Browse CVEs

MEDIUM 5.3 CVE-2022-36083 JOSE is "JSON Web Almost Everything" - JWA, JWS, JWE, JWT, JWK, JWKS with no dependencies using runtime's native crypto in Node.js, Browser, Cloudfla… Jose 1.28.2 / 2.0.6+ Fix from $1,6002022-09-07 HIGH 7.5 CVE-2022-36049 Flux2 is a tool for keeping Kubernetes clusters in sync with sources of configuration, and Flux's helm-controller is a Kubernetes operator that allow… Helm 0.23.0 / 0.32.0+ Fix from $1,9502022-09-07 HIGH 7.5 CVE-2022-36064 Shescape is a shell escape package for JavaScript. An Inefficient Regular Expression Complexity vulnerability impacts users that use Shescape to esca… Shescape 1.5.10+ Fix from $1,9502022-09-06 HIGH 7.5 CVE-2020-29260 libvncclient v0.9.13 was discovered to contain a memory leak via the function rfbClientCleanup(). Debian Linux Patch available Fix from $1,9502022-09-02 MEDIUM 5.5 CVE-2022-22101 Denial of service in multimedia due to uncontrolled resource consumption while parsing an incoming HAB message in Snapdragon Auto Apq8096au Firmware Mitigation only Fix from $1,6002022-09-02 MEDIUM 6.3 CVE-2022-1677 In OpenShift Container Platform, a user with permissions to create or modify Routes can craft a payload that inserts a malformed entry into one of th… Openshift Container Platform Patch available Fix from $1,6002022-09-01 MEDIUM 5.5 CVE-2020-35534 In LibRaw, there is a memory corruption vulnerability within the "crxFreeSubbandData()" function (libraw\src\decoders\crx.cpp) when processing cr3 fi… Libraw Patch available Fix from $1,6002022-09-01 MEDIUM 6.5 CVE-2022-36055 Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. Fuzz testing, provided by the CNCF, identified input … Helm 3.9.4+ Fix from $1,6002022-09-01 HIGH 7.5 CVE-2022-2004 AutomationDirect DirectLOGIC is vulnerable to a a specially crafted packet can be sent continuously to the PLC to prevent access from DirectSoft and … D0 06dd1 Firmware 2.72+ Fix from $1,9502022-08-31 HIGH 7.5 CVE-2022-1259 A flaw was found in Undertow. A potential security issue in flow control handling by the browser over HTTP/2 may cause overhead or a denial of servic… Build Of Quarkus after 2.2.17 Fix from $1,9502022-08-31 MEDIUM 5.5 CVE-2022-1325 A flaw was found in Clmg, where with the help of a maliciously crafted pandore or bmp file with modified dx and dy header field values it is possible… Cimg 3.1.0+ Fix from $1,6002022-08-31 HIGH 7.5 CVE-2022-36034 nitrado.js is a type safe wrapper for the Nitrado API. Possible ReDoS with lib input of `{{` and with many repetitions of `{{|`. This issue has been … Nitrado.js 0.2.5+ Fix from $1,9502022-08-29 MEDIUM 6.5 CVE-2022-0669 A flaw was found in dpdk. This flaw allows a malicious vhost-user master to attach an unexpected number of fds as ancillary data to VHOST_USER_GET_IN… Openshift Container Platform 22.03+ Fix from $1,6002022-08-29 MEDIUM 5.5 CVE-2021-3669 A flaw was found in the Linux kernel. Measuring usage of the shared memory does not scale with large shared memory segment counts which could lead to… Linux Kernel 2.7+ Fix from $1,6002022-08-26 MEDIUM 5.5 CVE-2021-4022 A vulnerability was found in rizin. The bug involves an ELF64 binary for the HPPA architecture. When a specially crafted binarygets analysed by rizin… Rizin after 0.3.1 Fix from $1,6002022-08-25 HIGH 7.5 CVE-2021-42521 There is a NULL pointer dereference vulnerability in VTK before 9.2.5, and it lies in IO/Infovis/vtkXMLTreeReader.cxx. The vendor didn't check the re… Vtk after 9.0.0 Fix from $1,9502022-08-25 MEDIUM 5.3 CVE-2021-4040 A flaw was found in AMQ Broker. This issue can cause a partial interruption to the availability of AMQ Broker via an Out of memory (OOM) condition. T… Amq Broker 2.19.1 / 7.10.0+ Fix from $1,6002022-08-24 HIGH 7.5 CVE-2022-24375 The package node-opcua before 2.74.0 are vulnerable to Denial of Service (DoS) when bypassing the limitations for excessive memory consumption by sen… Node Opcua 2.74.0+ Fix from $1,9502022-08-24 MEDIUM 6.5 CVE-2022-33142 Authenticated (subscriber+) Denial Of Service (DoS) vulnerability in WordPlus WordPress Better Messages plugin <= 1.9.10.57 at WordPress. Better Messages 1.9.10.58+ Fix from $1,6002022-08-23 HIGH 7.5 CVE-2021-20298 A flaw was found in OpenEXR's B44Compressor. This flaw allows an attacker who can submit a crafted file to be processed by OpenEXR, to exhaust all me… Debian Linux after 2.5.7 Fix from $1,9502022-08-23 MEDIUM 6.5 CVE-2021-3670 MaxQueryDuration not honoured in Samba AD DC LDAP Storage 4.16.0+ Fix from $1,6002022-08-23 HIGH 7.5 CVE-2021-3690 A flaw was found in Undertow. A buffer leak on the incoming WebSocket PONG message may lead to memory exhaustion. This flaw allows an attacker to cau… Fuse 2.0.40 / 2.2.10+ Fix from $1,9502022-08-23 MEDIUM 5.5 CVE-2021-3759 A memory overflow vulnerability was found in the Linux kernel’s ipc functionality of the memcg subsystem, in the way a user calls the semget function… Linux Kernel Mitigation only Fix from $1,6002022-08-23 MEDIUM 5.5 CVE-2021-3764 A memory leak flaw was found in the Linux kernel's ccp_run_aes_gcm_cmd() function that allows an attacker to cause a denial of service. The vulnerabi… Linux Kernel after 5.14.20 Fix from $1,6002022-08-23 MEDIUM 6.5 CVE-2022-35013 PNGDec commit 8abf6be was discovered to contain a FPE via SaveBMP at /linux/main.cpp. Pngdec No fix yet Fix from $1,6002022-08-16 HIGH 7.5 CVE-2022-38150 In Varnish Cache 7.0.0, 7.0.1, 7.0.2, and 7.1.0, it is possible to cause the Varnish Server to assert and automatically restart through forged HTTP/1… Fedora Mitigation only Fix from $1,9502022-08-11 HIGH 7.5 CVE-2022-35769 Windows Point-to-Point Protocol (PPP) Denial of Service Vulnerability Windows 10 No fix yet Fix from $1,9502022-08-09 MEDIUM 6.2 CVE-2022-35776 Azure Site Recovery Denial of Service Vulnerability Azure Site Recovery Vmware To Azure 9.50.6419.1+ Fix from $1,6002022-08-09 HIGH 7.5 CVE-2022-34701 Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability Windows 10 No fix yet Fix from $1,9502022-08-09 HIGH 7.5 CVE-2022-28880 A Denial-of-Service vulnerability was discovered in the F-Secure Atlant and in certain WithSecure products while scanning fuzzed PE32-bit files it is… Elements Endpoint Detection And Response Mitigation only Fix from $1,9502022-08-05