Prototype Pollution

protobufjs is vulnerable to Prototype Pollution. An attacker is able to add/modify properties of the Object.prototype by parsing/loading .proto files or via providing untrusted user input to util.setProperty or to ReflectionObject.setParsedOption functions, resulting in prototype pollution...

OS Command Injection

maven-shared-utils is vulnerable to OS command injection. The vulnerability exists due to the use of double-quoted strings without proper escaping which allows an attacker to execute shell commands...

Privilege Escalation

cifs-utils is vulnerable to privilege escalation. A stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges...

Denial Of Service (DoS)

Redis is vulnerable to denial of service. An attacker can load a specially crafted Lua script can cause NULL pointer dereference which will result with a crash of the redis-server process...

Denial Of Service (DoS)

linux-gkeop is vulnerable to denial of service. A flaw null pointer dereference in the Linux kernel UDF file system functionality was found in the way user triggers udffilewriteiter function for the malicious UDF image. A local user could use this flaw to crash the system...

Denial Of Service (DoS)

htmlunit is vulnerable to denial of service. An attacker can cause excessive heap memory consumption by providing malicious processing instructions to the compileString function of HtmlUnitContextFactory.java, leading to an application crash...

Privilege Escalation

jenkins-2-plugins is vulnerable to privilege escalation. The vulnerability exists due to a lack of sanitization of the path allowing an attacker to configure Pipelines permission to read arbitrary files on the Jenkins controller file system...

Privilege Escalation

thunderbird is vulnerable to privilege escalation. The vulnerability exists due to an ignored OpenPGP revocation information allowing a revoked key to be kept as non-revoked...

Denial Of Service (DoS)

nekohtml is vulnerable to denial of service. The vulnerability exists due to a memory corruption allowing an attacker to crash the system via a maliciously crafted HTML markup...

Heap-based Buffer Overflow

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...

Information Exposure

topthink/think is vulnerable to information exposure. The vulnerability exists due to a lack of input validation which allows an attacker to access sensitive informations in the system...

Buffer Overflow

vim is vulnerable to buffer overflow. The vulnerability exists due to the use of Out-of-range Pointer Offset...

Denial Of Service (DoS)

php is vulnerable to denial of service. The vulnerability exists due to a lack of sanitization of changes to string objects in the zendstringextend function in Zend/zendstring.h...

XML External Entity (XXE) Injection

org.apache.any23:apache-any23-core is vulnerable to XML external entity XXE injection attacks. An attacker is able to view files and to interact with any back-end or external systems that the application itself can access due to the vulnerable RDFa XSLTStylesheet extractor component...

Remote Code Execution (RCE)

razorengine is vulnerable to remote code execution. The vulnerability exists because it does not sanitize the CAS code access security of an insecure sandboxed environment, allowing an attacker to execute maliciously crafted .NET code into the system...

Denial Of Service (DoS)

poi-scratchpad is vulnerable to denial of service. An attacker can cause an application crash through the out of memory exception by submitting the malicious TNEF file to the TNEFAttribute parameter in the create function of MAPIAttribute.java...

Cross-site Scripting (XSS)

francoisjacquet/rosariosis is vulnerable to cross-site scripting. An attacker is able to inject malicious script via the xssclean function in classes/Security.php...

Denial Of Service (DoS)

github.com/hashicorp/consul is vulnerable to denial of service DoS attacks. A remote attacker with service:write permission is able to register a specifically-crafted service on clusters with at least one ingress gateway configured, resulting in denial of service conditions in the server...

Authorization Bypass

url-parse is vulnerable to authorization bypass. The vulnerability exists in Url function of index.js because the user name and password are not properly handled which allows a malicious user to modify user information...

Remote Code Execution (RCE)

github.com/git-lfs/git-lfs is vulnerable to remote code execution. The vulnerability exists in 'ExecCommand' function of subprocesswindows.go which allows an attacker to inject and execute codes in the root directory of a malicious repository by simply adding an executable files...

Denial Of Service (DoS)

openexr is vulnerable to denial of service.The vulnerability exists in CompositeDeepScanLine::setFrameBuffer function of ImfCompositeDeepScanLine.cpp due to a heap-based buffer overflow which allows an attacker to crash the application via malicious input...

Remote Code Execution (RCE)

topthink/thinkphp is vulnerable to remote code execution. An attacker can obtain server control privileges by injecting a malicious code through the filename function in class.php...

Remote Code Execution (RCE)

firefox is vulnerable to remote code execution. The vulnerability when a worker is shutdown, it was possible to cause script to run late in the lifecycle, at a point after where it should not be possible...

Directory Traversal

github.com/argoproj/argo-cd is vulnerable to directory traversal. The vulnerability exists in helmTemplate function of repository.go which allows a malicious user to traverse the file system...

Information Disclosure

samba is vulnerable to information disclosure...

Insecure Remote Attestation

github.com/google/go-attestation is vulnerable to insecure remote attestation. The use code generated from Platform Configuration Register PCR in trusted platform module TPM allows a local attacker who performs TCG log in Eventlog.Verify to spoof events in the TCG log and bypassing the method...

Denial Of Service (DoS)

libpng is vulnerable to denial of service. The vulnerability exists due to an absolute path in the export script that crashes when reading multiple zTXT chunks...

Denial Of Service (DoS)

util-linux:sid is vulnerable to denial of service...

Use After Free

chromium is vulnerable to use after free. The vulnerability exists in Optimization Guide which allows an attacker to cause a memory corruption...

Information Disclosure

python-django is vulnerable to information disclosure. The vulnerability exist due to the lack of sanitizaton of the Template Language's variable resolution logic...

Incorrect Security UI In Autofill

Chrome has Incorrect security. The vulnerability exist due to an Incorrect security UI in Autofill...

Remote Code Execution (RCE)

thunderbird is vulnerable to remote code execution. The vulnerability exists due to a boundary error when handling DER-encoded DSA or RSA-PSS signatures within Mozilla NSS library...

Cross-site Scripting (XSS)

webkit2gtk is vulnerable to cross-site scripting. The vulnerability exists due to a logic issue...

Out-of-Bounds Access

qemu is vulnerable to out-of-bounds access. The vulnerability exists due to an out-of-bounds access by providing an address near the end of the PCI configuration space...

Information Disclosure

bluez is vulnerable to information disclosure. The vulnerability exists due to the handling of a SVCATTRREQ by the SDP implementation which allows an attacker to inject a malicious CSTATE, tricking the server into returning more bytes than the buffer actually holds, resulting in leaking arbitrary...

Denial Of Service (DoS)

thunderbird and firefox are vulnerable to denial of service. The vulnerability exist due to an incorrect type conversion of sizes from 64bit to 32bit integers which allows an attacker to corrupt memory...

Remote Code Execution (RCE)

thunderbird is vulnerable to remote code execution. The vulnerability exists due to the lack of sanitization of the execution context which allows Javascript to be enabled in the composition area...

Use After Free

libsepol is vulnerable to use after free. The vulnerability exists due to a lack of setting the set field of cilresetclasspermission to NULL instead of resetting the classpermission when freeing the pointer...

Privilege Escalation

samba is vulnerable to escalation of privilege. The vulnerability exists due to the lack of sanitization of user's authorization when RODC read-only domain controller is used when printing administration ticket...

Directory Traversal

com.alibaba:druid is vulnerable to directory traversal vulnerability. An attacker with a specifically crafted input parameter is able to gain access to sensitive user information via the vulnerable visit function...

Denial Of Service (DoS)

libxml2.so is vulnerable to denial of service. An attacker can crash the application or execute arbitrary code through the xmlParseAttValueComplex function in parser.c by providing long XML entity name...

Denial Of Service (DoS)

github.com/tidwall/gjson is vulnerable to denial of service DoS attacks. The vulnerability exists due to improper handling of long running matches in 'parseObject' in 'gjson.go' allowing a malicious user cause an application crash via a crafted json input...

Denial Of Service (DoS)

ffmpeg is vulnerable to denial of service. The vulnerability exists due to a memory leak in avcodecalloccontext3 at options.c...

Privilege Escalation

PHP is vulnerable to privilege escalation. When running PHP FPM SAPI with main FPM daemon process running as root and child worker processes running as lower-privileged users, it is possible for the child processes to access memory shared with the main process and write to it, modifying it in a w...

Remote Code Execution (RCE)

rustc:sid is vulnerable to remote code execution. The Zip implementation calls iteratorgetunchecked for the same index more than once when nested. This bug can lead to a memory safety violation due to an unmet safety requirement for the TrustedRandomAccess trait...

Denial Of Service (DoS)

Redis is vulnerable to denial of service. An integer overflow bug in Redis can be exploited to corrupt the heap and potentially result with remote code execution. The vulnerability involves changing the default proto-max-bulk-len and client-query-buffer-limit configuration parameters to very larg...

SQL Injection

php is vulnerable to SQL injection. The vulnerability exists due to a flaw in the multi-byte character process, an attacker is still able to inject arbitary SQL statements into the MySQL server for execution...

Prototype Pollution

object-path is vulnerable to Prototype Pollution. An attacker is able to exploit the vulnerability to inject arbitrary properties into existing construct prototypes and modify attributes such as proto, constructor and prototype via the del function...

Information Disclosure

postgresql is vulnerable to information disclosure. A malicious query can be used to read arbitrary bytes of server memory. In the default configuration, any authenticated database user is able to exploit the vulnerability...

Denial Of Service (DoS)

nodejs is vulnerable to Denial Of Service DoS. A use-after-free allows an attacker to exploit a memory corruption vulnerability to crash the application or change process behavior...