Remote Code Execution (RCE)

aim is vulnerable to Remote Code Execution RCE. The vulnerability is due to improper user access restriction to the RunView object, allowing for the execution of arbitrary code via a crafted query parameter to the /api/runs/search/run/ endpoint...

Cross-Site Request Forgery (CSRF)

aim is vulnerable to Cross-Site Request Forgery CSRF. The vulnerability is due to the lack of CSRF and CORS protection in the aim dashboard, allowing attackers to perform actions such as deleting runs, updating data, and stealing data like log records and notes without the user's consent...

Server-side Template Injection (SSTI)

litellm is vulnerable to Server-Side Template Injection SSTI. The vulnerability is due to insufficient sanitization within the hfchattemplate method in factory.py, which processes the chattemplate parameter from the tokenizerconfig.json file using the Jinja template engine, allowing attackers to...

Denial Of Service (DoS)

jose is vulnerable to Denial Of Service DoS. The vulnerability is due to insufficient validation of the p2c PBES2 Count value. It allows attackers can exploit this vulnerability by providing a large p2c value, leading to a denial of service condition...

Denial Of Service (DoS)

Xpdf is vulnerable to Denial of Service DoS. The vulnerability is due to the TextLine class mishandling characters with large y coordinates, potentially leading to a Denial of Service DoS or other unspecified impacts...

Use After Free

xorg-server is vulnerable to Use After Free. The vulnerability is due to multiple entries pointing to the same non-refcounted glyph, which can lead to a use-after-free scenario when a freed glyph is accessed again...

Buffer Over-Read

The X.org server is vulnerable to Buffer Over-read. The vulnerability is due to improper handling of byte-swapped length values in the ProcAppleDRICreatePixmap function, potentially leading to memory leakage and segmentation faults, especially when triggered by a client with a different endiannes...

Buffer Over-Read

X.org Server is vulnerable to Buffer Over-read. The vulnerability is due to the ProcXIPassiveGrabDevice function, where byte-swapped length values in replies can lead to memory leakage and segmentation faults. This issue, particularly when triggered by a client with a different endianness, could...

Buffer Over-read

X.org Server is vulnerable to Buffer Over-read. The vulnerability is due to the ProcXIGetSelectedEvents function, where byte-swapped length values in replies can lead to memory leakage and segmentation faults. This issue, particularly when triggered by a client with a different endianness, could...

Improper Validation Of Array Index

wolfssl:edge is vulnerable to Improper Validation of Array Index. The vulnerability is due to lack of proper input validation, allowing a malicious packet sender to crash or cause an out-of-bounds read by sending a malformed packet with the correct length...

Denial Of Service (DoS)

Node.js is vulnerable to Denial of Service DoS. The vulnerability is due to improper handling of HTTP/2 CONTINUATION frames, where sending a small amount of HTTP/2 frames packets can cause data to be left in nghttp2 memory after a reset, leading to a race condition when the Http2Session destructo...

Denial Of Service (DoS)

gnutls is vulnerable to Denial of ServiceDoS. The vulnerability is due to excessive resource consumption caused by the "certtool --verify-chain" command when verifying a specially crafted .pem bundle, leading to an application crash...

Sensitive Information Disclosure

GnuTLS is vulnerable to Sensitive Information Disclosure. The vulnerability is due to exploiting deterministic behavior in systems like GnuTLS, particularly when using the GNUTLSPRIVKEYFLAGREPRODUCIBLE flag, which can lead to a noticeable step in nonce size from 513 to 512 bits, exposing a...

Excessive Memory Allocation (Throttling)

xpdf is vulnerable to Excessive Memory AllocationThrottling. The vulnerability is due to insufficient input validation, which allows crafted input to trigger excessive memory allocation. For example, sending a crafted PDF document to the pdftoppm binary can exploit this vulnerability, particularl...

Broke Window Attack

Varnish Cache, Varnish Enterprise is vulnerable to a Broke Window Attack. The vulnerability is due to exhaustion of credits for an HTTP/2 connection control flow window...

Buffer Under-read

c-ares is vulnerable to Buffer Under-read. The vulnerability is due to improper handling of embedded NULL characters as the first character in a new line within certain configuration files such as /etc/resolv.conf, /etc/nsswitch.conf, the HOSTALIASES file, and prior to version 1.27.0, the...

NULL Pointer Dereference

XPDF is vulnerable to a Null Pointer Dereference. The vulnerability is due to unhandled null pointer dereference, occurring at line 2393 in the FoFiType1C.cc file...

Heap-based Buffer Overflow

busybox is vulnerable to Heap-based Buffer Overflow. The vulnerability arises from the nexttoken function in the awk.c file, allowing attackers to crash the system or gain unauthorized data access with specially crafted inputs...

Segmentation Violation

XPDF is vulnerable to a segmentation violation. The vulnerability is due to an issue in the component /xpdf/AcroForm.cc at line 538...

Stack Overflow

Xpdf is vulnerable to a stack overflow. The vulnerability is due to a PDF object loop in the page label tree, leading to infinite recursion...

Stack Overflow

Xpdf is vulnerable to a stack overflow. The vulnerability is due to a PDF object loop in the page label tree, leading to infinite recursion...

Divide-by-Zero

Xpdf is vulnerable to a Divide-by-Zero. The vulnerability is due to a bad color space object in the input PDF file...

Stack Overflow

Xpdf is vulnerable to a stack overflow. The vulnerability is due to a stack overflow in the function Dict::find in xpdf/Dict.cc...

Stack Overflow

Xpdf is vulnerable to a stack overflow. The vulnerability is due to a stack overflow in the function gmalloc in goo/gmem.cc...

Arbitrary Code Execution

Firefox, Firefox ESR, Thunderbird are vulnerable to an Arbitrary Code Execution vulnerability. The vulnerability is due to leveraging the Windows Error Reporter to run arbitrary code, escaping the sandbox...

Divide By Zero

Xpdf is vulnerable to a divide-by-zero error in its text extraction code. The vulnerability is due to an excessively large PDF page size, which triggers a divide-by-zero error...

Buffer Overflow

XPDF is vulnerable to a Buffer Overflow vulnerability. The vulnerability is due to an attacker being able to cause a Denial of Service via the PDFDoc malloc in the pdftotext.cc function. However, the vendor states that it's an expected abort on out-of-memory error...

HTTP Response Splitting

Apache HTTP Server is vulnerable to HTTP Response splitting. The vulnerability is due to inadequate handling of malicious response headers, allowing an attacker to inject headers into backend applications and cause an HTTP desynchronization attack...

Stack Overflow

XPDF is vulnerable to a Stack Overflow in the Catalog::readPageLabelTree2Object function. The vulnerability is due to attackers causing a Denial of Service DoS via a crafted PDF file...

Improper Input Validation

Apache is vulnerable to Improper Input Validation. The vulnerability is caused due to inadequate input validation, which can be exploited by attackers to manipulate HTTP responses...

Integer Overflow

FreeRDP is vulnerable to an Integer Overflow in freerdpbitmapplanarcontextreset, leading to a heap-buffer overflow. The vulnerability is due to a malicious server preparing a RDPGFXRESETGRAPHICSPDU to allocate too small buffers, potentially triggering later out-of-bounds read/write...

Stack Overflow

XPDF is vulnerable to a Stack Overflow via the function FileStream::copy at xpdf/Stream.cc:795...

Denial Of Service (DoS)

OpenSSL is vulnerable to Denial of Service DoS. The vulnerability is caused by incorrect handling of TLSv1.3 sessions when certain non-default server configurations are used without proper anti-replay protection, causing the session cache to grow unbounded and potentially leading to a Denial of...

Integer Overflow

Xpdf is vulnerable to an integer overflow in JPXStream.cc...

Memory Exhaustion

nghttp2 is vulnerable to a memory exhaustion issue. The vulnerability is due to temporary buffering of HTTP/2 incoming headers exceeding the limit, which is intended to generate an informative HTTP 413 response. However, if a client continues to send headers without stopping, it leads to memory...

Stack Overflow

XPDF is vulnerable to a stack overflow via the Object::Copy class in object.cc files...

Deadlock

Xpdf is vulnerable to a deadlock when encountering a PDF object stream where the "Length" field is contained within another object stream...

Integer Overflow

Xpdf is vulnerable to an integer overflow in the JBIG2 decoder JBIG2Stream::readTextRegionSeg in JBIG2Stream.cc, allowing crafted PDF files or JBIG2 images to crash or execute arbitrary code...

Unrestricted File Upload

perl-http-body is vulnerable to Unrestricted File Upload. The vulnerability is due to improper handling of the uploaded file's name, where the suffix of a temporary file is derived from the part of the name after the first "." character, potentially allowing remote attackers to exploit subsequent...

Use-After-Free

Xpdf is vulnerable to a use-after-free issue in JBIG2Stream::close located in JBIG2Stream.cc in Xpdf 4.04. The vulnerability is due to a use-after-free issue in the mentioned function. It can be triggered by sending a crafted PDF file to for example the pdfimages binary. This vulnerability allows...

Denial Of Service (DoS)

linux-pam is vulnerable to a denial of service. The vulnerability is due to attackers being able to cause a blocked login process via mkfifo because the openat call for protectdir lacks ODIRECTORY...

Crash Issue

Xpdf is vulnerable to a crash issue. The vulnerability is due to a crash in the gfseekIOFILE, long, int function in goo/gfile.cc...

Crash Issue

Xpdf is vulnerable to a crash issue. The vulnerability is due to a crash in the XRef::fetchint, int, Object, int function in xpdf/XRef.cc...

Stack Overflow

XPDF is vulnerable to a stack overflow. The vulnerability is due to a stack overflow via the function Catalog::countPageTree in Catalog.cc...

Denial Of Service (DoS)

Wireshark is vulnerable to a Denial of Service. The vulnerability is due to a T.38 dissector crash in versions 4.2.0 to 4.0.3 and 4.0.0 to 4.0.13, which allows denial of service via packet injection or crafted capture file...

Out-Of-Bounds Read

libgig.so is vulnerable to Out-Of-Bounds Read. The vulnerability is caused by gig::Region::UpdateChunks function in gig.cpp, which results in an out-of-bounds read...

XML External Entity Injection

org.apache.zeppelin: sap is vulnerable to XML External Entity Injection. This vulnerability is due to a lack of proper XML validation...

Cross Site Request Forgery (CSRF)

org.apache.zeppelin: zeppelin-web is vulnerable to Cross Site Request Forgery CSRF. The vulnerability is due to inadequate validation of requests, which allows an attacker to submit malicious requests via phishing...

Timing Based Side-Channel Attack

Libgcrypt is vulnerable to a timing-based side-channel attack. The vulnerability is due to the handling of RSA decryption, which may allow a remote attacker to initiate a Bleichenbacher-style attack and decrypt arbitrary RSA ciphertexts...

Session Fixation

contao/core-bundle is vulnerable to Session Fixation. The vulnerability is due to a flaw in the personal data and password lost modules. allowing compromised accounts to retain access even after password changes...