Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.5A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext.Aug 5, 2021
- Low3.7libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches the setup.Due to errors in the logic, the confi…Aug 5, 2021
- High7.5ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.4 and 1.19.x before 1.19.2 allows remote attackers to c…Jul 22, 2021
- Critical9.1The wordexp function in the GNU C Library (aka glibc) through 2.33 may crash or read arbitrary memory in parse_param (in posix/wordexp.c) when called with an untrusted…Jul 22, 2021
- Medium5.5basic/unit-name.c in systemd prior to 246.15, 247.8, 248.5, and 249.1 has a Memory Allocation with an Excessive Size Value (involving strdupa and alloca for a pathname…Jul 20, 2021
- Low3.3The CIL compiler in SELinux 3.2 has a use-after-free in cil_reset_classpermission (called from cil_reset_classperms_set and cil_reset_classperms_list).Jul 1, 2021
- Low3.1curl 7.7 through 7.76.1 suffers from an information disclosure when the command line option, known as in libcurl, is used to send variable=content pairs to TELNET serv…Jun 11, 2021
- High7.5Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm, and t…Jun 8, 2021
- High7.8There's a flaw in libxml2's xmllint in versions before 2.9.11.Jun 1, 2021
- High7.5A flaw was found in OpenLDAP in versions before 2.4.56.May 28, 2021
- Critical9.8The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free.May 25, 2021
- Medium5.7There's a flaw in Python 3's pydoc.May 20, 2021
- High8.6There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11.May 19, 2021
- High8.8There's a flaw in libxml2 in versions before 2.9.11.May 18, 2021
- High7.5A flaw was found in OpenLDAP.May 18, 2021
- Medium5.9A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference.May 14, 2021
- High8.8Google Chromium V8 Type Confusion VulnerabilityKEVEPSS 84.2%Apr 26, 2021
- High7.8ExifTool Remote Code Execution VulnerabilityKEVEPSS 100.0%Apr 23, 2021
- High8.1A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions (GOST DSA, EDDSA & ECDSA) result in the Elliptic Curve Crypt…Apr 5, 2021
- Critical9.8Apple iOS, iPadOS, and macOS WebKit Remote Code Execution VulnerabilityKEVEPSS 7.0%Apr 2, 2021
- Low3.7curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to MITM a connection due to bad handling of TLS 1.3 session tickets.Apr 1, 2021
- Medium5.3curl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information to an Unauthorized Actor" by leaking credentials in the HTTP Referer: header.Apr 1, 2021
- High8.8Google Chromium Blink Use-After-Free VulnerabilityKEVEPSS 9.9%Mar 16, 2021
- Medium5.3An issue was discovered in GNOME GLib before 2.66.8.Mar 11, 2021
- High8.8Google Chromium Race Condition VulnerabilityKEVEPSS 24.0%Mar 9, 2021