39248 matches found
Denial Of Service (DoS)
github.com/helm/helm is vulnerable to denial of service. The vulnerability exists in setIndex function in parser.go because a maximum index is not defined when setting index which allows an attacker to cause an application crash...
Information Disclosure
microsoft.aspnetcore.app is vulnerable to information disclosure. The vulnerability exists in some of the .NET Core packages which allows an attacker to gain access to privileged information...
SQL Injection
loopback-connector-postgresql is vulnerable to sql injection attacks. The vulnerability exists in buildExpression function in postgresql.js because the user provided inputs for contains loopback filter are not properly sanitized which allows an attacker to inject and execute arbitrary sql command...
Denial Of Service (DoS)
chromium is vulnerable to denial of service. The vulnerability exists due to the out of bound read in the Dawn, allowing an attacker to crash the application by providing a maliciously crafted HTML page...
Heap-based Buffer Overflow
vim is vulnerable to heap-based buffer overflow. An out-of-bounds write vulnerability in vimregsubboth function in the src/regexp.c file allows remote attackers to cause an application crash, possibly reading and modifying some amount of memory contents...
Command Injection
python is vulnerable to command injection. The vulnerability exist due to mailcap module does not add escape characters into commands discovered in the system mailcap file. This may allow attackers to inject shell commands into applications that call mailcap.findmatch with untrusted input...
DLL Hijacking
node is vulnerable to dll hijacking. The vulnerability exists due to the default open ssl configuration which allows an attacker to exploit the vulnerability by placing a malicious dll file on an affected system...
Arbitrary File Upload
strapi is vulnerable to arbitrary file upload. The vulnerability exists in the module.exports function in content-api.js due to improper validation of the upload files, allowing an attacker to upload a maliciously crafted file and remotely execute arbitrary code on the system...
Denial Of Service (DoS)
ujson is vulnerable to denial of service. The vulnerability exists in decodestring function in ultrajsondec.c when reallocation of buffer fails during string decoding which frees the buffer twice causing an application crash...
Prototype Pollution
underscore.deep is vulnerable to prototype pollution. An attacker is able to pollute any future object creations by passing a crafted malicious payload to deepFromFlat function...
Information Disclosure
guzzlehttp/guzzle is vulnerable to information disclosure. The vulnerability exists because the checkRedirect function of RedirectMiddleware.php does not properly clear the CURLOPTHTTPAUTH option on a change of origin, allowing an attacker to get sensitive information through the Authorization...
Regular Expression Denial Of Service (ReDoS)
underscore-99xp is vulnerable to regular expression denial of service ReDoS attacks. A remote attacker is able to cause denial of service conditions via calling the vulnerable deepValueSearch function...
Information Disclosure
kgexplore is vulnerable to information disclosure. An attacker can inject and execute malicious code through the request package and gain access to sensitive user information and digital currency keys...
Use After Free
A use-after-free vulnerability exists in the RS-274X aperture definition tokenization functionality of Gerbv 2.7.0 and dev commit b5f1eacd and Gerbv forked 2.7.1. A specially-crafted gerber file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...
Deserialization Of Untrusted Data
Fastjson1 Compatible is vulnerable to deserialization of untrusted data. The vulnerability exists in checkAutoType function in ParserConfig.java because the autoType shutdown is not properly restricted which allows an attacker to bypass it under certain conditions and attack remote servers...
Cross-site Scripting (XSS)
jenkins is vulnerable to cross site scripting. The vulnerability exists due to a lack of sanitization of the name and description of Jira Issue and Jira Release Version parameters on views displaying parameters...
Denial Of Service (DoS)
servicemesh-proxy is vulnerable to denial of service. The vulnerability exists due to a lack of sanitization which allows an attacker to crash the system via a NULL pointer dereference when using a WT filter saferegex match via a crafted request...
Denial Of Service (DoS)
protobuf is vulnerable to denial of service. The vulnerability exists due to a lack of sanitization in google.protobuf.UnknownFieldSet parameter which allows a remote attacker to inject a malicious javascript into the system and crash. which allowing an attacker to...
Use-After-Free
vim is vulnerable to use-after-free. The vulnerability exists in appendcommand which allows an attacker to cause a memory corruption which then leads to an application crash...
Prototype Pollution
protobufjs is vulnerable to Prototype Pollution. An attacker is able to add/modify properties of the Object.prototype by parsing/loading .proto files or via providing untrusted user input to util.setProperty or to ReflectionObject.setParsedOption functions, resulting in prototype pollution...
OS Command Injection
maven-shared-utils is vulnerable to OS command injection. The vulnerability exists due to the use of double-quoted strings without proper escaping which allows an attacker to execute shell commands...
Denial Of Service (DoS)
Redis is vulnerable to denial of service. An attacker can load a specially crafted Lua script can cause NULL pointer dereference which will result with a crash of the redis-server process...
Denial Of Service (DoS)
linux-gkeop is vulnerable to denial of service. A flaw null pointer dereference in the Linux kernel UDF file system functionality was found in the way user triggers udffilewriteiter function for the malicious UDF image. A local user could use this flaw to crash the system...
Denial Of Service (DoS)
htmlunit is vulnerable to denial of service. An attacker can cause excessive heap memory consumption by providing malicious processing instructions to the compileString function of HtmlUnitContextFactory.java, leading to an application crash...
Privilege Escalation
jenkins-2-plugins is vulnerable to privilege escalation. The vulnerability exists due to a lack of sanitization of the path allowing an attacker to configure Pipelines permission to read arbitrary files on the Jenkins controller file system...
Privilege Escalation
thunderbird is vulnerable to privilege escalation. The vulnerability exists due to an ignored OpenPGP revocation information allowing a revoked key to be kept as non-revoked...
Buffer Overflow
vim is vulnerable to buffer overflow. The vulnerability exists due to the use of Out-of-range Pointer Offset...
Denial Of Service (DoS)
php is vulnerable to denial of service. The vulnerability exists due to a lack of sanitization of changes to string objects in the zendstringextend function in Zend/zendstring.h...
Remote Code Execution (RCE)
razorengine is vulnerable to remote code execution. The vulnerability exists because it does not sanitize the CAS code access security of an insecure sandboxed environment, allowing an attacker to execute maliciously crafted .NET code into the system...
Denial Of Service (DoS)
poi-scratchpad is vulnerable to denial of service. An attacker can cause an application crash through the out of memory exception by submitting the malicious TNEF file to the TNEFAttribute parameter in the create function of MAPIAttribute.java...
Cross-site Scripting (XSS)
francoisjacquet/rosariosis is vulnerable to cross-site scripting. An attacker is able to inject malicious script via the xssclean function in classes/Security.php...
Denial Of Service (DoS)
github.com/hashicorp/consul is vulnerable to denial of service DoS attacks. A remote attacker with service:write permission is able to register a specifically-crafted service on clusters with at least one ingress gateway configured, resulting in denial of service conditions in the server...
Authorization Bypass
url-parse is vulnerable to authorization bypass. The vulnerability exists in Url function of index.js because the user name and password are not properly handled which allows a malicious user to modify user information...
Remote Code Execution (RCE)
github.com/git-lfs/git-lfs is vulnerable to remote code execution. The vulnerability exists in 'ExecCommand' function of subprocesswindows.go which allows an attacker to inject and execute codes in the root directory of a malicious repository by simply adding an executable files...
Denial Of Service (DoS)
openexr is vulnerable to denial of service.The vulnerability exists in CompositeDeepScanLine::setFrameBuffer function of ImfCompositeDeepScanLine.cpp due to a heap-based buffer overflow which allows an attacker to crash the application via malicious input...
Remote Code Execution (RCE)
firefox is vulnerable to remote code execution. The vulnerability when a worker is shutdown, it was possible to cause script to run late in the lifecycle, at a point after where it should not be possible...
Directory Traversal
github.com/argoproj/argo-cd is vulnerable to directory traversal. The vulnerability exists in helmTemplate function of repository.go which allows a malicious user to traverse the file system...
Insecure Remote Attestation
github.com/google/go-attestation is vulnerable to insecure remote attestation. The use code generated from Platform Configuration Register PCR in trusted platform module TPM allows a local attacker who performs TCG log in Eventlog.Verify to spoof events in the TCG log and bypassing the method...
Denial Of Service (DoS)
libpng is vulnerable to denial of service. The vulnerability exists due to an absolute path in the export script that crashes when reading multiple zTXT chunks...
Denial Of Service (DoS)
util-linux:sid is vulnerable to denial of service...
Use After Free
chromium is vulnerable to use after free. The vulnerability exists in Optimization Guide which allows an attacker to cause a memory corruption...
Information Disclosure
python-django is vulnerable to information disclosure. The vulnerability exist due to the lack of sanitizaton of the Template Language's variable resolution logic...
Server-Side Request Forgery (SSRF)
node-forge is vulnerable to server-side request forgery. The vulnerability exists in parseUrl because certain relative paths are mishandled when validating, which allows the bypass of the URL redirection validation...
Remote Code Execution (RCE)
thunderbird is vulnerable to remote code execution. The vulnerability exists due to a boundary error when handling DER-encoded DSA or RSA-PSS signatures within Mozilla NSS library...
Out-of-Bounds Access
qemu is vulnerable to out-of-bounds access. The vulnerability exists due to an out-of-bounds access by providing an address near the end of the PCI configuration space...
Information Disclosure
bluez is vulnerable to information disclosure. The vulnerability exists due to the handling of a SVCATTRREQ by the SDP implementation which allows an attacker to inject a malicious CSTATE, tricking the server into returning more bytes than the buffer actually holds, resulting in leaking arbitrary...
Denial Of Service (DoS)
thunderbird and firefox are vulnerable to denial of service. The vulnerability exist due to an incorrect type conversion of sizes from 64bit to 32bit integers which allows an attacker to corrupt memory...
Remote Code Execution (RCE)
thunderbird is vulnerable to remote code execution. The vulnerability exists due to the lack of sanitization of the execution context which allows Javascript to be enabled in the composition area...
Use After Free
libsepol is vulnerable to use after free. The vulnerability exists due to a lack of setting the set field of cilresetclasspermission to NULL instead of resetting the classpermission when freeing the pointer...
Directory Traversal
com.alibaba:druid is vulnerable to directory traversal vulnerability. An attacker with a specifically crafted input parameter is able to gain access to sensitive user information via the vulnerable visit function...