Exploit Database
149,752 exploits tracked across all sources.
Dromara hutool <5.8.21 - SQL Injection
SQL Inection vulnerability in Dromara hutool before 5.8.21 allows attacker to execute arbitrary code via the aviator template engine.
CVSS 9.8
Dromara hutool <5.8.21 - SQL Injection
SQL Inection vulnerability in Dromara hutool before 5.8.21 allows attacker to execute arbitrary code via the aviator template engine.
CVSS 9.8
Dromara Hutool <5.8.11 - Code Injection
Deserialization vulnerability in Dromara Hutool v5.8.11 allows attacker to execute arbitrary code via the XmlUtil.readObjectFromXml parameter.
CVSS 9.8
hutool-core <5.8.23 - Buffer Overflow
The NumberUtil.toBigDecimal method in hutool-core v5.8.23 was discovered to contain a stack overflow.
CVSS 7.5
hutool < 5.8.24 - Denial of Service via StrSplitter.splitByRegex Infinite Loop
hutool-core v5.8.23 was discovered to contain an infinite loop in the StrSplitter.splitByRegex function. This vulnerability allows attackers to cause a Denial of Service (DoS) via manipulation of the first two parameters.
CVSS 7.5
hutool < 5.8.22 - Buffer Overflow in JSONUtil.parse()
hutool v5.8.21 was discovered to contain a buffer overflow via the component JSONUtil.parse().
CVSS 7.5
hutool v5.8.21 - Buffer Overflow via jsonObject.putByPath
hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonObject.putByPath.
CVSS 9.8
hutool < 5.8.22 - Buffer Overflow in JSON Array Component
hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonArray.
CVSS 9.8
Hutool < 5.8.17 - Information Disclosure via File.createTempFile()
Hutool v5.8.17 and below was discovered to contain an information disclosure vulnerability via the File.createTempFile() function at /core/io/FileUtil.java.
CVSS 7.1
Dromara hutool <5.8.21 - SQL Injection
SQL Inection vulnerability in Dromara hutool before 5.8.21 allows attacker to execute arbitrary code via the aviator template engine.
CVSS 9.8
Dromara hutool <5.8.21 - SQL Injection
SQL Inection vulnerability in Dromara hutool before 5.8.21 allows attacker to execute arbitrary code via the aviator template engine.
CVSS 9.8
Dromara Hutool <5.8.11 - Code Injection
Deserialization vulnerability in Dromara Hutool v5.8.11 allows attacker to execute arbitrary code via the XmlUtil.readObjectFromXml parameter.
CVSS 9.8
hutool < 5.8.10 - Resource Consumption in ZipUtil
A vulnerability classified as problematic was found in Dromara HuTool up to 5.8.10. This vulnerability affects unknown code of the file cn.hutool.core.util.ZipUtil.java. The manipulation leads to resource consumption. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 5.8.11 is able to address this issue. It is recommended to upgrade the affected component. VDB-215974 is the identifier assigned to this vulnerability.
CVSS 4.3
hutool-json < 5.8.11 - Denial of Service via Crafted JSON or XML Data
A stack overflow in the org.json.JSONTokener.nextValue::JSONTokener.java component of hutool-json v5.8.10 allows attackers to cause a Denial of Service (DoS) via crafted JSON or XML data.
CVSS 7.5
hutool-json 5.8.10 - Out-of-bounds Write
hutool-json v5.8.10 was discovered to contain an out of memory error.
CVSS 7.5
hutool-json 5.8.10 - Denial of Service via XML.toJSONObject Stack Overflow
A stack overflow in the XML.toJSONObject component of hutool-json v5.8.10 allows attackers to cause a Denial of Service (DoS) via crafted JSON or XML data.
CVSS 7.5
Hutool < 5.7.19 - Improper Certificate Validation
Hutool v5.7.18's HttpRequest was discovered to ignore all TLS/SSL certificate validation.
CVSS 9.8
byacc < 1.9.20200330 - Use-After-Free in Comment Processing
When processing files, malloc stores the data of the current line. When processing comments, malloc incorrectly accesses the released memory (use after free).
CVSS 7.8
byacc < 1.9.20200330 - Denial of Service via Infinite Loop in more_curly()
When a file is processed, an infinite loop occurs in next_inline() of the more_curly() function.
CVSS 5.5
Mailman Core <3.3.5 - Info Disclosure
An issue was discovered in Mailman Core before 3.3.5. An attacker with access to the REST API could use timing attacks to determine the value of the configured REST API password and then make arbitrary REST API calls. The REST API is bound to localhost by default, limiting the ability for attackers to exploit this, but can optionally be made to listen on other interfaces.
CVSS 6.3
QEMU < 6.0.0 - Denial of Service via USB Redirector Device Stack Allocation
A flaw was found in the USB redirector device (usb-redir) of QEMU. Small USB packets are combined into a single, large transfer request, to reduce the overhead and improve performance. The combined size of the bulk transfer is used to dynamically allocate a variable length array (VLA) on the stack without proper validation. Since the total size is not bounded, a malicious guest could use this flaw to influence the array length and cause the QEMU process to perform an excessive allocation on the stack, resulting in a denial of service.
CVSS 5.5
libvirt < 7.5.0 - Incorrect Permission Assignment for Critical Resource via SELinux MCS Category Pair Generation
A flaw was found in libvirt while it generates SELinux MCS category pairs for VMs' dynamic labels. This flaw allows one exploited guest to access files labeled for another guest, resulting in the breaking out of sVirt confinement. The highest threat from this vulnerability is to confidentiality and integrity.
CVSS 6.3
libvirt 4.1.0-7.4.0 - Denial of Service via Improper Locking in virStoragePoolLookupByTargetPath
An improper locking issue was found in the virStoragePoolLookupByTargetPath API of libvirt. It occurs in the storagePoolLookupByTargetPath function where a locked virStoragePoolObj object is not properly released on ACL permission failure. Clients connecting to the read-write socket with limited ACL permissions could use this flaw to acquire the lock and prevent other users from accessing storage pool/volume APIs, resulting in a denial of service condition. The highest threat from this vulnerability is to system availability.
CVSS 6.5
Samba 4.1.0-4.15.9 - Uncontrolled Resource Consumption via MaxQueryDuration LDAP Bypass
MaxQueryDuration not honoured in Samba AD DC LDAP
CVSS 6.5
nbdkit 1.11.8-1.24.6 - Denial of Service via STARTTLS Plaintext Injection
A flaw was found in nbdkit due to to improperly caching plaintext state across the STARTTLS encryption boundary. A MitM attacker could use this flaw to inject a plaintext NBD_OPT_STRUCTURED_REPLY before proxying everything else a client sends to the server, potentially leading the client to terminate the NBD session. The highest threat from this vulnerability is to system availability.
CVSS 3.1
By Source