Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.1The wordexp function in the GNU C Library (aka glibc) through 2.33 may crash or read arbitrary memory in parse_param (in posix/wordexp.c) when called with an untrusted…EPSS 2.6%Jul 22, 2021
- Medium5.5basic/unit-name.c in systemd prior to 246.15, 247.8, 248.5, and 249.1 has a Memory Allocation with an Excessive Size Value (involving strdupa and alloca for a pathname…EPSS 8.8%Jul 20, 2021
- Low3.3The CIL compiler in SELinux 3.2 has a use-after-free in cil_reset_classpermission (called from cil_reset_classperms_set and cil_reset_classperms_list).EPSS 0.6%Jul 1, 2021
- Low3.1curl 7.7 through 7.76.1 suffers from an information disclosure when the command line option, known as in libcurl, is used to send variable=content pairs to TELNET serv…EPSS 4.5%Jun 11, 2021
- High7.5Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm, and t…EPSS 2.3%Jun 8, 2021
- High7.8There's a flaw in libxml2's xmllint in versions before 2.9.11.EPSS 2.0%Jun 1, 2021
- High7.5A flaw was found in OpenLDAP in versions before 2.4.56.EPSS 2.7%May 28, 2021
- Critical9.8The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free.EPSS 2.9%May 25, 2021
- Medium5.7There's a flaw in Python 3's pydoc.EPSS 1.9%May 20, 2021
- High8.6There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11.EPSS 17.0%May 19, 2021
- High8.8There's a flaw in libxml2 in versions before 2.9.11.EPSS 21.9%May 18, 2021
- High7.5A flaw was found in OpenLDAP.EPSS 3.4%May 18, 2021
- Medium5.9A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference.EPSS 3.6%May 14, 2021
- High8.8Google Chromium V8 Type Confusion VulnerabilityKEVEPSS 84.2%Apr 26, 2021
- High7.8ExifTool Remote Code Execution VulnerabilityKEVEPSS 100.0%Apr 23, 2021
- High8.1A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions (GOST DSA, EDDSA & ECDSA) result in the Elliptic Curve Crypt…EPSS 1.7%Apr 5, 2021
- Critical9.8Apple iOS, iPadOS, and macOS WebKit Remote Code Execution VulnerabilityKEVEPSS 7.0%Apr 2, 2021
- Low3.7curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to MITM a connection due to bad handling of TLS 1.3 session tickets.EPSS 3.0%Apr 1, 2021
- Medium5.3curl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information to an Unauthorized Actor" by leaking credentials in the HTTP Referer: header.EPSS 5.3%Apr 1, 2021
- High8.8Google Chromium Blink Use-After-Free VulnerabilityKEVEPSS 9.9%Mar 16, 2021
- Medium5.3An issue was discovered in GNOME GLib before 2.66.8.EPSS 2.6%Mar 11, 2021
- High8.8Google Chromium Race Condition VulnerabilityKEVEPSS 24.0%Mar 9, 2021
- Medium5.5The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid multi-byte input sequences in IBM1364, IBM1371, IBM1388, IBM1390…EPSS 0.9%Feb 26, 2021
- Low2.5The nameserver caching daemon (nscd) in the GNU C Library (aka glibc or libc6) 2.29 through 2.33, when processing a request for netgroup lookup, may crash due to a dou…EPSS 0.4%Feb 24, 2021
- Medium5.9The package python/cpython from 0 and before 3.6.13, from 3.7.0 and before 3.7.10, from 3.8.0 and before 3.8.8, from 3.9.0 and before 3.9.2 are vulnerable to Web Cache…EPSS 40.7%Feb 15, 2021