Browse CVEs

HIGH 7.5 CVE-2021-25904 An issue was discovered in the av-data crate before 0.3.0 for Rust. A raw pointer is dereferenced, leading to a read of an arbitrary memory address, … Av Data 0.3.0+ Fix from $1,9502021-01-26 MEDIUM 6.5 CVE-2020-8569 Kubernetes CSI snapshot-controller prior to v2.1.3 and v3.0.2 could panic when processing a VolumeSnapshot custom resource when: - The VolumeSnapshot… Container Storage Interface Snapshotter 2.1.3 / 3.0.2+ Fix from $1,6002021-01-21 MEDIUM 6.1 CVE-2021-1069 NVIDIA SHIELD TV, all versions prior to 8.2.2, contains a vulnerability in the NVHost function, which may lead to abnormal reboot due to a null point… Shield Experience 8.2.2+ Fix from $1,6002021-01-20 HIGH 8.6 CVE-2021-1274 Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against … Ios Xe Sd Wan No fix yet Fix from $1,9502021-01-20 HIGH 7.8 CVE-2021-25176 An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A NULL pointer dereference exists when rendering malformed .DXF and .DWG… Drawings Software Development Kit 10.4.1 / 13.1.0.1+ Fix from $1,9502021-01-18 HIGH 7.5 CVE-2021-0206 A NULL Pointer Dereference vulnerability in Juniper Networks Junos OS allows an attacker to send a specific packet causing the packet forwarding engi… Junos Mitigation only Fix from $1,9502021-01-15 HIGH 8.8 CVE-2020-26991 A vulnerability has been identified in JT2Go (All versions < V13.1.0.2), Teamcenter Visualization (All versions < V13.1.0.2). Affected applications l… Jt2go 13.1.0.2+ Fix from $1,9502021-01-12 HIGH 7.8 CVE-2020-27277 Delta Electronics DOPSoft Version 4.0.8.21 and prior has a null pointer dereference issue while processing project files, which may allow an attacker… Dopsoft after 4.0.8.21 Fix from $1,9502021-01-11 HIGH 7.8 CVE-2020-27289 Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior has a null pointer dereference issue while processing project files, which may allow an attack… Cncsoft B after 1.0.0.2 Fix from $1,9502021-01-11 HIGH 7.1 CVE-2021-1064 NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which it obtains a value from an untrusted source, converts this value to a point… Virtual Gpu Manager 8.6 / 11.3+ Fix from $1,9502021-01-08 HIGH 7.5 CVE-2020-27279 A NULL pointer deference vulnerability has been identified in the protocol converter. An attacker could send a specially crafted packet that could re… Crimson Mitigation only Fix from $1,9502021-01-06 MEDIUM 5.5 CVE-2020-35507 There's a flaw in bfd_pef_parse_function_stubs of bfd/pef.c in binutils in versions prior to 2.34 which could allow an attacker who is able to submit… Enterprise Linux 2.34+ Fix from $1,6002021-01-04 MEDIUM 5.5 CVE-2020-35496 There's a flaw in bfd_pef_scan_start_address() of bfd/pef.c in binutils which could allow an attacker who is able to submit a crafted file to be proc… Fedora 2.34+ Fix from $1,6002021-01-04 MEDIUM 5.5 CVE-2020-35495 There's a flaw in binutils /bfd/pef.c. An attacker who is able to submit a crafted input file to be processed by the objdump program could cause a nu… Fedora 2.34+ Fix from $1,6002021-01-04 CRITICAL 9.8 CVE-2020-35860 An issue was discovered in the cbox crate through 2020-03-19 for Rust. The CBox API allows dereferencing raw pointers without a requirement for unsaf… Cbox after 0.3.0 Fix from $2,3002020-12-31 MEDIUM 5.5 CVE-2020-35907 An issue was discovered in the futures-task crate before 0.3.5 for Rust. futures_task::noop_waker_ref allows a NULL pointer dereference. Futures Task 0.3.5+ Fix from $1,6002020-12-31 HIGH 7.5 CVE-2020-35450 Gobby 0.4.11 allows a NULL pointer dereference in the D-Bus handler for certain set_language calls. Gobby Patch available Fix from $1,9502020-12-26 HIGH 7.5 CVE-2020-35680 smtpd/lka_filter.c in OpenSMTPD before 6.8.0p1, in certain configurations, allows remote attackers to cause a denial of service (NULL pointer derefer… Fedora 6.8.0+ Fix from $1,9502020-12-24 HIGH 7.5 CVE-2020-35668 RedisGraph 2.x through 2.2.11 has a NULL Pointer Dereference that leads to a server crash because it mishandles an unquoted string, such as an alias … Redisgraph 2.2.11+ Fix from $1,9502020-12-23 HIGH 7.5 CVE-2020-29652 A nil pointer dereference in the golang.org/x/crypto/ssh component through v0.0.0-20201203163018-be400aefbc4c for Go allows remote attackers to cause… Ssh after 0.0.0-20201203163018-be400aefbc4c Fix from $1,9502020-12-17 MEDIUM 6.0 CVE-2020-29484 An issue was discovered in Xen through 4.14.x. When a Xenstore watch fires, the xenstore client that registered the watch will receive a Xenstore mes… Debian Linux after 4.14.0 Fix from $1,6002020-12-15 MEDIUM 6.2 CVE-2020-29571 An issue was discovered in Xen through 4.14.x. A bounds check common to most operation time functions specific to FIFO event channels depends on the … Debian Linux after 4.14.0 Fix from $1,6002020-12-15 MEDIUM 5.5 CVE-2020-28203 An issue was discovered in Foxit Reader and PhantomPDF 10.1.0.37527 and earlier. There is a null pointer access/dereference while opening a crafted P… Foxit Reader 10.1.0.37527+ Fix from $1,6002020-12-15 MEDIUM 5.5 CVE-2020-16593 A Null Pointer Dereference vulnerability exists in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35, in sca… Binutils No fix yet Fix from $1,6002020-12-09 MEDIUM 5.5 CVE-2020-16599 A Null Pointer Dereference vulnerability exists in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35, in _bf… Binutils Patch available Fix from $1,6002020-12-09 MEDIUM 5.5 CVE-2020-16588 A Null Pointer Deference issue exists in Academy Software Foundation OpenEXR 2.3.0 in generatePreview in makePreview.cpp that can cause a denial of s… Debian Linux Patch available Fix from $1,6002020-12-09 MEDIUM 5.9 CVE-2020-1971EPSS 7% The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL pro… OpenSSL 1.0.2x / 1.1.1i+ Fix from $1,6002020-12-08 HIGH 7.5 CVE-2020-25692 A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs. An unauthenticated atta… Enterprise Linux 2.4.55+ Fix from $1,9502020-12-08 HIGH 7.5 CVE-2020-25465 Null Pointer Dereference. in xObjectBindingFromExpression at moddable/xs/sources/xsSyntaxical.c:3419 in Moddable SDK before OS200908 causes a denial … Moddable No fix yet Fix from $1,9502020-12-04 MEDIUM 5.3 CVE-2020-26235 In Rust time crate from version 0.2.7 and before version 0.2.23, unix-like operating systems may segfault due to dereferencing a dangling pointer in … Time 0.2.23+ Fix from $1,6002020-11-24