Lucene search
+L
VeracodeMost viewed

38838 matches found

Veracode
Veracode
•added 2019/05/02 5:12 a.m.•41 views

Denial Of Service (DoS)

QEMU is vulnerable to denial of service DoS. The vulnerability exists through the parsing of a small bytesperpixel value...

5CVSS6.5AI score0.03742EPSS
SaveExploits0References106Affected Software1
Veracode
Veracode
•added 2019/05/02 5:07 a.m.•41 views

Authorization Bypass

java is vulnerable to authorization bypass. The vulnerability exists through JSSE...

4CVSS4.6AI score0.66374EPSS
SaveExploits6References30Affected Software4
Veracode
Veracode
•added 2019/05/02 5:06 a.m.•41 views

Denial Of Service (DoS)

Red Hat Enterprise Linux OpenStack Platform provides the facilities for building a private or public infrastructure-as-a-service IaaS cloud running on commonly available physical hardware. This update addresses the following issues: This package rebases mariadb-galera to 5.5.42, fixing an issue...

4CVSS5.8AI score0.07099EPSS
SaveExploits0References25Affected Software12
Veracode
Veracode
•added 2019/05/02 5:04 a.m.•41 views

Denial Of Service (DoS) Through Divide By Zero

LibVNCServer is a library that allows for easy creation of VNC server or client functionality. An integer overflow flaw, leading to a heap-based buffer overflow, was found in the way screen sizes were handled by LibVNCServer. A malicious VNC server could use this flaw to cause a client to crash o...

7.5CVSS9.6AI score0.08272EPSS
SaveExploits1References15Affected Software1
Veracode
Veracode
•added 2019/05/02 5:04 a.m.•41 views

Information Disclosure

php is vulnerable to information disclosure. The vulnerability exists as the phpinfo implementation in ext/standard/info.c does not ensure use of the string data type for the PHPAUTHPW, PHPAUTHTYPE, PHPAUTHUSER, and PHPSELF...

2.6CVSS5.6AI score0.05868EPSS
SaveExploits1References16Affected Software4
Veracode
Veracode
•added 2019/05/02 5:04 a.m.•41 views

Denial Of Service (DoS)

Wireshark is a network protocol analyzer. It is used to capture and browse the traffic running on a computer network. Multiple flaws were found in Wireshark. If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly, execute arbitrary code as...

5CVSS6.8AI score0.03409EPSS
SaveExploits0References17Affected Software1
Veracode
Veracode
•added 2019/05/02 5:04 a.m.•41 views

Denial Of Service (DoS)

Wireshark is a network protocol analyzer. It is used to capture and browse the traffic running on a computer network. Multiple flaws were found in Wireshark. If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly, execute arbitrary code as...

5CVSS6.8AI score0.03409EPSS
SaveExploits0References17Affected Software1
Veracode
Veracode
•added 2019/05/02 5:03 a.m.•41 views

Man-in-the-Middle Attack

nss-util is vulnerable to a man-in-the-middle attack. The library accepts a wildcard character that is embedded in an internationalized domain name's U-labels in the certTestHostName function in lib/certdb/certdb.c , allowing a malicious user to spoof SSL servers via a crafted certificate...

4.3CVSS5.6AI score0.01767EPSS
SaveExploits2References32Affected Software3
Veracode
Veracode
•added 2019/05/02 5:01 a.m.•41 views

Use-After-Free

Mozilla Thunderbird is vulnerable to use-after-free. It allows the processing of malformed web content. A web page containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird...

10CVSS9.4AI score0.29283EPSS
SaveExploits1References18Affected Software2
Veracode
Veracode
•added 2019/05/02 5:01 a.m.•41 views

Denial Of Service (DoS)

The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. A heap-based buffer overflow and a use-after-free flaw were found in the tiff2pdf tool. An attacker could use these flaws to create a specially crafted TIFF file that would cause tiff2pdf to...

9.3CVSS9.7AI score0.11823EPSS
SaveExploits1References13Affected Software1
Veracode
Veracode
•added 2019/05/02 5:01 a.m.•41 views

Sandbox Restrictions Bypass

IBM Java SE version 6 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update fixes several vulnerabilities in the IBM Java Runtime Environment and the IBM Java Software Development Kit. Detailed vulnerability descriptions are linked from the IBM Security...

10CVSS5.5AI score0.08383EPSS
SaveExploits3References22Affected Software1
Veracode
Veracode
•added 2019/05/02 5:01 a.m.•41 views

Sandbox Restrictions Bypass

IBM Java SE version 6 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update fixes several vulnerabilities in the IBM Java Runtime Environment and the IBM Java Software Development Kit. Detailed vulnerability descriptions are linked from the IBM Security...

10CVSS5.5AI score0.08383EPSS
SaveExploits3References22Affected Software1
Veracode
Veracode
•added 2019/05/02 5:00 a.m.•41 views

Heap-based Buffer Over-read

OpenJPEG is an open source library for reading and writing image files in JPEG 2000 format. Multiple heap-based buffer overflow flaws were found in OpenJPEG. An attacker could create a specially crafted OpenJPEG image that, when opened, could cause an application using openjpeg to crash or,...

7.5CVSS8.7AI score0.05515EPSS
SaveExploits0References12Affected Software1
Veracode
Veracode
•added 2019/05/02 5:00 a.m.•41 views

Sensitive Information Disclosure

The libjpeg-turbo package contains a library of functions for manipulating JPEG images. It also contains simple client programs for accessing the libjpeg functions. An uninitialized memory read issue was found in the way libjpeg-turbo decoded images with missing Start Of Scan SOS JPEG markers or...

5CVSS7.1AI score0.0973EPSS
SaveExploits0References36Affected Software1
Veracode
Veracode
•added 2019/05/02 4:59 a.m.•41 views

Integer Overflow

The GIMP GNU Image Manipulation Program is an image composition and editing program. A stack-based buffer overflow flaw, a heap-based buffer overflow, and an integer overflow flaw were found in the way GIMP loaded certain X Window System XWD image dump files. A remote attacker could provide a...

7.5CVSS7.2AI score0.06813EPSS
SaveExploits1References10Affected Software1
Veracode
Veracode
•added 2019/05/02 4:57 a.m.•41 views

Privilege Escalation

OpenStack Compute nova launches and schedules large networks of virtual machines, creating a redundant and scalable cloud computing platform. Compute provides the software, control panels, and APIs required to orchestrate a cloud, including running virtual machine instances, managing networks, an...

7.1CVSS5.8AI score0.02438EPSS
SaveExploits3References12Affected Software1
Veracode
Veracode
•added 2019/05/02 4:56 a.m.•41 views

Memory Corruption

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to terminate unexpectedly or, potentially, execute...

10CVSS9.8AI score0.06493EPSS
SaveExploits0References15Affected Software3
Veracode
Veracode
•added 2019/05/02 4:54 a.m.•41 views

Arbitrary Code Execution

OpenJDK is vulnerable to arbitrary code execution. The attack is due to a flaw which allows an untrusted Java application or applet to bypass certain Java sandbox restrictions...

9.3CVSS6.6AI score0.04652EPSS
SaveExploits0References14Affected Software1
Veracode
Veracode
•added 2019/05/02 4:54 a.m.•41 views

Sandbox Restrictions Bypass

openjdk is vulnerable to sandbox restrictions bypass. An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions and affect confidentiality, integrity and availability via vectors related to 2D...

10CVSS6.1AI score0.07188EPSS
SaveExploits0References28Affected Software3
Veracode
Veracode
•added 2019/05/02 4:52 a.m.•41 views

Denial Of Service (DoS)

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon mysqld and many client programs and libraries. This update fixes several vulnerabilities in the MySQL database server. Information about these flaws can be found on the Oracle Critical Patch Update...

5.4CVSS5.8AI score0.03177EPSS
SaveExploits2References11Affected Software1
Veracode
Veracode
•added 2019/05/02 4:46 a.m.•41 views

Arbitrary Code Execution

IBM Java SE version 6 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update fixes several vulnerabilities in the IBM Java Runtime Environment and the IBM Java Software Development Kit. Detailed vulnerability descriptions are linked from the IBM Security...

9.8CVSS6.5AI score0.98802EPSS
SaveExploits24References26Affected Software1
Veracode
Veracode
•added 2019/05/02 4:45 a.m.•41 views

Arbitrary Code Execution

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...

8.8CVSS8.1AI score0.69021EPSS
SaveExploits9References17Affected Software3
Veracode
Veracode
•added 2019/05/02 4:45 a.m.•41 views

Denial Of Service (DoS)

Wireshark, previously known as Ethereal, is a network protocol analyzer. It is used to capture and browse the traffic running on a computer network. A heap-based buffer overflow flaw was found in the way Wireshark handled Endace ERF Extensible Record Format capture files. If Wireshark opened a...

4.3CVSS7AI score0.06523EPSS
SaveExploits9References18Affected Software1
Veracode
Veracode
•added 2019/05/02 4:45 a.m.•41 views

Sandbox Restrictions Bypass

OpenJDK 7 Java Runtime Environment and Software Development Kit is susceptible to sandbox restriction bypass. Due to the flaws in ImagingLib and the image attribute, channel, layout and raster processing in the 2D component, it does not prevent an untrusted Java application or applet to trigger...

10CVSS6.1AI score0.14749EPSS
SaveExploits4References35Affected Software3
Veracode
Veracode
•added 2019/05/02 4:43 a.m.•41 views

Bypass Policy

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...

9.3CVSS9.8AI score0.42609EPSS
SaveExploits5References23Affected Software3
Veracode
Veracode
•added 2019/05/02 4:42 a.m.•41 views

Arbitrary Code Execution

Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. A flaw was found in the way the Pidgin MSN protocol plug-in processed text that was not encoded in UTF-8. A remote attacker could use this flaw to crash Pidgin by...

7.5CVSS6.3AI score0.06402EPSS
SaveExploits3References9Affected Software1
Veracode
Veracode
•added 2019/05/02 4:42 a.m.•41 views

Denial Of Service (DoS)

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. CVE-2012-1948,...

10CVSS8.2AI score0.73327EPSS
SaveExploits5References29Affected Software3
Veracode
Veracode
•added 2019/05/02 4:41 a.m.•41 views

Denial Of Service (DoS)

The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues: A flaw was found in the way the Linux kernel's Event Poll epoll subsystem handled large, nested epoll structures. A local, unprivileged user could use this flaw t...

4.9CVSS6AI score0.00795EPSS
SaveExploits2References84Affected Software2
Veracode
Veracode
•added 2019/05/02 4:41 a.m.•41 views

Arbitrary Code Execution Or Denial Of Service (DoS)

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...

8.8CVSS9.3AI score0.11079EPSS
SaveExploits10References30Affected Software3
Veracode
Veracode
•added 2019/05/02 4:41 a.m.•41 views

Information Disclosure

IBM Java SE version 6 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update fixes several vulnerabilities in the IBM Java Runtime Environment and the IBM Java Software Development Kit. Detailed vulnerability descriptions are linked from the IBM Security...

10CVSS5.7AI score0.69037EPSS
SaveExploits6References30Affected Software1
Veracode
Veracode
•added 2019/04/22 3:35 a.m.•41 views

SSL Hostname Verification Bypass

urllib3 is vulnerable to SSL Hostname Verification Bypass. The vulnerability exists as urllib3 incorrectly loads system certificates even when an explicit set of CA certificates were specified, possibly allowing man-in-the-middle attacks...

7.5CVSS6.3AI score0.02836EPSS
SaveExploits0References15Affected Software13
Veracode
Veracode
•added 2019/03/25 8:40 a.m.•41 views

Directory Traversal

Jetty is vulnerable to directory traversal. It is due to the way URLs with multiple / slash characters are processed, allowing a remote unauthenticated attacker to view hidden or private files and directories...

5CVSS9.2AI score0.03864EPSS
SaveExploits0References10Affected Software1
Veracode
Veracode
•added 2019/02/22 3:15 a.m.•41 views

Remote Code Execution (RCE)

drupal is vulnerable to remote code execution RCE attacks. The vulnerability exists through certain field types that do not sanitize data from non-form sources, allowing remote code execution RCE attacks...

8.1CVSS8.4AI score0.92017EPSS
SaveExploits23References9Affected Software1
Veracode
Veracode
•added 2019/01/21 2:11 a.m.•41 views

Denial Of Service (DoS)

github.com/moby/moby is vulnerable to denial of service DoS attacks. The vulnerability exists due to the lack of validation of cpuset-mems or cpuset-cpus, where a memory exhaustion could occur with a large integer...

4.9CVSS5.2AI score0.02231EPSS
SaveExploits0References4Affected Software2
Veracode
Veracode
•added 2019/01/15 9:26 a.m.•41 views

Information Disclosure

Linux kernel that is built with CONFIGPOSIXTIMERES and CONFIGCHECKPOINTRESTORE is vulnerable to information disclosure. An out-of-bounds access in the showtimer function in the timercreate syscall implementation in kernel/time/posix-timers.c allows userspace applications to read arbitrary kernel...

5.5CVSS6AI score0.03314EPSS
SaveExploits8References18Affected Software2
Veracode
Veracode
•added 2019/01/15 9:25 a.m.•41 views

Privilege Escalation

glibc is vulnerable to privilege escalation attacks. The vulnerability exists as elf/dl-load.c in the GNU C Library aka glibc or libc6 2.19 through 2.26 mishandles RPATH and RUNPATH containing $ORIGIN for a privileged setuid or ATSECURE program, which allows local users to gain privileges via a...

7.8CVSS8.4AI score0.02895EPSS
SaveExploits0References29Affected Software1
Veracode
Veracode
•added 2019/01/15 9:24 a.m.•41 views

Denial Of Service (DoS)

rh-postgresql96-postgresql is vulnerable to denial of service DoS attacks. The vulnerability exists as invalid jsonpopulaterecordset or jsonbpopulaterecordset function calls in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, and 9.3.x before 9.3.20 can...

8.1CVSS7.6AI score0.03723EPSS
SaveExploits0References9Affected Software3
Veracode
Veracode
•added 2019/01/15 9:24 a.m.•41 views

Arbitrary Code Execution

jbossas is vulnerable to arbitrary code execution attacks. The vulnerability exists as Jboss Application Server as shipped with Red Hat Enterprise Application Platform 5.2, it was found that the doFilter method in the ReadOnlyAccessFilter of the HTTP Invoker does not restrict classes for which it...

9.8CVSS9.7AI score0.90713EPSS
SaveExploits14References7Affected Software1
Veracode
Veracode
•added 2019/01/15 9:22 a.m.•41 views

Information Disclosure

Several modern microprocessor designs are vulnerable to information disclosure vulnerability. An unprivileged local attacker could access sensitive memory locations via a targeted side-channel attack...

5.5CVSS5.8AI score0.60631EPSS
SaveExploits3References152Affected Software11
Veracode
Veracode
•added 2019/01/15 9:21 a.m.•41 views

Directory Traversal

wildfly-undertow is vulnerable to directory traversal attacks. The application does not handle pathing properly, allowing a malicious user to pass a URL to gain access to sensitive information on the system...

5.5CVSS7.3AI score0.00489EPSS
SaveExploits0References11Affected Software23
Veracode
Veracode
•added 2019/01/15 9:20 a.m.•41 views

Remote Code Execution (RCE)

github.com/golang/go is vulnerable to remote code execution RCE. If custom domains are used, a malicious user can set a domain example.com/proj1 to point to a subversion repository and another domain example.com/proj1/proj2 to point to a git repository. When the go get command is run, arbitrary...

9.8CVSS9.7AI score0.08944EPSS
SaveExploits0References11Affected Software5
Veracode
Veracode
•added 2019/01/15 9:19 a.m.•41 views

Denial Of Service (DoS)

kernel-rt is vulnerable to denial of service DoS attacks. The vulnerability exists as the pivotroot implementation in fs/namespace.c in the Linux kernel through 3.17 does not properly interact with certain locations of a chroot directory, which allows local users to cause a denial of service...

5.5CVSS5.5AI score0.00673EPSS
SaveExploits1References52Affected Software1
Veracode
Veracode
•added 2019/01/15 9:18 a.m.•41 views

Denial Of Service (DoS)

ghostscript is vulnerable to denial of service DoS attacks. The vulnerability exists as the memgetbitsrectangle function in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted PostScript document...

5.5CVSS7AI score0.02293EPSS
SaveExploits0References6Affected Software1
Veracode
Veracode
•added 2019/01/15 9:17 a.m.•41 views

Arbitrary Code Execution

kernel is vulnerable to arbitrary code execution attacks. The vulnerability exists as the NFSv2 and NFSv3 server implementations in the Linux kernel through 4.10.13 lack certain checks for the end of a buffer, which allows remote attackers to trigger pointer-arithmetic errors or possibly have...

9.8CVSS9.7AI score0.1081EPSS
SaveExploits0References17Affected Software2
Veracode
Veracode
•added 2019/01/15 9:16 a.m.•41 views

Denial Of Service (DoS)

kernel-rt is vulnerable to denial of service DoS attacks. The vulnerability exists as the ext4fillsuper function in fs/ext4/super.c in the Linux kernel through 4.9.8 does not properly validate meta block groups, which allows physically proximate attackers to cause a denial of service out-of-bound...

4.3CVSS5.1AI score0.00428EPSS
SaveExploits0References3Affected Software1
Veracode
Veracode
•added 2019/01/15 9:16 a.m.•41 views

Denial Of Service (DoS)

QEMU is vulnearble to denial of service. An integer overflow flaw and an out-of-bounds read flaw were found in the way QEMU's VGA emulator set certain VGA registers while in VBE mode. A privileged guest user could use this flaw to crash the QEMU process instance...

5.5CVSS6.6AI score0.00513EPSS
SaveExploits0References29Affected Software1
Veracode
Veracode
•added 2019/01/15 9:15 a.m.•41 views

Weak Encryption

The DES and Triple-DES ciphers are vulnerable to birthday attacks, allowing a malicious user to decrypt and obtain cleartext data faster than a standard brute-force attack...

7.5CVSS7.5AI score0.95707EPSS
SaveExploits7References148Affected Software11
Veracode
Veracode
•added 2019/01/15 9:14 a.m.•41 views

Cross-site Scripting (XSS) Via Dialog CloseText

jquery-ui is vulnerable to cross-site scripting XSS attacks. A malicious user can execute arbitrary code to the closeText parameter of the dialog function...

6.1CVSS6.7AI score0.2258EPSS
SaveExploits1References38Affected Software2
Veracode
Veracode
•added 2019/01/15 9:13 a.m.•41 views

Regular Expression Denial Of Service (ReDoS) Via Long String Of Semicolons

tough-cookie is vulnerable to regular expression denial-of-service ReDoS attack. A malicious user can pass a long string that contains many semicolons in the Set-Cookies header, causing a regular expression to take a large amount of time, causing a denial of service condition...

5.3CVSS5.7AI score0.02356EPSS
SaveExploits0References9Affected Software3
Veracode
Veracode
•added 2019/01/15 9:12 a.m.•41 views

Arbitrary Code Execution

IBM Java is vulnerable to arbitrary code execution. An unspecified vulnerability allows an local users to affect confidentiality, integrity, and availability via vectors related to Deployment...

7.7CVSS8.4AI score0.00507EPSS
SaveExploits0References24Affected Software2
Total number of security vulnerabilities5000