38790 matches found
Directory Traversal
babel is vulnerable to directory traversal. The library does not clean the locale identifiers properly before loading from file, allowing a malicious user to load arbitrary locale .dat files...
Denial Of Service (DoS)
qt5-qtwebengine:edge is vulnerable to denial of service...
Denial Of Service (DoS)
MySQL is vulnerable to denial of service. An attacker is able to exploit the vulnerability by accessing the network and crashing the system...
Business Logic Flaws
rustc has a business logic flaw. The vulnerability exists due to the iteratorgetunchecked more than once for the same index when the underlying iterator panics in certain conditions. This bug could lead to a memory safety violation due to an unmet safety requirement for the TrustedRandomAccess...
Denial Of Service (DoS)
Redis is vulnerable to denial of service. An integer overflow bug in Redis can be exploited to corrupt the heap and potentially result with remote code execution. The vulnerability involves changing the default proto-max-bulk-len and client-query-buffer-limit configuration parameters to very larg...
Denial Of Service (DoS)
mediawiki is vulnerable to denial of service. The system may crash when processing ApiQueryBacklinks with a full db table scan...
Bypass Of Protection Mechanism
linux is vulnerable to privilege escalation. drivers/net/ethernet/xilinx/xilinxemaclite.c in the Linux kernel makes it easier for attackers to defeat an ASLR protection mechanism because it prints a kernel pointer i.e., the real IOMEM pointer...
Denial Of Service
ntfs-3g, sid is vulnerable to denial of service. The vulnerability exists due to an out-of-bounds access in ntfsinodesyncstandardinformation in NTFS-3G...
Remote Code Execution (RCE)
xstream is vulnerable to remote code execution. The vulnerability exists due to the usage of an insecure default blacklist which does not cover all the excluded XStream security framework...
Insecure Signature Validation
SOGo is using insecure signature validation. It does not validate the signatures of any SAML assertions it receives. Any actor with network access to the deployment could impersonate users when SAML is the authentication method...
Denial-of-service (DoS)
systemd:focal is vulnerable to denial-of-service. The vulnerability exists in DHCP client which allows an attacker to send a specially crafted DHCP FORCERENEW packet causing an application crash...
Denial Of Service(DoS)
firefox-esr:edge is vulnerable to denial of service. A use-after-free vulnerability in media channels could have led to memory corruption and a potentially exploitable crash...
Denial Of Service (DoS)
go is vulnerable to Denial Of Service DoS. The vulnerability exists due to a race condition where the system is trying to access the same resources leading to denial of service...
Insecure Cryptographic Function
libapache2-mod-auth-openidc has insecure cryptographic functions. The vulnerability existis due to reusing the same key...
Request Smuggling
tomcat-coyote is vulnerable request smuggling. Incorrect way of parsing of the HTTP transfer-encoding request header causes request smuggling when it is used with a reverse proxy and if the client declared it would only accept an HTTP/1.0 response...
Cross-site Scripting(XSS)
videojs is vulnerable to cross-site scripting. An attacker is able to inject and execute malicious script via rc attribute of track tag...
Denial Of Service (DoS)
firefox:edge is vulnerable to denial of service...
Information Disclosure
libvirt is vulnerable to information disclosure. An attacker is able to access files of other users when the system generates SELiinux MCS category pairs for VMs' dynamic labels...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. A NULL pointer reference allows a local privileged user to cause a denial of service...
Denial Of Service (DoS)
pillow is vulnerable to denial of service. Lack of validation of the input layers and size of data block in PsdImagePlugin.PsdImageFile can allow an attacker to cause a denial-of-service condition on open prior to load...
Insufficient Policy Enforcement
chromium:edge has an insufficient policy enforcement in Content Security Policy...
Denial Of Service (DoS)
linux-oracle:focal is vulnerable to denial of service. An issue was discovered in the Linux kernel before 5.8.10. virt/kvm/kvmmain.c has a kvmiobusunregisterdev memory leak upon a kmalloc failure, aka CID-f65886606c2d...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. A NULL pointer dererence in ov511modeinitregs and ov518modeinitregs when there are zero endpoints allows an attacker with the ability to induce the error conditions to crash the system...
Denial Of Service (DoS)
squid is vulnerable to denial of service. An attacker can cause a fatal error via the HTTP response of a squid cache, resulting in a denial of service condition...
Denial Of Service (DoS)
squid is vulnerable to denial of service. The vulnerability exists due to an integer overflow due to insufficient validation of user-supplied input when delivering responses from HTTP Range requests...
Denial Of Service (DoS)
pillow is vulnerable to denial of service. Lack of validation and checks for the validity of return data when jumping to file offsets in the EpsImagePlugin results in a denial-of-service condition...
Denial Of Service (DoS)
qemu is vulnerable to denial of service. The vulnerability exists due to a flaw was found in the USB redirector device usb-redir of QEMU where small USB packets are combined into a single boundless large transfer request to reduce the overhead and improve performance...
Denial Of Service (DoS)
gdk-pixbuf is vulnerable to denial of service. The vulnerability exists due to an infinite lop inlzw.c in the function writeindexes...
Integer Overflow
openldap:edge is vulnerable to integer overflow. An integer underflow can causes a slapd crash in the Certificate List Exact Assertion processing, resulting in denial of service...
URL Spoofing
firefox:edge is vulnerable to URL spoofing. When a JavaScript URL javascript: is evaluated and the result is a string, this string is parsed to create an HTML document, which is then presented. Previously, this document's URL as reported by the document.location property, for example was the...
Injection Vulnerability
openvpn is vulnerable to injection vulnerabilities. An attacker can inject a data channel v2 PDATAV2 packet using a victim's peer-id...
Prototype Pollution
jquery-plugin-query-object is vulnerable to prototype pollution. An attacker is able to inject malicious properties into existing construct prototypes Object.prototype and modify attributes such as proto, constructor and prototype...
Remote Code Execution (RCE)
laminas/laminas-http is vulnerable to remote code execution. An attacker is able to input malicious data as it does not verify the type of the file name as string before unlinking...
Denial Of Service (DoS) Via Infinite Loop
pillow is vulnerable to denial of service attacks. Lack of necessary checks in FliDecode allow the value of advance to remain zero, triggering an infinite loop...
Use-after-free
linux is vulnerable to use after free. An attacker is able to exploit the vulnerability via an I/O request at a certain point during device setup...
Privilege Escalation
openssl is vulnerable to privilege escalation. The vulnerability exists due to an error in the implementation of a check to disallow certificates in certificate chains...
Denial Of Service (DoS)
json-smart is vulnerable to denial of service DoS attacks. An unhandled NumberFormatException thrown from the function extractFloat in JSONParserBase.java allows a remote attacker to crash programs or leak sensitive information...
Cross-Site Scripting (XSS)
pki-core is vulnerable to cross-site scripting XSS. An attacker is able to inject and execute arbitrary Javascript in a user's browser via the request search page...
Cross-site Scripting (XSS)
velocity-tools-view is vulnerable cross-site scripting XSS. An attacker is able to inject and execute malicious script in a user's browser as it does not escape a user-provided vm file as part of the URL which displayed in the error page...
Denial Of Service (DoS)
gsoap is vulnerable to denial of service DoS. The vulnerability exists in the WS-Security plugin functionality when processing a SOAP request...
XML External Entity (XXE)
xmlgraphics-commons is vulnerable to XML external entity attacks. The external DTDs are not disabled by default and allows an attacker submit requests on behalf of the server via a malicious XML document...
Arbitrary Code Execution
jinjava is vulnerable to arbitrary code execution. An attacker is able to gain access to arbitrary classes via objects that are passed to the Jinjava context through the application class loader...
Authorization Bypass
openssl is vulnerable to authorization bypass. The vulnerability exists when a client attempts to negotiate SSLv2 with a server that is configured to support both SSLv2 and more recent SSL and TLS versions then a check is made for a version rollback attack when unpadding an RSA signature. Clients...
Denial Of Service (DoS)
chromium is vulnerable to denial of service DoS. The vulnerability exists through a use after free in Tab Groups...
Privilege Escalation
Kernel is vulnerable to privilege escalation. In auditfreelsmfield of auditfilter.c, there is a possible bad kfree due to a logic error in auditdatatoentry. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
Denial Of Service (DoS)
chromium is vulnerable to denial of service DoS. The vulnerability exists through a use after free flaw...
Privilege Escalation
xen is vulnerable to privilege escalation. The vulnerability exists through a data leak caused by an AMD IOMMU page-table entry that can be half-updated...
Information Disclosure
dnsmasq is vulnerable to information disclosure. The vulnerability exists because when getting a reply from a forwarded query, dnsmasq checks in the forward.c:replyquery if the reply destination address/port is used by the pending forwarded queries. However, it does not use the address/port to...
Information Disclosure
dovecot is vulnerable to information disclosure. The vulnerability existed via attacker-controlled parameters, leading to access to other users' email messages...