Privilege Escalation

mattermost is vulnerable to Privilege Escalation. Mattermost fails to properly verify the bot permissions, allowing a User Manager role with user edit permissions to manage/update bots...

Arbitrary File Overwrite

ansible is vulnerable to Arbitrary File Overwrite. This vulnerability allows remote attackers to inject arbitrary HTML and script code into the response. This could allow attackers to steal cookies, perform phishing attacks, or take control of vulnerable systems...

Out-of-Bounds Read

binutils is vulnerable to Out-of-Bounds Reads. The vulnerability allows remote attackers to execute arbitrary code on the system by crafting a malicious object file due to the vulnerable logic in the parsemodule function of bfd/vms-alpha.c...

Denial Of Service (DoS)

binutils is vulnerable to Denial of Service DoS. The field thebfd of asymbolstruct is uninitialized in the bfdmachogetsyntheticsymtab function, which may allow a local attacker to cause an application crash...

Denial Of Service (DoS)

binutils is vulnerable to Denial of Service DoS. The use of an uninitialized field in the struct module module, which may allow a local attacker to cause an application crash...

Denial Of Service (DoS)

binutils is vulnerable to Denial of Service DoS. An use of an uninitialized variable causes a logic fail in the bfdinitsectiondecompressstatus function, which may allow a local attacker to cause an application crash...

Integer Overflow

libxrdp.so,is vulnerable to Path Traversal. The vulnerability exists in the extract function in Unzip.java due to a lack of path validation which allows an attacker to obtain sensitive information and execute arbitrary code via the expandIfZip parameter...

Denial Of Service (DoS)

libpoppler.so is vulnerable to Denial of Service DoS. The vulnerability exists in the readXRefTable function in XRef.cc because it does not properly validate the user-inputs, which allows an attacker to cause an application crash...

Denial Of Service (DoS)

libpoppler.so is vulnerable to Denial Of Service DoS. The vulnerability arises from the mishandling of dictionary marking in the markObject function within PDFDoc.cc. This leads to stack consumption in the find function located at Dict.cc, allowing an attacker to cause an application crash by...

Denial Of Service (DoS)

libpoppler.so is vulnerable to Denial of Service DoS. The vulnerability exists in PDFDoc.cc because it does not properly handle the xref data structure, which allows an attacker to cause an application crash...

Denial Of Service (DoS)

libvirt is vulnerable to Denial of service . This security flaw occurs due to repeatedly querying an SR-IOV PCI device's capabilities that exposes a memory leak caused by a failure to free the virPCIVirtualFunction array within the parent struct's gautoptr cleanup...

Cross Site Scripting (XSS)

quill-mention is vulnerable to Cross Site Scripting. The vulnerability is due to mention.js and quill.mention.js as there is no escaping or sanitization for the list items which are rendered using innerHTML. This allows an attacker to insert a malicious script in innerHTML. When the script is...

Improper Input Validation

libzephyr.so is vulnerable to Improper Input Validation. The vulnerability exists due to the smpkeyscheck function insmp.c due to a missing conditional check which allows an attacker to gain access and perform unauthorized actions...

Command Injection

pydash is vulnerable to Command Injection. The vulnerability is due to the basegetobject function in helpers.py which retrieves the value of a given key from an object. If it doesn't find a specified key in an object, it tries to access the object's attributes directly. This allows attackers to...

Improper Access Control

decidim-templates is vulnerable to Improper Access Control. The vulnerability is due to broken access control in the templates module, which results in an attacker being able to manipulate, create, or delete templates of surveys by accessing the administration panel...

Denial Of Service (DoS)

libhdf5.so is vulnerable to Denial Of Service DoS. The vulnerability exists due to the stack-based buffer overflow in H5Eint.c, which allows an attacker to cause an application crash by providing a maliciously crafted input...

Claim Validation Bypass

io.micronaut.security: micronaut-security-oauth2 is vulnerable Claim Validation Bypass. The vulnerability is due to skipping aud claim validation if the token is issued by the same identity issuer/provider, which results in a potential security gap in audience claim verification...

Buffer Over-read

gpac is vulnerable to Buffer Over-read. This vulnerability allows an attacker to execute arbitrary code on a vulnerable system by exploiting a bug in the way gpac handles memory...

Denial Of Service (DoS)

libvips.so is vulnerable to Denial of Service DoS. The vulnerability is due improper UTF-8 character handling in svgload.c because it does not properly validate malformed characters, which allows an attacker to cause an application crash or potentially execute arbitrary code...

Buffer Overflow

libzephyr.so is vulnerable to Buffer Overflow. The vulnerability is due to the imxmuipmsend function in ipmimx.c and the mcuxmailboxipmsend function in ipmmcux.c which is susceptible to buffer overflow if the size parameter is negative, as a result of signed/unsigned conversion mishandling. The f...

Denial Of Service (DoS)

libpoppler.so is vulnerable to Denial Of Service DoS. The vulnerability exists in the readGenericBitmap function of JBIG2Stream.cc, which allows an attacker to cause an application crash through the recursive function call by providing a maliciously crafted pdf file...

Incorrect Results In Exponentiation

gnark-crypto is vulnerable to Incorrect Results in Exponentiation. The vulnerability is due to the use of exponentiation à la GLV ExpGLV when the exponent exceeds the group order of the pairing target group GT. This sometimes results in incorrect outcomes compared to normal exponentiation Exp...

Improper Provisioning

libzephyr.so is vulnerable to Improper Provisioning. The vulnerability arises from an insecure implementation of the provisionee in the provpubkey function of provdevice.c within the Bluetooth component. If the provisionee has a public key sent out-of-band OOB, it can be sent back during...

Arbitrary File Upload

Gradio is vulnerable to an Arbitrary File Upload vulnerability. The vulnerability is due to the /upload interface endpoint via /tmp directory. The attacker can exploit this by uploading arbitrary files, potentially leading to unauthorized access or execution of malicious code...

Buffer Overflow

libzephyr.so is vulnerable to Buffer Overflow. The vulnerability exists due to the lack of user input validation in the eswificore.c and eswifishell.c, which allows an attacker to cause an application crash...

Denial Of Service (DoS)

python2.7 is vulnerable to Denial Of Service DoS. The vulnerability exists due to the use after free in the library, allowing an attacker to cause an application crash through the heappushpop in heapq...

URL Whitespace Padding Attack

python2.7 is vulnerable to . The vulnerability exists in the urllib.parse component of the library, enabling an attacker to bypass blocklisting methods by providing a URL that begins with blank characters...

Arbitrary Code Execution

netatalk is vulnerable to Arbitrary Code Execution. The vulnerability arises from the combination of primitives offered by SMB and AFP in their default configuration, enabling an attacker to inject and execute malicious code, resulting in arbitrary file write...

Heap-based Buffer Overflow

nasm is vulnerable to Heap-based Buffer Overflows. The vulnerability allows a local attacker to cause buffer overflows on the system by crafting a malicious assembly file through the component quoteforpmake of asm/nasm.c...

Server-Side Request Forgery (SSRF)

lemonldap-ng is vulnerable to Server-Side Request Forgery SSRF. The vulnerability allows an authenticated attacker to send GET requests to arbitrary URLs through the requesturi authorization parameter...

Privilage Escalation

gitlab is vulnerable to Privilage Escalation. The vulnerability allows an attacker to take over GitLab Pages with unique domain URLs if they know the added random string...

Cross-site Scripting (XSS)

gitlab is vulnerable to Cross-site Scripting XSS. The vulnerability exists due to the lack of input validation in the library, which allows an attacker to inject and execute malicious javascript through the maliciously crafted URL in the WebIDE beta...

Buffer Overflow

vim is vulnerable to Buffer Overflow. The vulnerability exists due to the heap based buffer overflow in the library, which allows an attacker to cause an application crash...

Out-of-bounds Read

grub2 is vulnerable to Out-of-bounds Read. The vulnerability allows an attacker to read arbitrary memory locations, including sensitive data such as cached passwords and EFI variable values, by presenting a specially crafted NTFS filesystem image...

Out-of-Bounds Write

grub2 is vulnerable to Out-of-Bounds Write. The vulnerability allows an attacker to execute arbitrary code or bypass secure boot protection by presenting a specially crafted NTFS filesystem image...

Improper Access Control

gitlab is vulnerable to Improper Access Control. The vulnerability allows developers to create pipeline schedules on protected branches, even without merge access...

Divide By Zero

vim is vulnerable to Divide By Zero. The vulnerability exists in the scrollcursorbot function of the library, which allows an attacker to cause an application crash...

Cross-site Scripting (XSS)

gitlab isvulnerable to Cross-site Scripting XSS. The vulnerability occurs during the creation of specific PlantUML diagrams, enabling an attacker to inject and execute malicious JavaScript...

Heap-based Buffer Overflow

gpac is vulnerable to Heap-based Buffer Overflow. This vulnerability allows an attacker to execute arbitrary code on a vulnerable system by exploiting a bug in the way gpac handles memory...

Cross-site Scripting (XSS)

roundcube is vulnerable to Cross-site Scripting XSS. The vulnerability is found in the text/plain email messages section within rcubestringreplacer.php, enabling an attacker to inject and execute malicious JavaScript through maliciously crafted links...

Regular Expression Denial Of Service (ReDoS)

gitlab is vulnerable to Regular Expression Denial Of Service ReDoS. The vulnerability arises from insecure regex patterns used in the library, enabling an attacker to crash the application by sending maliciously crafted payloads that use ProjectReferenceFilter to the previewmarkdown endpoint...

Denial Of Service (DoS)

ghostscript is vulnerable to Denial Of Service DoS. The vulnerability exists due to the integer overflow in the plglyphname of plfont.c, which allows an attacker to cause an application by transforming a maliciously crafted PCL file to PDF format...

Privilege Escalation

qemu is vulnerable to Privilege Escalation. The vulnerability is present in the TCG Accelerator component of the library, allowing an attacker to inject and execute malicious code, escalate privileges, and ultimately crash the application...

Denial Of Service (DoS)

galera-4 is vulnerable to Denial of Service DoS. This vulnerability allows an attacker to cause MariaDB to crash by sending a specially crafted OpenVAS port scan to ports 3306 and 4567. The impact of this vulnerability is high, as it could be exploited by attackers to disrupt the availability of...

Use After Free

chromium is vulnerable to Use After Free. The vulnerability allows a remote attacker to potentially exploit heap corruption via a crafted HTML page when they convinces a user to install a malicious extension...

Use After Free

chromium is vulnerable to Use After Free. The vulnerability allows a remote attacker to potentially exploit heap corruption via crafted UI interaction when they convinces a user to engage in specific UI interaction...

Denial Of Service (DoS)

firefox is vulnerable to Denial Of Service DoS. The vulnerability arises from potential mutations in the hashtable within the Ion Engine while a live interior reference exists, potentially leading to a use-after-free condition and an exploitable crash...

Improper Authorization

firefox is vulnerable to Improper Authorization. This vulnerability allows an attacker to execute arbitrary code on a vulnerable system by exploiting a bug in the way Firefox handles network traffic...

Information Disclosure

firefox is vulnerable to Information Disclosure. This vulnerability allows an attacker to cause a memory leak in a privileged process by exploiting a bug in the way Firefox handles canvas rendering...

Use After Free

firefox is vulnerable to Use After Free. A use-after-free vulnerability in the ImageBitmap class allows a remote attacker to potentially execute arbitrary code on the victim's system by crafting a malicious web page...