|
195221
|
5.5 |
MEDIUM
Local
|
google debian fedoraproject oracle netapp
|
protobuf debian_linux fedora mysql snapcenter oncommand_workflow_automation oncommand_insight active_iq_unified_manager
|
Nullptr dereference when a null char is present in a proto symbol. The symbol is parsed incorrectly, leading to an unchecked call into the proto file's name during generation of the resulting error m…
|
CWE-476
NULL Pointer Dereference
|
CVE-2021-22570
|
2024-11-21 14:50 |
2022-01-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195222
|
9.8 |
CRITICAL
Network
|
google
|
fuchsia
|
An incorrect setting of UXN bits within mmu_flags_to_s1_pte_attr lead to privileged executable pages being mapped as executable from an unprivileged context. This can be leveraged by an attacker to b…
|
CWE-732
Incorrect Permission Assignment for Critical Resource
|
CVE-2021-22566
|
2024-11-21 14:50 |
2022-01-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195223
|
5.5 |
MEDIUM
Local
|
google oracle
|
protobuf-kotlin protobuf-java google-protobuf communications_cloud_native_core_console communications_cloud_native_core_policy communications_cloud_native_core_network_repository_funct…
|
An issue in protobuf-java allowed the interleaving of com.google.protobuf.UnknownFieldSet fields in such a way that would be processed out of order. A small malicious payload can occupy the parser fo…
|
NVD-CWE-noinfo
|
CVE-2021-22569
|
2024-11-21 14:50 |
2022-01-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195224
|
3.5 |
LOW
Network
|
dart
|
dart_software_development_kit
|
Bidirectional Unicode text can be interpreted and compiled differently than how it appears in editors which can be exploited to get nefarious code passed a code review by appearing benign. An attacke…
|
NVD-CWE-Other
|
CVE-2021-22567
|
2024-11-21 14:50 |
2022-01-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195225
|
9.8 |
CRITICAL
Network
|
myscada
|
mypro
|
mySCADA myPRO: Versions 8.20.0 and prior has a feature where the API password can be specified, which may allow an attacker to inject arbitrary operating system commands through a specific parameter.
|
-
|
CVE-2021-22657
|
2024-11-21 14:50 |
2021-12-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195226
|
8.8 |
HIGH
Network
|
dart
|
dart_software_development_kit
|
When using the dart pub publish command to publish a package to a third-party package server, the request would be authenticated with an oauth2 access_token that is valid for publishing on pub.dev. U…
|
CWE-668
Exposure of Resource to Wrong Sphere
|
CVE-2021-22568
|
2024-11-21 14:50 |
2021-12-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195227
|
6.5 |
MEDIUM
Network
|
google
|
exposure_notification_verification_server
|
An attacker could prematurely expire a verification code, making it unusable by the patient, making the patient unable to upload their TEKs to generate exposure notifications. We recommend upgrading …
|
NVD-CWE-Other
|
CVE-2021-22565
|
2024-11-21 14:50 |
2021-12-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195228
|
5.4 |
MEDIUM
Network
|
huawei
|
imaster_nce-fabric_firmware
|
There is a XSS injection vulnerability in iMaster NCE-Fabric V100R019C10. A module of the client does not verify the input sufficiently. Attackers can exploit this vulnerability by modifying input af…
|
CWE-79
Cross-site Scripting
|
CVE-2021-22410
|
2024-11-21 14:50 |
2021-11-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195229
|
6.5 |
MEDIUM
Network
|
github
|
enterprise_server
|
A path traversal vulnerability was identified in GitHub Pages builds on GitHub Enterprise Server that could allow an attacker to read system files. To exploit this vulnerability, an attacker would ne…
|
CWE-22
Path Traversal
|
CVE-2021-22870
|
2024-11-21 14:50 |
2021-11-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195230
|
5.5 |
MEDIUM
Local
|
libjxl_project
|
libjxl
|
For certain valid JPEG XL images with a size slightly larger than an integer number of groups (256x256 pixels) when processing the groups out of order the decoder can perform an out of bounds copy of…
|
CWE-787
Out-of-bounds Write
|
CVE-2021-22564
|
2024-11-21 14:50 |
2021-11-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|