DEBIAN-CVE-2021-3664

url-parse is vulnerable to URL Redirection to Untrusted Site...

CVE-2021-3664

url-parse is vulnerable to URL Redirection to Untrusted Site...

UBUNTU-CVE-2021-3664

url-parse is vulnerable to URL Redirection to Untrusted Site...

CVE-2021-3664

url-parse is vulnerable to URL Redirection to Untrusted Site...

CVE-2021-3664

url-parse is vulnerable to URL Redirection to Untrusted Site...

VideoLAN VLC Media Player 缓冲区错误漏洞

VideoLAN VLC is an open source cross-platform multimedia player and framework that can play most multimedia files, as well as DVDs, audio CDs, VCDs and various streaming protocols.The Parseindx component in VideoLAN VLC version 3.0.11 suffers from a buffer overflow vulnerability that can be...

CVE-2021-3664

url-parse is vulnerable to URL Redirection to Untrusted Site...

CVE-2021-3664 Open Redirect in unshiftio/url-parse

url-parse is vulnerable to URL Redirection to Untrusted Site...

CVE-2021-3664

CVE-2021-3664 affects the url-parse library and enables a URL Redirection to Untrusted Site (Open Redirect) via its URL parsing logic. According to the connected document, the vulnerability is rooted in the url-parse component and has a CVSS v3.1 base score of 5.3 with vector (AV:N/AC:L/PR:N/UI:N...

PT-2021-21304 · Npm +2 · Url-Parse +2

Name of the Vulnerable Software and Affected Versions: url-parse affected versions not specified Description: The issue concerns URL redirection to untrusted sites. Depending on library usage and attacker intent, impacts may include allow/block list bypasses, SSRF attacks, open redirects, or othe...

CVE-2021-34260

A buffer overflow vulnerability in the USBHParseInterfaceDesc function of STMicroelectronics STM32Cube Middleware v1.8.0 and below allows attackers to execute arbitrary code...

nodejs-path-parse: ReDoS via splitDeviceRe, splitTailRe and splitPathRe

A flaw was found in nodejs-path-parse. All versions of package path-parse are vulnerable to Regular Expression Denial of Service ReDoS via splitDeviceRe, splitTailRe, and splitPathRe regular expressions. ReDoS exhibits polynomial worst-case time complexity...

Moderate: Red Hat Security Advisory: RHV Manager (ovirt-engine) security update [ovirt-4.4.7]

Updated ovirt-engine packages that fix several bugs and add various enhancements are now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...

STMicroelectronics STM32Cube 安全漏洞

The Stmicroelectronics STMicroelectronics STM32Cube is a microcontroller for embedded systems from STMicroelectronics Switzerland. A security vulnerability exists in USBHParseCfgDesc in STMicroelectronics STM32Cube Middleware v1.8.0 and earlier versions, which denies service due to a system hang...

STMicroelectronics STM32Cube 缓冲区错误漏洞

The Stmicroelectronics STMicroelectronics STM32Cube is a microcontroller for embedded systems from STMicroelectronics Switzerland. A buffer error vulnerability exists in the USBH ParseEPDesc function in STMicroelectronics STM32Cube Middleware v1.8.0 and earlier versions, which can be exploited by...

DEBIAN-CVE-2020-36426

An issue was discovered in Arm Mbed TLS before 2.24.0. mbedtlsx509crlparseder has a buffer over-read of one byte...

CVE-2021-1965

Possible buffer overflow due to lack of parameter length check during MBSSID scan IE parse in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking...

Buffer overflow

Possible buffer overflow due to lack of parameter length check during MBSSID scan IE parse in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking...

Open Redirect in ionicabizau/parse-url

✍️ Description parse-url improperly handles the user input such as https:/\ and interprets it as a relative path. Backslashes after the protocol are accepted by browsers and treated as normal slashes, but parse-url reads them as the relative path, which could lead to SSRF, open redirects, or other...

OESA-2021-1262 nodejs-path-parse security update

Node.js path.parse ponyfill Security Fixes: All versions of package path-parse are vulnerable to Regular Expression Denial of Service ReDoS via splitDeviceRe, splitTailRe, and splitPathRe regular expressions. ReDoS exhibits polynomial worst-case time complexity.CVE-2021-23343...