Lucene search
+L
VeracodeMost viewed

38790 matches found

Veracode
Veracode
•added 2022/10/07 10:40 a.m.•38 views

Denial Of Service (DoS)

strongSwan is vulnerable to denial of service. The vulnerability exists because strongSwan incorrectly handles certain OCSP URIs and CRL distribution points CDP in certificates which allows a remote attacker to initiate IKESAs and send crafted certificates that contain URIs pointing to servers...

7.5CVSS7.2AI score0.01679EPSS
SaveExploits0References6Affected Software4
Veracode
Veracode
•added 2022/10/07 5:17 a.m.•38 views

Denial Of Service (DoS)

kernel is vulnerable to denial of service. The vulnerability exists in route4change in the net/sched/clsroute.c filter implementation in the Linux kernel. This flaw allows a local user to crash the system and possibly lead to a local privilege escalation problem...

7.8CVSS4AI score0.05871EPSS
SaveExploits7References18Affected Software2
Veracode
Veracode
•added 2022/10/05 10:31 p.m.•38 views

Arbitrary File Write

postgresql-jdbc is vulnerable to arbitrary file writes. The vulnerability exists because the connection properties for configuring a pgjdbc connection are exposed which allows an attacker to specify arbitrary connection properties could lead to a compromise of a system...

9.8CVSS8.9AI score0.02999EPSS
SaveExploits0References10Affected Software1
Veracode
Veracode
•added 2022/09/27 5:16 a.m.•38 views

Remote Code Execution (RCE)

dompdf/dompdf is vulnerable to remote code execution. The vulnerability exists because the registerFont function of FontMetrics.php does not properly halt the font registration when URI validation fails, such as through the @font-face rule, allowing an attacker to inject and execute maliciously...

7.5CVSS7.9AI score0.04421EPSS
SaveExploits3References6Affected Software1
Veracode
Veracode
•added 2022/08/29 11:47 p.m.•38 views

Remote Code Execution (RCE)

vim is vulnerable to remote code execution. The vulnerability exists due to a Use After Free which allowing an attacker to inject maliciously crafted script into the system...

7.8CVSS8AI score0.00532EPSS
SaveExploits1References7Affected Software1
Veracode
Veracode
•added 2022/08/12 7:02 p.m.•38 views

Out-of-bounds Write

vim is vulnerable to out-of-bounds write. The vulnerability exists due to invalid memory access after diff buffer manipulations in 1diffmarkadjusttp function in diff.c...

7.8CVSS7.6AI score0.01355EPSS
SaveExploits1References9Affected Software1
Veracode
Veracode
•added 2022/08/12 7:49 a.m.•38 views

Information Disclosure

microsoft.aspnetcore.app is vulnerable to information disclosure. The vulnerability exists in some of the .NET Core packages which allows an attacker to gain access to privileged information...

5.9CVSS5.9AI score0.02274EPSS
SaveExploits0References9Affected Software16
Veracode
Veracode
•added 2022/08/10 1:56 a.m.•38 views

Denial Of Service (DoS)

vim is vulnerable to denial of service. The vulnerability exists in vimregsubboth function of regexp.c due to substitute overwrites allocated buffer which allows an attacker to crash the application via malicious input...

7.8CVSS7.5AI score0.01542EPSS
SaveExploits1References15Affected Software1
Veracode
Veracode
•added 2022/08/07 4:58 p.m.•38 views

Privilege Escalation

ceph is vulnerable to privilege escalation. The vulnerability exists due to a bug in the volumes plugin in Ceph Manager allowing an attacker to read/write any manilla share or entire file system...

9.1CVSS8.6AI score0.01133EPSS
SaveExploits0References6Affected Software2
Veracode
Veracode
•added 2022/07/26 3:32 a.m.•38 views

Cross-site Scripting (XSS)

moodle/moodle is vulnerable to cross-site scripting. The vulnerability exists in userreporttracks.php due to the lack of sanitization in user-supplied data, allowing an attacker to inject and execute malicious javascript or cause blind ssrf attacks...

6.1CVSS7.5AI score0.01024EPSS
SaveExploits0References12Affected Software1
Veracode
Veracode
•added 2022/07/15 4:59 p.m.•38 views

Command Injection

python is vulnerable to command injection. The vulnerability exist due to mailcap module does not add escape characters into commands discovered in the system mailcap file. This may allow attackers to inject shell commands into applications that call mailcap.findmatch with untrusted input...

7.6CVSS8.2AI score0.07017EPSS
SaveExploits1References52Affected Software8
Veracode
Veracode
•added 2022/07/15 1:44 a.m.•38 views

Information Disclosure

xen is vulnerable to Information Disclosure. The vulnerability exists due to an aliases in the branch predictor causing some AMD processors to predict the wrong branch type...

6.5CVSS6.5AI score0.00776EPSS
SaveExploits0References18Affected Software3
Veracode
Veracode
•added 2022/07/14 5:02 p.m.•38 views

Privilege Escalation

git is vulnerable to privilege escalation. The vulnerability exists due to a lack of validation of user inputs which allows an attacker to access the git repository perform unauthorized actions...

7.8CVSS7.5AI score0.00444EPSS
SaveExploits0References27Affected Software5
Veracode
Veracode
•added 2022/07/12 6:12 a.m.•38 views

Sensitive Information Disclosure

Xen is vulnerable to Sensitive Information Disclosure. Linux block table does not zero memory regions before sharing with the backend, leading to information disclosure. Additionally, the grant table only shares 4k pages, leading to unrelated data from different backends residing in the same page...

7.1CVSS7.1AI score0.00326EPSS
SaveExploits0References15Affected Software1
Veracode
Veracode
•added 2022/07/08 7:05 a.m.•38 views

Denial Of Service (DoS)

Jetty-IO is vulnerable to denial of service. The vulnerability exists because the buffer utilization of SslConnection is not properly handled which allows an attacker to cause a memory leak leading to an application crash...

7.5CVSS7.2AI score0.02067EPSS
SaveExploits1References5Affected Software1
Veracode
Veracode
•added 2022/07/01 9:27 a.m.•38 views

Denial Of Service (DoS)

libtiff.so is vulnerable to denial of service. The vulnerability exists because of converting double to uint32t with uint32t when divided by zero which allows an attacker to cause an application crash via a crafted file...

6.5CVSS6.3AI score0.01239EPSS
SaveExploits1References13Affected Software4
Veracode
Veracode
•added 2022/06/28 9:38 a.m.•38 views

Regular Expression Denial Of Service (ReDoS)

scaffold-helper is vulnerable to regular expression denial of service ReDoS attacks. A remote attacker is able to trigger denial of service conditions due to insufficient checks in getProcessedPath or getDynamicFilename functions. The vulnerability is exploited via copying crafted invalid files...

7.5CVSS4.2AI score0.01024EPSS
SaveExploits1References2Affected Software1
Veracode
Veracode
•added 2022/06/26 4:57 p.m.•38 views

Type Confusion

chromium is vulnerable to type confusion. A remote attacker is able to cause type confusion attacks through heap corruption in v8 module via a crafted HTML page...

8.8CVSS8.3AI score0.01006EPSS
SaveExploits0References8Affected Software3
Veracode
Veracode
•added 2022/06/16 9:03 p.m.•38 views

Information Disclosure

intel-microcode is vulnerable to information disclosure. Incomplete cleanup of microarchitectural fill buffers allow an authenticated attacker to potentially enable information disclosure via local access...

5.5CVSS6AI score0.06451EPSS
SaveExploits0References18Affected Software8
Veracode
Veracode
•added 2022/06/16 7:52 a.m.•38 views

Information Disclosure

@finastra/nestjs-proxy is vulnerable to information disclosure. The vulnerability exists in the ProxyService function due to a lack of sanitization in the authorization header which allows an unauthorized user to access sensitive information in the system...

7.5CVSS6.8AI score0.00616EPSS
SaveExploits0References3Affected Software2
Veracode
Veracode
•added 2022/06/14 1:42 p.m.•38 views

Use-After-Free

vim is vulnerable to Use After Free. The vulnerability exists due to a memory corruption in the system which allows an attacker to cause an application crash...

7.8CVSS7.6AI score0.01412EPSS
SaveExploits1References16Affected Software1
Veracode
Veracode
•added 2022/06/03 9:04 a.m.•38 views

Regular Expression Denial Of Service (ReDoS)

semver-regex is vulnerable to regular expression denial of service. The vulnerability exists in semverRegex function in index.js due to improper use of regular expressions which allows an attacker to cause a ReDos...

7.5CVSS4.3AI score0.01576EPSS
SaveExploits1References3Affected Software1
Veracode
Veracode
•added 2022/05/25 6:11 a.m.•38 views

Authentication Bypass

Opencast-ingest-service-impl is vulnerable to authentication bypass. The vulnerability exists in addContentToRepo function in IngestServiceImpl.java because opencast doesn't properly restrict users when passing URLs which allows an attacker to gain access and bypass organizational barriers...

5.4CVSS5.9AI score0.00585EPSS
SaveExploits0References2Affected Software1
Veracode
Veracode
•added 2022/05/25 5:02 a.m.•38 views

Denial Of Service (DoS)

mariadb is vulnerable to denial of service. An attacker can crash the application through the use-after-free in the component mywildcmp8bitimpl at ctype-simple.c...

7.5CVSS7.3AI score0.01564EPSS
SaveExploits1References8Affected Software2
Veracode
Veracode
•added 2022/05/20 6:19 a.m.•38 views

Information Disclosure

strapi is vulnerable to information disclosure. A remote authenticated attacker with access to the Strapi admin panel is able to gain access to private and sensitive data, such as email and password reset tokens and compromise other users’ accounts by successfully invoking the password reset...

8.8CVSS8.2AI score0.0145EPSS
SaveExploits0References4Affected Software1
Veracode
Veracode
•added 2022/05/16 4:19 p.m.•38 views

Denial Of Service (DoS)

chromium is vulnerable to denial of service. The vulnerability exists due to use after free in Performance APIs which allows an attacker to crash the application via malicious input...

8.8CVSS8.3AI score0.00842EPSS
SaveExploits0References4Affected Software2
Veracode
Veracode
•added 2022/05/16 4:16 p.m.•38 views

Use After Free

chromium is vulnerable to use after free. The vulnerability exists in ANGLE which causes a memory corruption allowing a malicious attacker to cause a denial of service...

8.8CVSS8.2AI score0.00856EPSS
SaveExploits0References4Affected Software2
Veracode
Veracode
•added 2022/05/04 11:57 a.m.•38 views

SQL Injection

mediawiki/core is vulnerable to sql injection. The vulnerability exists due to insecure quote handling in the getAllOrValues function in SDAppliedFilter.php allows an attacker to inject arbitrary queries...

9.8CVSS3.2AI score0.16802EPSS
SaveExploits1References4Affected Software1
Veracode
Veracode
•added 2022/04/30 4:23 p.m.•38 views

Information Disclosure

curl is vulnerable to information disclosure. The vulnerability exists due to an Auth/cookie leak on redirect to the same host but another port number...

6.5CVSS0.4AI score0.03777EPSS
SaveExploits1References10Affected Software4
Veracode
Veracode
•added 2022/04/28 2:01 p.m.•38 views

Denial Of Service (DoS)

chrome is vulnerable to denial of service. The vulnerability exists due to an Out of bounds memory access in UI Shelf which allows an attacker to cause an application crash...

8.8CVSS4.2AI score0.00992EPSS
SaveExploits1References4Affected Software2
Veracode
Veracode
•added 2022/04/27 7:21 p.m.•38 views

Denial Of Service (DoS)

linux-gkeop is vulnerable to denial of service. A flaw null pointer dereference in the Linux kernel UDF file system functionality was found in the way user triggers udffilewriteiter function for the malicious UDF image. A local user could use this flaw to crash the system...

5.5CVSS3.3AI score0.00497EPSS
SaveExploits1References10Affected Software4
Veracode
Veracode
•added 2022/04/27 6:59 p.m.•38 views

Denial Of Service (DoS)

Linux is vulnerable to denial of service. The vulnerability exists due to a memory leak in yamsiocdevprivate in drivers/net/hamradio/yam.c...

5.5CVSS2.6AI score0.00428EPSS
SaveExploits0References6Affected Software2
Veracode
Veracode
•added 2022/04/25 5:01 p.m.•38 views

Privilege Escalation

virtualbox is vulnerable to privilege escalation. The vulnerability exists due to improper access control which allows an attacker to access, insert, update and delete critical data in oracle vm...

3.8CVSS4.4AI score0.00354EPSS
SaveExploits0References3Affected Software1
Veracode
Veracode
•added 2022/04/25 8:12 a.m.•39 views

Insecure Defaults

github.com/cri-o/cri-o is vulnerable to insecure defaults. The vulnerability exists because its containers started incorrectly with non-empty inheritable Linux process capabilities, allowing an unprivileged user to gain inheritable file capabilities up to the container's bounding set...

5.3CVSS4.7AI score0.00247EPSS
SaveExploits0References3Affected Software2
Veracode
Veracode
•added 2022/04/22 5:18 a.m.•38 views

SQL Injection

blazer is vulnerable to sql injection attacks. The library does not properly sanitize user input which allows an attacker to inject malicious sql queries and modify system data...

7.5CVSS4.8AI score0.00878EPSS
SaveExploits0References3Affected Software1
Veracode
Veracode
•added 2022/04/13 2:34 p.m.•38 views

Denial Of Service (DoS)

subversion is vulnerable to denial of service. The vulnerability exists due to a use after free memory corruption...

7.5CVSS3.5AI score0.09473EPSS
SaveExploits0References14Affected Software1
Veracode
Veracode
•added 2022/04/13 10:14 a.m.•38 views

Denial Of Service (DoS)

libxml2 is vulnerable to denial of service. The vulnerability exists due to an integer overflow in xmlmemory.c...

8.8CVSS3.7AI score0.02713EPSS
SaveExploits0References12Affected Software1
Veracode
Veracode
•added 2022/04/12 4:29 a.m.•38 views

Denial Of Service (DoS)

nokogiri is vulnerable to Denial Of Service DoS. SAX parser's inefficient entity handling for regular expressions causes excessive backtracking when a malicious documents are parsed which allows an attacker to cause an application crash...

7.5CVSS5.1AI score0.03519EPSS
SaveExploits0References14Affected Software3
Veracode
Veracode
•added 2022/04/04 7:50 a.m.•38 views

Remote Code Execution (RCE)

Dompdf is vulnerable to remote code execution. The vulnerability exists due to a lack of sanitization of the font type via a .php file in the src:url field of an @font-face Cascading Style Sheets CSS statement within an HTML input file...

9.8CVSS1.5AI score0.82438EPSS
SaveExploits8References5Affected Software1
Veracode
Veracode
•added 2022/03/31 6:41 a.m.•38 views

Cross-Site Scripting (XSS)

Keycloak Core is vulnerable to reflected cross-site scripting. The vulnerability exists via the POST http requests due to lack of escaping which allows a malicious attacker to inject and execute arbitrary javascript...

6.1CVSS1.9AI score0.37246EPSS
SaveExploits3References5Affected Software1
Veracode
Veracode
•added 2022/03/31 4:16 a.m.•38 views

HTTP Request Smuggling

puma is vulnerable to HTTP request smuggling. When using the library behind a proxy that does not properly validate the incoming HTTP requests with the RFC7230 standard, puma and the frontend proxy contradict on where one request starts and where it ends, resulting in requests to be smuggled via...

9.1CVSS1AI score0.02191EPSS
SaveExploits0References13Affected Software3
Veracode
Veracode
•added 2022/03/25 1:26 a.m.•38 views

Use After Free

chrome is vulnerable to use after free. The vulnerability exists due to a memory corruption in the Browser UI which allows an attacker to cause an application crash...

9.6CVSS3.1AI score0.00891EPSS
SaveExploits1References4Affected Software2
Veracode
Veracode
•added 2022/03/22 7:58 a.m.•38 views

Information Exposure

topthink/think is vulnerable to information exposure. The vulnerability exists due to a lack of input validation which allows an attacker to access sensitive informations in the system...

7.5CVSS3AI score0.04748EPSS
SaveExploits1References2Affected Software1
Veracode
Veracode
•added 2022/03/21 5:51 a.m.•38 views

Remote Code Execution (RCE)

github.com/cri-o/cri-o is vulnerable to remote code execution. The vulnerability exists due to a lack of sanitization of the kernel.corepattern allowing an attacker to achieve container escape and inject maliciously crafted script into the system...

8.8CVSS4AI score0.19046EPSS
SaveExploits0References3Affected Software2
Veracode
Veracode
•added 2022/03/13 12:42 a.m.•38 views

Denial Of Service (DoS)

389-ds-base is vulnerable to denial of service. The vulnerability exists due to a double-free found in the way 389-ds-base handles virtual attributes context in persistent searches allowing an attacker to crash the system by sending a series of search requests...

7.5CVSS4.5AI score0.02014EPSS
SaveExploits0References4Affected Software1
Veracode
Veracode
•added 2022/03/12 6:50 a.m.•38 views

Buffer Overflow

vim is vulnerable to buffer overflow. The vulnerability exists due to the use of Out-of-range Pointer Offset...

8.8CVSS3.9AI score0.01622EPSS
SaveExploits1References13Affected Software1
Veracode
Veracode
•added 2022/03/08 5:02 p.m.•38 views

Denial Of Service (DoS)

php is vulnerable to denial of service. The vulnerability exists due to a lack of sanitization of changes to string objects in the zendstringextend function in Zend/zendstring.h...

9.8CVSS2.6AI score0.07191EPSS
SaveExploits1References4Affected Software2
Veracode
Veracode
•added 2022/03/07 2:49 a.m.•38 views

Denial Of Service (DoS)

poi-scratchpad is vulnerable to denial of service. An attacker can cause an application crash through the out of memory exception by submitting the malicious TNEF file to the TNEFAttribute parameter in the create function of MAPIAttribute.java...

5.5CVSS3.2AI score0.0152EPSS
SaveExploits0References5Affected Software1
Veracode
Veracode
•added 2022/03/04 9:43 a.m.•38 views

Information Disclosure

github.com/containerd/containerd is vulnerable to information disclosure. Remote unauthenticated attackers are able to gain access read-only copies of arbitrary files and directories on the host via a specially-crafted image configuration resulting in disclosure of sensitive information...

7.5CVSS4.2AI score0.27392EPSS
SaveExploits4References17Affected Software1
Veracode
Veracode
•added 2022/02/22 9:00 a.m.•38 views

Denial Of Service (DoS)

libexpat.so is vulnerable to denial of service. The vulnerability exists due to the heap overflow in the resolveinstalled function of solver.c, allowing an attacker to cause an application crash...

2.2AI score
SaveExploits0References5Affected Software2
Total number of security vulnerabilities5000