Archive
May 2021
Vulnerabilities first published in this month (UTC), newest first.
138 results · Clear filters · Feed
-
Low 3.3
Use of "infinity" as an input to datetime and date fields causes infinite loop in pydantic
Pydantic is a data validation and settings management using Python type hinting. In affected versions passing either `'infinity'`, `'inf'` or `float('inf')` (or their negatives) to `datetime` or `date` fields causes validation to run forever with 100% CPU usa…
-
Low 3.6
Uninitialized variable bug in Exiv2
Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. A read of uninitialized memory was found in Exiv2 versions v0.27.3 and earlier. Exiv2 is a command-line utility and C++ library for rea…
-
Low 3.7
Denial of service in Matrix Synapse
Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.33.2 "Push rules" can specify conditions under which they will match, i…
-
Low 3.4
In specific situations SAP GUI for Windows until and including 7.60 PL9, 7.70 PL0, forwards a user to specific maliciou…
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader …
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader …
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader …
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader …
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader …
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader …
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader …
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader …
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader …
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader …
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader …
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader …
-
Low 3.1
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7. GitLab Dependency Proxy, under …
-
Low 3.3
cups: ownership of /var/log/cups allows the lp user to create files as root
A Incorrect Default Permissions vulnerability in the packaging of cups of SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack Cloud Crowbar 9; openSUSE Leap 15.2, Factory allows local attackers with control of the lp users to cre…