Skip to content
OpenAdvisories

Archive

17 April 2021

Vulnerabilities first published on this day (UTC), newest first.

4 results · Feed

  • High 8.8
    CVE-2021-3492 Public exploit

    Ubuntu linux kernel shiftfs file system double free vulnerability

    Shiftfs, an out-of-tree stacking file system included in Ubuntu Linux kernels, did not properly handle faults occurring during copy_from_user() correctly. These could lead to either a double-free situation or memory not being freed at all. An attacker could u…

  • High 8.8
    CVE-2021-3493 Exploited Public exploit EPSS 49%

    The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting …

    KEV Oct 20, 2022
  • Critical 9.8

    SQL Injection Vulnerability in Multimedia Console and the Media Streaming Add-On

    An SQL injection vulnerability has been reported to affect QNAP NAS running Multimedia Console or the Media Streaming add-on. If exploited, the vulnerability allows remote attackers to obtain application information. QNAP has already fixed this vulnerability …

  • Critical 9.8
    CVE-2020-2509 Exploited Public exploit EPSS 34%

    Command Injection Vulnerability in QTS and QuTS hero

    A command injection vulnerability has been reported to affect QTS and QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary commands in a compromised application. We have already fixed this vulnerability in the following versions: …

    KEV Apr 11, 2022