Lucene search
+L

11336 matches found

attackerkb
attackerkb
•added 2021/09/08 3:15 p.m.•13 views

CVE-2021-1857

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iTunes 12.11.3 for Windows, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iCloud for Windows 12.3, macOS Big Sur 11.3, watchOS 7.4, tvOS 14.5, iOS 14.5 and iPadOS 14.5. Processi...

6.5CVSS5.3AI score0.01224EPSS
SaveExploits0References9
attackerkb
attackerkb
•added 2021/09/08 3:15 p.m.•19 views

CVE-2021-1820

A memory initialization issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. Processing maliciously crafted web content may result in the disclosure of process memory...

6.5CVSS7.6AI score0.01339EPSS
SaveExploits0References5
AlpineLinux
AlpineLinux
•added 2021/09/08 2:54 p.m.•69 views

CVE-2021-1820

A memory initialization issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. Processing maliciously crafted web content may result in the disclosure of process memory...

6.5CVSS6.9AI score0.01339EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/09/08 2:54 p.m.•52 views

CVE-2021-1820

A memory initialization issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. Processing maliciously crafted web content may result in the disclosure of process memory...

6.5CVSS1.6AI score0.01339EPSS
SaveExploits0
Cvelist
Cvelist
•added 2021/09/08 2:44 p.m.•30 views

CVE-2021-1857

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iTunes 12.11.3 for Windows, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iCloud for Windows 12.3, macOS Big Sur 11.3, watchOS 7.4, tvOS 14.5, iOS 14.5 and iPadOS 14.5. Processi...

6.9AI score0.01224EPSS
SaveExploits0References8
CVE
CVE
•added 2021/09/08 2:44 p.m.•150 views

CVE-2021-1857

CVE-2021-1857 describes a memory initialization issue that Apple fixed via multiple platform updates. Affected components include memory handling across iTunes for Windows (12.11.3), Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iCloud for Windows 12.3, macOS Big Sur 11.3, w...

6.5CVSS6.5AI score0.01224EPSS
SaveExploits0References8Affected Software8
Redos
Redos
•added 2021/09/08 12:00 a.m.•52 views

ROS-2-633

2.633 Vulnerability in X.Org Server and libX11 CVE-2020-14347, CVE-2020-14344 1. Vulnerability Description: CVE-2020-14347 - Lack of memory initialization when allocating buffers for pixmaps using the AllocatePixmap call can cause the X client to leak the memory contents from the heap when the X...

6.7CVSS6.9AI score0.00465EPSS
SaveExploits0
Redos
Redos
•added 2021/09/08 12:00 a.m.•47 views

ROS-2-797

2.797 Vulnerability in X.Org Server and libX11 CVE-2020-14347, CVE-2020-14344 1. Vulnerability Description: CVE-2020-14347 - Failure to initialize memory when allocating buffers for pixmaps using the AllocatePixmap call could cause the X client to leak memory contents from the heap when the X...

6.7CVSS6.9AI score0.00465EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/08 12:00 a.m.•5 views

CVE-2021-1857: Improper Initialization

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iTunes 12.11.3 for Windows, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iCloud for Windows 12.3, macOS Big Sur 11.3, watchOS 7.4, tvOS 14.5, iOS 14.5 and iPadOS 14.5. Processi...

6.5CVSS5.7AI score0.01224EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2021/09/07 5:15 a.m.•22 views

CVE-2021-33484

An issue was discovered in CommentsService.ashx in OnyakTech Comments Pro 3.8. An attacker can download a copy of the installer, decompile it, and discover a hardcoded IV used to encrypt the username and userid in the comment POST request. Additionally, the attacker can decrypt the encrypted...

7.5CVSS5.8AI score0.00892EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2021/09/07 5:15 a.m.•13 views

CVE-2021-33484

An issue was discovered in CommentsService.ashx in OnyakTech Comments Pro 3.8. An attacker can download a copy of the installer, decompile it, and discover a hardcoded IV used to encrypt the username and userid in the comment POST request. Additionally, the attacker can decrypt the encrypted...

7.5CVSS7AI score0.00892EPSS
SaveExploits1References3
osv_debian
osv_debian
•added 2021/09/07 2:15 a.m.•16 views

DEBIAN-CVE-2021-40540

ulfiusurilogger in Ulfius HTTP Framework before 2.7.4 omits coninfo initialization and a coninfo-request NULL check for certain malformed HTTP requests...

9.8CVSS8.5AI score0.02628EPSS
SaveExploits3References1
osv_cve
osv_cve
•added 2021/09/07 2:15 a.m.•29 views

CVE-2021-40540

ulfiusurilogger in Ulfius HTTP Framework before 2.7.4 omits coninfo initialization and a coninfo-request NULL check for certain malformed HTTP requests...

9.8CVSS6.8AI score0.02628EPSS
SaveExploits3References3
NVD
NVD
•added 2021/09/07 2:15 a.m.•48 views

CVE-2021-40540

ulfiusurilogger in Ulfius HTTP Framework before 2.7.4 omits coninfo initialization and a coninfo-request NULL check for certain malformed HTTP requests...

9.8CVSS0.02628EPSS
SaveExploits3References3
attackerkb
attackerkb
•added 2021/09/07 2:15 a.m.•23 views

CVE-2021-40540

ulfiusurilogger in Ulfius HTTP Framework before 2.7.4 omits coninfo initialization and a coninfo-request NULL check for certain malformed HTTP requests...

9.8CVSS7.3AI score0.02628EPSS
SaveExploits3References4
UbuntuCve
UbuntuCve
•added 2021/09/07 2:15 a.m.•38 views

CVE-2021-40540

ulfiusurilogger in Ulfius HTTP Framework before 2.7.4 omits coninfo initialization and a coninfo-request NULL check for certain malformed HTTP requests...

9.8CVSS7.2AI score0.02628EPSS
SaveExploits3References3
Prion
Prion
•added 2021/09/07 2:15 a.m.•31 views

Design/Logic Flaw

ulfiusurilogger in Ulfius HTTP Framework before 2.7.4 omits coninfo initialization and a coninfo-request NULL check for certain malformed HTTP requests...

7.5CVSS9.4AI score0.02628EPSS
SaveExploits3References3Affected Software1
osv_ubuntu
osv_ubuntu
•added 2021/09/07 2:15 a.m.•64 views

UBUNTU-CVE-2021-40540

ulfiusurilogger in Ulfius HTTP Framework before 2.7.4 omits coninfo initialization and a coninfo-request NULL check for certain malformed HTTP requests...

9.8CVSS5.8AI score0.02628EPSS
SaveExploits3References4
Debian CVE
Debian CVE
•added 2021/09/07 1:50 a.m.•106 views

CVE-2021-40540

ulfiusurilogger in Ulfius HTTP Framework before 2.7.4 omits coninfo initialization and a coninfo-request NULL check for certain malformed HTTP requests...

9.8CVSS9.5AI score0.02628EPSS
SaveExploits3
CNNVD
CNNVD
•added 2021/09/07 12:00 a.m.•21 views

Github Ulfius input validation error vulnerability

Github ulfius is the HTTP framework for REST applications in C. An input validation error vulnerability exists in ulfius, which stems from the coninfo initialization of ulfiusurilogger and coninfo-request in the product failing to adequately check HTTP requests. The following products and version...

9.8CVSS8.2AI score0.02628EPSS
SaveExploits3References6
Rows per page
Query Builder