Lucene search
+L

6469 matches found

OSV
OSV
•added 2021/11/01 4:15 a.m.•7 views

DEBIAN-CVE-2021-42574

An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visual reordering of characters via control sequences, which can be used to craft source code that renders different logic than the logical ordering of tokens ingested by compilers and...

8.3CVSS6.8AI score0.12881EPSS
SaveExploits4References1
OSV
OSV
•added 2021/11/01 4:15 a.m.•12 views

CVE-2021-42574

An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visual reordering of characters via control sequences, which can be used to craft source code that renders different logic than the logical ordering of tokens ingested by compilers and...

8.3CVSS8.4AI score
SaveExploits0References18
OSV
OSV
•added 2021/11/01 4:15 a.m.•10 views

ALPINE-CVE-2021-42574

An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visual reordering of characters via control sequences, which can be used to craft source code that renders different logic than the logical ordering of tokens ingested by compilers and...

8.3CVSS6.8AI score0.12881EPSS
SaveExploits4References1
NVD
NVD
•added 2021/11/01 4:15 a.m.•33 views

CVE-2021-42574

An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visual reordering of characters via control sequences, which can be used to craft source code that renders different logic than the logical ordering of tokens ingested by compilers and...

8.3CVSS0.12881EPSS
SaveExploits4References18
Prion
Prion
•added 2021/11/01 4:15 a.m.•40 views

Security feature bypass

DISPUTED An issue was discovered in the character definitions of the Unicode Specification through 14.0. The specification allows an adversary to produce source code identifiers such as function names using homoglyphs that render visually identical to a target identifier. Adversaries can leverage...

5.1CVSS8AI score0.0491EPSS
SaveExploits1References10Affected Software1
attackerkb
attackerkb
•added 2021/11/01 4:15 a.m.•12 views

CVE-2021-42694

An issue was discovered in the character definitions of the Unicode Specification through 14.0. The specification allows an adversary to produce source code identifiers such as function names using homoglyphs that render visually identical to a target identifier. Adversaries can leverage this to...

8.3CVSS7.5AI score0.0491EPSS
SaveExploits1References11
UbuntuCve
UbuntuCve
•added 2021/11/01 4:15 a.m.•82 views

CVE-2021-42574

An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visual reordering of characters via control sequences, which can be used to craft source code that renders different logic than the logical ordering of tokens ingested by compilers and...

8.3CVSS6.9AI score0.12881EPSS
SaveExploits4References5
Prion
Prion
•added 2021/11/01 4:15 a.m.•44 views

Design/Logic Flaw

DISPUTED An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visual reordering of characters via control sequences, which can be used to craft source code that renders different logic than the logical ordering of tokens ingested by...

5.1CVSS8.4AI score0.12881EPSS
SaveExploits4References18Affected Software3
attackerkb
attackerkb
•added 2021/11/01 4:15 a.m.•11 views

CVE-2021-42574

An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visual reordering of characters via control sequences, which can be used to craft source code that renders different logic than the logical ordering of tokens ingested by compilers and...

8.3CVSS6.8AI score0.12881EPSS
SaveExploits4References22
OSV
OSV
•added 2021/11/01 4:15 a.m.•35 views

UBUNTU-CVE-2021-42574

An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visual reordering of characters via control sequences, which can be used to craft source code that renders different logic than the logical ordering of tokens ingested by compilers and...

8.3CVSS6.8AI score0.12881EPSS
SaveExploits4References6
RedhatCVE
RedhatCVE
•added 2021/11/01 1:14 a.m.•85 views

CVE-2021-42694

A flaw was found in the way Unicode standards are implemented in the context of development environments, which have specialized requirements for rendering text. Homoglyphs are different Unicode characters that, to the naked eye, look the same. An attacker could use homoglyphs to deceive a human...

8.5CVSS1.7AI score0.0491EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
•added 2021/11/01 12:36 a.m.•99 views

CVE-2021-42574

A flaw was found in the way Unicode standards are implemented in the context of development environments, which have specialized requirements for rendering text. An attacker could exploit this to deceive a human reviewer by creating a malicious patch containing well placed BiDi characters. The...

8.5CVSS6.9AI score0.12881EPSS
SaveExploits4References7
Vulnrichment
Vulnrichment
•added 2021/11/01 12:00 a.m.•30 views

CVE-2021-42694

An issue was discovered in the character definitions of the Unicode Specification through 14.0. The specification allows an adversary to produce source code identifiers such as function names using homoglyphs that render visually identical to a target identifier. Adversaries can leverage this to...

6.8AI score0.0491EPSS
SaveExploits1References10
Cvelist
Cvelist
•added 2021/11/01 12:00 a.m.•66 views

CVE-2021-42694

An issue was discovered in the character definitions of the Unicode Specification through 14.0. The specification allows an adversary to produce source code identifiers such as function names using homoglyphs that render visually identical to a target identifier. Adversaries can leverage this to...

8.3AI score0.0491EPSS
SaveExploits1References10
CNNVD
CNNVD
•added 2021/11/01 12:00 a.m.•27 views

Unicode 安全漏洞

Unicode Universal Character Set is a universal character encoding standard organized by the Unicode Consortium. It is used to assign a code to every character and symbol in every language in the world. A security vulnerability exists in the Unicode Specification version 14.0 and earlier versions,...

8.3CVSS8.1AI score0.0491EPSS
SaveExploits1References15
CVE
CVE
•added 2021/11/01 12:00 a.m.•214 views

CVE-2021-42694

CVE-2021-42694 concerns homoglyph-based Trojan Source in Unicode handling up to at least Unicode 14.0. Attackers can craft source code identifiers that render visually identical to legitimate names, enabling injection or concealment of code in upstream/downstream dependencies. The connected docum...

8.3CVSS8AI score0.0491EPSS
SaveExploits1References10Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/01 12:00 a.m.•3 views

CVE-2021-42694: Improper Control of Generation of Code

An issue was discovered in the character definitions of the Unicode Specification through 14.0. The specification allows an adversary to produce source code identifiers such as function names using homoglyphs that render visually identical to a target identifier. Adversaries can leverage this to...

8.3CVSS7.5AI score0.0491EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2021/11/01 12:00 a.m.•52 views

RHEL 7 : binutils (RHSA-2021:4038)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:4038 advisory. The binutils packages provide a collection of binary utilities for the manipulation of object code in various object file formats. It includes the ar...

8.3CVSS6.9AI score0.12881EPSS
SaveExploits4References6
Positive Technologies
Positive Technologies
•added 2021/11/01 12:00 a.m.•9 views

PT-2021-4640 · Unknown · Unicode Specification

Name of the Vulnerable Software and Affected Versions: Unicode Specification versions through 14.0 Description: An issue was discovered in the character definitions of the Unicode Specification. The specification allows an adversary to produce source code identifiers, such as function names, usin...

10CVSS9AI score0.0491EPSS
SaveExploits1References23
Positive Technologies
Positive Technologies
•added 2021/11/01 12:00 a.m.•14 views

PT-2021-4639

Name of the Vulnerable Software and Affected Versions Unicode Specification versions prior to 14.0 Jira Service Management affected versions not specified Jira Software affected versions not specified Jira Work Management affected versions not specified Description The issue is related to the...

10CVSS7AI score0.12881EPSS
SaveExploits4References124
Rows per page
Query Builder