Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.5In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulti…EPSS 63.3%Feb 14, 2021
- High7.2Adminer Server-Side Request Forgery VulnerabilityKEVEPSS 98.5%Feb 11, 2021
- High8.8Google Chromium V8 Heap Buffer Overflow VulnerabilityKEVEPSS 20.0%Feb 9, 2021
- High7.5The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid input sequences in the ISO-2022-JP-3 encoding, fails an assertio…EPSS 3.8%Jan 27, 2021
- High7.5A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X.509 DN parsing in decode.c ber_next_element, resulting in denial of service.EPSS 12.0%Jan 26, 2021
- High7.5A flaw was discovered in ldap_X509dn2bv in OpenLDAP before 2.4.57 leading to a slapd crash in the X.509 DN parsing in ad_keystring, resulting in denial of service.EPSS 4.3%Jan 26, 2021
- High7.5An integer underflow was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Certificate List Exact Assertion processing, resulting in denial of service.EPSS 85.0%Jan 26, 2021
- High7.5A flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with the cancel_extop Cancel operation, resulting in denial of service.EPSS 77.2%Jan 26, 2021
- High7.5A flaw was discovered in OpenLDAP before 2.4.57 leading to a memch->bv_len miscalculation and slapd crash in the saslAuthzTo processing, resulting in denial of service.EPSS 4.2%Jan 26, 2021
- High7.5A flaw was discovered in OpenLDAP before 2.4.57 leading to a double free and slapd crash in the saslAuthzTo processing, resulting in denial of service.EPSS 4.3%Jan 26, 2021
- High7.5A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd crash in the saslAuthzTo processing, resulting in denial of service.EPSS 4.3%Jan 26, 2021
- High7.5A flaw was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Values Return Filter control handling, resulting in denial of service (double free and…EPSS 4.2%Jan 26, 2021
- High7.5A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the saslAuthzTo validation, resulting in denial of service.EPSS 77.2%Jan 26, 2021
- High7.5An integer underflow was discovered in OpenLDAP before 2.4.57 leading to slapd crashes in the Certificate Exact Assertion processing, resulting in denial of service (s…EPSS 85.0%Jan 26, 2021
- High7.8Sudo Heap-Based Buffer Overflow VulnerabilityKEVEPSS 100.0%Jan 26, 2021
- Critical9.8Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution in certain Python applications that accept…EPSS 24.2%Jan 19, 2021
- High7.5PEAR Archive_Tar Improper Link Resolution VulnerabilityKEVEPSS 70.6%Jan 18, 2021
- Medium5.9The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-byte input sequences in the EUC-KR encoding, may have a buffer over-read.EPSS 3.6%Jan 4, 2021
- Medium6.1Roundcube Webmail Cross-Site Scripting (XSS) VulnerabilityKEVEPSS 32.9%Dec 28, 2020
- High7.5An issue was discovered in p11-kit 0.23.6 through 0.23.21.EPSS 3.5%Dec 16, 2020
- High7.5An issue was discovered in p11-kit 0.21.1 through 0.23.21.EPSS 3.5%Dec 16, 2020
- High7.5curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response.EPSS 4.6%Dec 14, 2020
- High7.5curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.EPSS 9.8%Dec 14, 2020
- Low3.7A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make cu…EPSS 3.9%Dec 14, 2020
- High7.5Due to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connection when sending data.EPSS 5.3%Dec 14, 2020