Archive
30 April 2021
Vulnerabilities first published on this day (UTC), newest first.
50 results · Feed
-
Unscored —
A flaw was found in the Key Recovery Authority (KRA) Agent Service in pki-core 10.10.5 where it did not properly saniti…
-
Unscored —
GalaxyClient version 2.0.28.9 loads unsigned DLLs such as zlib1.dll, libgcc_s_dw2-1.dll and libwinpthread-1.dll from PA…
-
Medium 6.5
Specially crafted query may result in a denial of service of mongod
A user authorized to performing a specific type of find query may trigger a denial of service. This issue affects MongoDB Server v4.4 versions prior to 4.4.4.
-
Unscored —
An issue was discovered in klibc before 2.0.9. Multiplication in the calloc() function may result in an integer overflo…
-
Unscored —
An issue was discovered in klibc before 2.0.9. Multiple possible integer overflows in the cpio command on 32-bit system…
-
Unscored —
An issue was discovered in klibc before 2.0.9. An integer overflow in the cpio command may result in a NULL pointer der…
-
High 7.5
Use of uninitialized buffer in rkyv
An issue was discovered in the rkyv crate before 0.6.0 for Rust. When an archive is created via serialization, the archive content may contain uninitialized values of certain parts of a struct.
-
Low 3.3
Out-of-bounds read in Exiv2::WebPImage::doWriteMetadata
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.3 and earlier. The out-of-bounds read is triggered when Exiv2 is used to write m…
-
Low 3.3
Heap buffer overflow in Exiv2::Jp2Image::encodeJp2Header
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A heap buffer overflow was found in Exiv2 versions v0.27.3 and earlier. The heap overflow is triggered when Exiv2 is used to write metad…
-
Unscored —
An issue was discovered in klibc before 2.0.9. Additions in the malloc() function may result in an integer overflow and…