Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 149

Export CSV
CVE-2021-27515

nodejs-url-parse: mishandling certain uses of backslash may lead to confidentiality compromise

url-parse before 1.5.0 mishandles certain uses of backslash such as http:\/ and interprets the URI as a relative path.

CVSS 3.1 · 5.3 Medium EPSS 2.0% KEV · Not listed
Vendors
Redhat Url-parse Project
Products
Quay Url-parse
CVE-2021-25293

python-pillow: Out-of-bounds read in SGI RLE image reader

An issue was discovered in Pillow before 8.1.1. There is an out-of-bounds read in SGIRleDecode.c.

CVSS 3.1 · 7.5 High EPSS 1.6% KEV · Not listed
Vendors
Python Redhat
Products
Pillow Enterprise Linux Quay
CVE-2021-25292

python-pillow: Regular expression DoS in PDF format parser

An issue was discovered in Pillow before 8.1.1. The PDF parser allows a regular expression DoS (ReDoS) attack via a crafted PDF file because of a catastrophic backtracking regex.

CVSS 3.1 · 6.5 Medium EPSS 1.7% KEV · Not listed
Vendors
Python Redhat
Products
Pillow Enterprise Linux Quay
CVE-2021-25291

python-pillow: out-of-bounds read in TiffReadRGBATile in TiffDecode.c

An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is an out-of-bounds read in TiffreadRGBATile via invalid tile boundaries.

CVSS 3.1 · 7.5 High EPSS 1.4% KEV · Not listed
Vendors
Python Redhat
Products
Pillow Quay
CVE-2021-25289

python-pillow: insufficent fix for CVE-2020-35654 due to incorrect error checking in TiffDecode.c

An issue was discovered in Pillow before 8.1.1. TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode. NOTE: this issue exists because of an incomplete fix for CVE-2020-35654.

CVSS 3.1 · 9.8 Critical EPSS 2.3% KEV · Not listed
Vendors
Python Redhat
Products
Pillow Quay
CVE-2021-23382

Regular Expression Denial of Service (ReDoS)

The package postcss before 8.2.13 are vulnerable to Regular Expression Denial of Service (ReDoS) via getAnnotationURL() and loadAnnotation() in lib/previous-map.js. The vulnerable regexes are caused mainly by the sub-pattern \/\*\s* sourceMappingURL=(.*).

CVSS 3.1 · 5.3 Medium EPSS 2.6% KEV · Not listed
Vendors
Postcss Redhat
Products
Postcss Acm Openshift and 1 more
CVE-2021-23368

Regular Expression Denial of Service (ReDoS)

The package postcss from 7.0.0 and before 8.2.10 are vulnerable to Regular Expression Denial of Service (ReDoS) during source map parsing.

CVSS 3.1 · 5.3 Medium EPSS 3.5% KEV · Not listed
Vendors
Postcss Redhat
Products
Postcss Acm Openshift and 1 more
CVE-2021-23364

Regular Expression Denial of Service (ReDoS)

The package browserslist from 4.0.0 and before 4.16.5 are vulnerable to Regular Expression Denial of Service (ReDoS) during parsing of queries.

CVSS 3.1 · 5.3 Medium EPSS 2.4% KEV · Not listed
Vendors
Browserslist Project Redhat
Products
Browserslist Acm Quay
CVE-2020-8131

yarn: Arbitrary filesystem write via tar expansion

Arbitrary filesystem write vulnerability in Yarn before 1.22.0 allows attackers to write to any path on the filesystem and potentially lead to arbitrary code execution by forcing the user to install a malicious package.

CVSS 3.1 · 7.5 High EPSS 5.2% KEV · Not listed
Vendors
Redhat Yarnpkg
Products
Quay Yarn
CVE-2020-5310

python-pillow: Integer overflow leading to buffer overflow in ImagingLibTiffDecode

libImaging/TiffDecode.c in Pillow before 6.2.2 has a TIFF decoding integer overflow, related to realloc.

CVSS 3.1 · 8.8 High EPSS 2.0% KEV · Not listed
Vendors
Canonical Fedoraproject Python and 1 more
Products
Ubuntu Linux Fedora Pillow and 1 more
CVE-2020-35654

python-pillow: decoding crafted YCbCr files could result in heap-based buffer overflow

In Pillow before 8.1.0, TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode.

CVSS 3.1 · 8.8 High EPSS 1.9% KEV · Not listed
Vendors
Fedoraproject Python Redhat
Products
Fedora Pillow Quay
CVE-2020-35653

python-pillow: Buffer over-read in PCX image reader

In Pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file because the user-supplied stride value is trusted for buffer calculations.

CVSS 3.1 · 7.1 High EPSS 1.6% KEV · Not listed
Vendors
Debian Fedoraproject Python and 1 more
Products
Debian Linux Fedora Pillow and 2 more
CVE-2020-27832

quay: persistent XSS in repository notification display

A flaw was found in Red Hat Quay, where it has a persistent Cross-site Scripting (XSS) vulnerability when displaying a repository's notification. This flaw allows an attacker to trick a user into performing a malicious action to impersonate the target user. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

CVSS 3.1 · 9.0 Critical EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Quay
CVE-2020-27831

quay: email notifications authorization bypass

A flaw was found in Red Hat Quay, where it does not properly protect the authorization token when authorizing email addresses for repository email notifications. This flaw allows an attacker to add email addresses they do not own to repository notifications.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Quay
CVE-2020-26291

Hostname spoofing in URI.js

URI.js is a javascript URL mutation library (npm package urijs). In URI.js before version 1.19.4, the hostname can be spoofed by using a backslash (`\`) character followed by an at (`@`) character. If the hostname is used in security decisions, the decision may be incorrect. Depending on library usage and attacker intent, impacts may include allow/block list bypasses, SSRF attacks, open redirects, or other undesired behavior. For example the URL `https://expected-example.com\@observed-example.com` will incorrectly return `observed-example.com` if using an affected version. Patched versions correctly return `expected-example.com`. Patched versions match the behavior of other parsers which implement the WHATWG URL specification, including web browsers and Node's built-in URL class. Version 1.19.4 is patched against all known payload variants. Version 1.19.3 has a partial patch but is still vulnerable to a payload variant.]

CVSS 3.1 · 6.5 Medium EPSS 1.7% KEV · Not listed
Vendors
Redhat Uri.js Project
Products
Quay Uri.js