Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1,793

Export CSV
CVE-2021-28965

ruby: XML round-trip vulnerability in REXML

The REXML gem before 3.2.5 in Ruby before 2.6.7, 2.7.x before 2.7.3, and 3.x before 3.0.1 does not properly address XML round-trip issues. An incorrect document can be produced after parsing and serializing.

CVSS 3.1 · 7.5 High EPSS 5.1% KEV · Not listed
Vendors
Fedoraproject Redhat Ruby-lang
Products
Fedora Enterprise Linux Rhel E4s and 4 more
CVE-2021-27928

mariadb: writable system variables allows a database user with SUPER privilege to execute arbitrary code as the system mysql user

A remote code execution issue was discovered in MariaDB 10.2 before 10.2.37, 10.3 before 10.3.28, 10.4 before 10.4.18, and 10.5 before 10.5.9; Percona Server through 2021-03-03; and the wsrep patch through 2021-03-03 for MySQL. An untrusted search path leads to eval injection, in which a database SUPER user can execute OS commands after modifying wsrep_provider and wsrep_notify_cmd. NOTE: this does not affect an Oracle product.

CVSS 3.1 · 7.2 High EPSS 38.2% KEV · Not listed
Vendors
Debian Galeracluster Mariadb and 2 more
Products
Debian Linux Wsrep Mariadb and 5 more
CVE-2021-27291

python-pygments: ReDoS in multiple lexers

In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions. Some of the regular expressions have exponential or cubic worst-case complexity and are vulnerable to ReDoS. By crafting malicious input, an attacker can cause a denial of service.

CVSS 3.1 · 7.5 High EPSS 3.9% KEV · Not listed
Vendors
Debian Fedoraproject Pygments and 1 more
Products
Debian Linux Fedora Pygments and 3 more
CVE-2021-27290

nodejs-ssri: Regular expression DoS (ReDoS) when parsing malicious SRI in strict mode

ssri 5.2.2-8.0.0, fixed in 8.0.1, processes SRIs using a regular expression which is vulnerable to a denial of service. Malicious SRIs could take an extremely long time to process, leading to denial of service. This issue only affects consumers using the strict option.

CVSS 3.1 · 7.5 High EPSS 4.7% KEV · Not listed
Vendors
Oracle Redhat Siemens and 1 more
Products
Graalvm Enterprise Linux Rhel Eus and 3 more
CVE-2021-23362

Regular Expression Denial of Service (ReDoS)

The package hosted-git-info before 3.0.8 are vulnerable to Regular Expression Denial of Service (ReDoS) via regular expression shortcutMatch in the fromUrl function in index.js. The affected regular expression exhibits polynomial worst-case time complexity.

CVSS 3.1 · 5.3 Medium EPSS 3.6% KEV · Not listed
Vendors
Npmjs Redhat Siemens
Products
Hosted-git-info Acm Enterprise Linux and 4 more
CVE-2021-23343

Regular Expression Denial of Service (ReDoS)

All versions of package path-parse are vulnerable to Regular Expression Denial of Service (ReDoS) via splitDeviceRe, splitTailRe, and splitPathRe regular expressions. ReDoS exhibits polynomial worst-case time complexity.

CVSS 3.1 · 5.3 Medium EPSS 2.2% KEV · Not listed
Vendors
Path-parse Project Redhat
Products
Path-parse Acm Advanced Cluster Security and 4 more
CVE-2021-23214

postgresql: server processes unencrypted bytes from man-in-the-middle

When the server is configured to use trust authentication with a clientcert requirement or to use cert authentication, a man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first established, despite the use of SSL certificate verification and encryption.

CVSS 3.1 · 8.1 High EPSS 1.9% KEV · Not listed
Vendors
Fedoraproject Postgresql Redhat
Products
Fedora Postgresql Enterprise Linux and 4 more
CVE-2021-23017

nginx: Off-by-one in ngx_resolver_copy() when labels are followed by a pointer to a root domain name

A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

CVSS 3.1 · 7.7 High EPSS 53.5% KEV · Not listed
Vendors
F5 Fedoraproject Netapp and 3 more
Products
Nginx Fedora Ontap Select Deploy Administration Utility and 16 more
CVE-2021-21707

Special characters break path parsing in XML functions

In PHP versions 7.3.x below 7.3.33, 7.4.x below 7.4.26 and 8.0.x below 8.0.13, certain XML parsing functions, like simplexml_load_file(), URL-decode the filename passed to them. If that filename contains URL-encoded NUL character, this may cause the function to interpret this as the end of the filename, thus interpreting the filename differently from what the user intended, which may lead it to reading a different file than intended.

CVSS 3.1 · 5.3 Medium EPSS 25.3% KEV · Not listed
Vendors
Debian Netapp Php and 2 more
Products
Debian Linux Clustered Data Ontap Php and 3 more
CVE-2021-21705

Incorrect URL validation in FILTER_VALIDATE_URL

In PHP versions 7.3.x below 7.3.29, 7.4.x below 7.4.21 and 8.0.x below 8.0.8, when using URL validation functionality via filter_var() function with FILTER_VALIDATE_URL parameter, an URL with invalid password field can be accepted as valid. This can lead to the code incorrectly parsing the URL and potentially leading to other security implications - like contacting a wrong server or making a wrong access decision.

CVSS 3.1 · 4.3 Medium EPSS 2.1% KEV · Not listed
Vendors
Netapp Oracle Php and 1 more
Products
Clustered Data Ontap Sd-wan Aware Php and 2 more
CVE-2021-21703

PHP-FPM memory access in root process leading to privilege escalation

In PHP versions 7.3.x up to and including 7.3.31, 7.4.x below 7.4.25 and 8.0.x below 8.0.12, when running PHP FPM SAPI with main FPM daemon process running as root and child worker processes running as lower-privileged users, it is possible for the child processes to access memory shared with the main process and write to it, modifying it in a way that would cause the root process to conduct invalid memory reads and writes, which can be used to escalate privileges from local unprivileged user to the root user.

CVSS 3.1 · 7.8 High EPSS 1.4% KEV · Not listed
Vendors
Debian Fedoraproject Netapp and 3 more
Products
Debian Linux Fedora Clustered Data Ontap and 4 more
CVE-2021-21702

Null Dereference in SoapClient

In PHP versions 7.3.x below 7.3.27, 7.4.x below 7.4.15 and 8.0.x below 8.0.2, when using SOAP extension to connect to a SOAP server, a malicious SOAP server could return malformed XML data as a response that would cause PHP to access a null pointer and thus cause a crash.

CVSS 3.1 · 5.3 Medium EPSS 3.2% KEV · Not listed
Vendors
Debian Netapp Oracle and 2 more
Products
Debian Linux Clustered Data Ontap Communications Diameter Signaling Router and 3 more
CVE-2021-20270

python-pygments: Infinite loop in SML lexer may lead to DoS

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML (SML) source file, as demonstrated by input that only contains the "exception" keyword.

CVSS 3.1 · 7.5 High EPSS 2.8% KEV · Not listed
Vendors
Debian Fedoraproject Pygments and 1 more
Products
Debian Linux Fedora Pygments and 6 more
CVE-2021-1998

mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2021)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.1 Base Score 3.8 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L).

CVSS 3.1 · 3.8 Low EPSS 1.6% KEV · Not listed
Vendors
Fedoraproject Netapp Oracle and 1 more
Products
Fedora Active Iq Unified Manager Oncommand Insight and 7 more
CVE-2020-9490

httpd: Push diary crash on specifically crafted HTTP/2 header

Apache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest' header in a HTTP/2 request would result in a crash when the server actually tries to HTTP/2 PUSH a resource afterwards. Configuring the HTTP/2 feature via "H2Push off" will mitigate this vulnerability for unpatched servers.

CVSS 3.1 · 7.5 High EPSS 88.8% KEV · Not listed
Vendors
Apache Canonical Debian and 4 more
Products
Http Server Ubuntu Linux Debian Linux and 25 more
CVE-2020-8116

nodejs-dot-prop: prototype pollution

Prototype pollution vulnerability in dot-prop npm package versions before 4.2.1 and versions 5.x before 5.1.1 allows an attacker to add arbitrary properties to JavaScript language constructs such as objects.

CVSS 3.1 · 7.3 High EPSS 3.1% KEV · Not listed
Vendors
Dot-prop Project Redhat
Products
Dot-prop Enterprise Linux Rhel Eus and 1 more