Fri, Mar 12 · 07:15 PM CSTCVE-2021-20231
9.8/10 · Must read/watchNVDvuln
Summary
A flaw was found in gnutls. A use after free issue in client sending key_share extension may lead to memory corruption and other consequences.
CVECVE-2021-20231
SeverityCRITICAL
TypeUPDATED
PublishedFri, Mar 12 · 07:15 PM CST
ModifiedWed, Oct 14 · 11:16 AM CDT
CVE-2021-20232
9.8/10 · Must read/watchNVDvuln
Summary
A flaw was found in gnutls. A use after free issue in client_send_params in lib/ext/pre_shared_key.c may lead to memory corruption and other potential consequences.
CVECVE-2021-20232
SeverityCRITICAL
TypeUPDATED
PublishedFri, Mar 12 · 07:15 PM CST
ModifiedWed, Oct 14 · 11:16 AM CDT
CVE-2021-33574
9.8/10 · Must read/watchNVDvuln
Summary
The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free. It may use the notification thread attributes object (passed through its struct sigevent parameter) after it has been freed by the caller, leading to a denial of service (application crash) or possibly unspecified other
CVECVE-2021-33574
SeverityCRITICAL
TypeUPDATED
PublishedTue, May 25 · 10:15 PM CDT
ModifiedWed, Oct 14 · 12:17 PM CDT
CVE-2022-22822
9.8/10 · Must read/watchNVDvuln
Summary
addBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
CVECVE-2022-22822
SeverityCRITICAL
TypeUPDATED
PublishedMon, Jan 10 · 02:12 PM CST
ModifiedWed, Oct 14 · 04:17 PM CDT
CVE-2022-22823
9.8/10 · Must read/watchNVDvuln
Summary
build_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
CVECVE-2022-22823
SeverityCRITICAL
TypeUPDATED
PublishedMon, Jan 10 · 02:12 PM CST
ModifiedWed, Oct 14 · 04:17 PM CDT
CVE-2022-22824
9.8/10 · Must read/watchNVDvuln
Summary
defineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
CVECVE-2022-22824
SeverityCRITICAL
TypeUPDATED
PublishedMon, Jan 10 · 02:12 PM CST
ModifiedWed, Oct 14 · 04:17 PM CDT
CVE-2022-23218
9.8/10 · Must read/watchNVDvuln
Summary
The deprecated compatibility function svcunix_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its path argument on the stack without validating its length, which may result in a buffer overflow, potentially resulting in a denial of service or (if an application is not built with a stack
CVECVE-2022-23218
SeverityCRITICAL
TypeUPDATED
PublishedFri, Jan 14 · 07:15 AM CST
ModifiedWed, Oct 14 · 04:17 PM CDT
CVE-2022-23219
9.8/10 · Must read/watchNVDvuln
Summary
The deprecated compatibility function clnt_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its hostname argument on the stack without validating its length, which may result in a buffer overflow, potentially resulting in a denial of service or (if an application is not built with a stac
CVECVE-2022-23219
SeverityCRITICAL
TypeUPDATED
PublishedFri, Jan 14 · 07:15 AM CST
ModifiedWed, Oct 14 · 04:17 PM CDT
CVE-2022-23852
9.8/10 · Must read/watchNVDvuln
Summary
Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with a nonzero XML_CONTEXT_BYTES.
CVECVE-2022-23852
SeverityCRITICAL
TypeUPDATED
PublishedMon, Jan 24 · 02:15 AM CST
ModifiedWed, Oct 14 · 04:17 PM CDT
CVE-2022-25235
9.8/10 · Must read/watchNVDvuln
Summary
xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.
CVECVE-2022-25235
SeverityCRITICAL
TypeUPDATED
PublishedWed, Feb 16 · 01:15 AM CST
ModifiedWed, Oct 14 · 04:17 PM CDT
CVE-2022-25236
9.8/10 · Must read/watchNVDvuln
Summary
xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs.
CVECVE-2022-25236
SeverityCRITICAL
TypeUPDATED
PublishedWed, Feb 16 · 01:15 AM CST
ModifiedWed, Oct 14 · 05:17 PM CDT
CVE-2021-22945
9.1/10 · Must read/watchNVDvuln
Summary
When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointer to an already freed memory area and both use that again in a subsequent call to send data and also free it *again*.
CVECVE-2021-22945
SeverityCRITICAL
TypeUPDATED
PublishedThu, Sep 23 · 01:15 PM CDT
ModifiedWed, Oct 14 · 12:17 PM CDT
CVE-2021-35942
9.1/10 · Must read/watchNVDvuln
Summary
The wordexp function in the GNU C Library (aka glibc) through 2.33 may crash or read arbitrary memory in parse_param (in posix/wordexp.c) when called with an untrusted, crafted pattern, potentially resulting in a denial of service or disclosure of information. This occurs because atoi was used but strtoul should have b
CVECVE-2021-35942
SeverityCRITICAL
TypeUPDATED
PublishedThu, Jul 22 · 06:15 PM CDT
ModifiedWed, Oct 14 · 12:17 PM CDT
CVE-2015-0469
10.0/10 · Must read/watchNVDvuln
Summary
Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
CVECVE-2015-0469
SeverityHIGH
TypeUPDATED
PublishedThu, Apr 16 · 04:59 PM CDT
ModifiedWed, Oct 14 · 10:17 PM CDT
CVE-2015-2628
10.0/10 · Must read/watchNVDvuln
Summary
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA.
CVECVE-2015-2628
SeverityHIGH
TypeUPDATED
PublishedThu, Jul 16 · 10:59 AM CDT
ModifiedWed, Oct 14 · 10:17 PM CDT
CVE-2015-2638
10.0/10 · Must read/watchNVDvuln
Summary
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JavaFX 2.2.80; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
CVECVE-2015-2638
SeverityHIGH
TypeUPDATED
PublishedThu, Jul 16 · 10:59 AM CDT
ModifiedWed, Oct 14 · 10:17 PM CDT
CVE-2015-4731
10.0/10 · Must read/watchNVDvuln
Summary
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; Java SE Embedded 7u75; and Java SE Embedded 8u33 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.
CVECVE-2015-4731
SeverityHIGH
TypeUPDATED
PublishedThu, Jul 16 · 11:00 AM CDT
ModifiedWed, Oct 14 · 10:17 PM CDT
CVE-2015-4732
10.0/10 · Must read/watchNVDvuln
Summary
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2015-2590.
CVECVE-2015-4732
SeverityHIGH
TypeUPDATED
PublishedThu, Jul 16 · 11:00 AM CDT
ModifiedWed, Oct 14 · 10:17 PM CDT
CVE-2015-4760
10.0/10 · Must read/watchNVDvuln
Summary
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
CVECVE-2015-4760
SeverityHIGH
TypeUPDATED
PublishedThu, Jul 16 · 11:00 AM CDT
ModifiedWed, Oct 14 · 10:17 PM CDT
CVE-2015-4805
10.0/10 · Must read/watchNVDvuln
Summary
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Serialization.
CVECVE-2015-4805
SeverityHIGH
TypeUPDATED
PublishedWed, Oct 21 · 09:59 PM CDT
ModifiedWed, Oct 14 · 10:17 PM CDT
CVE-2015-4835
10.0/10 · Must read/watchNVDvuln
Summary
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA, a different vulnerability than CVE-2015-4881.
CVECVE-2015-4835
SeverityHIGH
TypeUPDATED
PublishedWed, Oct 21 · 11:59 PM CDT
ModifiedWed, Oct 14 · 10:17 PM CDT
CVE-2015-4843
10.0/10 · Must read/watchNVDvuln
Summary
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
CVECVE-2015-4843
SeverityHIGH
TypeUPDATED
PublishedWed, Oct 21 · 11:59 PM CDT
ModifiedWed, Oct 14 · 10:17 PM CDT
CVE-2015-4844
10.0/10 · Must read/watchNVDvuln
Summary
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
CVECVE-2015-4844
SeverityHIGH
TypeUPDATED
PublishedWed, Oct 21 · 11:59 PM CDT
ModifiedWed, Oct 14 · 10:17 PM CDT
CVE-2015-4860
10.0/10 · Must read/watchNVDvuln
Summary
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI, a different vulnerability than CVE-2015-4883.
CVECVE-2015-4860
SeverityHIGH
TypeUPDATED
PublishedWed, Oct 21 · 11:59 PM CDT
ModifiedWed, Oct 14 · 10:17 PM CDT
CVE-2015-4881
10.0/10 · Must read/watchNVDvuln
Summary
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA, a different vulnerability than CVE-2015-4835.
CVECVE-2015-4881
SeverityHIGH
TypeUPDATED
PublishedWed, Oct 21 · 11:59 PM CDT
ModifiedWed, Oct 14 · 10:17 PM CDT
