Integer Overflow

GNU is vulnerable to integer overflows. The vulnerability exists in demangletemplate function in cplus-dem.c which causes a heap based overflow crashing the application...

Use After Free

libsepol is vulnerable to use after free. The vulnerability exists due to a lack of setting the set field of cilresetclasspermission to NULL instead of resetting the classpermission when freeing the pointer...

Denial Of Service (DoS)

Insufficient access control in the IntelR PROSet/Wireless WiFi Software driver before version 21.10 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

Denial Of Service (DoS)

kernel-rt is vulnerable to denial of service DoS attacks. A flaw out of bounds memory access in the Linux kernel bluetooth subsystem was found in the way when some data being read about the bluetooth device with the hciextendedinquiryresultevt call. A local user could use this flaw to crash the...

Denial Of Service (DoS)

glibc is vulnerable to denial of service. The vulnerability exists due to a double-free resulting in a degraded service...

Privilege Escalation

samba is vulnerable to escalation of privilege. The vulnerability exists due to the lack of sanitization of user's authorization when RODC read-only domain controller is used when printing administration ticket...

Man-in-the-Middle (MitM)

amba:edge is vulnerable to man-in-the-middle MitM attacks.An attacker can force the client side SMB1 code to fall-back to plaintext or NTLM based authentication...

LDAP Injection

github.com/apache/trafficcontrol is vulnerable to LDAP injection. An attacker is able to send malicious username to the the login or post endpoint of any API version, inject unsanitized content into the LDAP filter, allowing the malicious query injection...

Directory Traversal

chrome is vulnerable to directory traversal. The vulnerability exists due to Insufficient validation of untrusted input Downloads...

Sandbox Escape

chrome is vulnerable to sandbox escape. The vulnerability exists due to a heap buffer overflow...

LDAP Injection

github.com/stevenweathers/thunderdome-planning-poker is vulnerable to LDAP injection. Lack of an escape filter allows remote attackers to inject specially crafted values through UserName parameter resulting in LDAP injection vulnerability. Successful attackers are able to read, modify or delete...

Denial Of Service (DoS)

linux is vulnerable to denial of service. The vulnerability exists due to a race condition in ext4writeinlinedataend in fs/ext4/inline.c in the ext4 subsystem in the Linux kernel...

Denial Of Service (DoS)

qt5-qtwebengine:edge is vulnerable to denial of service...

Denial Of Service (DoS)

rh-mysql80-mysql is vulnerable to denial of service. An attacker can crash the application via the Server: Optimizer component...

HTTP Request Smuggling

puma is vulnerable to HTTP request smuggling. Incorrect handling of HTTP requests with LF characters as line endings, allows a remote attacker to smuggle a request through a proxy, causing the proxy to send a response back to the victim...

Denial Of Service (DoS)

Redis is vulnerable to denial of service. The vulnerability exists due to the debuggers protocol parser to read data beyond the actual buffer...

Authentication Bypass

pterodactyl/panel is vulnerable to authentication bypass. The library does not properly verify the user-provided security token, allowing an attacker to bypass the two-factor authentication...

Privilege Escalation

github.com/hashicorp/consul is vulnerable to Privilege Escalation. The vulnerability exists in Txn.Apply function because it's missing an authorization check in the Endpoint which allows an attacker to gain access to the system and perform unauthorized actions...

Remote Code Execution (RCE)

xstream is vulnerable to remote code execution. An attacker is able to exploit the vulnerability injecting arbitrary code via the processed input stream...

Denial Of Service

qemu is vulnerable to denial of service. The vulnerability exists when dropping packets during a bulk transfer from a SPICE client due to the packet queue being full, a malicious SPICE client could use this flaw to make QEMU call free with faked heap chunk metadata, resulting in a crash of QEMU...

Information Disclosure

postgresql is vulnerable to information disclosure. A malicious query can be used to read arbitrary bytes of server memory. In the default configuration, any authenticated database user is able to exploit the vulnerability...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. Lack of checking that shape of the input or the target shape have both a non-zero number of elements causes an integral division by 0 exception...

Denial Of Service (DoS)

qemu:devel is vulnerable to denial of serivce. A NULL pointer dereference flaw was found in the am53c974 SCSI host bus adapter emulation of QEMU in versions before 6.0.0. This issue occurs while handling the 'Information Transfer' command. This flaw allows a privileged guest user to crash the QEM...

Denial Of Service(DoS)

firefox-esr:edge is vulnerable to denial of service. A use-after-free vulnerability in media channels could have led to memory corruption and a potentially exploitable crash...

Arbitrary Code Execution

virtualbox is vulnerable to arbitrary code execution. A difficult to exploit vulnerability allows a low privileged attacker with logon to the infrastructure to execute arbitrary code on the host OS...

Remote Code Execution (RCE)

java openjdk is vulnerable to remote code execution. It has a flaw was found in the way the Hotspot component of OpenJDK performed range check elimination. An untrusted Java application or applet could use this flaw to bypass Java sandbox restrictions...

Privilege Escalation

github.com/hashicorp/consul is vulnerable to privilege escalation. The vulnerability exists due to a single L7 deny intention bypassing the default deny policy...

Denial Of Service (DoS)

ruby2.7:sid is vulnerable to Denial Of Service DoS. It is possible to execute arbitrary code via | and tags in a filename...

Denial Of Service (DoS)

cxf-rt-rs-json-basic is vulnerable to denial of service. An attacker is able to cause a thread to be stuck in an infinite loop due to an insecure parsing of JSON in JsonMapObjectReaderWriter...

Denial Of Service (DoS)

chromium:edge is vulnerable to denial of service...

Regular Expression Denial Of Service (ReDoS)

normalize-url is vulnerable to regular expression denial of service. The usage of an insecure regex allows an attacker to cause a denial of service condition via a malicious URL string...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. A NULL pointer dererence in ov511modeinitregs and ov518modeinitregs when there are zero endpoints allows an attacker with the ability to induce the error conditions to crash the system...

Denial Of Service (DoS)

Unbound is vulnerable to denial of service. It allows an assertion failure and denial of service in dnamepktcopy via an invalid packet. A flaw was found in unbound. A reachable assertion in the dnamepktcopy function can be triggered by sending invalid packets to the server...

Remote Code Execution

xstream is vulnerable to remote code execution. A remote attacker with sufficient rights is able to execute arbitrary code on the host by manipulating the processed input stream...

Denial Of Service (DoS)

glib:edge is vulnerable to denial of service. The function gbytesnew has an integer overflow on 64-bit platforms due to an implicit cast from 64 bits to 32 bits. The overflow could potentially lead to memory corruption...

Denial Of Service (DoS)

qemu is vulnerable to denial of service. The vulnerability exists due to a flaw was found in the USB redirector device usb-redir of QEMU where small USB packets are combined into a single boundless large transfer request to reduce the overhead and improve performance...

Arbitrary Code Execution

exim4 is vulnerable to arbitrary code execution. An integer overflow in receiveaddrecipient could potentially allow an attacker to execute arbitrary code on the host OS...

Remote Code Execution (RCE)

webkit2gtk is vulnerable to remote code execution, the vulnerability exists due to an out-of-bounds write issue...

Remote Code Execution (RCE)

webkit2gtk is vulnerable to remote code execution. The vulnerability exists due to a use after free issue which is processed from a crafted web content...

Arbtirary Command Execution

composer/composer is vulnerable to arbitrary command execution. A missing argument delimiter allows an attacker to inject and execute arbitrary commands via VCS repository URLs or source download URLs on systems with Mercurial...

Remote Code Execution (RCE)

mariadb is vulnerable to remote code execution. The vulnerability exists due to an untrusted search path leads to eval injection, in which a database SUPER user can execute OS commands after modifying wsrepprovider and wsrepnotifycmd...

Denial Of Service (DoS)

tika-parsers is vulnerable to denial of service DoS. The vulnerability exists through an infinite loop when parsing an MP3 lyrics with a tagLen lesser than 1, or larger than the lyrics' length...

Privilege Escalation

linux is vulnerable to privilege escalation. RM Memory Management Double Free Privilege Escalation Vulnerability...

Buffer Overflows

linux-kvm is vulnerable to buffer overflows. An out-of-bounds OOB memory access flaw was found in x25bind in net/x25/afx25.c in the Linux kernel. A bounds check failure allows a local attacker with a user account on the system to gain access to out-of-bounds memory leading to a system crash or a...

Regular Expression Denial Of Service (ReDoS)

hosted-git-info is vulnerable to regular expression denial of service ReDoS. An attacker can provide a malicious string via shortcutMatch in the function fromUrl in index.js to crash the application...

Regular Expression Denial Of Service (ReDos)

xstream is vulnerable to regular expression denial of service. A remote attacker is able to occupy a thread that consumes excessive CPU resources for long period of time...

Regular Expression Denial Of Service (ReDoS)

pygments is vulnerable to regular expression denial of service. An attacker is able to crash the application by submitting a malicious string via Lexer for Values used in ADL and ODIN...

Authorization Bypass

moodle/moodle is vulnerable to authorization bypass. When creating a user account, it was possible to verify the account without having access to the verification email link/secret...

Out-of-Bounds Access

openjpeg is vulnerable to out-of-bounds write. An attacker is able to inject a malicious input during conversion and encoding, causing an out-of-bounds write...

DNS Rebinding

nodejs is vulnerable to DNS rebinding attacks. The vulnerability exists in the inspector component allowing an attacker to bypass the DNS rebinding protection if the, said attacker controls the victim's DNS server or can spoof its responses...