Ecosystem
Alpine
10,780 known vulnerabilities.
Most affected packages
qt6-qtwebengine 553
firefox-esr 491
firefox 358
librewolf 358
qt5-qtwebengine 338
xen 333
chromium 305
thunderbird 227
imagemagick 223
webkit2gtk 207
wireshark 205
go 202
curl 196
openjdk11 183
mariadb 171
openjdk8 170
vim 167
apache2 151
postgresql15 150
nodejs 149
openjdk17 145
openssl 143
ffmpeg 132
dotnet8-runtime 128
dotnet9-runtime 114
bind 114
postgresql16 109
dotnet10-runtime 109
postgresql17 106
py3-django 106
tiff 100
freerdp 100
postgresql18 98
openjdk21 97
wolfssl 97
samba 92
xorg-server 87
imagemagick6 85
qemu 85
nodejs-current 84
10,741 results · Feed
-
High 7.5CVE-2021-40839 Public exploit
Infinite Loop in rencode
The rencode package through 1.0.6 for Python allows an infinite loop in typecode decoding (such as via ;\x2f\x7f), enabling a remote attack that consumes CPU and memory.
-
Medium 6.4
Improper Authentication in SaltStack Salt
An issue was discovered in SaltStack Salt before 3003.3. The salt minion installer will accept and use a minion config file at C:\salt\conf if that file is in place before the installer is run. This allows for a malicious actor to subvert the proper behaviour…
-
Unscored —
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS …
-
Unscored —
A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, iOS …
-
Unscored —
An input validation issue was addressed with improved input validation. This issue is fixed in iTunes 12.11.3 for Windo…
-
Unscored —
A memory initialization issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.3, i…
-
High 7.8CVE-2021-30663 Exploited
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 14.5.1 and iPadOS 14.5.1, …
KEV Nov 3, 2021 -
High 8.8CVE-2021-30661 Exploited
A use after free issue was addressed with improved memory management. This issue is fixed in Safari 14.1, iOS 12.5.3, i…
KEV Nov 3, 2021 -
Unscored —CVE-2021-30682 Public exploit
A logic issue was addressed with improved restrictions. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Saf…
-
Unscored —
A logic issue was addressed with improved state management. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6,…
-
High 8.8CVE-2021-30666 Exploited
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 12.5.3. Processing mali…
KEV Nov 3, 2021 -
High 8.8CVE-2021-30665 Exploited
A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 7.4.1, iOS 14.5.…
KEV Nov 3, 2021 -
Unscored —
This issue was addressed with improved checks. This issue is fixed in iOS 14.7, Safari 14.1.2, macOS Big Sur 11.5, watc…
-
Unscored —
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.7, Safari 14.1.2, m…
-
High 8.8
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.5.4. Processing mal…
KEV Nov 3, 2021 -
Unscored —
A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14.7, Safari 14.1.2, macO…
-
High 8.8
A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 12.5.4. Processing m…
KEV Nov 3, 2021 -
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 14.6, iOS 1…
-
Unscored —
Description: A cross-origin issue with iframe elements was addressed with improved tracking of security origins. This i…
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 14.6, iOS 1…
-
Unscored —
A logic issue was addressed with improved restrictions. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Saf…
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 14.7, macOS …
-
Unscored —
Another race in XENMAPSPACE_grant_table handling Guests are permitted access to certain Xen-owned pages of memory. The …
-
High 7.5
Exposure of Resource to Wrong Sphere in salt
An issue was discovered in SaltStack Salt before 3003.3. A user who has control of the source, and source_hash URLs can gain full file system access as root on a salt minion.
-
High 8.8
Privilege escalation in Hashicorp Nomad
HashiCorp Nomad and Nomad Enterprise Raft RPC layer allows non-server agents with a valid certificate signed by the same CA to access server-only functionality, enabling privilege escalation. Fixed in 1.0.10 and 1.1.4.
-
Unscored —
The ElGamal implementation in Botan through 2.18.1, as used in Thunderbird and other products, allows plaintext recover…
-
Medium 6.5CVE-2021-25735 Public exploit
Validating Admission Webhook does not observe some previous fields
A security issue was discovered in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook. Clusters are only affected by this vulnerability if they run a Validating Admission Webhook for Nodes that denies admission based at leas…
-
High 8.6
Heap-based Buffer Overflow in vim/vim
vim is vulnerable to Heap-based Buffer Overflow
-
Medium 5.9
The ElGamal implementation in Libgcrypt before 1.9.4 allows plaintext recovery because, during interaction between two …
-
Unscored —
WeeChat before 3.2.1 allows remote attackers to cause a denial of service (crash) via a crafted WebSocket frame that tr…
-
Unscored —
Chromium: CVE-2021-30624 Use after free in Autofill
-
Unscored —
Chromium: CVE-2021-30623 Use after free in Bookmarks
-
Unscored —
Chromium: CVE-2021-30622 Use after free in WebApp Installs
-
Unscored —
Chromium: CVE-2021-30621 UI Spoofing in Autofill
-
Unscored —
Chromium: CVE-2021-30620 Insufficient policy enforcement in Blink
-
Unscored —
Chromium: CVE-2021-30619 UI Spoofing in Autofill
-
Unscored —
Chromium: CVE-2021-30618 Inappropriate implementation in DevTools
-
Unscored —
Chromium: CVE-2021-30617 Policy bypass in Blink
-
Unscored —
Chromium: CVE-2021-30616 Use after free in Media
-
Unscored —
Chromium: CVE-2021-30615 Cross-origin data leak in Navigation