Denial Of Service (DoS)

firefox is vulnerable to Out of Memory Exception. The vulnerability occurs due to a syntax error which causes a function to attempt allocating memory when none is available causing a out of memory exception...

Memory Corruption

firefox is vulnerable to Memory corruption. The vulnerability occurs due to the JIT component UpdateRegExpStatic' trying to access initialStringHeap leading to a potential crash...

Memory Corruption

firefox is vulnerable to Memory Corruption. The vulnerability occurs due to memory safety bugs which potentially results in arbitrary code execution...

Memory Corruption

firefox is vulnerable to Memory Corruption. The vulnerability occurs due to memory safety bugs which potentially results in arbitrary code execution...

Information Disclosure

firefox is vulnerable to Information Disclosure. The vulnerability occurs within 'HttpBaseChannel' where discarded load groups weren't always unavailable, potentially resulting in browsing context not being cleared when closing a private window...

Improper Access Control

firefox is vulnerable to Improper Access Control. The vulnerability occurs due to Excel .xll add-in files not being blocked by Firefox's executable blocklist due to incorrect access control...

Information Disclosure

firefox-esr is vulnerable to Information Disclosure. The vulnerability occurs due to push notification data stored in private browser mode not being encrypted resulting in a potential leakage of sensitive information...

Information Disclosure

@apollo/server and apollo-server-core are vulnerable to Information Disclosure. The vulnerability is due to a lack sensitive information masking such as Studio API keys which can end up getting logged if they are passed incorrectly with leading/trailing whitespace or if they have any invalid...

Arbitrary Code Injection

github.com/ansible-semaphore/semaphore is vulnerable to Arbitrary Code Injection. The vulnerability exists in makeCmd function at AnsiblePlaybook.go which allows a remote attacker to execute arbitrary code via a crafted payload to the extra variables parameter...

Denial Of Service (DoS)

indent is vulnerable to Denial of Service DoS attacks. The vulnerability exists in the searchbrace function in the indent.c file. The function is responsible for searching for braces in a C code file. The vulnerability occurs when the function fails to properly check the size of the buffer that i...

Denial Of Service (DoS)

nasm is vulnerable to Denial of Service DoS attacks. The vulnerability exists in the ieeesegment function in the outieee.c file. The function is responsible for writing floating-point numbers to an output file. The vulnerability occurs when the function fails to properly check the size of the...

Denial Of Service (DoS)

qemu is vulnerable to Denial of Service DoS attacks. The vulnerability exists in the nvmedirectivereceive function in the hw/nvme/ctrl.c file. The function is responsible for receiving a directive from an NVMe controller. The vulnerability occurs when the function tries to access a NULL pointer...

Cross-Site Scripting (XSS)

cacti is vulnerable to a cross-site scripting XSS. The vulnerability exists in the graphsnew.php file. The file is responsible for processing POST requests that are used to create new graphs. The vulnerability occurs when the file fails to properly sanitize user input. This can allow an attacker ...

Cross-Site Scripting (XSS)

spipu/html2pdf is vulnerable to Cross-Site Scripting XSS. The vulnerability exists due to lack of sanitization in forms.php which allows an attacker to inject and execute arbitrary JavaScript...

Regular Expression Denial Of Service (ReDoS)

@adobe/css-tools is vulnerable to Regular Expression Denial of Service ReDoS. The vulnerability exists in index.ts due to improper input validations which allows an attacker to cause an application slowdown when parsing CSS...

Denial Of Service (DoS)

wireshark is vulnerable to Denial of Service DoS attacks. The vulnerability exists in the packet-cp2179.c file. The file is responsible for decoding CP2179 packets. The vulnerability occurs when the file fails to properly check the length of a packet. This can cause Wireshark to divide by zero,...

Path Traversal

Zip Swift is vulnerable to Zip Path Traversal vulnerability Zip Slip. The vulnerability is due to not sanitizing zip entry while extracting zip files in a destination directory inside a unzipFile function. An attacker can a create a maliciously crafted zip entry which can be extracted to arbitrar...

Denial Of Service (DoS)

github.com/libp2p/go-libp2p is vulnerable to Denial of Service. The vulnerability exists because it does not garbage collect signed peer records, which can lead to out-of-memory conditions resulting in an application crash...

Archive Spoofing

BorgBackup is vulnerable to Archive Spoofing. The vulnerability is due a flaw in the cryptographic authentication scheme, which could potentially allow an attacker to create fake archives and indirectly cause data loss in the backup repository...

Path Traversal

gitpython is vulnerable to Path Traversal. The vulnerability exists in getrefinfohelper function of symbolic.py because it does not properly validate the local file path, which allows an attacker to access files outside the expected directory...

Denial Of Service (DoS)

radare2 is vulnerable to Denial of Service DoS attacks. The vulnerability exists in the rsleb128 function in the radare2 codebase. The function is responsible for decoding SLEB128 encoded values. The vulnerability occurs when the function fails to properly check the size of a buffer. This can all...

Denial Of Service (DoS)

radare2 is vulnerable to Denial of Service DoS attacks. The vulnerability exists in the vaxopfunction function in the radare2 codebase. The function is responsible for parsing and decoding VAX instructions. The vulnerability occurs when the function fails to properly check the size of a buffer...

Denial Of Service (DoS)

radare2 is vulnerable to Denial of Service DoS attacks. The vulnerability exists in the rregsetvalue function in the radare2 codebase. The function is responsible for setting the value of a register. The vulnerability occurs when the function fails to properly free a memory buffer. This can allow...

Denial Of Service (DoS)

radare2 is vulnerable to Denial of Service DoS attacks. The vulnerability exists in the rreggetnameidx function in the radare2 codebase. The function is responsible for getting the name index of a register. The vulnerability occurs when the function fails to properly free a memory buffer. This ca...

Denial Of Service (DoS)

radare2 is vulnerable to Denial of Service DoS attacks. The vulnerability exists in the rreadle32 function in the radare2 codebase. The function is responsible for reading a 32-bit integer from a memory buffer. The vulnerability occurs when the function fails to properly check the size of the...

Arbitrary Code Execution

gitpython is vulnerable to Arbitrary Code Execution. The vulnerability exists because it does not properly validate the git executable. If a malicious repository packages a git executable, the library will default to using that executable when importing gitpython on Window. If an attacker tricks ...

Denial Of Service (DoS)

radare2 is vulnerable to Denial of Service DoS attacks. The vulnerability exists in the coreanalfcn function in the radare2 codebase. The function is responsible for analyzing a binary file. The vulnerability occurs when the function tries to access a memory address that is null. This can cause t...

Information Leak

The MongoDB Driver is vulnerable to Information Leak. The vulnerability is due to the MongoDB Drivers erroneously publishing events containing authentication-related data to a command listener configured by an application. An attacker can get hold of this sensitive information when he accesses it...

Buffer Overflow

libfrr.so, is vulnerable to Buffer Overflows. The vulnerability exists in the bgpcapabilitysoftwareversion function at bgpopen.c due to not properly handling the buffer size, which allows an attacker to cause an application crash...

OS Command Injection

find-exec is vulnerable to Command Injection. The vulnerability is due to inadequate user input shell sanitization. An attacker could exploit this vulnerability by manipulating input parameters, thereby executing harmful shell commands within the context of the running process...

Out-of-bounds Read

libfrr.so is vulnerable to Out-of-bounds Reads. The vulnerability exists in the bgpattraigpvalid function at bgpattr.c because it does not properly validate the availability of two bytes during AIGP validation, which allows an attacker to cause an application crash...

Authorization Bypass

chromium is vulnerable to Authorization Bypasses. The vulnerability exists in the DevTools module of Google Chrome. The module is responsible for providing developers with tools to debug and inspect web pages. The vulnerability occurs when the module fails to properly check the permissions of a...

Denial Of Service (DoS)

imagemagick is vulnerable to Denial of Service DoS attacks. The vulnerability exists in the ReadEnhMetaFile function in the coders/emf.c file. The function is responsible for decoding Enhanced Metafile EMF images. The vulnerability occurs when the function attempts to divide by zero, which causes...

Denial Of Service (DoS)

binutils is vulnerable to Denial of Service DoS attacks. The vulnerability exists in the bfddwarf2findnearestlinewithalt function in the dwarf2.c file. The function is responsible for finding the nearest line number for a given address in an ELF file. The vulnerability occurs when the function...

Denial Of Service (DoS)

binutils is vulnerable to Denial of Service DoS attacks. The vulnerability exists in the findabstractinstance function in the dwarf2.c file. The function is responsible for finding the nearest line number for a given address in an ELF file. The vulnerability occurs when the function fails to...

Denial Of Service (DoS)

binutils is vulnerable to Denial of Service DoS attacks. The vulnerability exists in the loadseparatedebugfiles function in the dwarf2.c file. The function is responsible for loading debug information from separate ELF files. The vulnerability occurs when the function fails to properly check the...

Arbitrary Code Execution

7zip is vulnerable to Arbitrary Code Execution. This vulnerability exists due to a flaw in the way 7-Zip parses 7Z files. A remote attacker can exploit this vulnerability by tricking the victim to open a specially crafted archive, which could lead to arbitrary code execution on the victim's syste...

Arbitrary Code Execution

Pagekit/pagekit is vulnerable to Arbitrary Code Execution. The vulnerability exists because the updateAction function in UpdateController.php blindly executes code in the uploaded requirements.php file which allow an admin authenticated attacker to execute malicious code into the system...

Heap Buffer Overflow

libyara.so is vulnerable to heap-based buffer overflow. The vulnerability exists because it does not properly manage memory in exec.c, which allows an attacker to parse a crafted compiled rule file, causing an application crash...

Deserialization Of Untrusted Data

Apache Airflow Spark Provider is vulnerable to deserialization of untrusted data. The vulnerability occurs when an authorized Airflow user configures Spark hooks on an Airflow node pointing it to a malicious Spark server in an Airflow deployment causing arbitrary code to be run on that Airflow...

Use After Free

libgpac.so is vulnerable to Use After Free. The vulnerability exists due to the heap-use-after-free in the gfisomboxparseex function of boxfuncs.c, which allows an attacker to cause an application crash...

URL Redirection To Untrusted Site ('Open Redirect')

jupyter-server is vulnerable to open redirect vulnerability. The vulnerability occurs due to not validating the redirect urls generated as part of the login flow. An attacker can trick a user into clicking a login link to jupyter server which includes malicious url redirect...

PGP Signature Spoofing

openpgp is vulnerable to PGP Signature Spoofing. The vulnerability exists due to ignoring text before the hash: ... section. An attacker can append text to the start of of the line, which will appear as signed but the library ignores verifying it...

Remote Code Execution (RCE)

rar is vulnerable to Remote Code Execution RCE. This vulnerability exists due to a flaw in the way WinRAR parses recovery volume names in the old RAR 3.0 format. A remote attacker can exploit this vulnerability by tricking the victim to open a specially crafted archive, which could lead to...

Regular Expression Denial Of Service (ReDoS)

mathjax is vulnerable to Regular Expression Denial of Service ReDoS. The vulnerability exists due to inefficient regular expression complexity in the components and markdown patterns, which allows an attacker to slow down the application if they can control the input to the MathJax.Message.Set or...

Remote Code Execution

Apache Airflow Scoop Provider is vulnerable to Remote Code Execution RCE. The vulnerability is caused by not validating/sanitizing the connection url used to import data from RDBMS e.g MySQL or Oracle into the Hadoop Distributed File System HDFS. The attacker can execute malicious commands by...

Improper Access Control

jupyter-server is vulnerable to Improper Access Control. The vulnerability occurs due to not implementing authorization check when opening untrusted files via "Open image in new tab" feature of the browser. The attacker can access unauthorized files compromising users confidentiality...

Path Traversal

PF4J is vulnerable to Path Traversal. The vulnerability exists in the extract function in Unzip.java due to a lack of path validation which allows an attacker to obtain sensitive information and execute arbitrary code via the expandIfZip parameter...

Path Traversal

PF4J is vulnerable to Path Traversal. The vulnerability exists in the extract function in Unzip.java due to a lack of path validation which allows an attacker to obtain sensitive information and execute arbitrary code via the loadpluginPath parameter...

Path Traversal

PF4J is vulnerable to Path Traversal. The vulnerability exists in the extract function in Unzip.java due to a lack of path validation which allows an attacker to obtain sensitive information and execute arbitrary code via the zippluginPath parameter...