609 matches found
CVE-2021-21309 affecting package redis for versions less than 5.0.5-7
CVE-2021-21309 affecting package redis for versions less than 5.0.5-7. A patched version of the package is available...
CVE-2014-9913 affecting package unzip for versions less than 6.0-19
CVE-2014-9913 affecting package unzip for versions less than 6.0-19. A patched version of the package is available...
CVE-2022-0359 affecting package vim for versions less than 8.2.4233-1
CVE-2022-0359 affecting package vim for versions less than 8.2.4233-1. An upgraded version of the package is available that resolves this issue...
CVE-2022-0261 affecting package vim for versions less than 8.2.4233-1
CVE-2022-0261 affecting package vim for versions less than 8.2.4233-1. An upgraded version of the package is available that resolves this issue...
CVE-2012-6687 affecting package fcgi for versions less than 2.4.0-7
CVE-2012-6687 affecting package fcgi for versions less than 2.4.0-7. A patched version of the package is available...
CVE-2021-42380 affecting package busybox for versions less than 1.35.0-1
CVE-2021-42380 affecting package busybox for versions less than 1.35.0-1. An upgraded version of the package is available that resolves this issue...
CVE-2021-22897 affecting package curl for versions less than 7.76.0-5
CVE-2021-22897 affecting package curl for versions less than 7.76.0-5. A patched version of the package is available...
CVE-2021-22925 affecting package curl for versions less than 7.76.0-5
CVE-2021-22925 affecting package curl for versions less than 7.76.0-5. A patched version of the package is available...
CVE-2021-22901 affecting package curl for versions less than 7.76.0-5
CVE-2021-22901 affecting package curl for versions less than 7.76.0-5. A patched version of the package is available...
CVE-2021-22946 affecting package curl for versions less than 7.82.0-1
CVE-2021-22946 affecting package curl for versions less than 7.82.0-1. An upgraded version of the package is available that resolves this issue...
CVE-2020-24332 affecting package trousers for versions less than 0.3.14-7
CVE-2020-24332 affecting package trousers for versions less than 0.3.14-7. A patched version of the package is available...
setLockPeriods accepts multipliers less than 100 (1x mult)
Handle StErMi Vulnerability details Impact In the setLockPeriods you are not making any checks on the multipliers value for a given index. It means that the multiplier could be less than 100 1x. Proof of Concept Tools Used Manual Recommended Mitigation Steps If you don't want to enable multiplier...
AZL-7415 CVE-2021-39928 affecting package wireshark for versions less than 3.4.14-1
NULL pointer exception in the IEEE 802.11 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file...
PT-2021-27696
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type identified as Use-after-poison READ 1. The crash state involves several components, including...
DEBIAN-CVE-2021-23992
Thunderbird did not check if the user ID associated with an OpenPGP key has a valid self signature. An attacker may create a crafted version of an OpenPGP key, by either replacing the original user ID, or by adding another user ID. If Thunderbird imports and accepts the crafted key, the Thunderbi...
Pot distribution does not need to add up to 100%
Handle cmichel Vulnerability details Vulnerability Details The Factory.setPotDistribution allows specifying values that add up to less than 100% because of the inequality = 1000 instead of an equality == 1000. Impact If using less than 100%, funds could become stuck in the market for certain mode...
Design/Logic Flaw
The host SSH servers of Brocade Fabric OS before Brocade Fabric OS v7.4.2h, v8.2.1c, v8.2.2, v9.0.0, and Brocade SANnav before v2.1.1 utilize keys of less than 2048 bits, which may be vulnerable to man-in-the-middle attacks and/or insecure SSH communications...
PYSEC-2021-180
TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a denial of service via a CHECK-fail in tf.rawops.CTCGreedyDecoder. This is because the...
PYSEC-2021-669
TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a denial of service via a CHECK-fail in tf.rawops.CTCGreedyDecoder. This is because the...
