38838 matches found
Information Disclosure
firefox is vulnerable to information disclosure. The vulnerability exists as internal network hosts, and services running on the user's local machine, could have been probed by a malicious webpage...
Information Disclosure
openSSH is vulnerable to information disclosure. An attacker is able to conduct a man-in-the-middle attack to initial connections attempts due to a observable discrepancy in the algorithm negotiation...
Denial Of Service (DoS)
qemu is vulnerable to denial of service. An attacker is able to transmit a malicious RX descriptor to e1000ewritepackettoguest which induced an infinite loop, causing the qemu to crash resulting in denial of service...
Remote Code Execution (RCE)
openjfx is vulnerable to remote code execution RCE. The vulnerability exists due to the lack of proper validation of user-supplied data in HTML rendering in JavaFX which could result in a write past the end of an allocated data structure, allowing a malicious user to execute code in the context o...
Content Injection
mailman is vulnerable to content injection. An attacker is able to inject arbitrary content in GNU Mailman...
Denial Of Service (DoS)
libdbi-perl is vulnerable to denial of service. An untrusted pointer dereference allows a local attacker who is able to manipulate calls to dbddblogin6sv, cause a memory corruption and crash the application...
CVE-2020-16289
Artifex Software GhostScript is vulnerable to denial of service attacks. A remote attacker could cause buffer overflows in cifprintpage in devices/gdevcif.c via a crafted PDF file resulting in denial of service conditions...
Denial Of Service (DoS)
OpenEXR is vulnerabile to denial of service and arbitrary code execution. The vulnerability exist when an invalid write of size 1 in the bufferedReadPixels function could cause the application to crash or execute arbitrary code...
Privilege Escalation
linux kernel is vulnerable to privilege escalation. A local attacker with monitor perf events permissions is able to corrupt memory and obtain higher privileges...
Denial Of Service (DoS)
qemu is vulnerable to denial of service. The vulnerability exists through hw/usb/hcd-ohci.c due to an infinite loop when a TD list has a loop allowing an attacker to cause an application crash...
Privilege Escalation
linux kernel is vulnerable to privilege escalation. A Use-after-free vulnerability in fs/blockdev.callows local users to gain additional privileges or cause a denial of service by leveraging improper access to a certain error field...
Open Redirection
werkzeug is vulnerable to open redirection. An attacker is able to redirect a user to a malicious site via double slashes in the URL...
Remote Code Execution (RCE)
XStream is vulnerable to remote code execution RCE. The processed stream at unmarshalling time contains type information to recreate the formerly written objects, and new instances are created based on these type information. The vulnerability allows an attacker to manipulate the processed input...
Information Disclosure
Linux kernel is vulnerable to Information Disclosure. The vulnerability exists due to insufficient access control in the Linux kernel driver for some IntelR Processors. This flaw may allow an authenticated user to potentially enable information disclosure through local access...
Information Disclosure
hw is vulnerable to Information Disclosure. A flaw in Intel SGX via RAPL interface allows a local attacker to leak information...
Arbitrary File Overwrite
libreoffice is vulnerable to arbitrary file overwrite. Forms allowed to be submitted to any URI could result in local file overwrite...
Information Disclosure
libreoffice is vulnerable to information disclosure. The vulnerable exists due to retrieve remote resources which allows an attacker to gain access to information in the file system...
Use-after-free
kernel is vulnerable to use-after-free. It is possible because of a flaw in drivers/bluetooth/hcildisc.c...
Information Disclosure
OpenJDK is vulnerable to information disclosure. The vulnerability exists through a race condition in NIO Buffer boundary checks...
Information Disclosure
OpenJDK is vulnerable to information disclosure. The vulnerability exists through credentials sent over unencrypted LDAP connection...
CRLF Injection
python is vulnerable CRLF Injection. The vulnerability exists through the first argument of HTTPConnection.request...
Arbitrary Code Execution
kernel is vulnerable to arbitrary code execution. A user-after-free occurs in trymergefreespace in fs/btrfs/free-space-cache.c when mounting malicious btrfs filesystem image and subsequently making a syncfs system call. This could potentially lead to arbitrary code execution on the OS...
Information Disclosure
junit is vulnerable to Information Disclosure. The vulnerability exists through the behaviour of TemporaryFolder on UNIX-like systems, where the system's temporary directory is shared between all users on that system by default...
Heap Buffer Over-read
Simple DirectMedia Layer SDL is vulnerable to Heap Buffer Over-read. It is possible due to a flaw in InitMSADPCM in audio/SDLwave.c...
Arbitrary Code Execution
WebKitGTK+ is vulnerable to arbitrary code execution. Processing maliciously crafted web content may lead to arbitrary code execution...
Arbitrary Code Execution
webkitgtk4 is vulnerable to arbitrary code execution. The vulnerability exists through memory corruption...
Arbitrary Code Execution
webkitgtk is vulnerable to arbitrary code execution.The attacker execute the maliciously crafted web content to create multiple memory corruption issue lead to arbitrary code execution...
Arbitrary Code Execution
WebKitGTK+ is vulnerable to arbitrary code execution. It is possible due to a flaw in the port of the WebKit portable web rendering engine to the GTK+ platform...
Arbitrary Code Execution
WebKitGTK+ is arbitrary code execution. Processing maliciously crafted web content may lead to arbitrary code execution...
Clickjacking Attack
Node.js is vulnerable to clickjacking. An attacker can perform HTTP desync attacks and deliver malicious payloads to unsuspecting users. The payloads can be crafted by an attacker to hijack user sessions, poison cookies, perform clickjacking, and a multitude of other attacks depending on the...
Denial Of Service (DoS)
xen is vulnerable to denial of service DoS. An issue was discovered in Xen through 4.14.x. x86 PV guest kernels can experience denial of service via SYSENTER. The SYSENTER instruction leaves various state sanitization activities to software. One of Xen's sanitization paths injects a GP fault, and...
Denial Of Service (DoS)
graphicsmagick is vulnerable to denial of service DoS. The vulnerability exists through a NULL pointer dereference vulnerability in the function ReadCINEONImage in coders/cineon.c...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. The ifsdio.c module does not validate the allocworkqueue return value, resulting in a NULL pointer dereference causing a crash...
Denial Of Service (DoS)
graphicsmagick is vulnerable to denial of service DoS. The vulnerability exists through the length field in a header, which is passed into the ReadSUNImage function in coders/sun.c...
Arbitrary Code Execution
GraphicsMagick is vulnerable to arbitrary code execution. A NULL pointer dereference in the WriteMAPImage function in coders/map.c when processing a non-colormapped image allows an attacker to execute arbitrary code on the host OS. This is different vulnerability from CVE-2017-11638...
Denial Of Service (DoS)
linux is vulnerable to denial of service DoS. The vulnerability exists as aufs improperly managed inode reference counts in the vfsubdentryopen method...
Denial Of Service (DoS)
QEMU is vulnerable to denial of service. An integer overflow in the SM501 display driver implementation allows an attacker to crash the QEMU process in sm5012doperation in hw/display/sm501.c on the host. The vulnerability exists in the COPYAREA macro while handling MMIO write operations through t...
Denial Of Service (DoS)
graphicsmagick:xenial is vulnerable to denial of service DoS. The DrawImage function in magick/render.c in GraphicsMagick does not properly look for pop keywords that are associated with push keywords, which allows remote attackers to cause a denial of service negative strncpy and application cra...
Denial Of Service (DoS)
linux is vulnerable to denial of service DoS. The vulnerability exists through a memory leak in the adisupdatescanmodeburst function in drivers/iio/imu/adisbuffer.c which allows an attacker to crash the application via malicious input...
Information Disclosure
thunderbird is vulnerable to information disclosure. The vulnerability exists as the S/MIME specification allows a Cipher Block Chaining CBC malleability-gadget attack that can indirectly lead to plaintext exfiltration...
Denial Of Service (DoS)
qemu:xenial is vulnerable to denial of service DoS.The 1 v9fscreate and 2 v9fslcreate functions in hw/9pfs/9p.c in QEMU aka Quick Emulator allow local guest OS privileged users to cause a denial of service file descriptor or memory consumption via vectors related to an already in-use fid...
Denial Of Service (DoS)
Linux kernel is vulnerable to denial of service DoS. There is a race condition bug that can be caused by a malicious USB device in the USB character device driver layer, aka CID-303911cfc5b9. This affects drivers/usb/core/file.c...
Arbitrary Code Execution
libxml2.so is vulnerable to arbitrary code execution. An integer overflow occurs when comparing schema dates. This could potentially result in arbitrary code execution on the host OS...
Remote Code Execution (RCE)
Firefox is vulnerable to remote code execution RCE. If Firefox is installed to a user-writable directory, the Mozilla Maintenance Service would execute updater.exe from the install location with system privileges. Although the Mozilla Maintenance Service does ensure that updater.exe is signed by...
Denial Of Service (DoS)
struts2-core is vulnerable to denial of service DoS. The vulnerability exists as when the uploaded file, exposed through a getter, through an Action is set to read-only, causing the subsequent actions on the file to give an error...
Arbitrary Code Execution
WebKitGTK is vulnerable to arbitrary code execution. A memory corruption issue use-after-free allows an attacker to execute arbitrary code...
Arbitrary Code Execution
CVSis vulnerable to arbitrary code execution. When configured to use SSH for remote repositories, a remote attacker is able to execute arbitrary code via a repository URL with a crafted hostname, as demonstrated by -oProxyCommand=id;localhost:/bar...
Denial Of Service (DoS)
lib-smtp is vulnerable to denial of service. The library mishandles truncated UTF-8 data in command parameters, as demonstrated by the unauthenticated triggering of a submission-login infinite loop...
Denial Of Service (DoS)
Perl is vulnerable to denial of service DoS. It allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow...
Information Disclosure
Arm Mbed TLS is vulnerable to Information Disclosure. An attacker that can get precise enough side-channel measurements can recover the long-term ECDSA private key by 1 reconstructing the projective coordinate of the result of scalar multiplication by exploiting side channels in the conversion to...