to token servers leading to credential disclosure...
Same-origin Policy Violation
Mozilla Firefox is vulnerable to same-origin policy violation. The vulnerability exists due to an error in how same-origin policy which allows an attacker to data theft...
Information Disclosure
PHP is vulnerable to Information disclosure. When an attacker supplies malicious data, it causes the funciton gdImageCreateFromXbm to use the value of uninitialized variable...
Denial Of Service (DoS)
PHP is vulnerable to denial-of-service DoS. The attack can be triggered when an attacker passes a malicious JPEG file to the function exifprocessIFDinMAKERNOTE in ext/exif/exif.c...
Out-of-Bounds Access
PHP is vulnerable to Out of bounds access. It is possible when a call with malicious pregreplace is made, causing an OOB access in the phppcre.c:phppcrereplaceimpl function...
Information Disclosure
cockpit-ovirt is vulnerable to information disclosure. The admin and appliance passwords are saved in plaintext variable file during HE deployment...
Information Disclosure
github.com/kubernetes/kubernetes is vulnerable to information disclosure. The vulnerability exists as the debugging endpoint debug/pprof is exposed over the unauthenticated healthz port...
Denial Of Service (DoS)
elfutils is vulnerable to denial of service DoS. It causes a heap-based buffer over-read in libdw/dwarfgetaranges.c:dwarfgetaranges via a malicious file...
Authorization Bypass
bind is vulnerable to authorization bypass. The vulnerability exists through an Incorrect documentation of krb5-subdomain and ms-subdomain update policies...
Denial Of Service (DoS)
mysql is vulnerable to Denial of Service DoS. The vulnerability exists as Server Replication has an unspecified vulnerability causing an application crash...
Information Disclosure
kernel is vulnerable to information disclosure. The vulnerability exists as the Bluetooth implementations may not sufficiently validate elliptic curve parameters during Diffie-Hellman key exchange...
Denial Of Service (Dos)
binutils is vulnerable to denial of service. A NULL pointer dereference in the function workstuffcopytofrom in cplus-dem.c which can occur during execution of objdump allows an attacker to crash the application...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists through a use-after-free issue in ucmaleavemulticast in drivers/infiniband/core/ucma.c...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists through a NULL pointer dereference in lookupslow function...
Denial Of Service (DoS)
OpenCV is vulnerable to Denial of Service. The library has an out of bounds read/write in the function HaarEvaluator::OptFeature::calc, allowing an attacker to use a malicious input to crash the application...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists through a use-after-free in drivers/char/ipmi/ipmisiintf.c, ipmisimemio.c, ipmisiportio.c...
Denial Of Service (DoS)
openjdk is vulnerable to denial of service. It was discovered that crypto provider implementations in the JCE component of OpenJDK for crypto algorithms such as AES or SHA did not perform array bounds checks. This can lead to out-of-bounds access if compiler intrinsics were used instead of the Ja...
Denial Of Service (DoS)
openjdk is vulnerable to denial of service. It was discovered that the implementation of the Throwable class in the Utilities component of OpenJDK did not sufficiently validate serial stream before deserializing suppressed exceptions. A specially-crafted input could cause a Java application to...
Authorization Bypass
python is vulnerable to authorization bypass. The localfile: scheme allows for remote attackers to bypass protection mechanisms that blacklist file: URIs, as demonstrated by triggering a urllib.urlopen'localfile:///etc/passwd' call...