Improper Authorization

chromium is vulnerable to Improper Authorization. An attacker could exploit this vulnerability to impersonate a trusted website and trick the user into performing actions such as revealing sensitive information or installing malware. This could have serious consequences for the victim, such as...

Improper Input Validation

chromium is vulnerable to Improper Input Validation. The vulnerability exists due to lack of user input validation, which allows an attacker who convince a user to install a malicious extension to bypass file access checks via a crafted HTML page...

Insufficient Policy Enforcement

chromium is vulnerable to Insufficient Policy Enforcement. Insufficient policy enforcement in File System API allows a remote attacker to bypass filesystem restrictions via a crafted HTML page...

Arbitrary Code Execution

chromium is vulnerable to Arbitrary Code Execution. Inappropriate implementations in the library may allow a remote attacker who had compromised the renderer process to perform arbitrary read/write operations via a malicious file...

Improper Input Validation

chromium is vulnerable to Improper Input Validation. Insufficient data validation in DevTools allow a remote attacker to bypass navigation restrictions via a crafted HTML page...

Buffer Overflow

jhead is vulnerable to Buffer Overflows. The library is vulnerable to Buffer Overflows via shellescape, jhead.c, jhead. jhead copies strings to a stack buffer when it detects a or &o.; However, jhead does not check the boundary of the stack buffer. As a result, there will be a stack buffer overfl...

Improper Input Validation

trafficserver is vulnerable to Improper Input Validation. The configuration option proxy.config.http.pushmethodenabled doesn't function. However, by default the PUSH method is blocked in the ipallow configuration file...

Local File Inclusion (LFI)

dmidecode is vulnerable to local file inclusion LFI attacks. The vulnerability exists because the library enables -dump-bin to overwrite a local file, which allows execution of Dmidecode via Sudo...

Authorization Bypass

libreoffice is vulnerable to Authorization Bypasses. Improper access control in editor components allows an attacker to craft a document that would cause external links to be loaded without prompt. The documents that uses floating frames linked to external files, would load the contents of those...

Cross-Site Scripting (XSS)

odoo is vulnerable to Cross-Site Scripting XSS attacks. The vulnerability allows a remote attacker to inject arbitrary web script via the browser of a victim, by posting crafted content...

Cross-Site Scripting (XSS)

gitlab is vulnerable to Cross-Site Scripting XSS attacks. The library does not properly escape the special characters before it output to the front end, allowing an attacker to inject and execute malicious javascript on victim's browser, via the email address field...

Denial Of Service (DoS)

wireshark is vulnerable to Denial of Service DoS attacks. An infinite loop in XRA dissector allows an attacker to cause denial of service conditions via a packet injection or a crafted capture file...

Denial Of Service (DoS)

advancecomp is vulnerable to Denial of Service DoS attacks. A segmentation fault found in the library allows a local authenticated attacker to cause an application crash...

Type Confusion

chromium is vulnerable to Type Confusion. A remote attacker is able to potentially exploit heap corruption via a crafted HTML page...

Spoofing Attack

chromium is vulnerable to Spoofing Attack. The vulnerability exists because the inappropriate implementation in the Picture In Picture of the library, allowing an attacker to spoof the contents of the Omnibox URL bar via a maliciously crafted HTML page through the renderer process...

Spoofing Attack

chromium is vulnerable to Spoofing Attack. The vulnerability exists because the inappropriate implementation in the Picture In Picture of the library, allowing an attacker to spoof the contents of the Omnibox URL bar via a maliciously crafted HTML page through the renderer process...

Out Of Bounds Memory Access

chromium is vulnerable to Out-of-bound Memory Access. A remote attacker is able to potentially exploit heap corruption via a crafted HTML page, resulting in out of bounds memory access...

Out-of-Bounds Write

chromium is vulnerable to Out-of-Bounds Write. Out of bounds write in Swiftshader allows a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Authorization Bypass

chromium is vulnerable to Authorization Bypasses. Inappropriate implementation in downloads allows an attacker who convinces a user to install a malicious extension to bypass file access restrictions via a crafted HTML page...

Authorization Bypass

chromium is vulnerable to Authorization Bypasses. Inappropriate implementation in Extensions API allows an attacker who convinces a user to install a malicious extension to spoof the contents of the UI via a crafted Chrome Extension...

Privilege Escalation

chromium is vulnerable to Privilege Escalation. The vulnrability exists due to the insufficient data validation in Installer of the library, which allows an attacker to perform privilege escalation via malliciously crafted symbolic link...

Information Disclosure

gitlab is vulnerable to Information Disclosure. An attacker can read environment names supposed to be restricted to project memebers only...

Denial Of Service (DoS)

wireshark is vulnerable to Denial of Service DoS attacks. Infinite loop in GDSDB allows a remote attacker to cause denial of service conditions via packet injection or crafted capture file...

Information Disclosure

gitlab is vulnerable to Information Disclosure. Non-project members are able to retrieve release descriptions via the API, even if the release visibility is restricted to project members only in the project settings...

Denial Of Service (DoS)

wireshark is vulnerable to Denial Of Service DoS. The vulnerability exists through the BLF file parser in the library, allowing an attacker to cause an application crash via maliciously crafted file...

Denial Of Service (DoS)

wireshark is vulnerable to Denial Of Service DoS. The vulnerability exists through the NetScaler file parser in the library, allowing an attacker to cause an application crash via maliciously crafted file...

Denial Of Service (DoS)

wireshark is vulnerable to Denial Of Service DoS. The vulnerability exists through the Candump log parser in the library, allowing an attacker to cause an application crash via maliciously crafted file...

Denial Of Service (DoS)

wireshark is vulnerable to Denial Of Service DoS. The vulnerability exists through the VMS TCPIPtrace file parser in the library, allowing an attacker to cause an application crash via maliciously crafted file...

Denial Of Service (DoS)

wireshark is vulnerable to Denial Of Service DoS. The vulnerability exists through the BLF file parser in the library, allowing an attacker to cause an application crash via maliciously crafted file...

Information Disclosure

gitlab is vulnerable to Information Disclosure. The vulnerability may allow an authenticated user to unmask the Discord Webhook URL through viewing the raw API response...

Information Disclosure

gitlab is vulnerable to Information Disclosure. A malicious authenticated maintainer is able to leak the sentry token by changing the configured URL in the sentry error tracking settings page...

Bypassing Install Dialog

chromium is vulnerable to Bypassing Install Dialog. The vulnerability exists due to the inappropriate implementation in WebApp Installs of the library, which allows an attacker to convince a user to install a malicious web app to bypass the install dialog via a maliciously crafted HTML page...

Use After Free

chromium is vulnerable to Use After Free. The vulnerability exists in the Autofill UI in the library, which allows an attacker to cause heap corruption via a maliciously crafted HTML page...

Use After Free

chromium is vulnerable to Use After Free. The vulnerability exists in the DevTools in the library, which allows an attacker to cause heap corruption via a maliciously crafted HTML page through the renderer process...

Type Confusion

chromium is vulnerable to Type Confusion. The vulnerability exists in the V8 in the library, which allows an attacker to cause heap corruption via a maliciously crafted HTML page through the renderer process...

Use After Free

chromium is vulnerable to Use After Free. The vulnerability exists in the Guest View in the library, which allows an attacker to convince a user to install a malicious extension to potentially exploit heap corruption via a maliciously crafted HTML page...

Authorization Bypass

gitlab is vulnerable to Authorization Bypass. An attacker may be able to map a private email of a GitLab user to their GitLab account on an instance...

Leakage Of Webhook Secret

gitlab is vulnerable to Leakage of Webhook Secret. An attacker can leak masked webhook secrets by changing target URL of the webhook...

Denial Of Service (DoS)

frr is vulnerable to Denial of Service DoS. The vulnerability exists due to an out-of-bounds read which allows an attacker to cause an application crash...

Denial Of Service (DoS)

gitlab is vulnerable to Denial Of Service DoS. An attacker can cause high resource consumption using malicious test report artifacts, leading to an application crash...

Open Redirect

gitlab is vulnerable to Open Redirect. The vulnerability exists due to the lack of URL validation in the library, which allows an attacker to redirect users to malicious URLs and frame arbitrary content on any page allowing user-controlled markdown...

Information Disclosure

gitlab is vulnerable to Information Disclosure. The vulnerability exists because the Google IAP details in Prometheus integration are not properly hidden, which leads to the leak of project settings, instance and group details to other users...

Integer Overflow

vim is vulnerable to Integer Overflow. The vulnerability exists in egtilde function at regexp.c due to a segmentation fault which allows an attacker to exhausts memory causing an overflow...

Denial Of Service (DoS)

vim is vulnerable to Denial of Service DoS. The vulnerability exists due to a NULL Pointer Dereference which allows an attacker to cause an application crash...

Information Disclosure

gitlab is vulnerable to Information Disclosure. The vulnerable allows an attacker to modify a webhook URL to leak masked webhook secrets by manipulating other masked portions...

Information Disclosure

gitlab is vulnerable to Information Disclosure. The vulnerability exists due to the explosure of authorization header which allows an attacker to gain access to read authorization headers...

Server-Side Request Forgery (SSRF)

gitlab is vulnerable to Server-Side Request Forgery SSRF. The vulnerability exists in web terminal advertiseaddress which allows an attacker to connect to local addresses when configuring a malicious GitLab Runner...

Type Confusion

gitlab is vulnerable to Type Confusion. The vulnerability allows an attacker to override an existing hash which leads into type confusion...

Authentication Bypass

A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine...

Denial Of Service (DoS)

kodi is vulnerable to Denial Of Service DoS. The vulnerability exists due to the divide by zero issue in the library, allowing an attacker to cause an application crash by providing a maliciously crafted mp3 file...