38790 matches found
Arbitrary Code Execution
jinjava is vulnerable to arbitrary code execution. An attacker is able to gain access to arbitrary classes via objects that are passed to the Jinjava context through the application class loader...
Authorization Bypass
openssl is vulnerable to authorization bypass. The vulnerability exists when a client attempts to negotiate SSLv2 with a server that is configured to support both SSLv2 and more recent SSL and TLS versions then a check is made for a version rollback attack when unpadding an RSA signature. Clients...
Denial Of Service (DoS)
chromium is vulnerable to denial of service DoS. The vulnerability exists through a use after free in Tab Groups...
Privilege Escalation
Kernel is vulnerable to privilege escalation. In auditfreelsmfield of auditfilter.c, there is a possible bad kfree due to a logic error in auditdatatoentry. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
Privilege Escalation
xen is vulnerable to privilege escalation. The vulnerability exists through a data leak caused by an AMD IOMMU page-table entry that can be half-updated...
Information Disclosure
dnsmasq is vulnerable to information disclosure. The vulnerability exists because when getting a reply from a forwarded query, dnsmasq checks in the forward.c:replyquery if the reply destination address/port is used by the pending forwarded queries. However, it does not use the address/port to...
Information Disclosure
dovecot is vulnerable to information disclosure. The vulnerability existed via attacker-controlled parameters, leading to access to other users' email messages...
Insecure Permissions
ceph-ansible is vulnerable to insecure permission. The vulnerability allows any user to read sensitive information within...
Out-of-Bounds Access
ffmpeg is vulnerable to out-of-bounds write because of errors in calculations of when to perform memset zero operations...
Denial Of Service (DoS)
imagemagick is vulnerable to denial of service DoS. The vulnerability exists through the TIFFSetProfiles function in coders/tiff.c where TIFFGetField return values imply that data validation has occurred...
Arbitrary Code Execution
jasper is vulnerable to arbitrary code execution. An out-of-bounds write vulnerability in the jpc encoder allows an attacker to execute arbitrary code on the host OS via a malicious input...
Arbitrary Code Execution
jackson-databind is vulnerable to remote code execution RCE. The vulnerability exists through the lack of sanitization of the "org.apache.tomcat.dbcp.dbcp.datasources.SharedPoolDataSource class through deserialization...
Directory Traversal
github.com/thecodingmachine/gotenberg is vulnerable to directory traversal. An attacker is able to exploit the vulnerability to overwrite arbitrary files in the system and cause a denial of service condition or potentially result in arbitrary code execution...
XML External Entity (XXE)
Nokogiri is vulnerable to XML external entity XXE attack. The vulnerability exist as the external DTDs are enabled by default in the XML parser, which would allow an attacker to submit requests on behalf of the server and gain access to internal and local resources...
Denial Of Service (DoS)
openjpeg is vulnerable to denial of service. It is possible due to a heap-buffer-overflow in lib/openjp2/mqc.c which allows an attacker to cause an application crash...
Insecure XML Parsing
github.com/crewjam/saml does not perform secure XML parsing. An attacker is able to forge part of a signed XML document due to a lack of validation...
Incorrect Preservation Of Namespace Prefixes
encoding/xml in github.com/golang/go is performing incorrect preservation of namespace prefixes. An attacker is able to provide malicious inputs to cause conflicts in the way of preserving the namespace prefixes on XML elements during tokenization round-trips...
Denial Of Service (DoS)
QEMU is vulnerable to denial of service. This vulnerability exist because of a flaw in the memory management API during the initialization of a memory region cache...
Regular Expression Denial Of Service (ReDoS)
fast-csv is vulnerable to regular expression denial of service ReDoS. The vulnerability exists through the usage of the ignoreEmpty option when parsing...
Denial Of Service (DoS)
libdbi-perl is vulnerable to denial of service. An untrusted pointer dereference allows a local attacker who is able to manipulate calls to dbddblogin6sv, cause a memory corruption and crash the application...
Denial Of Service (DoS)
OpenEXR is vulnerabile to denial of service and arbitrary code execution. The vulnerability exist when an invalid write of size 1 in the bufferedReadPixels function could cause the application to crash or execute arbitrary code...
Denial Of Service (DoS)
qemu is vulnerable to denial of service. The vulnerability exists through heap buffer overflow in sdhcisdmatransfermultiblocks in hw/sd/sdhci.c which allows an attacker to cause an application crash...
Remote Code Execution (RCE)
drupal/core-recommended is vulnerable to Remote Code Execution. The attacker is able to inject malicious code through unsanitized filename on uploaded files, which can lead to files being interpreted as the incorrect extension and served as the wrong MIME type or executed as PHP for certain hosti...
Remote Code Execution (RCE)
XStream is vulnerable to remote code execution RCE. The processed stream at unmarshalling time contains type information to recreate the formerly written objects, and new instances are created based on these type information. The vulnerability allows an attacker to manipulate the processed input...
Denial Of Service (DoS)
github.com/hashicorp/consul is vulnerable to denial of service DoS. Incorrect use of namespaces in comparisons allow an attacker to send infinite Raft writes to cause a namespace replication bug, leading to a resource exhaustion and an application crash...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. It happens due to Red Hat only CVE-2020-12352 regression, allowing a remote attacker in an adjacent range to crash the system...
Denial Of Service (DoS)
qt5-qtwebsockets is vulnerable to denial of service. An insecure websocket implementation allows only limited size for frames and messages and allows an attacker to cause a denial of service...
Denial Of Service (DoS)
Linux kernel is vulnerable to denial of service DoS. A malicious USB device in the drivers/input/ff-memless.c driver leading to use-after-free.Attacker could possibly use this to cause a system crash...
Information Disclosure
OpenJDK is vulnerable to information disclosure. The vulnerability exists through a race condition in NIO Buffer boundary checks...
Information Disclosure
junit is vulnerable to Information Disclosure. The vulnerability exists through the behaviour of TemporaryFolder on UNIX-like systems, where the system's temporary directory is shared between all users on that system by default...
Cookie Injection
php7 is vulnerable to cookie injection. The vulnerability exists as cookie names are url-decoded, allowing cookies with prefixes such as Host to be forged...
Remote Code Execution (RCE)
nette/application is vulnerable to remote code execution RCE. The vulnerability exists as invalid closures could be processed through the value of the callback parameter in MicroPresenter.php...
Heap Buffer Over-read
Simple DirectMedia Layer SDL is vulnerable to heap-based buffer over-read. It is possible due to a flaw in Map1toN in video/SDLpixels.c...
Denial Of Service (DoS)
webkitgtk4 is vulnerable to denial of service DoS. The vulnerability exists through an improper memory handling...
Arbitrary Code Execution
webkitgtk4 is vulnerable to arbitrary code execution. The vulnerability exists through multiple memory corruption issues...
Arbitrary Code Execution
webkitgtk4 is vulnerable to arbitrary code execution.The attacker execute the malicious crafted web content multiple memory corruption issues leading to arbitrary code execution...
Arbitrary Code Execution
webkitgtk is vulnerable to arbitrary code execution.The attacker execute the malicious crafted web content to cause the multiple memory corruption lead to arbitrary code execution...
Arbitrary Code Execution
WebKitGTK+ is vulnerable to arbitrary code execution. It is possible due to a flaw in the port of the WebKit portable web rendering engine to the GTK+ platform...
Divide-by-zero Error
The libexif has divide-by-zero error in exifentrygetvalue function in exif-entry.c...
Authorization Bypass
github.com/dgrijalva/jwt-go is vulnerable to authorization bypass. The vulnerability exists as the audience verification succeeds even if the type assertion fails when the value of aud is ""...
Format String Attack
tensorflow is vulnerable to format string attacks. The vulnerability exists as the fill argument of tf.strings.asstring reaches a printf call without sanitization...
Clickjacking Attack
Node.js is vulnerable to clickjacking. An attacker can perform HTTP desync attacks and deliver malicious payloads to unsuspecting users. The payloads can be crafted by an attacker to hijack user sessions, poison cookies, perform clickjacking, and a multitude of other attacks depending on the...
Denial Of Service (DoS)
xen is vulnerable to denial of service DoS. An issue was discovered in Xen through 4.14.x. x86 PV guest kernels can experience denial of service via SYSENTER. The SYSENTER instruction leaves various state sanitization activities to software. One of Xen's sanitization paths injects a GP fault, and...
Denial Of Service (DoS)
wireshark is vulnerable to denial of service DoS. The vulnerability exists due to insufficient validation of user-supplied input within the BLIP dissector in Wireshark...
XML External Entity (XXE)
JabRef version =4.3.1 contains a XML External Entity XXE vulnerability in MsBibImporter XML Parser that can result in disclosure of confidential data, denial of service, server side request forgery, port scanning. This attack appear to be exploitable via Specially crafted MsBib file...
Buffer Overflows
PuTTY is vulnerable to buffer overflows. There is triggerable buffer overflow in any kind of server-to-client forwarding...
Denial Of Service (DoS)
squid is vulnerable to denial of service DoS. The vulnerability exists due to an incorrect input validation, causing a heap-based buffer overflow that can result in Denial of Service to all clients using the proxy...
Denial Of Service (DoS)
QEMU is vulnerable to denial of service. An integer overflow in the SM501 display driver implementation allows an attacker to crash the QEMU process in sm5012doperation in hw/display/sm501.c on the host. The vulnerability exists in the COPYAREA macro while handling MMIO write operations through t...
Information Disclosure
QEMU is vulnerable to information disclosure. An out-of-bounds read vulnerability was found in the SLiRP networking implementation of the QEMU emulator. Successfully exploiting the vulnerability allows a malicious guest to leak the contents of the host memory, resulting in possible information...