Archive
26 May 2021
Vulnerabilities first published on this day (UTC), newest first.
105 results · Feed
-
Unscored —
A flaw was found in Red Hat Ceph Storage 4, in the Dashboard component. In response to CVE-2020-27839, the JWT token wa…
-
Unscored —
An assertion abort was found in upx MemBuffer::alloc() in mem.cpp, in version UPX 4.0.0. The flow allows attackers to c…
-
Unscored —
Null pointer dereference was found in upx PackLinuxElf::canUnpack() in p_lx_elf.cpp,in version UPX 4.0.0. That allow at…
-
Unscored —
A flaw was found in libcaca. A buffer overflow of export.c in function export_troff might lead to memory corruption and…
-
Unscored —
A flaw was found in Red Hat Quay, where it does not properly protect the authorization token when authorizing email add…
-
High 7.4
A buffer overrun in lease file parsing code can be used to exploit a common vulnerability shared by dhcpd and dhclient
In ISC DHCP 4.1-ESV-R1 -> 4.1-ESV-R16, ISC DHCP 4.4.0 -> 4.4.2 (Other branches of ISC DHCP (i.e., releases in the 4.0.x series or lower and releases in the 4.3.x series) are beyond their End-of-Life (EOL) and no longer supported by ISC. From inspection it is …
-
Medium 5.3
Improper Input Validation in Jakarta Expression Language
In the Jakarta Expression Language implementation 3.0.3 and earlier, a bug in the ELParserTokenManager enables invalid EL expressions to be evaluated as if they were valid.
-
Unscored —
A flaw was found in dmg2img through 20170502. fill_mishblk() does not check the length of the read buffer, and copy 0xC…
-
Unscored —
A flaw was found in PoDoFo 0.9.7. A stack-based buffer overflow in PdfEncryptMD5Base::ComputeOwnerKey function in PdfEn…
-
Unscored —
A flaw was found in PoDoFo 0.9.7. An uncontrolled recursive call in PdfNamesTree::AddToDictionary function in src/podof…
-
Unscored —
A flaw was found in PoDoFo 0.9.7. An uncontrolled recursive call among PdfTokenizer::ReadArray(), PdfTokenizer::GetNext…
-
Unscored —
A flaw was found in PoDoFo 0.9.7. An use-after-free in PoDoFo::PdfVecObjects::Clear() function can cause a denial of se…
-
Unscored —
An insecure modification flaw in the /etc/passwd file was found in the redhat-sso-7 container. An attacker with access …
-
Unscored —
GLPi 9.5.4 does not sanitize the metadata. This way its possible to insert XSS into plugins to execute JavaScript code.
-
Unscored —
An Out of Bounds flaw was found fig2dev version 3.2.8a. A flawed bounds check in read_objects() could allow an attacker…
-
Unscored —
A flaw was found in ceph-dashboard. The JSON Web Token (JWT) used for user authentication is stored by the frontend app…
-
Unscored —
A NULL pointer dereference flaw was found in the floppy disk emulator of QEMU. This issue occurs while processing read/…
-
Unscored —
A flaw was found in the USB redirector device (usb-redir) of QEMU. Small USB packets are combined into a single, large …
-
Unscored —
Multiple directory traversal and buffer overflow vulnerabilities were discovered in yTNEF, and in Evolution's TNEF pars…
-
Unscored —
A flaw was found in Red Hat 3scale’s API docs URL, where it is accessible without credentials. This flaw allows an atta…
-
Medium 4.3
Unsynchronized Access to Shared Data in a Multithreaded Context in RESTEasy
A flaw was found in RESTEasy, where an incorrect response to an HTTP request is provided. This flaw allows an attacker to gain access to privileged information. The highest threat from this vulnerability is to confidentiality and integrity. Versions before re…
-
Unscored —
A flaw was found in the Linux kernel's implementation of string matching within a packet. A privileged user (with root …
-
Unscored —
A flaw was found in NetworkManager in versions before 1.30.0. Setting match.path and activating a profile crashes Netwo…
-
Unscored —
An out of bounds flaw was found in GNU binutils objdump utility version 2.36. An attacker could use this flaw and pass …
-
Unscored —
Buffer Overflow vulnerability exists in FFmpeg 4.2 in filter_vertically_8 at libavfilter/vf_avgblur.c, which could caus…
-
Unscored —
A flaw was found in dmg2img through 20170502. dmg2img did not validate the size of the read buffer during memcpy() insi…
-
Unscored —
Buffer Overflow vulnerability exists in FFmpeg 4.2 in the config_input function at libavfilter/af_tremolo.c, which coul…
-
Unscored —
Buffer Overflow vulnerability in FFmpeg 4.2 at the lagfun_frame16 function in libavfilter/vf_lagfun.c, which could let …
-
Unscored —
An issue was discovered in Couchbase Server 5.x and 6.x before 6.5.2 and 6.6.x before 6.6.2. Internal users with admini…
-
High —
Arbitrary Code Execution in json-ptr
There is a security vulnerability in `json-ptr` versions prior to v2.1.0 in which an unscrupulous actor may execute arbitrary code. If your code sends un-sanitized user input to json-ptr's .get() method, your project is vulnerable to this injection-style vuln…
-
Unscored —
Buffer Overflow vulnerability in FFmpeg 4.2 at filter_edges function in libavfilter/vf_yadif.c, which could let a remot…
-
Unscored —
Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex Model 3009 MP installed on Tricon…
-
Unscored —
Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex Model 3009 MP installed on Tricon…
-
Unscored —
Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex Model 3009 MP installed on Tricon…
-
Unscored —
Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex Model 3009 MP installed on Tricon…
-
Unscored —
Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex TCM 4351B installed on Tricon V11…
-
Unscored —
Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex Model 3009 MP installed on Tricon…
-
Unscored —
Use of Password Hash with Insufficient Computational Effort vulnerability exists in ClearSCADA (all versions), EcoStrux…
-
Unscored —
Information Exposure vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could cause i…
-
Unscored —
Information Exposure vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could cause a…