6445 matches found
AZL-33604 CVE-2021-44716 affecting package kube-vip-cloud-provider for versions less than 0.0.2-16
net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests...
AZL-33613 CVE-2021-44716 affecting package moby-buildx for versions less than 0.7.1-18
net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests...
AZL-35013 CVE-2021-44716 affecting package multus for versions less than 4.0.2-1
net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests...
AZL-35123 CVE-2021-44716 affecting package prometheus-process-exporter for versions less than 0.8.2-1
net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests...
AZL-7086 CVE-2021-4193 affecting package vim for versions less than 8.2.4081-1
vim is vulnerable to Out-of-bounds Read...
AZL-7420 CVE-2021-4185 affecting package wireshark for versions less than 3.4.14-1
Infinite loop in the RTMPT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file...
AZL-7417 CVE-2021-4181 affecting package wireshark for versions less than 3.4.14-1
Crash in the Sysdig Event dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file...
AZL-7111 CVE-2021-4187 affecting package vim for versions less than 8.2.4081-1
vim is vulnerable to Use After Free...
AZL-7084 CVE-2021-4173 affecting package vim for versions less than 8.2.4081-1
vim is vulnerable to Use After Free...
CVE-2021-45523
NETGEAR R7000 devices before 1.0.9.42 are affected by a buffer overflow by an authenticated user...
AZL-41801 CVE-2021-45480 affecting package hyperv-daemons for versions less than 6.6.35.1-1
An issue was discovered in the Linux kernel before 5.15.11. There is a memory leak in the rdsconncreate function in net/rds/connection.c in a certain combination of circumstances...
AZL-7096 CVE-2021-3622 affecting package hivex for versions less than 1.3.21-1
A flaw was found in the hivex library. This flaw allows an attacker to input a specially crafted Windows Registry hive file, which would cause hivex to recursively call the getchildren function, leading to a stack overflow. The highest threat from this vulnerability is to system availability...
Linux kernel 缓冲区错误漏洞
Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. Linux kernel versions prior to 5.15.11 have a security vulnerability that stems from f2fssetxattr in fs/f2fs/xattr.c in the Linux kernel, which can be exploited when an inode has an invalid last xattr...
CVE-2020-20595
A cross-site request forgery CSRF in OPMS v1.3 and below allows attackers to arbitrarily add a user account via /user/add...
AZL-7033 CVE-2021-45095 affecting package kernel for versions less than 5.15.18.1-1
pepsockaccept in net/phonet/pep.c in the Linux kernel through 5.15.8 has a refcount leak...
AZL-7049 CVE-2021-43896 affecting package powershell for versions less than 7.2.1-1
Microsoft PowerShell Spoofing Vulnerability...
CVE-2021-44178
AEM's Cloud Service offering, as well as version 6.5.10.0 and below are affected by a reflected Cross-Site Scripting XSS vulnerability via the itemResourceType parameter. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be...
Mozilla: JavaScript unexpectedly enabled for the composition area
Thunderbird unexpectedly enabled JavaScript in the composition area. The JavaScript execution context was limited to this area and did not receive chrome-level privileges, but could be used as a stepping stone to further an attack with other vulnerabilities. This vulnerability affects Thunderbird...
CVE-2021-43065
A incorrect permission assignment for critical resource in Fortinet FortiNAC version 9.2.0, version 9.1.3 and below, version 8.8.9 and below allows attacker to gain higher privileges via the access to sensitive system data...