Cross-Site Scripting (XSS)

modperl is vulnerable to cross-site scripting XSS. A remote attacker is able to inject and execute arbitrary Javascript in a user's browser via el/functions.jsp, el/implicit-objects.jsp and jspx/textRotate.jspx in examples/jsp2...

Arbitrary Code Execution

ghostscript is vulnerable to arbitrary code execution. A buffer overflow flaw and multiple missing boundary checks were found in Ghostscript. An attacker could create a specially-crafted PostScript or PDF file that could cause Ghostscript to crash or, potentially, execute arbitrary code when open...

Denial Of Service (DoS)

The ipsec-tools package is vulnerable to Denial Of Service DoS. It was possible for a remote attacker to cause the racoon daemon to consume all available memory...

Arbitrary Code Execution

xpdf is vulnerable to arbitrary code execution. The vulnerability exists as an attacker could create a malicious PDF file that would cause Xpdf to crash or, potentially, execute arbitrary code when opened...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. The Linux kernel implementation of the Network File System NFS did not properly initialize the file name limit in the nfsserver data structure. This flaw could possibly lead to a denial of service on a client mounting an NFS share...

Arbitrary Code Execution

java is vulnerable to arbitrary code execution. A buffer overflow flaw was found in the splash screen processing. A remote attacker could extend privileges to read and write local files, as well as to execute local applications with the privileges of the user running the java process...

Denial Of Service (DoS)

lcms is vulnerable to denial of service DoS. The vulnerability exists as a memory leak flaw was found in LittleCMS embedded in OpenJDK. A application using color profiles could use excessive amounts of memory, and possibly crash after using all available memory, if used to open specially-crafted...

Cross-Site Request Forgery (CSRF)

The modproxybalancer module in Apache HTTP server is vulnerable to cross-site request forgery CSRF. A remote attacker could cause a denial of service by exploiting the vulnerability if modproxybalancer is enabled and an authenticated user is targeted...

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS. The vulnerability exists as the sendmsg function in the Linux kernel did not block during UNIX socket garbage collection. This could, potentially, lead to a local denial of service...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. The ext2 and ext3 filesystem code failed to properly handle corrupted data structures, leading to a possible local denial of service issue when read or write operations were performed...

Denial Of Service (DoS)

cups is vulnerable to denial of service DoS. The vulnerability exists as a null pointer dereference flaw was found in the way CUPS handled subscriptions for printing job completion notifications. A local user could use this flaw to crash the CUPS daemon by submitting a large number of printing jo...

Denial Of Service (DoS)

bind is vulnerable to denial of service DoS. The vulnerability exists as it was discovered that the bind packages created the "rndc.key" file with insecure file permissions. This allowed any local user to read the content of this file. A local user could use this flaw to control some aspects of t...

Information Disclosure

kernel is vulnerable to information disclosure. The vulnerability exists as the dotruncate and genericfilesplicewrite functions did not clear the setuid and setgid bits. This could allow a local unprivileged user to obtain access to privileged information...

Privilege Escalation

kernel is vulnerable to privilege escalation. A missing capability check was found in the Linux kernel dochangetype routine. This could allow a local unprivileged user to gain privileged access or cause a denial of service...

Information Disclosure

seamonkey is vulnerable to information disclosure. The vulnerability exists as a web page containing specially crafted content could potentially trick a SeaMonkey user into surrendering sensitive information...

Denial Of Service (DoS)

mysql is vulnerable to denial of service DoS. The vulnerability exists as a flaw in MySQL allowed an authenticated user to cause the MySQL daemon to crash via crafted SQL queries. This only caused a temporary denial of service, as the MySQL daemon is automatically restarted after the crash...

Privilege Escalation

kernel is vulnerable to privilege escalation. The vulnerability exists as a flaw was found in the virtual filesystem VFS. An unprivileged local user could truncate directories to which they had write permission; this could render the contents of the directory inaccessible...

Information Disclosure

kernel is vulnerable to information disclosure. A security flaw was found in the Linux kernel memory copy routines, when running on certain AMD64 systems. If an unsuccessful attempt to copy kernel memory from source to destination memory locations occurred, the copy routines did not zero the...

Information Disclosure

kernel is vulnerable to information disclosure. The vulnerability could allow a local unprivileged user to prepare and run a specially crafted binary, which would use this deficiency to leak uninitialized and potentially sensitive data. CVE-2008-0598, Important...

Arbitrary Code Execution

seamonkey is vulnerable to arbitrary code execution. Several flaws were found in the processing of some malformed web content. A web page containing such malicious content could cause SeaMonkey to crash or, potentially, execute arbitrary code as the user running SeaMonkey...

Arbitrary Code Execution

cups is vulnerable to arbitrary code execution. The vulnerability exists in the handling of PDF files. An attacker could create a malicious PDF file that would cause CUPS to crash or potentially execute arbitrary code when printed...

Information Disclsoure

seamonkey is vulnerable to information disclosure. The vulnerability exists in the way SeaMonkey displayed malformed web content. A webpage containing specially-crafted content could trick a user into surrendering sensitive information...

Cross-Site Request Forgery (CSRF)

firefox is vulnerable to cross-site request forgery CSRF. A flaw was found in the way Firefox handled certain FTP PASV commands. A malicious FTP server could use this flaw to perform a rudimentary port-scan of machines behind a user's firewall...

Information Disclosure

kernel is vulnerable to information disclosure. The vulnerability exists as a bug in the random number generator that prevented the manual seeding of the entropy pool...

Arbitrary Code Execution

samba is vulnerable to arbitrary code execution. A heap-based buffer overflow flaw was found in the way Samba authenticates users. A remote unauthenticated user could trigger this flaw to cause the Samba server to crash. Careful analysis of this flaw has determined that arbitrary code execution i...

Denial Of Service (DoS)

php is vulnerable to denial of service DoS. The vulnerability exists as a denial of service flaw was found in the way PHP processed a deeply nested array. A remote attacker could cause the PHP interpreter to crash by submitting an input variable with a deeply nested array...

Denial Of Service (DoS)

gzip is vulnerable to denial of service DoS. The vulnerability exists in the way gzip expanded archive files. If a victim expanded a specially crafted archive, it could cause the gzip executable to hang or crash...

Information Disclosure

The kdebase is vulnerable to information disclosure. A problem with the interaction between the Flash Player and the Konqueror web browser was found. The problem could lead to key presses leaking to the Flash Player applet instead of the browser...

Information Disclosure

X.org is vulnerable to Information Disclosure. An integer overflow flaw was found in the X.org XGetPixel function. Improper use of this function could cause an application calling it to function improperly, possibly leading to a crash or arbitrary code execution...

Remote Code Execution (RCE)

Mozilla Thunderbird is vulnerable to Remote Code Execution RCE. A malicious web page could cause the execution of Javascript code in such a way that could cause Thunderbird to crash or execute arbitrary code as the user running Thunderbird. JavaScript support is disabled by default in Thunderbird...

Information Disclosure

Mozilla is vulnerable to information disclosure. The vulnerability exists as uninitialized memory could be read when using the WebGL copyTexSubImage method...

Denial Of Service (DoS)

Mozilla is vulnerable to denial of service. The vulnerability exists through a use-after-free issue when handling a ReadableStream...

Denial Of Service (DoS)

The kernel-rt packages is vulnerable to denial of service DoS due to a race condition in perfeventopen...

Use-after Free

libxml2 is vulnerable to Use after free triggered by XPointer paths beginning with range-to...

Denial Of Service (DoS)

imagemagick is vulnerable to denial of service. A memory leak in AcquireMagickMemory due to improper handling of the NoSuchImage error allows an attacker to crash the application...

Certificate Spoofing

github.com/golang/go is vulnerable to certificate spoofing. A Windows vulnerability allows attackers to spoof valid certificate chains when the system root store is in use...

Remote Code Execution

.NET software is vulnerable to remote code execution. Failure to validate the source markup of a file allows an attacker to execute code in the context of the application upon successful exploitation of the vulnerability. This CVE ID is different from CVE-2020-0605...

Arbitrary Code Execution

libssh.so is vulnerable to arbitrary code execution. When SCP client connects to a server, the function sshscpnew executed unsanitized scp-location parameter provided by the user, allowing a malicious user to inject arbitrary command through it...

Denial Of Service (DoS)

Mozilla firefox is vulnerable to denial of service. The vulnerability exists through a use-after-free error in worker destruction...

Remote Code Execution

jackson-databind is vulnerable to remote code execution. The application does not block the xalan classes during deserialization, which would allow a remote attacker to leverage the vulnerability to execute arbitrary code...

Authorization Bypass

infinispan is vulnerable to authorization bypass. The vulnerability exists as the invokeAccessibly method in the ReflectionUtil class allows the invokation of any private methods with Infinispan's privileges...

Remote Code Execution

Microsoft.ChakraCore is vulnerable to remote code execution. This is due to the way the ChakraCore scripting engine handles objects in memory which could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. This CVE ID is different from...

Arbitrary File Overwrite

github.com/containers/libpod is vulnerable to arbitrary file overwrite. The vulnerability exists as it does not properly perform symlink processing and wild-card characters parsing, allowing for overwriting of existing files when an undesired glob operation occurs...

Authentication Bypass

github.com/goharbor/harbor is vulnerable to authentication bypass. The vulnerability exists as an admin is able to create a robot account in another project through the Harbor API, leading to unauthorized access to push/pull/modify images in the target project...

Remote Code Execution

ReportLab is vulnerable to remote code execution. This is due to the usage of toColorevalarg in colors.py, allowing a remote attacker to execute arbitrary Python code using a malicious XML document that utilizes 'span color="' followed by arbitrary Python code...

Denial Of Service (DoS)

openjdk is vulnerable to denial of service. A NULL pointer dereference in DrawGlyphList allows an attacker to crash the application...

Denial Of Service (DoS)

libtiff.so is vulnerable to denial of service DoS. A heap-based buffer overflow in tifgetimage.c caused by an integer overflow allows an attacker to crash the application via a malicious RGBA image, or potentially execute arbitrary code on the system...

Use-After-Free

firefox is vulnerable to use-after-free. The vulnerability exists due to the manipulating video elements which allows an attacker to do a potentially exploitable crash in the application...

Information Disclosure

PHP is vulnerable to Information disclosure. When an attacker supplies malicious data, it causes the funciton gdImageCreateFromXbm to use the value of uninitialized variable...

Denial Of Service (DoS)

elfutils is vulnerable to denial of service. It is due to invalid memory address dereference occured in dwflsegmentreportmodule.c in libdwfl when an attacker passes a malicious ELF file...