|
200781
|
8.1 |
HIGH
Network
|
dogtagpki
redhat
fedoraproject
|
dogtagpki
enterprise_linux
certificate_system
fedora
|
A flaw was found in pki-core. An attacker who has successfully compromised a key could use this flaw to renew the corresponding certificate over and over again, as long as it is not explicitly revoke…
|
-
|
CVE-2021-20179
|
2024-11-21 14:46 |
2021-03-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
200782
|
9.8 |
CRITICAL
Network
|
gnu
redhat
fedoraproject
|
gnutls
enterprise_linux
fedora
|
A flaw was found in gnutls. A use after free issue in client_send_params in lib/ext/pre_shared_key.c may lead to memory corruption and other potential consequences.
|
-
|
CVE-2021-20232
|
2024-11-21 14:46 |
2021-03-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
200783
|
9.8 |
CRITICAL
Network
|
gnu
redhat
fedoraproject
netapp
|
gnutls
enterprise_linux
fedora
active_iq_unified_manager
e-series_performance_analyzer
|
A flaw was found in gnutls. A use after free issue in client sending key_share extension may lead to memory corruption and other consequences.
|
-
|
CVE-2021-20231
|
2024-11-21 14:46 |
2021-03-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
200784
|
7.8 |
HIGH
Local
|
ntt-tx
|
magicconnect
|
Untrusted search path vulnerability in Installer of MagicConnect Client program distributed before 2021 March 1 allows an attacker to gain privileges and via a Trojan horse DLL in an unspecified dire…
|
CWE-427
Uncontrolled Search Path Element
|
CVE-2021-20674
|
2024-11-21 14:46 |
2021-03-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
200785
|
6.4 |
MEDIUM
Local
|
linux
redhat
|
linux_kernel
enterprise_linux
|
A race condition was found in the Linux kernels implementation of the floppy disk drive controller driver software. The impact of this issue is lessened by the fact that the default permissions on th…
|
-
|
CVE-2021-20261
|
2024-11-21 14:46 |
2021-03-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
200786
|
5.4 |
MEDIUM
Network
|
ibm
|
tivoli_netcool\/omnibus_webgui
|
IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended function…
|
CWE-79
Cross-site Scripting
|
CVE-2021-20336
|
2024-11-21 14:46 |
2021-03-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
200787
|
6.5 |
MEDIUM
Network
|
libjpeg-turbo
fedoraproject
|
libjpeg-turbo
fedora
|
Libjpeg-turbo versions 2.0.91 and 2.0.90 is vulnerable to a denial of service vulnerability caused by a divide by zero when processing a crafted GIF image.
|
CWE-369
Divide By Zero
|
CVE-2021-20205
|
2024-11-21 14:46 |
2021-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
200788
|
5.5 |
MEDIUM
Local
|
linux
oracle
|
linux_kernel
tekelec_platform_distribution
|
A flaw was found in the way memory resources were freed in the unix_stream_recvmsg function in the Linux kernel when a signal was pending. This flaw allows an unprivileged local user to crash the sys…
|
CWE-401
Missing Release of Memory after Effective Lifetime
|
CVE-2021-20265
|
2024-11-21 14:46 |
2021-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
200789
|
4.8 |
MEDIUM
Network
|
weseek
|
growi
|
Stored cross-site scripting vulnerability in Admin Page of GROWI (v4.2 Series) versions from v4.2.0 to v4.2.7 allows remote authenticated attackers to inject an arbitrary script via unspecified vecto…
|
CWE-79
Cross-site Scripting
|
CVE-2021-20673
|
2024-11-21 14:46 |
2021-03-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
200790
|
6.1 |
MEDIUM
Network
|
weseek
|
growi
|
Reflected cross-site scripting vulnerability due to insufficient verification of URL query parameters in GROWI (v4.2 Series) versions from v4.2.0 to v4.2.7 allows remote attackers to inject an arbitr…
|
CWE-79
Cross-site Scripting
|
CVE-2021-20672
|
2024-11-21 14:46 |
2021-03-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
