38855 matches found
Denial Of Service (DoS)
github.com/traefik/traefik is vulnerable to Denial of Service DoS. The vulnerability occurs when using the HTTPChallenge method for Lets Encrypt certificate renewals. The vulnerability exploits a 50-second window during the challenge validation process, allowing attackers to bombard the system wi...
Information Disclosure
jupyterserver is vulnerable to Information Disclosure. An information disclosure flaw exists due to unhandled errors in API requests. While not directly allowing unauthorized access, these errors may leak sensitive path information in responses, potentially revealing sensitive server details to...
Denial Of Service (DoS)
libsquid.so is vulnerable to Denial Of Service DoS. The vulnerability exists in the ipcCreate function of ipc.cc due to an incorrect check for a return value. This allows an attacker to cause an application crash through the Helper process management...
Denial Of Service (DoS)
libsquid.so is vulnerable to Denial Of Service DoS. The vulnerability exists due to a buffer overread bug in the library. This allows an attacker to cause an application crash during HTTP message processing...
Private Key Restoration
github.com/ecies/go is vulnerable to Private Key Restoration. The vulnerability arises due to the Encapsulate and Decapsulate functions, which allows an attacker to possibly recover the private key due to an Invalid Curve Point...
Information Disclosure
fastapiproxylib is vulnerable to Information Disclosure. This vulnerability is due to httpx.AsyncClient persisting cookies based on the set-cookie response header, which results in cookie's being leaked to other requests...
Cross-site Scripting (XSS)
dpaste is vulnerable to Cross-site Scripting XSS. The vulnerability exists due to improper lexer validation in views.py, which allows an attacker to inject and execute malicious JavaScript into the browser, resulting in XSS...
Information Disclosure
code.gitea.io/gitea, codeberg.org/forgejo/forgejo is vulnerable to Information Disclosure. The vulnerability is due to the UsernameSubRoute function in home.go because there are no view permissions checks. The server's response can reveal information about the existence of a private user account,...
Insufficient Verification Of Data Authenticity
electron is vulnerable to Insufficient Verification of Data Authenticity. The vulnerability is due to the embeddedAsarIntegrityValidation and onlyLoadAppFromAsar fuses on MacOS systems. An attacker is able to inject malicious code or modify app behavior if they have write access to the .app bundl...
Authentication Bypass
gitea is vulnerable to Authentication Bypass. The vulnerability is caused when docker login uses basic authentication, which allows an attacker to bypass 2FA authentication...
Arbitrary Command Execution
org.jupiter-rpc:jupiter-serialization-kryo is vulnerable to Arbitrary Command Execution. The vulnerability is due to improper configuration which allows remote class loading. The deserialization vulnerability allows an attacker to execute arbitrary commands via crafted RPC requests...
Improper Access Control
codeberg.org/forgejo/forgejo is vulnerable to Improper Access Control. The vulnerability exists because certain endpoints do not properly check permissions of the object passed to the repository. This allows remote attackers to read private issues, read private pull requests, delete issues, and...
Use After Free
Google Chrome is vulnerable to Use After Free. The vulnerability exists in libavif, potentially enabling an attacker to exploit heap corruption through a maliciously crafted AVIF file...
Use After Free
Google Chrome is vulnerable to Use After Free. The vulnerability exists in libavif, potentially enabling an attacker to exploit heap corruption through a maliciously crafted AVIF file...
Use After Free
Google Chrome is vulnerable to Use After Free. The vulnerability exists in WebAudio, potentially enabling an attacker to exploit heap corruption through a maliciously crafted HTML page...
Use After Free
Google Chrome is vulnerable to Use After Free. The vulnerability exists in Mojo, potentially enabling an attacker to exploit heap corruption through a maliciously crafted HTML page...
Integer Overflow
Google Chrome is vulnerable to Integer Overflow. The vulnerability exists in the Skia component of the library. An attacker who has compromised the renderer process may potentially perform a sandbox escape through a malicious file...
Type Confusion
Google Chrome is vulnerable to Type Confusion. The vulnerability exists in the Spellcheck component of the library. An attacker who has compromised the renderer process may potentially perform heap corruption via a crafted HTML page...
Side Channel Attack
libgnutls.so is vulnerable to a Side Channel Attack. The vulnerability exists due to inconsistent constant response times of ciphertexts with correct vs incorrect PKCS1 paddings, which allows an attacker to infer sensitive information...
CRLF Injection
aiohttp is vulnerable to CRLF Injection attack. The vulnerability arises due to improper HTTP version validation in aiohttp/clientreqrep.py. An attacker can preform CRLF injection if they have the ability to modify the HTTP version in the request header...
Regular Expression Denial Of Service (ReDoS)
@adobe/css-tools is vulnerable to Denial Of Service. The vulnerability is due to exponential regex backtracking when parsing CSS in the parse method of src/parse/index.ts, which can result in Denial of Service...
Memory Leak
libxml2.so is vulnerable to Memory Leak. The vulnerability is due to use-after-free in the xmlUnlinkNode function in tree.c. An attacker could submit a crafted XML document, which would result in Denial of Service...
SQL Injection
Apache Cocoon is vulnerable to SQL Injection. The vulnerability is due to the DatabaseCookieAuthenticatorAction class improperly sanitizing parameters used in an SQL command. This issue can be exploited by an attacker by injecting malicious SQL commands resulting in SQL injection...
Arbitrary Code Execution
JFinal is vulnerable to Arbitrary Code Execution. The vulnerability exists because the login.jsp page is not properly restricted which allows an attacker to access and modify the content to inject and execute arbitrary code into the system...
Unrestricted File Upload
microweber/microweber is vulnerable to Unrestricted File Upload. The vulnerability is due to missing validation for the files types being uploaded. This allows a remote attacker to upload files with potentially malicious content, such as JavaScript files and execute arbitrary code...
XML External Entity (XXE) Injection
Apache Cocoon is vulnerable to XML External Entity XXE Injection. The vulnerability is due to improper XML parsing configuration in the StreamGenerator class, which allows an attacker to submit a malicious XML document, resulting in XXE. An attacker can exploit this flaw to read arbitrary files o...
Missing Authorization
DolphinScheduler is is vulnerable to Missing Authorization. The vulnerability is due to insufficient permission checks for UDF function operations in the resource center. This allowed logged-in users to delete UDF functions without proper authorization...
Integer Overflow
gst-plugins-good is vulnerable to Integer Overflow. The vulnerability exists in the avidemux element within the gstavidemuxinvert function, allowing a heap overwrite during the parsing of AVI files. This poses a potential risk of arbitrary code execution through the heap overwrite...
Integer Overflow
gst-plugins-good is vulnerable to Integer Overflow. The vulnerability exists in the matroskademux element within the gstmatroskademuxaddwvpkheader function, allowing a heap overwrite during the parsing of Matroska files. This poses a potential risk of arbitrary code execution through the heap...
Denial Of Service (DoS)
gst-plugins-good is vulnerable to Denial Of Service DoS. The vulnerability arises from an integer overflow in the matroskademux element within the bzip decompression function, leading to a potential segmentation fault or the risk of a heap overwrite...
Denial Of Service (DoS)
gst-plugins-good is vulnerable to Denial Of Service DoS. The vulnerability arises from an integer overflow in the matroskademux element within the gstmatroskadecompressdata function, leading to a potential segmentation fault or the risk of a heap overwrite...
Denial Of Service (DoS)
gst-plugins-good is vulnerable to Denial Of Service DoS. The vulnerability stems from an integer overflow in the matroskademux element within the gstmatroskadecompressdata function, attributed to the absence of size checks. This issue results in a heap overwrite during MKV demuxing using...
Denial Of Service (DoS)
gst-plugins-good is vulnerable to Denial Of Service DoS. The vulnerability stems from an integer overflow in the matroskademux element within the LZO decompression function, potentially causing a segmentation fault or the risk of a heap overwrite during MKV demuxing using LZO decompression...
Path Traversal
nodejs-current is vulnerable to Path Traversal. The vulnerability occurs due to the implementation not adequately protecting itself against applications overwriting built-in utility functions with user-defined implementations resulting in malicious attackers to gain unauthorized access to sensiti...
Path Traversal
nodejs-current is vulnerable to Path Traversal. The vulnerability is due to there is no proper neutralization for special elements within the pathname that specifically within the handling of file system paths by various node:fs functions. This vulnerability is the result of the way Node.js handl...
Out-of-bounds Read
gst-plugins-base is vulnerable to Out-of-bounds Read. The vulnerability exists when handling certain ID3v2 tags, which allows an attacker to cause an application crash...
Denial Of Service (DoS)
xen is vulnerable to Denial Of Service DoS. The vulnerability exists because any guest PV or HVM utilizing Debug Masks for its own purposes can cause incorrect behavior in an unrelated HVM vCPU. This issue is likely to result in a guest crash...
Denial Of Service (DoS)
xen is vulnerable to Denial Of Service DoS. The vulnerability exists because a PV vCPU can place a breakpoint over the live GDT. This allows the PV vCPU to exploit and lock up the CPU entirely...
NULL Pointer Dereference
xen is vulnerable to NULL Pointer Dereference. The vulnerability is due to the incorrect assumption in C Xenstored that the quota cannot be negative. This leads to a crash when accounting temporarily goes negative, as assert checks fail when tools are built with default settings, which do not...
Buffer Overflow
xen is vulnerable to Buffer Overflow. The vulnerability exists because the libfsimage is utilized by pygrub to inspect guest disks, creating a potential avenue for an attacker to induce a stack buffer overflow in libfsimage, ultimately resulting in an application crash...
Denial Of Service (DoS)
xen is vulnerable to Denial Of Service DoS. The vulnerability exists due to incorrect caching invalidation guidelines in the AMD-Vi specification 48882—Rev 3.07-PUB—Oct 2022 on certain hardware. Updating specific fields of the DTE without flushing the IOMMU TLB can lead to device malfunctions e.g...
Buffer Overflow
optipng is vulnerable to Buffer Overflow. The vulnerability exists in the 'buffer' variable at gifread.c, allowing an attacker to cause an application crash...
Denial Of Service (DoS)
quickjs is vulnerable to Denial Of Service DoS. The vulnerability exists due to the stack-overflow in the jsproxyisArray component at quickjs.c, allowing an attacker to cause an application crash...
Denial Of Service (DoS)
openjdk is vulnerable to Denial of Service DoS. The vulnerability applies to Java deployments, primarily clients running sandboxed Java Web Start applications or applets, that load untrusted code e.g., code from the internet and rely on the Java sandbox for security. Successful exploitation can...
Improper Authorization
openjdk is vulnerable to Improper Authorization. An unauthenticated attacker with network access via multiple protocols is able to potentially compromise the system and gain unauthorized access to some data. This vulnerability requires human interaction and primarily affects Java deployments...
Improper Authorization
openjdk is vulnerable to Improper Authorization. An unauthenticated attacker with network access is able to potentially compromise affected systems and gain unauthorized access to data. This vulnerability can be exploited through APIs and applies to Java deployments relying on the Java sandbox fo...
Information Disclosure
openjdk is vulnerable to Information Disclosure. The vulnerability allows an unauthenticated attacker to potentially compromise the system and gain access to sensitive information...
Information Disclosure
openjdk is vulnerable to Information Disclosure. An unathenticated attacker with network access via multiple protocols is able to potentially compromise the system and gain unauthorized access, resulting in disclosure of sensitive information...