38611 matches found
Cross-Site Scripting (XSS)
gitlab is vulnerable to Cross-Site Scripting XSS. The vulnerability exists in an attacker to use a specially crafted Kroki diagram to inject and execute arbitrary javascript...
Open Redirect
gitlab is vulnerable to Open Redirect vulnerability. The vulnerability allows an attacker to redirect the users to arbitrary protocols...
Arbitrary Code Execution
gitlab is vulnerable to Arbitrary Code Execution. The vulnerability allows an attacker inject and execute arbitrary codes to create repositories with malicious code with a specially crafted name...
Out-of-Bounds Read
nvidia-cuda-toolkit is vulnerable to Out-of-Bounds Read. The vulnerability exists in cuobjdump which allows an attacker to cause an out-of-bounds read by tricking a user into running cuobjdump on a malformed input file...
Use After Free
chromium is vulnerable to Use After Free. The vulnerability exists in the UI of the library, allowing an attacker to perform arbitrary read/write via a maliciously crafted HTML page...
Use After Free
chromium is vulnerable to Use After Free. The vulnerability exists in the Base Internals of the library, allowing an attacker to perform arbitrary read/write via a maliciously crafted HTML page...
Use After Free
chromium is vulnerable to Use After Free. The vulnerability exists in the Accessibility of the library, which allows an attacker to convince a user to engage in specific UI gestures to perform arbitrary read/write via a maliciously crafted HTML page...
Spoofing Attack
chromium is vulnerable to Spoofing Attack. The vulnerability exists due to the inappropriate implementation in Blink of the library, which allows an attacker to perform UI spoofing via a maliciously crafted HTML page...
Man-in-the-Middle (MitM)
chromium is vulnerable to Man-in-the-Middle MitM. The vulnerability exists due to the inappropriate implementation in Omnibox of the library, which allows an attacker in privileged network position to perform a man-in-the-middle attack via malicious network traffic...
Use After Free
chromium is vulnerable to Use After Free. The vulnerability exists in the WebRTC of the library, which allows an attacker to perform a sandbox escape via a maliciously crafted HTML page through the renderer process...
Improper Input Validation
chromium is vulnerable to Improper Input Validation. The vulnerability exists due to the lack of user input validation in the QUIC of the library, allowing an attacker to perform header splitting via malicious network traffic...
Same-Origin Policy Bypass
chromium is vulnerable to Same-Origin Policy Bypass. The vulnerability exists due to the insufficient policy enforcement in Intents of the library, allowing an attacker to bypass same origin policy via a maliciously crafted HTML page...
Heap Buffer Overflow
chromium is vulnerable to Heap Buffer Overflow. The vulnerability exists in the Blink of the library, which allows an attacker to convince user to engage in specific UI gestures to potentially perform a sandbox escape via a maliciously crafted HTML page...
Incorrect Authorization
gitlab is vulnerable to Incorrect Authorization. The vulnerabiity allows an attacker to bypass 2FA enforcement enabled at the group level by using Resource Owner Password Credentials grant to obtain an access token without using 2FA...
Information Disclosure
gitlab is vulnerable to Information Disclosure. The vulnerability exists due to lack of cascading deletes in GitLab which allows a malicious attacker to retain a usable Group Access Token even after the Group is deleted, though the APIs usable by that token are limited...
Incorrect Authorization
gitlab is vulnerable to Incorrect Authorization. The vulnerability allows an attacker to gain access to a private project through an email invite by using other user's email address as an unverified secondary email...
Access Restriction Bypass
chromium is vulnerable to Access Restriction Bypass. The vulnerability exists due to inappropriate implementation in Blink in Google Chrome which allows a remote attacker to perform arbitrary read/write via a crafted HTML page...
Arbitrary Code Execution
chromium is vulnerable to Arbitrary Code Execution. The vulnerability exists in FFmpeg in Google Chromewhich allows a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...
Information Disclosure
chromium is vulnerable to Information Disclosure. The vulnerability exists due to inappropriate implementation in iFrame Sandbox in Google Chromewhich allows a remote attacker to leak cross-origin data via a crafted HTML page...
Access Restriction Bypass
chromium is vulnerable to Access Restriction Bypass. The vulnerability exists due to inappropriate implementation in XML in Google Chromewhich allows a remote attacker to potentially perform an ASLR bypass via a crafted HTML page...
Improper Input Validation
chromium is vulnerable to Improper Input Validation. The vulnerability exists due to inappropriate implementation in Autofill in Google Chrome which allows a remote attacker to bypass navigation restrictions via a crafted HTML page...
Access Restriction Bypass
chromium is vulnerable to Access Restriction Bypass. The vulnerability exists due to insufficient data validation in DevTools in Google Chrome which allows a remote attacker to bypass content security policy via a crafted HTML page...
Denial Of Service (DoS)
chromium is vulnerable to Denial of Service DoS. The vulnerability exists due to type confusion in MathML in Google Chrome which allows a remote attacker to potentially exploit heap corruption via a crafted HTML page...
Access Restriction Bypass
chromium is vulnerable to Access Restriction Bypass. The vulnerability exists due to inappropriate implementation in Extensions in Google Chrome which allows a remote attacker who had compromised the renderer process to spoof extension storage via a crafted HTML page...
Heap Buffer Overflow
chromium is vulnerable to Heap Buffer Overflow. The vulnerability exists in the PrintPreview of the library, which allows an attacker to convince user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page...
Spoofing Attack
chromium is vulnerable to Spoofing Attack. The vulnerability exists due to the inappropriate implementation in URL Formatting of the library, allowing an attacker to perform domain spoofing via a maliciously crafted HTML page...
Use After Free
chromium is vulnerable to Use After Free. The vulnerability exists in the Media of the library, allowing an attacker to perform arbitrary read/write via a maliciously crafted HTML page...
Improper Access Control
chromium is vulnerable to Improper Access Control. The vulnerability exists due to incorrect security UI in Notifications in Google Chrome on Androidwhich allows a remote attacker to obscure the full screen notification via a crafted HTML page...
Heap-based Buffer Overflow
wireshark is vulnerable to Heap-based Buffer Overflow. The vulnerability exists due to failure in validating the length provided which allows an attacker to execute arbitrary codes using a crafted RTPS packet causing an application crash...
Heap-based Buffer Overflow
wireshark is vulnerable to Heap-based Buffer Overflow. The vulnerability exists due to failure in validating the length provided which allows an attacker to execute arbitrary codes using a crafted IEEE-C37.118 packet...
Heap-based Buffer Overflow
wireshark is vulnerable to Heap-based Buffer Overflow. The vulnerability exists due to failure in validating the length provided which allows an attacker to execute arbitrary codes using a crafted MSMMS packet...
Improper Access Control
gitlab is vulnerable to Improper Access Control. The vulnerability allows a previous maintainer of a project with a specific runner to access job and project meta data under certain conditions...
Improper Authorization
gitlab is vulnerable to Improper Authorization. The vulnerabiltiy allows an attacker to extract the value of an unprotected variable they know the name of in public projects or private projects they're a member of...
Cross-site Scripting (XSS)
gitlab is vulnerable to Cross-site Scripting XSS. The vulnerability exists in the project settings page, allowing an attacker to inject and execute malicious javascript...
Improper Access Control
gitlab is vulnerable to Improper Access Control. An attacker could exploit this vulnerability by sending a specially crafted request to the GitLab server. This request would allow the attacker to perform any action that is allowed for the group or project, even if they do not have permission to...
Open Redirect
gitlab is vulnerable to Open Redirect. The vulnerability exists due to the lack of sanitization in the user input URLs, which allows an attacker to redirect users to malicious locations...
Improper Authorization
gitlab is vulnerable to Improper Authorization. This vulnerability allows project members to manage issues in the error tracking feature if they are assigned the reporter role...
Information Disclosure
gitlab is vulnerable to Information Disclosure. An attacker could exploit this vulnerability by sending a specially crafted request to the GitLab server. This request would allow the attacker to leak the names of all Conan packages on the server, even if they do not have permission to access the...
Improper Authorization
monit is vulnerable to Improper Authorization. This vulnerability occurs due to the improper PAM-authorization, resulting in remote malicious attackers gaining escalated privileges...
Information Disclosure
gitlab is vulnerable to Information Disclosure. An attacker could exploit this vulnerability by sending a specially crafted GraphQL query to the GitLab server. This query would allow the attacker to enumerate the usernames of all users on the server, even if they do not have an account...
Remote Code Execution (RCE)
gitlab is vulnerable to Remote Code Execution RCE. The vulnerability exists due to the lack of an authorization mechanism in the library, which allows an attacker to import maliciously crafted projects, injecting and executing malicious code...
Denial Of Service (DoS)
gitlab is vulnerable to Denial Of Service DoS. An attacker can cause an application crash by uploading a maliciously crafted Helm chart...
Open Redirection
gitlab is vulnerable to Open Redirection. An attacker can redirect users to malicious URLs through the HTTP response splitting in the NPM package API...
Cross-site Scripting (XSS)
gitlab is vulnerable to Cross-site Scripting XSS. An attacker can inject and execute malicious javascript through the email address for certain instances...
Out-of-bounds Read
samba is vulnerable to Out-of-bounds Read. The vulnerability is found within 'winbinddpamauthcrap.c' and occurs due to insufficient length checks resulting in a malicious request to trigger an out-of-bounds read...
Improper Access Control
samba is vulnerable to Improper Access Control. The vulnerability exists due to improper check attribute access rights for LDAP adds of computers which allows an attacker to perform unauthorized actions...
Arbitrary Code Execution
firefox-esr is vulnerable to Arbitrary Code Execution. The issue results in firefox users not being warned about it including malicious code within it...
Unsafe Reflection
thunderbird is vulnerable to Unsafe Reflection. This results in possible spoofing attacks since the website obscures fullscreen notifications using a URL scheme handled by an external program...
Information Disclosure
firefox is vulnerable to Information Disclosure. An attacker could exploit this vulnerability by tricking a user into visiting a malicious website or by opening a malicious attachment. If the user is using a vulnerable version of Firefox, the attacker could execute arbitrary code on the user's...