Memory Leaks

binutils is vulnerable to Memory Leaks. The vulnerability occurs in stabdemanglev3arg within stabs.c which allows a malicious attacker to cause a denial of service locally...

Reachable Assertion

binutils is vulnerable to Reachable Assertion. The vulnerability occurs due to a reachable assertion failure within the displaydebugnames function resulting in a malicious attacker to cause a denial of service...

Use After Free

Dpic is vulnerable to Use After Free. This vulnerability exists in the 'thedeletestringbox' function of 'dpic.y' due to the lack of validation of user inputs, which allows an attacker to exploit it through the use of maliciously crafted input...

Heap Buffer Overflow

dpic is vulnerable to Heap Buffer Overflow. The vulnerability exists in the themakevar function of dpic.y, which allows an attacker to cause an application crash by providing a maliciously crafted input...

Password Aging With Long Expiration

answerdev/answer is vulnerable to Password Aging With Long Expiration vulnerability. The vulnerability is due to not invalidating/expiring password reset link within a sufficient interval of time. The attacker can reset the password multiple times using the same password reset link and take over...

Improper Certificate Validation

apacheairflow is vulnerable to Improper Certificate Validation. The software does not properly validate SMTP certificates, which could allow an attacker to present a malicious certificate to the client which could be used to impersonate a legitimate mail server, allowing the attacker to steal mai...

Denial Of Service (DoS)

apacheairflow is vulnerable to Denial Of Service DoS attacks. The vulnerability can be exploited by an authenticated user with edit connection privileges, allowing them to send a large number of test connection requests, which can eventually exhaust the server's resources and cause a DoS...

Cross-site Scripting (XSS)

silverstripe/admin is vulnerable to Cross-site Scripting XSS. The vulnerability exists in the tinymce.js due to lack of sanitization of user inputs during editing which allows an attacker to inject and execute arbitrary JavaScript into a victims browser...

Improper Access Control

waldhacker/hcaptcha library is vulnerable to Improper Access Control. This vulnerability exists because the captcha field allowed whitespaces, which allows attackers to bypass the security captcha check in the system...

Denial Of Service (DoS)

libeconf.so is vulnerable to Denial Of Service DoS. The vulnerability exists in the econfwriteFile function at libeconf.c due to a stack overflow error which allows an attacker to cause an application crash, or execute arbitrary code...

Denial Of Service (DoS)

libdjvulibre.so is Denial Of Service DoS. The vulnerability exists in the IW44Image::Map::image function at IW44Image.cpp due to a divide by zero bug resulting in a floating point exception causing an application crash...

Session Fixation

apacheairflow is vulnerable to Session Fixation. An authenticated user is able to continue to access the Airflow webserver even after their password has been reset by an admin. The vulnerability exists because the existing sessions of the user are not invalidated when the password is reset...

Locally Encrypted File Disclosure

ActiveSupport is vulnerable to Locally Encrypted File Disclosure. The vulnerability exists because the library's temporary file's permissions default to the user's current umask settings, which allows an attacker on the same system to read the contents of the temporary file before it gets encrypt...

Use After Free

mupdf is vulnerable to Use After Free. The vulnerability occurs in the svgdevtextspanaspathsdefs function within source/fitz/svg-device.c which allows a malicious attacker to parse a crafted PDF file which results in denial of service...

Cross-site Scripting (XSS)

github.com/prometheus/alertmanager is vulnerable to Cross-site Scripting XSS. The vulnerability exists due to the lack of HTML sanitization in the generatorURL field of Alert.elm, which allows an attacker to inject and execute malicious JavaScript by sending a POST request to the /api/v1/alerts...

Insufficient Session Expiration

github.com/argoproj/argo-cd is vulnerable to Insufficient Session Expiration. The vulnerability exists because web terminal sessions in the library do not expire, which allows an attacker to send a websocket messages even if the token has already expired, leading to sensitive information...

Denial Of Service (DoS)

mosquitto is vulnerable to Denial of Service DoS attacks. This vulnerability exists due to a flaw in the way Envoy handles certain requests. A remote attacker can exploit this vulnerability to cause Envoy to crash, which could lead to a denial of service attack...

Denial Of Service (DoS)

mosquitto is vulnerable to Denial of Service DoS attacks. This vulnerability exists due to a flaw in the way the broker handles certain messages. A remote attacker can exploit this vulnerability to cause the broker to leak memory, which could eventually lead to a denial of service attack...

Authorization Bypass

perl-lwp-protocol-https is vulnerable to Authorization Bypasses. This vulnerability exists due to a flaw in the way the LWP::Protocol::https module handles certain environment variables. A remote attacker can exploit this vulnerability to disable certificate validation, which could allow them to...

Denial Of Service (DoS)

libssh2.so is vulnerable to Denial Of Service DoS. The vulnerability exists in the libssh2transportread function at transport.c due to an out of bound read which allows an attacker to cause an application crash...

Open Redirect

Horizon is vulnerable to Open Redirect. The vulnerability is due to improper URL redirects validation in the getcontextdata function of views.py, which allows an attacker to redirect a user to a malicious URL...

Denial Of Service (DoS)

libexiv2.so is vulnerable to Denial Of Service DoS. The vulnerability exists in the PngImage::printStructure function at pngimage.cpp due to a buffer overflow which allows an attacker to cause an application crash...

Arbitrary Code Execution

langchain is vulnerable to Arbitrary Code Execution. The vulnerability exists due to a lack of validation in the loadprompt parameter, which allows an attacker to execute malicious code into the system...

Denial Of Service (DoS)

libmemcached.so is vulnerable to Denial of Service DoS attacks. An attacker is able to exploit this vulnerability by sending a specially crafted UDP packet to the memcached server, which could cause the server to crash...

Denial Of Service (DoS)

libsass.so is vulnerable to Denial Of Service DoS. The vulnerability exists in CompoundSelector::hasrealparentref at astselectors.cpp due to a stack overflow which allows an attacker to cause an application crash...

Denial Of Service (DoS)

github.com/etcd-io/etcd is vulnerable to Denial of Service DoS attacks.. The vulnerability exists because the PageWriter.write function does not properly handle large requests, which an attacker to exploit this vulnerability by sending a specially crafted request that is larger than the expected...

Information Disclosure

Datasette is vulnerable to Information Disclosure. The vulnerability exists because it does not check permissions when viewing the /-/api endpoint, resulting in databases and tables disclosure to unauthenticated users...

Denial Of Service (DoS)

libsass.so is vulnerable to Denial Of Service DoS. The vulnerability exists in ComplexSelector::hasplaceholder at astselectors.cpp due to a stack overflow which allows an attacker to cause an application crash...

Denial Of Service (DoS)

libsass.so is vulnerable to Denial Of Service DoS. The vulnerability exists in CompoundSelector::hasrealparentref function at astselectors.cpp due to a buffer overflow which leads to an application crash...

Denial Of Service (DoS)

json2xml is vulnerable to Denial of Service DoS attacks. A typecode decoding error allows an attacker to cause a denial of service DoS attack via sending a specially crafted JSON file to the json2xml.Json2xml function, which would cause the application to crash...

Server-Side Request Forgery (SSRF)

org.apache.xmlgraphics:batik-script is vulnerable to Server-Side Request Forgery SSRF. An attacker is able to trick the application into loading a malicious SVG file, which could then be used to probe user data...

Arbitrary Command Injection

shescape is vulnerable to Arbitrary Command Injection. The vulnerability exists in threaded contexts on Windows, which results in improper escaping of shells, which allows an attacker to bypass shell sanitization...

Server-Side Request Forgery (SSRF)

Apache XML Graphics Batik is vulnerable to Server-Side Request Forgery SSRF. An attacker is able to trick the application into loading a malicious SVG file, which could then be used to cause excess resource consumption or make unauthorized requests to other systems...

Denial Of Service (DoS)

libeconf.so is vulnerable to Denial Of Service DoS. The vulnerability exists due to the stack-buffer-overflow in the readfile function of getfilecontents.c, which allows an attacker to cause an application crash or execute arbitrary code...

Privilege Escalation

nodejs is vulnerable to Privilege Escalation. This vulnerability exists due to a flaw in the way the process.binding API can be used to bypass the policy mechanism. An attacker can exploit this vulnerability to gain elevated privileges...

Denial Of Service (DoS)

libdjvulibre.so is vulnerable to Denial Of Service DoS. The vulnerability exists due to the lack of input validation in the IW44EncodeCodec.cpp when preparing the gray level conversion table, which allows an attacker to cause an application crash via divide by zero...

Use After Free

libz3.so is vulnerable to Use After Free. The vulnerability exists in the pddsimplifier.cpp when the solver attempts to simplify the constraints, which causes unexpected memory access, leading to segmentation faults or arbitrary code execution...

Remote Code Execution (RCE)

mosquitto is vulnerable to a remote code execution vulnerability. This vulnerability exists due to a flaw in the way the library handles certain requests. A remote attacker can exploit this vulnerability to execute arbitrary code on the affected system...

Improper Access Control

nodejs is vulnerable to Improper Access Control. This vulnerability exists due to a flaw in the way the module.constructor.createRequire API can be used to bypass the policy mechanism. An attacker can exploit this vulnerability to load modules outside of the policy...

Type Confusion

nodejs is vulnerable to Type Confusion. This vulnerability exists due to a flaw in the way the Module.load API handles certain modules. An attacker is able to exploit this vulnerability to cause a type confusion error, which could lead to arbitrary code execution...

Use-After-Free

chromium is vulnerable to Use-After-Free. This allows a malicious attacker to remotely compromise the render process resulting in heap corruption using a crafted HTML page...

IPv6 Local Scoped Address Disruption

opensmtpd is vulnerable to IPv6 Local Scoped Address Disruption . The vulnerability exists due to the use of inetpton3 function in the envelope.c, which allows an attacker to abort the connection by providing localy scoped IPv6 address...

Sensitive Data Exposure

answerdev/answer is vulnerable to Sensitive Data Exposure. The vulnerability is due to not sanitizing EXIF Exchangeable Image File Format image while uploading the image in profile or comment section.This can lead to attacker extract EXIF metadata containing Geolocation and many other image...

Memory Corruption

xterm is vulnerable to Memory Corruption. The vulnerability is due to ReGIS reporting character-set names even if it contains unexpected characters resulting in a pointer/overflow issue...

Race Condition

tmate-ssh-server is vulnerable to Race Condition. This vulnerability exists due to the insecure creation of temporary directories, allowing a malicious attacker to compromise the integrity of session handling locally...

Insecure Session Management

tmate-ssh-server is vulnerable to Insecure Session Management. This vulnerability exists due to a lack of proper session ID handling, which could lead to the execution of arbitrary code on the user's system...

HTTP Request Smuggling

Haproxy is vulnerable to HTTP Request Smuggling. This vulnerability exists in the HTTP/1 server, which interprets a payload as an extra request due to empty Content-Length headers being forwarded. This allows an attacker to inject malicious payloads into the system...

Remote Code Execution (RCE)

craftcms/cms is vulnerable to Remote Code Execution. The vulnerability is due to a lack of file protocol removal in FileHelper.php which allows an attacker to upload and execute malicious PHP code into the system...

Cross-Site Request Forgery (CSRF)

wallabag/wallabag is vulnerable to Cross-Site Request Forgery CSRF. Through the use of a malicious GET request to the /reset/annotations, /reset/entries, /reset/tags, or /reset/archived endpoints, an attacker is able to arbitrary reset annotations, entries, and tags...

Insufficient Session Expiration

@node-saml/node-saml is vulnerable to Insufficient Session Expiration. The vulnerability exists due to the lack of validation checks of the current timestamp in the processValidlySignedPostRequestAsync function of saml.ts, which allows an attacker to reuse LogoutRequest XML multiple times even wh...