Out-of-bounds Reads

libfrr.so is vulnerable to Out-of-bounds Reads. The vulnerability exists in bgprouterefreshreceive function at bgppacket.c due to improper buffer stream handling which allows an attacker to read the initial byte of the ORF header in an ahead-of-stream situation...

Denial Of Service (DoS)

libfrr.so is vulnerable to Denial Of Service DoS. The vulnerability exists in NLRIATTRARG function at bgppacket.c due to a NULL pointer dereference when the attribute length is zero, which allows an attacker to cause an application crash...

Arbitrary Code Execution

apparmor is vulnerable to Arbitrary Code Execution. This vulnerability exists due to a flaw in the way AppArmor compiles mount rules. A local attacker can exploit this vulnerability by mounting a specially crafted filesystem, which could lead to arbitrary code execution...

Denial Of Service (DoS)

opensc is vulnerable to Denial of Service. The vulnerability exists in card-tcos.c due to a stack overflow error in APDU, which allows an attacker to cause an application crash or potentially execute arbitrary code...

Denial Of Service (DoS)

binutils is vulnerable to Denial of Service DoS attacks. This vulnerability exists due to a flaw in the way objdump parses certain ELF files. A remote attacker can exploit this vulnerability by sending a specially crafted ELF file, which could lead to an application crash...

Denial Of Service (DoS)

python3.9 is vulnerable to Denial of Service DoS attacks. This vulnerability exists due to a flaw in the way the plistlib module parses certain Apple Property List plist files in binary format. A remote attacker can exploit this vulnerability by sending a specially crafted plist file, which could...

XML External Entity (XXE)

python3.9 is vulnerable to XML External Entity XXE. This vulnerability exists due to a flaw in the way the plistlib module parses certain XML plist files. An attacker can exploit this vulnerability by sending a specially crafted plist file that references an external entity, which could allow the...

Timing Attack

python3.9 is vulnerable to Improper Access Control. The vulnerability exists due to a flaw in the way the hmac.comparedigest function in the Lib/hmac.py module compares two message digests. An attacker can exploit this vulnerability to distinguish between different message digests, which could be...

Denial Of Service (DoS)

file is vulnerable to Denial of Service DoS attacks. This vulnerability exists due to a flaw in the way the filecopystr function in the funcs.c file copies a string from one buffer to another. An attacker can exploit this vulnerability to corrupt the stack, which could lead to a crash...

Denial Of Service (DoS)

imagemagick is vulnerable to Denial of Service DoS attacks. The vulnerability exists due to a flaw in the way the identify command handles certain image files. A remote attacker can exploit this vulnerability to cause the ImageMagick process to leak memory, which could eventually lead to a denial...

Authorization Bypass

cacti is vulnerable to Authorization Bypass. This vulnerability exists due to improper validation in the PHP code of the cactildapauth function. A remote attacker can exploit this vulnerability to bypass authentication and gain unauthorized access to the Cacti web interface...

Privilege Escalation

perl is vulnerable to Privilege Escalation. This vulnerability exists due to a flaw in the way the Sfinduninitvar function in the sv.c file handles certain variables. A remote attacker can exploit this vulnerability to crash the Perl interpreter or execute arbitrary code...

Use After Free

Firefox is vulnerable to Use After Free. The vulnerability exists if the Refresh Driver is destroyed at an inopportune time, which allows an attacker to cause an application crash through the memory corruption via malicious SVG image...

Out Of Bounds Memory Read

qemu is vulnerable to Out Of Bounds Memory Read. The vulnerability exists because the QEMU process does not validate an offset provided by the guest before computing a host heap pointer, which is used for copying data back to the guest, leading to Heap Out Of Bounds Memory Read...

Denial Of Service (DoS)

binutils is vulnerable to Denial Of Service DoS. The vulnerability exists in the libbfd.c due to the lack of validation in the auxiliary symbol data, which allows an attacker to read or write to system memory or cause an application crash...

Denial Of Service (DoS)

clamav is vulnerable to Denial Of Service DoS. The vulnerability exists due to a logic error in memory management, which allows an attacker to cause the ClamAV scanning process to restart unexpectedly by submitting maliciously crafted AutoIt file, resulting in a DoS condition...

Denial Of Service (DoS)

dpic is vulnerable to Denial Of Service DoS. The vulnerability exists due to the buffer overflow and reads out of the bound array in the theyylex function of main.c, which allows an attacker to cause an application crash...

Denial Of Service (DoS)

dpic is vulnerable to Denial Of Service DoS. The vulnerability exists due to the heap use after free in the thedeletestringbox function of dpic.y., which allows an attacker to cause an application crash...

Denial Of Service (DoS)

dpic is vulnerable to Denial Of Service DoS. The vulnerability exists due to the heap-based buffer overflow in the thestorestring function of dpic.y., which allows an attacker to cause an application crash...

Denial Of Service (DoS)

wireshark is vulnerable to Denial Of Service DoS. The vulnerability exists due to the memory leak in the BT SDP dissector, which allows an attacker to cause an application crash via packet injection or crafted capture file...

Denial Of Service (DoS)

wireshark is vulnerable to Denial Of Service DoS. The vulnerability exists in the CBOR dissector, which allows an attacker to cause an application crash via packet injection or crafted capture file...

Denial Of Service (DoS)

wireshark is vulnerable to Denial Of Service DoS. The vulnerability exists due to the infinite loop in the BT SDP dissector, which allows an attacker to cause an application crash via packet injection or crafted capture file...

Out-Of-Bounds Memory Access

Google Chrome is vulnerable to Out-Of-Bounds Memory Access. The vulnerability exists in the Fonts, which allows an attacker to perform an out of bounds memory read via a maliciously crafted HTML page...

Use After Free

Google Chrome is vulnerable to Use After Free. The vulnerability exists in the Vulkan, which allows an attacker perform heap corruption via a maliciously crafted HTML page...

Use After Free

Google Chrome is vulnerable to Use After Free. The vulnerability exists in the Loader, which allows an attacker perform heap corruption via a maliciously crafted HTML page...

Out-Of-Bounds Memory Access

Google Chrome is vulnerable to Out-Of-Bounds Memory Access. The vulnerability exists in the CSS, which allows an attacker to perform an out of bounds memory read via a maliciously crafted HTML page...

Out-Of-Bounds Memory Access

Google Chrome is vulnerable to Out-Of-Bounds Memory Access. The vulnerability exists in the V8, which allows an attacker to perform an out of bounds memory read via a maliciously crafted HTML page...

Denial Of Service (DoS)

nasm is vulnerable to Denial Of Service DoS. The vulnerability exists due to the buffer overflow in the quoteforpmake function of nasm.c, which allows an attacker to cause an application crash via a maliciously crafted file...

Heap Buffer Overflow

binutils is vulnerable to Heap Buffer Overflow. The vulnerability exists in the findsectioninset function of readelf.c, which allows an attacker to cause an application crash by providing a maliciously crafted input...

Buffer Overflow

flac is vulnerable to Buffer Overflow. The vulnerability exists in the bitwritergrow function in the library, which allows an attacker to run arbitrary code via crafted input to the encoder...

Memory Leak

mupdf is vulnerable to Memory Leak. The vulnerability exists in the pdf-font-add.c, which allows an attacker to gain sensitive information...

Privilege Escalation

github.com/gravitl/netmaker is vulnerable to Privilege Escalation. The vulnerability exists due to improper permission validation for non-admin users, which allows an attacker to perform authorized actions on users, such as changing roles...

Open Redirect

Apache tomcat is vulnerable to Open Redirect Vulnerability. The vulnerability arises due to not validating/sanitizing the request uri used to redirect a user back to the original page after a successful form submission. The attacker can redirect a user to any malicious crafted url leading to open...

Hardcoded DNS Key

github.com/gravitl/netmaker uses a Hardcoded DNS Key. The vulnerability exists because the library does not securely set a DNS secret key, which allows an attacker to access DNS related API endpoints...

Deserialization Of Untrusted Data

org.springframework.kafka, spring-kafka is vulnerable to Deserialization Of Untrusted Data. The vulnerability is caused by not setting ErrorHandlingDeserializer when checkDeserExWhenKeyNull or checkDeserExWhenValueNull container properties are set to true. An attacker can construct a malicious...

Authorization Bypass

github.com/gravitl/netmaker is vulnerable to authorization bypass. The vulnerability exists due to an Insecure Direct Object Reference, which allows an attacker to update a password of another user...

Denial Of Service (DoS)

github.com/libp2p/go-libp2p is vulnerable to Denial-of-ServiceDoS attacks. The vulnerability allows an attacker to send a malicious signed peer record to a victim node, which can cause the victim node to run out of memory and crash...

Denial Of Service (DoS)

libgerbv.so is vulnerable to Denial of Service DoS attacks. The vulnerability is caused by an Out-of-bounds memory violation due to the way Gerber RS-274X filenames are parsed. The overflow occurs because the filename variable is not properly freed, which can cause the variable to overflow the...

Path Traversal

pyramid is vulnerable to Path Traversal. The vulnerability exists because static.py does not properly remove null-byte characters from the path element, which allows an attacker to gain access to index.html located exactly one directory above the location of the static view's file system path...

Cross-Site Scripting (XSS)

@webiny/react-rich-text-renderer is vulnerable to Cross-Site Scripting XSS attacks. The vulnerability allows an attacker to inject malicious JavaScript code into a victim's browser, which could be used to steal cookies, session tokens, or other sensitive information due to the use of the...

Server-Side Request Forgery (SSRF)

GeoNode is vulnerable to Server-Side Request Forgery SSRF. The vulnerability allows an attacker to make unauthorized requests to arbitrary hosts on an internal network via the /proxy/?url= endpoint, which could be used to steal sensitive data, launch denial-of-service attacks, or possibly execute...

Arbitrary Code Execution

yamlbeans is vulnerable toArbitrary Code Execution. The vulnerability exists due to allowing arbitrary YAML tags by default which can represent arbitrary Java classes, which allows an attacker to execute arbitrary code if the application parses untrusted YAML files...

Denial Of Service (DoS)

yamlbeans is vulnerable to Denial Of Service DoS. The vulnerability exists due to a lack of entity expansion limits when parsing a YAML document. An attacker can exploit this flaw by creating a document small in size, but when expanded via the anchor feature expands to a large size, causing...

Remote Code Execution

vega is vulnerable to Remote code Execution RCE. The vulnerability is due to not validating/sanitizing the user supplied url used to to load an external resources web or local file system in the application. This can lead to an attacker launch RCE by pointing a user supplied URL to a malicious...

Denial Of Service (DoS)

binutils is vulnerable to Denial Of Service DoS. The vulnerability exists in the bfdmachogetsyntheticsymtab function of match-o.c, which allows an attacker to cause an aplication crash by providing a maliciously crafted input...

Denial Of Service (DoS)

binutils is vulnerable to Denial Of Service DoS. The vulnerability exists in the comparesymbols function of the library, which allows an attacker to cause an aplication crash by providing a maliciously crafted input...

Denial Of Service (DoS)

binutils is vulnerable to Denial Of Service DoS. The vulnerability exists due to the out of bound reads in the parsemodule function, which allows an attacker to cause an application crash...

Memory Leaks

binutils is vulnerable to Memory Leaks. The vulnerability occurs in parsestabstructfields within stabs.c which allows a malicious attacker to cause a denial of service locally...

Memory Leaks

binutils is vulnerable to Memory Leaks. The vulnerability occurs in prfunctiontype within prdbg.c, which allows a malicious attacker to cause a denial of service locally...

Memory Leaks

binutils is vulnerable to Memory Leaks. The vulnerability occurs in maketempdir and maketempname within bucomm.c, which allows a malicious attacker to cause a denial of service locally...