38340 matches found
Spoofing Attack
kernel is vulnerable to spoofing attacks. A flaw in the CIFS handling of the mount option sec= that didn't enable integrity checking and didn't produce any error message...
Denial Of Service (DoS)
https is vulnerable to denial of service. A flaw was found in the modproxybalancer module. On sites where modproxybalancer was enabled, an authorized user could send a carefully crafted request that would cause the Apache child process handling that request to crash. This could lead to a denial o...
Arbitrary Code Execution
kernel is vulnerable to arbitrary code execution. A flaw was found in the IA32 system call emulation provided on AMD64 and Intel 64 platforms. An improperly validated 64-bit value could be stored in the %RAX register, which could trigger an out-of-bounds system call table access. An untrusted loc...
Arbitrary Code Execution
php is vulnerable to arbitrary code execution. A buffer overflow flaw was found in the PHP 'soap' extension, regarding the handling of an HTTP redirect response when using the SOAP client provided by this extension with an untrusted SOAP server...
DNS Spoofing
Mozilla Firefox is vulnerable to DNS spoofing. A flaw was found in the Firefox auto-update verification system. An attacker who has the ability to spoof a victim's DNS could get Firefox to download and install malicious code. In order to exploit this issue an attacker would also need to get a...
Denial Of Service (DoS)
bind is vulnerable to denial of service DoS. The vulnerability exists as a flaw was found in the way BIND processed certain DNS query responses. On servers that had enabled DNSSEC validation, this could allow a remote attacker to cause a denial of service...
Denial Of Service (DoS)
Mozilla is vulnerable to denial of service. The vulnerability exists through a use-after-free issue when handling a ReadableStream...
Use-after-free
Mozilla Firefox is vulnerable to use-after-free in cubeb during stream destruction...
SQL Injection
django is vulnerable to SQL injection. Lack of adequate validation and sanitization of the tolerance parameter allows an attacker to inject and execute arbitrary SQL statements in the database...
Authorization Bypass
node is vulnerable to authorization bypass. Trailing OWS from header values are not stripped, potentially allowing a remote attacker to bypass access controls...
Denial Of Service (DoS)
OpenJDK is vulnerable to denial of service DoS. The vulnerability exists due to an incorrect exception during deserialization in BeanContextSupport...
Denial Of Service (DoS)
Mozilla firefox is vulnerable to denial of service. The vulnerability exists through a use-after-free error in worker destruction...
Remote Code Execution
jackson-databind is vulnerable to remote code execution. The application does not block the xalan classes during deserialization, which would allow a remote attacker to leverage the vulnerability to execute arbitrary code...
Shell Code Execution
libunbound.so is vulnerable to shell code execution. The attack is possible due to not proper handling of a malicious IPSECKEY answer in the ipsec. The vulnerability can only triggered when the following conditions are met: 1 compiled the library with --enable-ipsecmod support, and ipsecmod is...
Denial Of Service (DoS)
openjdk is vulnerable to denial of service. A NULL pointer dereference in DrawGlyphList allows an attacker to crash the application...
Information Disclosure
ansible is vulnerable to information disclosure. The attack is possible due to an incomplete fix of CVE-2019-10206 which does not perform safe type conversions using AnsibleUnsafeBytes and AnsibleUnsafeBytes classes, allowing CLI provided passwords being incorrectly templated when using totext,...
Remote Code Execution (RCE)
jackson-databind is vulnerable to remote code execution. The vulnerability exists as it does not stop classes from the commons-dbcp package from being used as deserialization gadgets...
Denial Of Service (DoS)
nodejs is vulnerable to denial of service. A remote attacker is able to crash the application by flooding the server with empty frames which results in excessive resource consumption...
Denial Of Service (DoS)
QEMU is vulnerable to denial of service DoS. The vulnerability is due to integer overflow leading to buffer overflow...
Arbitrary Code Execution
libcurl.so is vulnerable to arbitrary code execution. A double-free occurs when a malicious server claims to send a large block that results in the realloc function call to fail. The vulnerability exists when curl uses kerberos over FTP, and can be exploited by an attacker to execute arbitrary co...
Sandbox Restrictions Bypass
jenkins-plugin-script-security isv vulnerable to Sandbox bypass. This is possible through method pointer expressions in Script Security Plugin...
Denial Of Service (DoS)
advancecomp is vulnerable to denial of service DoS. The vulnerability exists in function advpngunfilter8 in lib/png.c...
Arbitrary File Overwrite
keepalived is vulnerable to arbitrary file overwrite. The vulnerability exists as there is an improper pathname validation that allows for overwrite of arbitrary filenames via symlinks...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists through a buffer overflow in hidpprocessreport...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists through a NULL pointer dereference in lookupslow function...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists through a NULL pointer dereference in xfsdashrinkinode function...
Arbitrary Code Execution
poppler is vulnerable to arbitrary code execution. A heap-based buffer underwrite in the function ImageStream::getLine in Stream.cc allows an attacker to crash the application or potentially execute arbitrary code on the system...
Denial Of Service (DoS)
libpoppler.so is vulnerable to denial of service DoS. The attack exists because it does not prevent having integer overflow in the function SplashOutputDev::tilingPatternFill at SplashOutputDev.cc...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists through a use-after-free in drivers/char/ipmi/ipmisiintf.c, ipmisimemio.c, ipmisiportio.c...
Denial Of Service (DoS)
Django is vulnerable to denial of service DoS. It does not properly handle HTML entities in the function striptags, causing excessive HTMLParser recursions...
XML Entity Expansion (XEE)
c3p0 is vulnerable to XML entity expansion XEE. Missing protections against recursive entity expansion when loading configuration allows remote attackers to exploit the billion laughs attack by loading malicious XML configurations...
Cross-Site Scripting (XSS)
Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the RPM packages for Red Hat OpenShift Container Platform 3.11.117. See the following advisory for the container...
Arbitrary Code Execution
libpoppler.so is vulnerable to arbitrary code execution. A heap-based buffer overflow in Splash::blitTransparent in splash/Splash.cc allows an attacker to execute arbitrary code...
Open Redirection
spring-security-oauth2 is vulnerable to open redirection. A remote attacker is able to modify the redirecturi parameter and redirect users to a malicious site to steal confidential information such as authorization code, username and password...
Arbitrary Code Execution
IBM Java SE version 8 is vulnerable to arbitrary code execution fixed in 7u221 and 8u211...
User-After-Free
Linux kernel is vulnerable to use-after-free attacks. This is because the way the Linux kernel's KVM hypervisor emulates a preemption timer for L2 guests when nested =1 virtualization is enabled. An attacker could use this flaw to crash the host kernel resulting in a denial of service or...
Denial Of Service (DoS)
The java openjdk is vulnerable to denial of service DoS. It is possible due to a slow conversion of BigDecimal to long...
Denial Of Service (DoS)
Oracle Java SE is vulnerable to denial of service DoS attacks. The vulnerability exists in Deployment component in the Java SE component of Oracle Java SE. An unauthenticated attacker with network access via multiple protocols could cause denial of service condition with the aid of human...
Denial Of Service (DoS)
.NET Core and ASP.NET Core is vulnerable to denial of service. The vulnerability exists due to the improper handling of web requests. A remote attacker could issue a malicious web request to exploit crash the process...
Arbitrary Code Execution
Postgresql is vulnerable to arbitrary code execution. This is because a Postgresql user could modify the behavior of a query for other users. A malicious user could insert a trojan-horse function that, when executed by a superuser, grants escalated privileges to the malicious user...
Denial Of Service (DoS)
Oracle MySQL is vulnerable to denial of service attacks. A remote authenticated attacker could exploit a flaw in the InnoDB component to cause denial of service conditions...
Denial Of Service (DoS)
Apache HTTP Server is vulnerable to denial of service DoS attacks. The vulnerability is due to an out of bound access after a size limit is reached by reading the HTTP header. An attacker could cause an application crash via a specially crafted request resulting in a complete denial of service...
Buffer Overflow
curl is vulnerable to buffer overflow vulnerability. The vulnerability occurs when doing a large floating point output in libcurl's implementation of the printf functions. The application accepts input format strings without doing a necessary input filtering. A remote attacker could send a format...
Denial Of Service (DoS)
Linux kernel is vulnerable to denial of serviceDoS attacks. This occurs when the ioti driver is loaded, a local unprivileged attacker could request incorrect high transfer speed in the changeportsettings in the drivers/usb/serial/ioti.c so that the divisor value becomes zero and causes a system...
Privilege Escalation
cephx is vulnerable to privilege escalation attacks. This is because cephx authentication protocol does not verify ceph clients correctly. An attacker who has access to the ceph cluster network is able to sniff packets on the network...
Out-Of-Bounds Read
PHP is vulnerable to out-of-bounds reads. The vulnerability exists in matchat during regular expression searching because of a logical error involving order of validation and access in matchat...
Heap-Based Buffer Overflow
PHP is vulnerable to heap-based buffer overflow vulnerability. The vulnerability exists in the ext/mysqlnd/mysqlndwireprotocol.c in PHP. Remote MySQL servers could cause a denial of service or possibly have unspecified other impact via crafted field metadata...
Denial Of Service (DoS)
Oracle MySQL is vulnerable to denial of serviceDoS attacks. A remote authenticated user could exploit a flaw in the DDL component which leads to cause a hang or frequently repeatable crash complete DoS...
Denial Of Service (DoS)
QEMU is vulnerable to denial of service attacks. Function cpuphysicalmemorysnapshotgetdirty of the component VGA Display Update allows remote authenticated attackers via an assert failure issue in the VGA display emulator...
Arbitrary Code Execution
GNU C Library is vulnerable to arbitrary code execution. A remote unauthenticated attacker could cause a buffer overflow during unescaping of user names with the operator resulting in denial of service conditions and code execution attacks...