Archive
May 2021
Vulnerabilities first published in this month (UTC), newest first.
1,521 results · Feed
-
Unscored —
GattLib 0.3-rc1 has a stack-based buffer over-read in get_device_path_from_mac in dbus/gattlib.c.
-
Unscored —
Trend Micro Home Network Security version 6.6.604 and earlier contains a hard-coded password vulnerability in the log c…
-
Unscored —
Trend Micro Home Network Security version 6.6.604 and earlier is vulnerable to an iotcl stack-based buffer overflow vul…
-
Unscored —
Cross-site scripting vulnerability in Zettlr from 0.20.0 to 1.8.8 allows an attacker to execute an arbitrary script by …
-
Unscored —
InspIRCd 3.8.0 through 3.9.x before 3.10.0 allows any user (able to connect to the server) to access recently deallocat…
-
Unscored —
Istio before 1.8.6 and 1.9.x before 1.9.5 has a remotely exploitable vulnerability where an HTTP request path with mult…
-
Unscored —
A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS in versions before 3.55. When using multi-part Cha…
-
Unscored —
kernel/bpf/verifier.c in the Linux kernel through 5.12.7 enforces incorrect limits for pointer arithmetic operations, a…
-
Unscored —
Boa 0.94.13 allows remote attackers to obtain sensitive information via a misconfiguration involving backup.html, previ…
-
Unscored —CVE-2021-28662 EPSS 72%
An issue was discovered in Squid 4.x before 4.15 and 5.x before 5.0.6. If a remote server sends a certain response head…
-
Unscored —
An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to a buffer-management bug, it allows a denial o…
-
Unscored —
An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to incorrect parser validation, it allows a Deni…
-
Unscored —
An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to a memory-management bug, it is vulnerable to …
-
Unscored —
An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to an input-validation bug, it is vulnerable to …
-
High 7.6CVE-2021-30465 EPSS 10%
mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs
runc before 1.0.0-rc95 allows a Container Filesystem Breakout via Directory Traversal. To exploit the vulnerability, an attacker must be able to create multiple containers with a fairly specific mount configuration. The problem occurs via a symlink-exchange a…
-
Unscored —
A flaw was found in Red Hat Ceph Storage 4, in the Dashboard component. In response to CVE-2020-27839, the JWT token wa…
-
Unscored —
An assertion abort was found in upx MemBuffer::alloc() in mem.cpp, in version UPX 4.0.0. The flow allows attackers to c…
-
Unscored —
Null pointer dereference was found in upx PackLinuxElf::canUnpack() in p_lx_elf.cpp,in version UPX 4.0.0. That allow at…
-
Unscored —
A flaw was found in libcaca. A buffer overflow of export.c in function export_troff might lead to memory corruption and…
-
Unscored —
A flaw was found in Red Hat Quay, where it does not properly protect the authorization token when authorizing email add…
-
High 7.4
A buffer overrun in lease file parsing code can be used to exploit a common vulnerability shared by dhcpd and dhclient
In ISC DHCP 4.1-ESV-R1 -> 4.1-ESV-R16, ISC DHCP 4.4.0 -> 4.4.2 (Other branches of ISC DHCP (i.e., releases in the 4.0.x series or lower and releases in the 4.3.x series) are beyond their End-of-Life (EOL) and no longer supported by ISC. From inspection it is …
-
Medium 5.3
Improper Input Validation in Jakarta Expression Language
In the Jakarta Expression Language implementation 3.0.3 and earlier, a bug in the ELParserTokenManager enables invalid EL expressions to be evaluated as if they were valid.
-
Unscored —
A flaw was found in dmg2img through 20170502. fill_mishblk() does not check the length of the read buffer, and copy 0xC…
-
Unscored —
A flaw was found in PoDoFo 0.9.7. A stack-based buffer overflow in PdfEncryptMD5Base::ComputeOwnerKey function in PdfEn…
-
Unscored —
A flaw was found in PoDoFo 0.9.7. An uncontrolled recursive call in PdfNamesTree::AddToDictionary function in src/podof…
-
Unscored —
A flaw was found in PoDoFo 0.9.7. An uncontrolled recursive call among PdfTokenizer::ReadArray(), PdfTokenizer::GetNext…
-
Unscored —
A flaw was found in PoDoFo 0.9.7. An use-after-free in PoDoFo::PdfVecObjects::Clear() function can cause a denial of se…
-
Unscored —
An insecure modification flaw in the /etc/passwd file was found in the redhat-sso-7 container. An attacker with access …
-
Unscored —
GLPi 9.5.4 does not sanitize the metadata. This way its possible to insert XSS into plugins to execute JavaScript code.
-
Unscored —
An Out of Bounds flaw was found fig2dev version 3.2.8a. A flawed bounds check in read_objects() could allow an attacker…
-
Unscored —
A flaw was found in ceph-dashboard. The JSON Web Token (JWT) used for user authentication is stored by the frontend app…
-
Unscored —
A NULL pointer dereference flaw was found in the floppy disk emulator of QEMU. This issue occurs while processing read/…
-
Unscored —
A flaw was found in the USB redirector device (usb-redir) of QEMU. Small USB packets are combined into a single, large …
-
Unscored —
Multiple directory traversal and buffer overflow vulnerabilities were discovered in yTNEF, and in Evolution's TNEF pars…
-
Unscored —
A flaw was found in Red Hat 3scale’s API docs URL, where it is accessible without credentials. This flaw allows an atta…
-
Medium 4.3
Unsynchronized Access to Shared Data in a Multithreaded Context in RESTEasy
A flaw was found in RESTEasy, where an incorrect response to an HTTP request is provided. This flaw allows an attacker to gain access to privileged information. The highest threat from this vulnerability is to confidentiality and integrity. Versions before re…
-
Unscored —
A flaw was found in the Linux kernel's implementation of string matching within a packet. A privileged user (with root …
-
Unscored —
A flaw was found in NetworkManager in versions before 1.30.0. Setting match.path and activating a profile crashes Netwo…
-
Unscored —
An out of bounds flaw was found in GNU binutils objdump utility version 2.36. An attacker could use this flaw and pass …
-
Unscored —
Buffer Overflow vulnerability exists in FFmpeg 4.2 in filter_vertically_8 at libavfilter/vf_avgblur.c, which could caus…