Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.8In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can lead to realloc misbehavior (e.g., allocating too…Jan 1, 2022
- Medium6.4Android Kernel Race Condition VulnerabilityKEVEPSS 0.9%Dec 15, 2021
- Critical9.0Apache Log4j2 Deserialization of Untrusted Data VulnerabilityKEVEPSS 100.0%Dec 14, 2021
- Critical10.0Apache Log4j2 Remote Code Execution VulnerabilityKEVEPSS 100.0%Dec 10, 2021
- Critical9.8Roundcube Webmail SQL Injection VulnerabilityKEVEPSS 69.9%Nov 18, 2021
- High7.5GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segme…Nov 15, 2021
- High8.8Google Chromium V8 Memory Corruption VulnerabilityKEVEPSS 38.6%Nov 3, 2021
- Medium6.1Google Chromium Intents Improper Input Validation VulnerabilityKEVEPSS 4.9%Nov 3, 2021
- Medium6.5Google Chromium Information Disclosure VulnerabilityKEVEPSS 19.9%Oct 8, 2021
- High8.8Google Chromium V8 Use-After-Free VulnerabilityKEVEPSS 34.9%Oct 8, 2021
- Critical9.6Google Chromium Portals Use-After-Free VulnerabilityKEVEPSS 11.7%Oct 8, 2021
- Medium5.9When curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade to TLS security, the server can respond and send back m…Sep 29, 2021
- High7.5A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server ( on the command line or set to or wit…Sep 29, 2021
- Critical9.1When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointer to an already freed memory area and both use t…Sep 23, 2021
- Medium5.5International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the pkg_createWithAssemblyCode function in the file tools/pkgd…Sep 20, 2021
- Critical9.0Apache HTTP Server-Side Request Forgery (SSRF)KEVEPSS 100.0%Sep 16, 2021
- High7.8Apple Multiple Products Integer Overflow or Wraparound VulnerabilityKEVEPSS 7.0%Aug 24, 2021
- High8.8Apple iOS, iPadOS, macOS Use-After-Free VulnerabilityKEVEPSS 13.4%Aug 24, 2021
- High8.5XStream Remote Code Execution VulnerabilityKEVEPSS 98.1%Aug 23, 2021
- Medium6.5The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1.19.3 has a NULL pointer dereference in kdc/do_tgs_req.c via a FAST inn…Aug 23, 2021
- High7.5A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext.Aug 5, 2021
- Low3.7libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches the setup.Due to errors in the logic, the confi…Aug 5, 2021
- High7.5ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.4 and 1.19.x before 1.19.2 allows remote attackers to c…Jul 22, 2021
- Critical9.1The wordexp function in the GNU C Library (aka glibc) through 2.33 may crash or read arbitrary memory in parse_param (in posix/wordexp.c) when called with an untrusted…Jul 22, 2021
- Medium5.5basic/unit-name.c in systemd prior to 246.15, 247.8, 248.5, and 249.1 has a Memory Allocation with an Excessive Size Value (involving strdupa and alloca for a pathname…Jul 20, 2021