Use After Free

chromium is vulnerable to use after free. The vulnerability exists in Optimization Guide which allows an attacker to cause a memory corruption...

Use After Free

vim is vulnerable to use after free...

Information Disclosure

github.com/grafana/grafana is vulnerable to information disclosure. When the forward auth identity is enabled, the library sends the OAuth identity of the most recently logged-in user when sending a query to the data source, allowing an attacker to retrieve sensitive data from the most recently...

Remote Code Execution (RCE)

chromium-browser is vulnerable to remote code execution. The vulnerability exists due to the issue in the Object lifecycle in ANGLE...

Type Confusion

Google Chrome is vulnerable to type confusion which allows a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Use After Free

chrome is vulnerable to use-after free. The vulnerability exists due to a heap corruption via a crafted Chrome Extension...

Incorrect Security UI In Autofill

Chrome has Incorrect security. The vulnerability exist due to an Incorrect security UI in Autofill...

Out-of-Bounds Read

libtiff is vulnerable to out-of-bounds read. The vulnerability allows remote attackers to influence memory values leading to information disclosure and/or denial of service...

Information Dislcosure

pillow is vulnerable to information disclosure. The vulnerability exists because the pillow doesn't restrict the builtins available in eval function of ImageMath.py which allows an attacker to evaluate arbitrary expressions and gain access to sensitive information...

Remote Code Execution (RCE)

thunderbird is vulnerable to remote code execution. The vulnerability exists due to the lack of sanitization of the execution context which allows Javascript to be enabled in the composition area...

Privilege Escalation

github.com/grafana/grafana is vulnerable to privilege escalation. The vulnerability exists due to a mechanism which allowed users with the Organization Admin role to list, add, remove, and update users roles in other organizations in which they are not an admin...

Arbitrary Code Execution

ibjpeg-turbo is vulnerable to arbitrary code execution. A remote attacker could exploit this vulnerability by send a malformed jpeg file to the service and cause arbitrary code execution or denial of service...

Denial Of Service (DoS)

busybox:edge is vulnerable to denial of service...

Denial Of Service (DoS)

rust:edge is vulnerable to denial of service. The vulnerability exists as it permits the visual reordering of characters via control sequences, which can be used to craft source code that renders different logic than the logical ordering of tokens ingested by compilers and interpreters causing an...

LDAP Injection

github.com/stevenweathers/thunderdome-planning-poker is vulnerable to LDAP injection. Lack of an escape filter allows remote attackers to inject specially crafted values through UserName parameter resulting in LDAP injection vulnerability. Successful attackers are able to read, modify or delete...

Denial Of Service (DoS)

rh-mysql80-mysql is vulnerable to denial of service. A high privileged attacker with network access via multiple protocols can compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash complete DOS of MySQL...

Denial Of Service (DoS)

Redis is vulnerable to denial of service. An integer overflow bug in Redis can be exploited to corrupt the heap and potentially result with remote code execution. The vulnerability involves changing the default proto-max-bulk-len and client-query-buffer-limit configuration parameters to very larg...

Denial Of Service (DoS)

mediawiki is vulnerable to denial of service. The system may crash when processing ApiQueryBacklinks with a full db table scan...

Bypass Of Protection Mechanism

linux is vulnerable to privilege escalation. drivers/net/ethernet/xilinx/xilinxemaclite.c in the Linux kernel makes it easier for attackers to defeat an ASLR protection mechanism because it prints a kernel pointer i.e., the real IOMEM pointer...

SQL Injection

php is vulnerable to SQL injection. The vulnerability exists due to a flaw in the multi-byte character process, an attacker is still able to inject arbitary SQL statements into the MySQL server for execution...

Insecure Login

rh-sso7-keycloak is using insecure login. The vulnerability exists because it allows anyone to register a new security device or key when there is not a device already registered for any user by using the WebAuthn password-less login flow...

Denial Of Service (DoS)

chromium is vulnerable to denial of service. The vulnerability exists due to an Out of bounds write in V8...

Insecure Signature Validation

SOGo is using insecure signature validation. It does not validate the signatures of any SAML assertions it receives. Any actor with network access to the deployment could impersonate users when SAML is the authentication method...

Information Disclosure

postgresql is vulnerable to information disclosure. A malicious query can be used to read arbitrary bytes of server memory. In the default configuration, any authenticated database user is able to exploit the vulnerability...

Denial Of Service (DoS)

qemu:devel is vulnerable to denial of serivce. A NULL pointer dereference flaw was found in the am53c974 SCSI host bus adapter emulation of QEMU in versions before 6.0.0. This issue occurs while handling the 'Information Transfer' command. This flaw allows a privileged guest user to crash the QEM...

Denial Of Service(DoS)

firefox-esr:edge is vulnerable to denial of service. A use-after-free vulnerability in media channels could have led to memory corruption and a potentially exploitable crash...

Insecure Cryptographic Function

libapache2-mod-auth-openidc has insecure cryptographic functions. The vulnerability existis due to reusing the same key...

Cross-site Scripting(XSS)

videojs is vulnerable to cross-site scripting. An attacker is able to inject and execute malicious script via rc attribute of track tag...

Denial Of Service (DoS)

curl is vulnerable to denial of service. The SSL backend fails to secure the CURLOPTSSLCERT against current directory file overriding the keychain nickname specified, potentially resulting in the overriding the CURLOPTSSLCERT specified certificate and thus causing denial of service...

Remote Code Execution (RCE)

java-11-openjdk is vulnerable to remote code execution. The vulnerability occurs due to the sandbox environment that allows untrusted code from the internet to run...

Denial Of Service

kernel is vulnerable to denial of service. The vulnerability exists due to a race condition for removal of HCI controller which allows an attacker to crash the application via malicious input...

Denial Of Service (DoS)

apache-ant:edge is vulnerable to denial of service. When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache...

Denial Of Service (DoS)

firefox:edge is vulnerable to denial of service...

Arbitrary Code Execution

chromium is vulnerable to arbitrary code execution. A use-after-free error within the Autofill component in Google Chrome allows a remote attacker to execute arbitrary code on the host OS by tricking the victim into visiting a malicious web page...

Denial Of Service (DoS)

Apache HTTP Server is vulnerable to denial of service. The modproxyhttp can be made to crash via a NULL pointer dereference via malicious requests using both Content-Length and Transfer-Encoding headers...

Denial Of Service (DoS)

pillow is vulnerable to denial of service. An out-of-bounds read in J2kDecode in j2kugrayala allows an attacker to crash the application...

Insufficient Policy Enforcement

chromium:edge has an insufficient policy enforcement in Content Security Policy...

Regular Expression Denial Of Service (ReDoS)

normalize-url is vulnerable to regular expression denial of service. The usage of an insecure regex allows an attacker to cause a denial of service condition via a malicious URL string...

Arbitrary Code Execution

python3 is vulnerable to arbitrary code execution. IP address octets are left stripped instead of evaluated as valid IP addresses due to improper input validation of octal strings in the stdlib ipaddress allows unauthenticated remote attackers to perform indeterminate SSRF, RFI, and LFI attacks o...

Denial Of Service (DoS)

linux is vulnerable to denial of service. The vulnerability exists due to a race conditions during an update of the local and shared status which allows an attacker to crash the application via malicious input...

Denial Of Service (DoS)

unbound is vulnerable to denial of service. The vulnerability exists due to an assertion failure. in synthcname. An attacker is able to crash the system by sending invalid packets to the server...

Denial Of Service (DoS)

squid is vulnerable to denial of service. An attacker can cause a fatal error via the HTTP response of a squid cache, resulting in a denial of service condition...

Denial Of Service (DoS)

pillow is vulnerable to denial of service. Lack of validation and checks for the validity of return data when jumping to file offsets in the EpsImagePlugin results in a denial-of-service condition...

Denial Of Service (DoS)

lz4 is vulnerable to denial of service. An integer overflow occurs when one of the memmove arguments is set to negative, resulting in an application crash...

Denial Of Service (DoS)

qemu is vulnerable to denial of service. The vulnerability exists due to a flaw was found in the USB redirector device usb-redir of QEMU where small USB packets are combined into a single boundless large transfer request to reduce the overhead and improve performance...

Denial Of Service (DoS)

rust is vulnerable to denial of service. The vulnerability exists due to a double free in theVec::fromiter function...

Arbitrary Code Execution

exim4 is vulnerable to arbitrary code execution . Line truncation and injection in spoolreadheader could potentially allow an attacker to execute arbitrary code on the host OS...

Privilege Escalation

exim4 is vulnerable to privilege escalation. The vulnerability exists due to a new-line injection into spool header files...

Privilege Escalation

exim4 is vulnerable to privilege escalation. An attacker with the privileges of the exim user can create a symlink/hardlink in the log directory and append arbitrary contents to an arbitrary file such as /etc/passwd to obtain full root privileges...

Information Disclosure

chromium is vulnerable to information disclosure. The vulnerability exists due to insufficient data validation that allows a remote attacker to leak cross-origin data via a crafted HTML page...