Lucene search
+L

18353 matches found

OSV
OSV
added 2021/12/27 7:15 p.m.12 views

CVE-2021-43552

The use of a hard-coded cryptographic key significantly increases the possibility encrypted data may be recovered from the Patient Information Center iX PIC iX Versions B.02, C.02, and C.03...

5.5CVSS5.8AI score0.00213EPSS
SaveExploits0References1
OSV
OSV
added 2021/12/27 7:15 p.m.12 views

CVE-2021-43548

Patient Information Center iX PIC iX Versions C.02 and C.03 receives input or data, but does not validate or incorrectly validates that the input has the properties required to process the data safely and correctly...

6.5CVSS5.8AI score0.00366EPSS
SaveExploits0References1
NVD
NVD
added 2021/12/27 7:15 p.m.26 views

CVE-2021-43548

Patient Information Center iX PIC iX Versions C.02 and C.03 receives input or data, but does not validate or incorrectly validates that the input has the properties required to process the data safely and correctly...

6.5CVSS0.00366EPSS
SaveExploits0References1
Prion
Prion
added 2021/12/27 7:15 p.m.26 views

Hardcoded credentials

IntelliBridge EC 40 and 60 Hub C.00.04 and prior contains hard-coded credentials, such as a password or a cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data...

5.8CVSS8.8AI score0.00272EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2021/12/27 6:48 p.m.38 views

CVE-2021-43552 Philips Patient Information Center iX (PIC iX) and Efficia CM Series Use of Hard-coded Cryptographic Key

The use of a hard-coded cryptographic key significantly increases the possibility encrypted data may be recovered from the Patient Information Center iX PIC iX Versions B.02, C.02, and C.03...

6.1CVSS6.5AI score0.00213EPSS
SaveExploits0References1
OSV
OSV
added 2021/12/27 4:08 p.m.16 views

CLSA-2021-1640621325 Fix of CVE: CVE-2021-3973, CVE-2021-3974, CVE-2021-4019, CVE-2021-4069, CVE-2021-3984

CVE-2021-3974: fix using freed memory with regexp using a mark - CVE-2021-3984: fix illegal memory access when C-indenting - CVE-2021-3973: fix crash when using CTRL-W f without finding a file name - CVE-2021-4019: fix buffer overflow with long help argument - CVE-2021-4069: fix using freed...

9.3CVSS7.3AI score0.01792EPSS
SaveExploits5References1
BDU FSTEC
BDU FSTEC
added 2021/12/24 12:00 a.m.14 views

The vulnerability of the `glob` function in the GNU C library allows a hacker to execute arbitrary code.

The vulnerability of the glob function in the GNU C library is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9.8CVSS7.8AI score0.02801EPSS
SaveExploits0References5Affected Software2
ALT Linux
ALT Linux
added 2021/12/23 12:00 a.m.39 views

Security fix for the ALT Linux 10 package node version 14.18.2-alt1

14.18.2-alt1 built Dec. 23, 2021 Vitaly Lipatov in task 292248 Dec. 17, 2021 Vitaly Lipatov - new version 14.18.2 with rpmrb script - CVE-2021-22959: HTTP Request Smuggling due to spaced in headers - CVE-2021-22960: HTTP Request Smuggling when parsing the body - python 3.10 support - set c-ares =...

6.4CVSS7.7AI score0.03156EPSS
SaveExploits2
OSV
OSV
added 2021/12/22 5:15 p.m.9 views

UBUNTU-CVE-2021-45256

A Null Pointer Dereference vulnerability existfs in nasm 2.16rc0 via asm/preproc.c...

5.5CVSS6AI score0.0061EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
added 2021/12/22 10:07 a.m.54 views

Security Bulletin: App Connect Professional is affected by GNU C Library vulnerability.

Summary App Connect Professional have addressed the following vulnerability reported in GNU C Library. Vulnerability Details CVEID: CVE-2021-33574 DESCRIPTION: GNU C Library aka glibc is vulnerable to a denial of service, caused by a use-after-free flaw in the mqnotify function. By sending a...

9.8CVSS8.5AI score0.02874EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/12/22 10:05 a.m.87 views

Security Bulletin: App Connect Professional is affected by GNU C Library vulnerability.

Summary App Connect Professional have addressed the following vulnerability reported in GNU C Library. Vulnerability Details CVEID: CVE-2020-27618 DESCRIPTION: GNU C Library aka glibc or libc6 is vulnerable to a denial of service, caused by an error when processing some invalid inputs from severa...

5.5CVSS7.1AI score0.00887EPSS
SaveExploits1Affected Software1
OSV
OSV
added 2021/12/21 8:15 p.m.6 views

DEBIAN-CVE-2021-44917

A Divide by Zero vulnerability exists in gnuplot 5.4 in the boundary3d function in graph3d.c, which could cause a Arithmetic exception and application crash...

5.5CVSS6.3AI score0.00699EPSS
SaveExploits1References1
RustSec
RustSec
added 2021/12/20 12:00 p.m.40 views

Integer overflow in the bundled Brotli C library

A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. If one cannot update the C library, its...

3.3AI score
SaveExploits0Affected Software1
OpenVAS
OpenVAS
added 2021/12/20 12:00 a.m.10 views

Fedora: Security Advisory for ldns (FEDORA-2021-bb6f4df303)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
OpenVAS
OpenVAS
added 2021/12/20 12:00 a.m.8 views

Fedora: Security Advisory for ldns (FEDORA-2021-75d5f6c531)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
OpenVAS
OpenVAS
added 2021/12/20 12:00 a.m.10 views

Fedora: Security Advisory for dr_libs (FEDORA-2021-a943b03c3f)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
OSV
OSV
added 2021/12/19 9:15 a.m.14 views

CVE-2021-43083

Apache PLC4X - PLC4C Only the C language implementation was effected was vulnerable to an unsigned integer underflow flaw inside the tcp transport. Users should update to 0.9.1, which addresses this issue. However, in order to exploit this vulnerability, a user would have to actively connect to a...

8.8CVSS7.3AI score0.01921EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/12/19 9:15 a.m.7 views

CVE-2021-43083

Apache PLC4X - PLC4C Only the C language implementation was effected was vulnerable to an unsigned integer underflow flaw inside the tcp transport. Users should update to 0.9.1, which addresses this issue. However, in order to exploit this vulnerability, a user would have to actively connect to a...

8.8CVSS7.3AI score0.01921EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/12/19 12:00 a.m.8 views

Apache PLC4X - PLC4C 数字错误漏洞

Apache PLC4X - PLC4C is a generic adapter for industrial communication protocols from the Apache Foundation, U.S.A. A security vulnerability exists in Apache PLC4X - PLC4C only the C language version is affected versions prior to 0.9.1. No detailed vulnerability details are available at this time...

8.8CVSS5.5AI score0.01921EPSS
SaveExploits0References2
CBLMariner
CBLMariner
added 2021/12/17 8:09 p.m.18 views

CVE-2021-3672 affecting package c-ares 1.17.1-1

CVE-2021-3672 affecting package c-ares 1.17.1-1. An upgraded version of the package is available that resolves this issue...

6.8CVSS9.8AI score0.02617EPSS
SaveExploits1
Rows per page
Query Builder