2 matches found
VulnCheck KEV: CVE-2021-25646
Apache Druid includes the ability to execute user-provided JavaScript code embedded in various types of requests. This functionality is intended for use in high-trust environments, and is disabled by default. However, in Druid 0.20.0 and earlier, it is possible for an authenticated user to send a...
OpenSC Resource Management Error Vulnerability
OpenSC is an open source smart card tool and middleware. A resource management error vulnerability exists in coolkeyfreeprivatedata in versions prior to OpenSC 0.20.0. The vulnerability arises from mismanagement of system resources e.g., memory, disk space, files, etc. by a networked system or...