38537 matches found
Authorization Bypass
bind is vulnerable to authorization bypass. The vulnerability exists through an Incorrect documentation of krb5-subdomain and ms-subdomain update policies...
Denial Of Service (DoS)
advancecomp is vulnerable to denial of service DoS. The vulnerability exists in function advpngunfilter8 in lib/png.c...
Arbitrary File Overwrite
keepalived is vulnerable to arbitrary file overwrite. The vulnerability exists as there is an improper pathname validation that allows for overwrite of arbitrary filenames via symlinks...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists through a NULL pointer dereference in lookupslow function...
Arbitrary Code Execution
poppler is vulnerable to arbitrary code execution. A heap-based buffer underwrite in the function ImageStream::getLine in Stream.cc allows an attacker to crash the application or potentially execute arbitrary code on the system...
Denial Of Service (DoS)
libpoppler.so is vulnerable to denial of service DoS. The attack exists because it does not prevent having integer overflow in the function SplashOutputDev::tilingPatternFill at SplashOutputDev.cc...
Denial Of Service (DoS)
Django is vulnerable to denial of service DoS. It does not properly handle HTML entities in the function striptags, causing excessive HTMLParser recursions...
Denial Of Service (DoS)
openjdk is vulnerable to denial of service. It was discovered that crypto provider implementations in the JCE component of OpenJDK for crypto algorithms such as AES or SHA did not perform array bounds checks. This can lead to out-of-bounds access if compiler intrinsics were used instead of the Ja...
Denial Of Service (DoS)
openjdk is vulnerable to denial of service. It was discovered that the implementation of the Throwable class in the Utilities component of OpenJDK did not sufficiently validate serial stream before deserializing suppressed exceptions. A specially-crafted input could cause a Java application to...
Authorization Bypass
python is vulnerable to authorization bypass. The localfile: scheme allows for remote attackers to bypass protection mechanisms that blacklist file: URIs, as demonstrated by triggering a urllib.urlopen'localfile:///etc/passwd' call...
Buffer Overflow
QEMU is vulnerable to buffer overflows. A remote, unauthenticated attacker could cause a system crash due to device tree size manipulation before buffer allocation leading to denial of service conditions. Affected by this issue is the function loadimage of the file devicetree.c...
Arbitrary Code Execution
libpoppler.so is vulnerable to arbitrary code execution. A heap-based buffer overflow in Splash::blitTransparent in splash/Splash.cc allows an attacker to execute arbitrary code...
Arbitrary Code Execution
IBM Java SE version 8 is vulnerable to arbitrary code execution fixed in 7u221 and 8u211...
Denial Of Service (DoS)
Oracle Java SE is vulnerable to denial of service DoS attacks. The vulnerability exists in Deployment component in the Java SE component of Oracle Java SE. An unauthenticated attacker with network access via multiple protocols could cause denial of service condition with the aid of human...
Privilege Escalation
PostgreSQL is vulnerable to privilege escalation vulnerability. This is because INSERT ... ON CONFLICT DO UPDATE commands in PostgreSQL. A low privileged attacker without full read access but with both INSERT and UPDATE access could read the sensitive information of the table contents...
Privilege Escalation
Linux kernel is vulnerable to privilege escalation vulnerability. This exists in the function inodeinitowner of the file fs/inode.c. Local users could create files with an unintended group ownership and SGID permission bits set, when a directory is SGID and belongs to a certain group and is...
Denial Of Service (DoS)
Linux kernel is vulnerable to denial of serviceDoS attacks. This is because the Serial Attached SCSI SAS implementation mishandles a mutex within libsas. This allows local users to cause a denial of service deadlock by triggering certain error-handling code...
Heap-Based Buffer Overflow
PHP is vulnerable to heap-based buffer overflow vulnerability. The vulnerability exists in the ext/mysqlnd/mysqlndwireprotocol.c in PHP. Remote MySQL servers could cause a denial of service or possibly have unspecified other impact via crafted field metadata...
Denial Of Service (DoS)
QEMU is vulnerable to denial of service attacks. Function cpuphysicalmemorysnapshotgetdirty of the component VGA Display Update allows remote authenticated attackers via an assert failure issue in the VGA display emulator...
Arbitrary Code Execution
GNU C Library is vulnerable to arbitrary code execution. A remote unauthenticated attacker could cause a buffer overflow during unescaping of user names with the operator resulting in denial of service conditions and code execution attacks...
Denial Of Service (DoS)
Linux kernel is vulnerable to denial of service attacks. A local authenticated attacker could cause denial of service conditions or possibly have unspecified other impact by triggering a negative wake or requeue value. Affected by this issue is the function futexrequeue of the file kernel/futex.c...
Information Disclosure
The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security Fixes: Multiple flaws were found in the Hotspot and AWT components of OpenJDK. An untrusted Java application or applet could use these flaws to bypass certain...
Denial Of Service (DoS)
Linux kernel is vulnerable to denial of service attacks. A local authenticated attacker is able exhaust kernel memory via a flaw in the keyctlsetreqkeykeyring function leading to denial of service conditions...
Arbitrary Code Execution
OpenJPEG is vulnerable to arbitrary code execution attacks. A remote unauthenticated attacker could exploit the vulnerable JP2 File Handler component to cause code execution via a crafted JP2 file, which triggers an out-of-bounds read or write...
Sandbox Restrictions Bypass
Java SE, Java SE Embedded and JRockit are vulnerable to sandbox restrictions bypass. A remote, unauthenticated attacker could submit malicious input leading to the exploitation of the flawed RMI component to gain elevated privileges. Successful attacks of this vulnerability can result in...
Denial Of Service (DoS)
Oracle MySQL is vulnerable to denial of service attacks. A remote, authenticated attacker could exploit the flawed Optimizer component to cause a hang or frequently repeatable crash resulting in denial of service conditions...
Denial Of Service (DoS)
Oracle MySQL is vulnerable to denial of serviceDoS attacks. A remote user could exploit a flaw in the Server: Pluggable Auth component which allows unauthorized attackers to cause frequently repeatable crash on the target system...
Denial Of Service (DoS)
Apache httpd is vulnerable to denial of service attacks. The modauthdigest component does not properly initialize memory used to process 'Digest' type HTTP Authorization headers allowing a remote attacker to send a specially crafted request to view potentially sensitive information from the...
Denial Of Service (DoS) Through Divide By Zero
QEMU is vulnerable to denial of serviceDoS through divide by zero attacks. The vulnerability occurs while copying VGA data when cirrus graphics mode was set to be VGA. A privileged user inside guest could use this flaw to crash the Qemu process instance on the host, resulting in an application...
Denial Of Service (DoS)
QEMU is vulnerable to denial of serviceDoS attacks. This occurs in the xhciringfetch function in hw/usb/hcd-xhci.c which allows local guest OS administrators to cause a denial of service condition by leveraging failure to limit the number of link Transfer Request Blocks TRB to process...
Denial Of Service (DoS) Through Double-free
Linux kernel is vulnerable to denial of service DoS through double-free vulnerability. This vulnerability exists in the inetcskclonelock function in net/ipv4/inetconnectionsock.c in the Linux kernel. Attackers could cause a denial of service or possibly have unspecified other impact by leveraging...
Denial Of Service
Java SE and Java SE Embedded are vulnerable to denial of serviceDoS attacks. A remote user can exploit a flaw in the Serialization component to cause application crash resulting in partial denial of service conditions...
Denial Of Service (DOS)
Linux Kernel is vulnerable to denial of service DOS attacks. This is because Linux Kernel running on AMD64 systems will sometimes map the contents of PIE executable, the heap or ld.so to where the stack is mapped allowing attackers to more easily manipulate the stack...
Unauthorized Modification
Java SE and Java SE Embedded are vulnerable to unauthenticated modification attacks. An unauthenticated attacker can exploit a flaw in the Security component of OpenJDK which does not allow users to restrict the set of algorithms allowed for Jar integrity verification allowing an attacker to modi...
Command Injection
Snoopy library is vulnerable to command injection attacks. This allows remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers which may leads to data modification...
Denial Of Service (DoS)
Linux kernel is vulnerable to denial of serviceDoS attacks. A local user can connect a USB device to the target system to trigger a double-free memory error in sndusbmidicreate function which cause the kernel to crash or potentially execute arbitrary code...
Cross-site Scripting (XSS)
Firefox ESR and Firefox are vulnerable to cross-site scripting XSS attacks. A remote attacker can exploit an input validation flaw in the Pocket server to execute arbitrary JavaScript in the about:pocket-saved page and access the Pocket messaging API...
Authentication Bypass
Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...
Arbitrary Code Execution
Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...
Arbitrary Code Execution
Red Hat Gluster Storage is a software only scale-out storage solution that provides flexible and affordable unstructured data storage. It unifies data storage and infrastructure, increases performance, and improves availability and manageability to meet enterprise-level storage challenges. Red Ha...
Man-in-the-Middle (MitM)
The Network Time Protocol NTP is used to synchronize a computer's time with another referenced time source. It was found that because NTP's access control was based on a source IP address, an attacker could bypass source IP restrictions and send malicious control and configuration packets by...
Sensitive Information Leak
ntp is vulnerable to sensitive information disclosure. It is possible due to missing validation of vallen value in ntpcrypto.c when the decryption of a secret received from an NTP server is performed, leading to a stack-based buffer overflow and crashing the NTP client...
Sandbox Restrictions Bypass
The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Multiple flaws were discovered in the 2D, CORBA, JMX, Libraries and RMI components in OpenJDK. An untrusted Java application or applet could use these flaws to bypass Ja...
Sandbox Restrictions Bypass
The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Multiple flaws were discovered in the 2D, CORBA, JMX, Libraries and RMI components in OpenJDK. An untrusted Java application or applet could use these flaws to bypass Ja...
Buffer Overflow
Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...
Buffer Overflow
Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...
Sensitive Information Leakage
Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 collection provide a stable release of Python 2.7 with a number of additional utilities and database connectors f...
Improper Input Validation
Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 collection provide a stable release of Python 2.7 with a number of additional utilities and database connectors f...
Denial Of Service (DoS)
ntp is vulnerable to denial of service DoS. The vulnerability exists as it is possible to send a crypto NAK packet from a spoofed source address of an associated peer...