38790 matches found
Information Disclosure
github.com/portainer/agent is vulnerable to information disclosure. The API server may continue running even after the associated Portainer instance connection is terminated allowing remote attackers to gain access to sensitive information...
Information Disclosure
puma is vulnerable to information disclosure. Puma not closing the body, enables remote attackers to gain access to sensitive information because the library depends on the response body being closed in order for its CurrentAttributes implementation to work correctly...
Denial Of Service (DoS)
vim is vulnerable to denial of service. The vulnerability exists due to a use After Free...
Denial Of Service (DoS)
openexr is vulnerable to denial of service.The vulnerability exists in CompositeDeepScanLine::setFrameBuffer function of ImfCompositeDeepScanLine.cpp due to a heap-based buffer overflow which allows an attacker to crash the application via malicious input...
Denial Of Service (DoS)
Lua is vulnerable to denial of service. It is affected by SEGV by type confusion in funcnamefromcode function in ldebug.c which can cause a local denial of service...
Remote Code Execution (RCE)
webkit2gtk is vulnerable to remote code execution. The vulnerability exists due to a buffer overflow allowing an attacker to inject maliciously crafted script via web content...
Information Disclosure
samba is vulnerable to information disclosure...
Denial Of Service (DoS)
openjdk1 is vulnerable to denial of service. The vulnerability exists due to improper input validation in the ImageIO component allows attacker to perform service disruption...
Denial Of Service (DoS)
openjdk is vulnerable to denial of service. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to...
Integer Overflow
libexpat.so is vulnerable to integer overflow. The vulnerability exists in the doProlog function in the xmlparse.c file, allowing an attacker to cause an application crash...
Heap-based Buffer Overflow
vim is vulnerable to heap-based buffer overflow. The vulnerability exist in the 'onefunctionarg' function in 'userfunc.c' causes a heap-based buffer overflow which could result in an application crash...
Buffer Overflow
vim is vulnerable to Heap-based Buffer Overflow. The vulnerability exist due to a lack of sanitization of the memory control pointer...
Information Disclosure
github.com/grafana/grafana is vulnerable to information disclosure. When the forward auth identity is enabled, the library sends the OAuth identity of the most recently logged-in user when sending a query to the data source, allowing an attacker to retrieve sensitive data from the most recently...
Remote Code Execution (RCE)
chromium-browser is vulnerable to remote code execution. The vulnerability exists due to the issue in the Object lifecycle in ANGLE...
Integer Underflow
bionic is vulnerable to integer underflows. The library does not properly check memory size causing an integer underflow that allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
Remote Code Execution (RCE)
thunderbird is vulnerable to remote code execution. The vulnerability exists due to a boundary error when handling DER-encoded DSA or RSA-PSS signatures within Mozilla NSS library...
Use After Free
libsepol is vulnerable to use after free. The vulnerability exists due to a lack of setting the set field of cilresetclasspermission to NULL instead of resetting the classpermission when freeing the pointer...
Privilege Escalation
github.com/grafana/grafana is vulnerable to privilege escalation. The vulnerability exists due to a mechanism which allowed users with the Organization Admin role to list, add, remove, and update users roles in other organizations in which they are not an admin...
Arbitrary Code Execution
ibjpeg-turbo is vulnerable to arbitrary code execution. A remote attacker could exploit this vulnerability by send a malformed jpeg file to the service and cause arbitrary code execution or denial of service...
Denial Of Service (DoS)
busybox:edge is vulnerable to denial of service...
Privilege Escalation
chrome is vulnerable to privilege escalation. The vulnerability exists due to a type confusion in the v8 component in chrome...
Sandbox Escape
chrome is vulnerable to sandbox escape. The vulnerability exists due to a heap buffer overflow...
Denial Of Service (DoS)
vim is vulnerable denial of service. The vulnerability exists due to Heap-based Buffer Overflow...
Denial Of Service (DoS)
qt5-qtwebengine:edge is vulnerable to denial of service...
Denial Of Service (DoS)
MySQL is vulnerable to denial of service. An attacker is able to exploit the vulnerability by accessing the network and crashing the system...
Denial Of Service (DoS)
chromium-browser:bionic is vulnerable denial of service. It allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
Denial Of Service (DoS)
Redis is vulnerable to denial of service. An integer overflow bug in Redis can be exploited to corrupt the heap and potentially result with remote code execution. The vulnerability involves changing the default proto-max-bulk-len and client-query-buffer-limit configuration parameters to very larg...
CVE-2021-38209
linux is vulnerable to information disclosure. The vulnerability exists due to an allowable observation of changes in any net namespace which can be leaked into all other net namespaces...
Denial Of Service (DoS)
chromium is vulnerable to denial of service. The vulnerability exists due to an Out of bounds write in V8...
Denial Of Service
ntfs-3g, sid is vulnerable to denial of service. The vulnerability exists due to an out-of-bounds access in ntfsinodesyncstandardinformation in NTFS-3G...
Remote Code Execution (RCE)
taris vulnerable to Remote Code Execution RCE. An attacker is able to exploit the vulnerability by modifying the symbolic link. The vulnerability exists due to the lack of sanitization of the symbolic link thus allowing the system to extract file through a maliciously modified symbolic link...
Information Disclosure
postgresql is vulnerable to information disclosure. A malicious query can be used to read arbitrary bytes of server memory. In the default configuration, any authenticated database user is able to exploit the vulnerability...
Denial Of Service (DoS)
nodejs is vulnerable to Denial Of Service DoS. A use-after-free allows an attacker to exploit a memory corruption vulnerability to crash the application or change process behavior...
Remote Code Execution
libencode is vulnerable to remote code execution. Encode.pm loads code from outside...
Denial Of Service (DoS)
go is vulnerable to Denial Of Service DoS. The vulnerability exists due to a race condition where the system is trying to access the same resources leading to denial of service...
Arbitrary Code Execution
virtualbox is vulnerable to arbitrary code execution. A difficult to exploit vulnerability allows a low privileged attacker with logon to the infrastructure to execute arbitrary code on the host OS...
Remote Code Execution (RCE)
webkit2gtk is vulnerable to remote code execution. The vulnerability exists due to a use-after-free vulnerability exists in WebKitGTK browser...
Information Disclosure
buildah is vulnerable to information disclosure. When using buildah bud with chroot isolation. Dockerfile RUN commands executed during rootless buildah bud execution can read environment variables from the host, which may include confidential information, such as container registry credentials...
Denial Of Service (DoS)
commons-compress is vulnerable to denial of service. Failure to check the size of PAX header against the size of the current entry allows an attacker to send a malicious 7Z archive to trigger an infinite loop...
Denial Of Service (DoS)
sshd-core is vulnerable to denial of service. SFTP and port forwarding feature of the library allows an attacker to send maximum data to cause the boundary overflow on BufferedIoOutputStream writing, causing an OutOfMemory error...
Information Disclosure
libvirt is vulnerable to information disclosure. An attacker is able to access files of other users when the system generates SELiinux MCS category pairs for VMs' dynamic labels...
Cross-site Scripting (XSS)
ckeditor4 is vulnerable to cross-site scripting. An attacker is able to inject malicious script via the comment because --! is not handled...
Denial Of Service (DoS)
Exiv2 is vulnerable to denial of service. The heap overflow is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to gain code execution, if they can trick the victim into running Exiv2 on a crafted image file. Note th...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. A NULL pointer reference allows a local privileged user to cause a denial of service...
Arbitrary Code Execution
python3 is vulnerable to arbitrary code execution. IP address octets are left stripped instead of evaluated as valid IP addresses due to improper input validation of octal strings in the stdlib ipaddress allows unauthenticated remote attackers to perform indeterminate SSRF, RFI, and LFI attacks o...
Denial Of Service (DoS)
trousers is vulnerable to denial of service. The vulnerability exists when daemon is started with root privileges, the creation of the system.data file is prone to symlink attacks which allows the tss user to create or corrupt existing files, which could possibly lead to a DoS attack...
Denial Of Service (DoS)
unbound is vulnerable to denial of service DoS. The vulnerability exists through an assertion failure through a compressed name in dnamepktcopy...
Denial Of Service (DoS)
Unbound is vulnerable to denial of service. It allows an assertion failure and denial of service in dnamepktcopy via an invalid packet. A flaw was found in unbound. A reachable assertion in the dnamepktcopy function can be triggered by sending invalid packets to the server...
Denial Of Service (DoS)
lz4 is vulnerable to denial of service. An integer overflow occurs when one of the memmove arguments is set to negative, resulting in an application crash...
Denial Of Service (DoS)
qemu is vulnerable to denial of service. The vulnerability exists due to a flaw was found in the USB redirector device usb-redir of QEMU where small USB packets are combined into a single boundless large transfer request to reduce the overhead and improve performance...