Cross-site Scripting (XSS)

LibreNMS is vulnerable to Cross-site Scripting XSS. The vulnerability is due to improper sanitization on the Service template name which is reflecting in delete button onclick event. This allows malicious javascript code to be stored and executed...

Path Traversal

io.github.skylot:jadx-core is vulnerable to Path Traversal. The vulnerability is due to improper handling of escape characters in resource files and insufficient validation in processing zip files. This can lead to the possibility of overwriting other files in the directory when saving the...

Privilege Escalation

Ant Media Server is vulnerable to Privilege Escalation. The vulnerability is caused by running Java Management Extensions JMX with authentication disabled on localhost on port 5599. This allows unprivileged users to connect locally and leverage MLet Bean within JMX to load a remote MBean from an...

Cross Site Scripting

github.com/apache/incubator-answer is vulnerable to Cross Site Scripting. The vulnerability is due to improper neutralization of input during web page generation when user modifies their personal website. This allows attackers to inject malicious scripts into the website, which could be executed ...

Time-of-check Time-of-use (TOCTOU) Attack

OpenStack Storlets is vulnerable to Time-of-check Time-of-use TOCTOU Attack. The vulnerability is caused due to a lack of strict permission checks and restriction, leading to improper permission settings on file creation. This allows an attacker to gain unauthorized access to or modify sensitive...

UI Spoofing

chromium is vulnerable to UI Spoofing. The vulnerability is due to inappropriate implementation in Autofill in Google Chrome, allowing attackers who convince users to install a malicious app can exploit this vulnerability to perform UI spoofing through a crafted app...

Out-of-Bounds-Read

Chrome is vulnerable to Out-of-Bounds-Read. The vulnerability is due to an out-of-bounds read in the Fonts component of Google Chrome, allowing a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page...

Use-After-Free

chrome is vulnerable to a Use-after-Free. The vulnerability is due to improper implementation of QUIC Quick UDP Internet Connections protocol within Google Chrome, allows a remote attacker who has compromised the renderer process to potentially exploit heap corruption via a crafted HTML page...

Use-After-Free

chrome is vulnerable to a Use-after-Free. The vulnerability is due to a use-after-free issue in the Downloads component of Google Chrome, allows a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Object Corruption

chrome is vulnerable to a Object Corruption. The vulnerability is due to object corruption in WebAssembly within Google Chrome versions. It allows a remote attacker to potentially exploit object corruption via a crafted HTML page...

Object Corruption

chrome is vulnerable to a Object Corruption. The vulnerability is due to object corruption in the V8 JavaScript engine within Google Chrome. It allows a remote attacker to potentially exploit object corruption via a crafted HTML page...

Security Bypass

chrome is vulnerable to Security Bypass. The vulnerability is due to insufficient policy enforcement in WebUI within Google Chrome, allows a remote attacker to bypass content security policy via a crafted HTML page...

UI Spoofing

chrome is vulnerable to UI spoofing. The vulnerability is due to inappropriate implementation in Prompts within Google Chrome, allows a remote attacker who convinces a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page...

Content Bypass

chrome is vulnerable to a Content Bypass. The vulnerability is due to inappropriate implementation in Networks within Google Chrome versions, allows a remote attacker to bypass mixed content policy via a crafted HTML page...

UI Spoofing

chrome is vulnerable to UI spoofing. The vulnerability is due to insufficient data validation in the Downloads component of Google Chrome, allows a remote attacker to perform UI spoofing via a crafted HTML page...

UI Spoofing

chrome is vulnerable to UI spoofing.The vulnerability is due to inappropriate implementation in Extensions within Google Chrome, allows a remote attacker to perform UI spoofing via a crafted Chrome Extension...

Cross Site Scripting(XSS)

chrome is vulnerable to Cross Site ScriptingXSS. The vulnerability is due to insufficient data validation in the Browser Switcher component of Google Chrome, allows a remote attacker to inject scripts or HTML into a privileged page via a malicious file...

Navigation Bypass

chrome is vulnerable to Navigation Bypass. The vulnerability is due to insufficient policy enforcement in Site Isolation within Google Chrome, allows a remote attacker to bypass navigation restrictions via a crafted HTML page...

Denial Of Service (DoS)

libapache2-mod-auth-openidc is vulnerable to Denial Of Service DoS. The vulnerability is due to missing input validation on the modauthopenidcsessionchunks cookie value and the server struggling with requests for a long time and eventually returning a 500 error when the value of the cookie is...

Argument Injection

github.com/hashicorp/go-getter library is vulnerable to Argument Injection. The vulnerability is due to improper handling of user input in the file getgit.go, which allows for the injection of malicious arguments into Git commands during branch discovery...

Server Side Request Forgery

github.com/usememos/memos is vulnerable to Server-Side Request Forgery. The vulnerability exist due to an improper input validation at the /o/get/image endpoint, allowing unauthenticated users to manipulate server-side requests and retrieve images from the internal network and also leads to a...

Server Side Request Forgery

github.com/usememos/memos is vulnerable to Server Side Request Forgery. The vulnerability is due to improper input validation at the /o/get/httpmeta endpoint in the file httpgetter.go, allowing unauthenticated users to enumerate the internal network and receive limited HTML values in JSON form...

Out-Of-Bounds Read

Pytorch is vulnerable to an Out-of-bounds Read. The vulnerability is caused due to a missing validation for mobileivaluesize variable for a value greater than ivalues-size in function FlatbufferLoader::parseModule within torch/csrc/jit/mobile/flatbufferloader.cpp. This introduces potential for...

Cross-Site Scripting

github.com/baidu/openrasp is vulnerable to Cross-Site Scripting. The vulnerability is due to improper handling of input and lack of output sanitization in the redirect parameter on the /login page. This allows attacker to inject arbritrary javascript to be executed with the permissions of a user...

Improper Certificate Validation

apache airflow is vulnerable to Improper Certificate Validation. The vulnerability is due to incomplete certificate validation in FTPTLS connections within the FTP hook, which can potentially be exploited. Implementing proper certificate validation by passing context=ssl.createdefaultcontext duri...

Improper Synchronisation

https://github.com/evmos/evmos/ is vulnerable to Improper Synchronisation. The vulnerability is due to a lack of synchronization between two states during transaction execution, allowing for arbitrary token minting. This exploit occurs because the stateDB.Commit method updates the Cosmos SDK...

Assertion Failure

libjasper.so is vulnerable to an Assertion Failure. The vulnerability is due to improper handling in the jpcstreamlistremove function within jpcdec.c, allowing attackers to trigger a denial of service through a malformed image file...

Improper Authentication

jenkins-core is vulnerable to Improper Authentication. The vulnerability is due to the CLI using remote-based commands that stored encrypted user names in a cache particularly login command, enabling attacker with certain permissions to impersonate any Jenkins user...

Incorrect Permission Assignment For Critical Resource

github.com/git-ecosystem/git-credential-manager/ is vulnerable to Incorrect Permission Assignment For Critical Resource. The vulnerability is due to improper file ownership settings where Debian package does not set root ownership on installed files. This allows user 1001 on a multi-user system t...

Log Injection

flask-cors is vulnerable to Log Injection when the log level is set to debug. The vulnerability is due to improper output neutralization for logs within extension.py. This allows attackers to insert fake log entries through specially crafted GET requests containing CRLF sequences in the request...

Path Traversal

github.com/owncast/owncast is vulnerable to Path Traversal. The vulnerability is due to inadequate input validation on the emoji/delete endpoint, allowing attackers with administrative privileges to delete arbitrary files outside the intended directory...

Regular Expression Denial Of Service (ReDoS)

tecnickcom/tcpdf is vulnerable to Regular Expression Denial of Service ReDoS. The vulnerability is caused due to a lack of proper validation in a regular expression used to parse colour information from HTML in the convertHTMLColorToDec function. This can lead to excessive backtracking, resulting...

Improper Handling Of Exceptional Conditions

@hono/node-server is vulnerable to Improper Handling of Exceptional Conditions. The vulnerability is caused due to improper exception handling in the newRequest function within request.ts. This function fails with ERRINVALIDURL when handling invalid Host header values, such as empty strings or...

Incorrect Check Of Function Return Value

Envoy is vulnerable to Incorrect Check of Function Return Value. The vulnerability is due to insufficient input validation, which triggers an abnormal termination of the Envoy process when handling requests with overly long longer than 255 characters host/:authority headers or alternate header...

Information Exposure

apache-airflow is vulnerable to Information Exposure. The vulnerability is due a flaw in the "configuration" UI page when "non-sensitive-only" was set as webserver.exposeconfig configuration. An attacker can exploit this vulnerability by sending a specially crafted request to see sensitive provid...

Observable Timing Discrepancy

1Panel is vulnerable to Observable Timing Discrepancy. The vulnerability is due to the use of != for comparisons of cryptographically sensitive password verification operations, rather than hmac.Equal. This can lead to timing attack vulnerability...

Sensitive Information Disclosure

Ansible Automation Platform is vulnerable to Sensitive Information Disclosure. The vulnerability is due to improper handling of private keys, where the ec2key module prints the private key directly to the standard output when creating a new keypair. This flaw allows an attacker to retrieve the ke...

Denial Of Service (DoS)

FRRouting/frr is vulnerable to Denial of Service DoS. This vulnerability occurs due to improper handling of the Prefix SID attribute in the bgpattrmalformed function within bgpattr.c, leading to a crash of the bgpd daemon...

HTTP/2 CONTINUATION Frame Processing

firefox is vulnerable to an HTTP/2 CONTINUATION frame processing vulnerability. The vulnerability is due to an absence of limits on the number of HTTP/2 CONTINUATION frames processed, allowing a server to potentially trigger an Out of Memory condition in the browser...

Denial Of Service (DoS)

libfrr.so is vulnerable to Denial of Service DoS. The vulnerability is caused when receiving a MP/GR capability as a dynamic capability due to an incorrect placement of a continue statement within a while loop that iterates over a pointer. In this case, the pointer is not incremented before the...

Denial Of Service (DoS)

libhtp.so is vulnerable to Denial Of Service DoS. The vulnerability is due to inadequate handling of malformed request traffic, leading to excessive CPU usage...

Resource To Wrong Sphere

github.com/docker/docker is vulnerable to Exposure of Resource to Wrong Sphere. The vulnerability is due to IPv6 being enabled on network interfaces, even in configurations where --ipv6=false is specified. The impact of this flaw is containers can communicate with other hosts on the local network...

Prototype Pollution

@andrei-tatar/nora-firebase-common is vulnerable to Prototype Pollution. The vulnerability is due to improper handling of the updateState parameter in the updateStateInternal method. This allows remote attackers to execute malicious scripts, resulting in Arbitrary Code Execution...

Cross Site Scripting(XSS)

aiohttp is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to the web.static..., showindex=True function, allowing an attacker with the ability to upload arbitrary filenames to the static file directory to perform Cross Site Scripting due to improper filename santization. Uses wh...

Heap Buffer Overflow

torch is vulnerable to a Heap Buffer Overflow. The vulnerability is due to improper size checks in the tupleConstruct function within varargfunctions.cpp, allowing attackers to cause a Denial of Service DoS...

JIT (Just-In-Time) Crash

firefox is vulnerable to JIT Just-In-Time crash. The vulnerability is due to a flaw in the JIT compiler, allowing attackers to crash the browser by mutating specific JavaScript objects during tracing...

Integer Overflow

firefox-esr is vulnerable to Integer Overflow. The vulnerability is due to insufficient input validation, allowing a malformed OpenType font to trigger integer overflows on 32-bit versions and resulting in an out-of-bounds read...

Use-After-Free

firefox is vulnerable to Use-After-Free. The vulnerability is due to occurrence of garbage collection during the creation of an array in Mozilla Firefox's WebAssembly WASM execution process, potentially leading to a use-after-free condition...

Use-After-Free

firefox is vulnerable to Use-After-Free. The vulnerability is due to the JIT creating incorrect code for arguments, leading to potential use-after-free crashes when garbage collection occurs in certain cases...

Out-of-Bounds-Read

firefox is vulnerable to Out-of-Bounds-Read. The vulnerability is due to incorrect optimization of switch statements by the JIT Just-In-Time compiler. It results in code with out-of-bounds-reads in certain code patterns involving switch statements...