38838 matches found
Denial Of Service (DoS)
linux-gkeop is vulnerable to denial of service. A flaw null pointer dereference in the Linux kernel UDF file system functionality was found in the way user triggers udffilewriteiter function for the malicious UDF image. A local user could use this flaw to crash the system...
Path Traversal
org.owasp.esapi:esapi is vulnerable to path traversal. A remote authenticated user is able to break out of expected directory via a crafted input through getValidDirectoryPath function, because it may incorrectly treat the tested input string as a child of the specified parent directory...
Privilege Escalation
qemu is vulnerable to privilege escalation. The vulnerability exists due to a lack of validation of authorization which allows an attacker to create files in the directories shared by virtio-fs with unintended group ownership in a scenario where a directory is SGID to a certain group and is...
Denial Of Service (DoS)
libxml2 is vulnerable to denial of service. The vulnerability exists due to an integer overflow in xmlmemory.c...
Arbitrary File Write
libarchive is vulnerable to arbitrary file write. An improper link resolution flaw can occur while extracting an archive leading to changing modes, times, access control lists, and flags of a file outside of the archive. An attacker may provide a malicious archive to a victim user, who would...
Symlink Attack
github.com/beego/beego is vulnerable to symlink attack. Lack of sufficient check for the existence of files created allows an attacker to use MemProf and GetCPUProfile commands to trigger the symbolic link attack locally...
Remote Code Execution (RCE)
Dompdf is vulnerable to remote code execution. The vulnerability exists due to a lack of sanitization of the font type via a .php file in the src:url field of an @font-face Cascading Style Sheets CSS statement within an HTML input file...
Buffer Overflow
jhead is vulnerable to buffer overflow. The vulnerability exists due to a Heap-based Buffer Overflow vulnerability exists in jhead via the RemoveSectionType function in jpgfile.c...
Cross-Site Scripting (XSS)
Keycloak Core is vulnerable to reflected cross-site scripting. The vulnerability exists via the POST http requests due to lack of escaping which allows a malicious attacker to inject and execute arbitrary javascript...
Authentication Bypass
github.com/moby/moby is vulnerable to authentication bypass. The vulnerability exists because the default inheritable capabilities for linux container is not empty which allows an unauthorized user to bypass access restrictions...
Information Exposure
topthink/think is vulnerable to information exposure. The vulnerability exists due to a lack of input validation which allows an attacker to access sensitive informations in the system...
Improper Signature Verification
node-forge uses improper signature verification. Leniency in checking the digest algorithm structure allows remote attackers to specifically craft a structure that steals padding bytes and uses unchecked portion of the PKCS1 encoded message to forge a signature when a low public exponent is being...
Remote Code Execution (RCE)
github.com/cri-o/cri-o is vulnerable to remote code execution. The vulnerability exists due to a lack of sanitization of the kernel.corepattern allowing an attacker to achieve container escape and inject maliciously crafted script into the system...
Remote Code Execution (RCE)
razorengine is vulnerable to remote code execution. The vulnerability exists because it does not sanitize the CAS code access security of an insecure sandboxed environment, allowing an attacker to execute maliciously crafted .NET code into the system...
Denial Of Service (DoS)
poi-scratchpad is vulnerable to denial of service. An attacker can cause an application crash through the out of memory exception by submitting the malicious TNEF file to the TNEFAttribute parameter in the create function of MAPIAttribute.java...
Use-After-Free
A use-after-free flaw was found in ncirequest in net/nfc/nci/core.c in NFC Controller Interface NCI in the Linux kernel. This flaw could allow a local attacker with user privileges to cause a data race problem while the device is getting removed, leading to a privilege escalation problem...
Denial Of Service (DoS)
policykit-1:sid is vulnerable to denial of service. Lack of proper handling of call returns causes the process file descriptor exhaustion...
Denial Of Service (DoS)
webkit2gtk:edge is vulnerable to denial of service...
Information Disclosure
cobbler is vulnerable to information disclosure. The vulnerability exists because the library does not properly restrict the config file accessibility, which allows an attacker who has access to the server to open an authenticated session with a cobbler daemon...
DNS Spoofing
mellium.im/xmpp is vulnerable to DNS spoofing. The vulnerability exists due to a lack of verification of the host name allowing an attacker to potentially deceive the user with a malicious DNS ID because the library does not properly verify TLS certification...
Authorization Bypass
url-parse is vulnerable to authorization bypass. The vulnerability exists in Url function of index.js because the user name and password are not properly handled which allows a malicious user to modify user information...
Remote Code Execution (RCE)
github.com/git-lfs/git-lfs is vulnerable to remote code execution. The vulnerability exists in 'ExecCommand' function of subprocesswindows.go which allows an attacker to inject and execute codes in the root directory of a malicious repository by simply adding an executable files...
Denial Of Service (DoS)
vim is vulnerable to denial of service. The vulnerability exists due to a use After Free...
Remote Code Execution (RCE)
topthink/thinkphp is vulnerable to remote code execution. An attacker can obtain server control privileges by injecting a malicious code through the filename function in class.php...
Denial Of Service (DoS)
github.com/ethereum-optimism/optimism is vulnerable to Denial Of Service DoS. The vulnerability exists due to a balance is duplicated upon contract self-destruction which allows an attacker to create ETH on Optimism by repeatedly triggering the SELFDESTRUCT opcode, leading to an application crash...
Cross Site Scripting (XSS)
github.com/go-gitea/gitea is vulnerable to cross-site scripting XSS. The vulnerability exists due to the lack of sanitization in the repository settings in the setting.go file allows the attacker to inject and execute arbitrary Javascript via the URL field in the external wiki/issue tracker...
Denial Of Service (DoS)
Lua is vulnerable to denial of service. It is affected by SEGV by type confusion in funcnamefromcode function in ldebug.c which can cause a local denial of service...
Directory Traversal
github.com/argoproj/argo-cd is vulnerable to directory traversal. The vulnerability exists in helmTemplate function of repository.go which allows a malicious user to traverse the file system...
Remote Code Execution (RCE)
webkit2gtk:edge is vulnerable to remote code execution. A use after free issue was addressed with improved memory management. Processing maliciously crafted web content may lead to arbitrary code execution...
Information Disclosure
samba is vulnerable to information disclosure...
Denial Of Service (DoS)
openjdk1 is vulnerable to denial of service. The vulnerability exists due to improper input validation in the ImageIO component allows attacker to perform service disruption...
Denial Of Service (DoS)
openjdk is vulnerable to denial of service. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to...
Integer Overflow
libexpat.so is vulnerable to integer overflow. The vulnerability exists in the doProlog function in the xmlparse.c file, allowing an attacker to cause an application crash...
Buffer Overflow
vim is vulnerable to Heap-based Buffer Overflow. The vulnerability exist due to a lack of sanitization of the memory control pointer...
Use After Free
vim is vulnerable to use after free...
Remote Code Execution (RCE)
chromium-browser is vulnerable to remote code execution. The vulnerability exists due to the issue in the Object lifecycle in ANGLE...
Integer Underflow
bionic is vulnerable to integer underflows. The library does not properly check memory size causing an integer underflow that allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
Remote Code Execution (RCE)
thunderbird is vulnerable to remote code execution. The vulnerability exists due to a boundary error when handling DER-encoded DSA or RSA-PSS signatures within Mozilla NSS library...
Authorization Bypass
haproxy is vulnerable to authorization bypass. Lack of validation of the HTTP Host header could potentially result in bypass of access controls due to a mishandling of the Host and authority. The fix for the original CVE is correctly included in OpenShift 4.9.11.The release of OpenShift 4.9.6...
Denial Of Service (DoS)
openssl3:edge is vulnerable to denial of service. Internally libssl in OpenSSL calls X509verifycert on the client side to verify a certificate supplied by a server. That function may return a negative return value to indicate an internal error for example out of memory. Such a negative return val...
Use After Free
libsepol is vulnerable to use after free. The vulnerability exists due to a lack of setting the set field of cilresetclasspermission to NULL instead of resetting the classpermission when freeing the pointer...
Denial Of Service (DoS)
Insufficient access control in the IntelR PROSet/Wireless WiFi Software driver before version 21.10 may allow an unauthenticated user to potentially enable denial of service via adjacent access...
Arbitrary Code Execution
ibjpeg-turbo is vulnerable to arbitrary code execution. A remote attacker could exploit this vulnerability by send a malformed jpeg file to the service and cause arbitrary code execution or denial of service...
Man-in-the-Middle (MitM)
amba:edge is vulnerable to man-in-the-middle MitM attacks.An attacker can force the client side SMB1 code to fall-back to plaintext or NTLM based authentication...
Denial Of Service (DoS)
busybox:edge is vulnerable to denial of service...
Denial Of Service (DoS)
jbcs-httpd24 is vulnerable to denial of service DoS attacks. An attacker is able to perform a buffer over-read in JIT when UTF is disabled, and \X or \R has more than one fixed quantifier, resulting in a system hang...
Privilege Escalation
chrome is vulnerable to privilege escalation. The vulnerability exists due to a type confusion in the v8 component in chrome...
Denial Of Service (DoS)
vim is vulnerable denial of service. The vulnerability exists due to Heap-based Buffer Overflow...