Ecosystem

Alpine

10,780 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

10,741 results · Feed

Unscored —

CVE-2021-30818

A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, tvO…

Apple iOS and iPadOS watchOS tvOS iOS Browsers Debian Ubuntu Alpine

Oct 28, 2021
Unscored —

CVE-2021-30809 Public exploit

A use after free issue was addressed with improved memory management. This issue is fixed in Safari 15, tvOS 15, watchO…

Apple iOS and iPadOS watchOS tvOS iOS Browsers Debian Ubuntu Alpine

Oct 28, 2021
Medium 5.3

CVE-2021-25219 EPSS 11%

Lame cache can be abused to severely degrade resolver performance

In BIND 9.3.0 -> 9.11.35, 9.12.0 -> 9.16.21, and versions 9.9.3-S1 -> 9.11.35-S1 and 9.16.8-S1 -> 9.16.21-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.18 of the BIND 9.17 development branch, exploitation of broken authorita…

ISC BIND9 bind9 bind9 Debian Ubuntu Azure Linux Alpine

Oct 27, 2021
High 7.3

CVE-2021-3903

Heap-based Buffer Overflow in vim/vim

vim is vulnerable to Heap-based Buffer Overflow

vim vim/vim vim vim Debian Ubuntu Alpine

Oct 27, 2021
Medium 6.8

CVE-2021-40114

Multiple Cisco Products Snort Memory Leak Denial of Service Vulnerability

Multiple Cisco products are affected by a vulnerability in the way the Snort detection engine processes ICMP traffic that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is …

Cisco Cisco Firepower Threat Defense Software snort snort Network devices Ubuntu Alpine

Oct 27, 2021
Medium 5.8

CVE-2021-41158

FreeSWITCH vulnerable to SIP digest leak for configured gateways

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to version 1.10.7, an attacker can perform a SIP digest leak attack ag…

signalwire freeswitch freeswitch Alpine

Oct 26, 2021
Medium 5.3

CVE-2021-41157

FreeSWITCH does not authenticate SIP SUBSCRIBE requests by default

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. By default, SIP requests of the type SUBSCRIBE are not authenticated in the …

signalwire freeswitch freeswitch Alpine

Oct 26, 2021
Critical 9.8

CVE-2021-42343

Workers for local Dask clusters mistakenly listened on public interfaces

An issue was discovered in the Dask distributed package before 2021.10.0 for Python. Single machine Dask clusters started with dask.distributed.LocalCluster or dask.distributed.Client (which defaults to using LocalCluster) would mistakenly configure their res…

dask.distributed dask.distributed distributed dask Debian Ubuntu Alpine PyPI

Oct 26, 2021
Medium 6.5

CVE-2021-41182 Public exploit EPSS 39%

XSS in the `altField` option of the Datepicker widget

jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `altField` option of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value…

jquery jquery-ui drupal7 jqueryui Debian Ubuntu Alpine npm Maven NuGet RubyGems

Oct 26, 2021
Medium 6.5

CVE-2021-41183

XSS in `*Text` options of the Datepicker widget

jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of various `*Text` options of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. The values pas…

jquery jquery-ui drupal7 jqueryui Debian Ubuntu Alpine npm Maven NuGet RubyGems

Oct 26, 2021
High 7.5

CVE-2021-41105

FreeSWITCH susceptible to Denial of Service via invalid SRTP packets

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. When handling SRTP calls, FreeSWITCH prior to version 1.10.7 is susceptible …

signalwire freeswitch freeswitch Alpine

Oct 25, 2021
High 8.6

CVE-2021-41145

FreeSWITCH susceptible to Denial of Service via SIP flooding

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. FreeSWITCH prior to version 1.10.7 is susceptible to Denial of Service via S…

signalwire freeswitch freeswitch Alpine

Oct 25, 2021
High 7.5

CVE-2021-37624 Public exploit

FreeSWITCH does not authenticate SIP MESSAGE requests, leading to spam and message spoofing

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to version 1.10.7, FreeSWITCH does not authenticate SIP MESSAGE reques…

signalwire freeswitch freeswitch Alpine

Oct 25, 2021
High 7.8

CVE-2021-21703

PHP-FPM memory access in root process leading to privilege escalation

In PHP versions 7.3.x up to and including 7.3.31, 7.4.x below 7.4.25 and 8.0.x below 8.0.12, when running PHP FPM SAPI with main FPM daemon process running as root and child worker processes running as lower-privileged users, it is possible for the child proc…

PHP Group PHP php5 php7.0 Debian Ubuntu Alpine

Oct 25, 2021
Medium 5.3

CVE-2021-41160 Public exploit

Improper region checks in FreeRDP allow out of bound write to memory

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. In affected versions a malicious server might trigger out of bound writes in a connected client. Connections using GDI or SurfaceCommands to send graphic…

FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Alpine

Oct 21, 2021
Medium 5.8

CVE-2021-41159

Improper client input validation for FreeRDP gateway connections allows to overwrite memory

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. All FreeRDP clients prior to version 2.4.1 using gateway connections (`/gt:rpc`) fail to validate input data. A malicious gateway might allow client memo…

FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Alpine

Oct 21, 2021
High 7.8

CVE-2021-42771

Directory Traversal in Babel

Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files (containing serialized Python objects) via directory traversal, leading to code execution.

babel py3-babel python-babel babel Debian Azure Linux Alpine PyPI

Oct 20, 2021
Unscored —

CVE-2021-42762

BubblewrapLauncher.cpp in WebKitGTK and WPE WebKit before 2.34.1 allows a limited sandbox bypass that allows a sandboxe…

qtwebkit-source qtwebkit-opensource-src webkit2gtk webkitgtk Debian Ubuntu Alpine

Oct 20, 2021
Medium 5.5

CVE-2021-35604

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Debian Ubuntu Alpine

Oct 20, 2021
Low 3.7

CVE-2021-35603

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported …

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 20, 2021
Low 3.1

CVE-2021-35588

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Support…

Oracle Java SE JDK and JRE openjdk-8 openjdk-9 Ubuntu Alpine

Oct 20, 2021
Medium 5.3

CVE-2021-35586

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Support…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 20, 2021
Medium 5.3

CVE-2021-35578

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported …

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 20, 2021
Medium 6.8

CVE-2021-35567

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Suppo…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 20, 2021
Medium 5.3

CVE-2021-35565

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported …

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 20, 2021
Medium 5.3

CVE-2021-35564

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Keytool). Support…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 20, 2021
Medium 5.3

CVE-2021-35561

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility). Support…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 20, 2021
Medium 5.3

CVE-2021-35559 EPSS 16%

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). Supported…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 20, 2021
Medium 5.3

CVE-2021-35556

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). Supported…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 20, 2021
Medium 5.9

CVE-2021-35550

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported …

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 20, 2021
Unscored —

CVE-2021-30846

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8,…

Apple iOS and iPadOS watchOS tvOS iOS Browsers Debian Ubuntu Alpine

Oct 19, 2021
Unscored —

CVE-2021-30848

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8,…

Apple iOS and iPadOS Safari qtwebkit-source iOS Browsers Debian Ubuntu Alpine

Oct 19, 2021
Unscored —

CVE-2021-30849

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPa…

Apple iOS and iPadOS watchOS tvOS Windows iOS Browsers Debian Ubuntu Alpine

Oct 19, 2021
Unscored —

CVE-2021-41990

The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS si…

strongswan strongswan strongswan strongswan Debian Ubuntu Azure Linux Alpine

Oct 18, 2021
Unscored —

CVE-2021-41991

The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests w…

strongswan strongswan strongswan strongswan Debian Ubuntu Azure Linux Alpine

Oct 18, 2021
Unscored —

CVE-2021-41611

An issue was discovered in Squid 5.0.6 through 5.1.x before 5.2. When validating an origin server or peer certificate, …

squid squid Debian Alpine

Oct 18, 2021
Unscored —

CVE-2021-38562

Best Practical Request Tracker (RT) 4.2 before 4.2.17, 4.4 before 4.4.5, and 5.0 before 5.0.2 allows sensitive informat…

request-tracker4 request-tracker4 request-tracker5 request-tracker5 Debian Ubuntu Alpine

Oct 18, 2021
Unscored —

CVE-2021-38297 Public exploit EPSS 11%

Buffer overflow in WASM modules in misc/wasm and cmd/link

Go before 1.16.9 and 1.17.x before 1.17.2 has a Buffer Overflow via large arguments in a function invocation from a WASM module, when GOARCH=wasm GOOS=js is used.

go golang golang-1.8 golang-1.13 Debian Ubuntu Azure Linux Alpine Go

Oct 18, 2021
High 7.8

CVE-2021-3875

Heap-based Buffer Overflow in vim/vim

vim is vulnerable to Heap-based Buffer Overflow

vim vim/vim vim vim Debian Ubuntu Alpine

Oct 15, 2021
Unscored —

CVE-2021-42341

checkpath in OpenRC before 0.44.7 uses the direct output of strlen() to allocate strings, which does not account for th…

openrc Alpine

Oct 14, 2021