38790 matches found
Denial Of Service (DoS)
libtiff.so is vulnerable to Denial Of Service DoS. The vulnerability exists due to an out-of-bounds read causes by tiffcp in tiffcp.c which allows an attacker to cause an application crash via a crafted tiff file...
Out-of-Bounds Read
linux is vulnerable to Out-of-Bounds Read. This affects the function fibnhmatch of the file net/ipv4/fibsemantics.c of the component IPv4 Handler, leading to out-of-bounds read which results in attackers getting access to restricted data...
Privilege Escalation
firefox is vulnerable to Privilege Escalation. An attacker is able to change their resource allocations, promote containers to privileged mode, or potentially add ssh authorized keys to a remote shell on the target machine by creating new files on the host system. In order for an attacker to...
Privilege Escalation
jeecg-boot-base-core is vulnerable to Privilege Escalation. The vulnerability exists due to the lack of permission checks in the library, which allows an attacker to gain escalated privileges and view sensitive information such as email, phone and enumerate usernames via API URI:...
Denial Of Service (DoS)
net-snmp is vulnerable to Denial Of ServiceDoS. The vulnerability exists in handleipDefaultTTL in agent/mibgroup/ip-mib/ipscalars.c via a NULL Pointer Exception bug that which could be used by a remote attacker to cause the instance to crash via a crafted UDP packet...
Arbitrary Code Execution
webkitgtk is vulnerable to arbitrary code execution. Processing maliciously crafted web content may lead to arbitrary code execution due to improper input validation leading to memory corruption causing the application to halt, crash, or arbitrary code execution...
Reverse Tabnabbing
texthelpers is vulnerable to reverse tabnabbing. The vulnerability exists in multiple functions in translation.rb due to lack of proper regular expression which allows an attacker to use web links to untrusted targets with window.opener access...
Denial Of Service (DoS)
loofah is vulnerable to denial of service. The vulnerability exists due to uncontrolled recursion used in the CDATA sections of the library, which allows an attacker to cause an application crash through malicious input...
Remote Code Execution (RCE)
simple-git is vulnerable to remote code execution.The vulnerability exists in the clone function of git.js because of enabling the ext transport protocol which allows an attacker to inject and execute arbitrary codes into the system. This is an incomplete fix of CVE-2022-24066...
Use After Free
linux-oracle, linux-azure, linux-aws, linux-gcp, linux-kvm, linux-dell300x is vulnerable to free of use. The vulnerability exists in drivers/scsi/stex.c because it allows local users to obtain sensitive information from kernel memory because stexqueuecommandlck lacks a memset...
Privilege Escalation
multipath-tools is vulnerable to Privilege Escalation. The vulnerability exists due to incorrect symlink handling which allows an attacker to do file writes outside of the /dev/shm directory...
Regular Expression Denial Of Service (ReDoS)
minimatch is vulnerable to Regular Expression Denial Of Service ReDoS. The vulnerability exists when calling the braceExpand function of minimatch.js with specific arguments, resulting in a denial of service...
Use After Free
chromium is vulnerable to use-after-free. The vulnerability exists in Skia in Google Chrome which allows a remote attacker to potentially exploit heap corruption via a crafted HTML page...
Privilege Escalation
github.com/grafana/grafana, is vulnerable to privilege escalation. The vulnerability exists due to the race condition in the authentication middlewares logic, allowing an attacker to query an administration endpoint under a heavy load...
Information Disclosure
rh-mysql80-mysql is vulnerable to information disclosure. The vulnerability exists in the Server: Logging component, allowing an attacker to access critical data or complete access to all MySQL Server accessible data through the multiple protocol...
Information Disclosure
samba is vulnerable to information disclosure. The vulnerability exists because the symlinks in user space with the intent doesn't properly check symlink targets to stay within the share that was configured by the administrator which allows an attacker to get access to all of the server's file...
Weak Encryption
curl has weak encryption implementation. The vulnerability exists due to lack of conditional checks in HSTS which allows an attacker to bypass it if the host name in the given URL uses IDN characters...
Cross-Site Scripting (XSS)
twisted is vulnerable to cross-site scripting. The vulnerability is due to the function getResourceForRequest in vhost.py. When the host header does not match the configured twisted.web.vhost.NameVirtualHost, the 404 page will render the header allowing an attacker to inject and execute HTML and...
Information Disclosure
Batik bridge is vulnerable to information disclosure. The vulnerability exists in the function of DefaultScriptSecurity because the jars get loaded by default which allows an attacker to execute arbitrary codes into the system...
Prototype Pollution
uglify-js is vulnerable to prototype pollution. The vulnerability exists in DEFNODE function of ast.js via the name variable which allows an attacker to inject malicious property resulting in prototype pollution...
Authentication Bypass
grafana is vulnerable to Authentication Bypass. The vulnerability exists due to the GetUserByLogin function in user.go conflict in the login field; An attacker can register into the system from another user's email address as a username blocking a user's login attempt...
Arbitrary Code Execution
chromium is vulnerable to arbitrary code execution. The vulnerability exists due to use after free in logging which allows an attacker to inject and execute malicious codes in to the system...
Denial Of Service (DoS)
strongSwan is vulnerable to denial of service. The vulnerability exists because strongSwan incorrectly handles certain OCSP URIs and CRL distribution points CDP in certificates which allows a remote attacker to initiate IKESAs and send crafted certificates that contain URIs pointing to servers...
Arbitrary File Write
postgresql-jdbc is vulnerable to arbitrary file writes. The vulnerability exists because the connection properties for configuring a pgjdbc connection are exposed which allows an attacker to specify arbitrary connection properties could lead to a compromise of a system...
Denial Of Service (DoS)
com.fasterxml.jackson.core:jackson-databind is vulnerable to Denial Of Service DoS. The vulnerability exists in deserializeWrappedValue function in StdDeserializer.java, which allows an attacker to cause denial of service conditions via a maliciously crafted input, due to the resource exhaustion...
Remote Code Execution (RCE)
dompdf/dompdf is vulnerable to remote code execution. The vulnerability exists because the registerFont function of FontMetrics.php does not properly halt the font registration when URI validation fails, such as through the @font-face rule, allowing an attacker to inject and execute maliciously...
Remote Code Execution (RCE)
d8s-urls is vulnerable to remote code execution. The vulnerability exists because the library does not properly handle the package upload mechanism, allowing an attacker to inject and execute malicious packages...
Remote Code Execution (RCE)
vim is vulnerable to remote code execution. The vulnerability exists due to a Use After Free which allowing an attacker to inject maliciously crafted script into the system...
Out-of-bounds Write
vim is vulnerable to out-of-bounds write. The vulnerability exists due to invalid memory access after diff buffer manipulations in 1diffmarkadjusttp function in diff.c...
Information Disclosure
microsoft.aspnetcore.app is vulnerable to information disclosure. The vulnerability exists in some of the .NET Core packages which allows an attacker to gain access to privileged information...
Denial Of Service (DoS)
vim is vulnerable to denial of service. The vulnerability exists in vimregsubboth function of regexp.c due to substitute overwrites allocated buffer which allows an attacker to crash the application via malicious input...
Privilege Escalation
ceph is vulnerable to privilege escalation. The vulnerability exists due to a bug in the volumes plugin in Ceph Manager allowing an attacker to read/write any manilla share or entire file system...
Cross-site Scripting (XSS)
moodle/moodle is vulnerable to cross-site scripting. The vulnerability exists in userreporttracks.php due to the lack of sanitization in user-supplied data, allowing an attacker to inject and execute malicious javascript or cause blind ssrf attacks...
Command Injection
python is vulnerable to command injection. The vulnerability exist due to mailcap module does not add escape characters into commands discovered in the system mailcap file. This may allow attackers to inject shell commands into applications that call mailcap.findmatch with untrusted input...
Information Disclosure
xen is vulnerable to Information Disclosure. The vulnerability exists due to an aliases in the branch predictor causing some AMD processors to predict the wrong branch type...
Privilege Escalation
git is vulnerable to privilege escalation. The vulnerability exists due to a lack of validation of user inputs which allows an attacker to access the git repository perform unauthorized actions...
DLL Hijacking
node is vulnerable to dll hijacking. The vulnerability exists due to the default open ssl configuration which allows an attacker to exploit the vulnerability by placing a malicious dll file on an affected system...
Sensitive Information Disclosure
Xen is vulnerable to Sensitive Information Disclosure. Linux block table does not zero memory regions before sharing with the backend, leading to information disclosure. Additionally, the grant table only shares 4k pages, leading to unrelated data from different backends residing in the same page...
Denial Of Service (DoS)
Jetty-IO is vulnerable to denial of service. The vulnerability exists because the buffer utilization of SslConnection is not properly handled which allows an attacker to cause a memory leak leading to an application crash...
Denial Of Service (DoS)
libtiff.so is vulnerable to denial of service. The vulnerability exists because of converting double to uint32t with uint32t when divided by zero which allows an attacker to cause an application crash via a crafted file...
Type Confusion
chromium is vulnerable to type confusion. A remote attacker is able to cause type confusion attacks through heap corruption in v8 module via a crafted HTML page...
Denial Of Service (DoS)
busybox is vulnerable denial of service. The vulnerability exists due to a NULL pointer dereference in Busybox's man applet leads to denial of service when a section name is supplied but no page argument is given...
Information Disclosure
intel-microcode is vulnerable to information disclosure. Incomplete cleanup of microarchitectural fill buffers allow an authenticated attacker to potentially enable information disclosure via local access...
Information Disclosure
@finastra/nestjs-proxy is vulnerable to information disclosure. The vulnerability exists in the ProxyService function due to a lack of sanitization in the authorization header which allows an unauthorized user to access sensitive information in the system...
Use-After-Free
vim is vulnerable to Use After Free. The vulnerability exists due to a memory corruption in the system which allows an attacker to cause an application crash...
Regular Expression Denial Of Service (ReDoS)
semver-regex is vulnerable to regular expression denial of service. The vulnerability exists in semverRegex function in index.js due to improper use of regular expressions which allows an attacker to cause a ReDos...
Cross-site Scripting (XSS)
spip is vulnerable to cross-site scripting. An attacker can inject and execute malicious javascript through the spip.php...
Heap-based Buffer Overflow
pillow is vulnerable to a heap buffer overflow. The vulnerability exists in the ImagingTgaRleDecode of TgaRleDecode.c due to a lack of input validation which allows an attacker to inject maliciously crafted tga image and crash the system...
Authentication Bypass
Opencast-ingest-service-impl is vulnerable to authentication bypass. The vulnerability exists in addContentToRepo function in IngestServiceImpl.java because opencast doesn't properly restrict users when passing URLs which allows an attacker to gain access and bypass organizational barriers...
Denial Of Service (DoS)
mariadb is vulnerable to denial of service. An attacker can crash the application through the use-after-free in the component mywildcmp8bitimpl at ctype-simple.c...