Latest CVE Feed
-
5.5
MEDIUMCVE-2021-32815
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. The assertion failure is triggered when Exiv2 is used to modify the metadata of a crafted image file. An attacker could potentially ... Read more
- EPSS Score: %0.15
- Published: Aug. 09, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-32435
Stack-based buffer overflow in the function get_key in parse.c of abcm2ps v8.14.11 allows remote attackers to cause a Denial of Service (DoS) via unspecified vectors.... Read more
- EPSS Score: %0.13
- Published: Mar. 10, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-32280
An issue was discovered in fig2dev before 3.2.8.. A NULL pointer dereference exists in the function compute_closed_spline() located in trans_spline.c. It allows an attacker to cause Denial of Service. The fixed version of fig2dev is 3.2.8.... Read more
- EPSS Score: %0.09
- Published: Sep. 20, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2002-1914
dump 0.4 b10 through b29 allows local users to cause a denial of service (execution prevention) by using flock() to lock the /etc/dumpdates file.... Read more
Affected Products : dump- EPSS Score: %0.05
- Published: Dec. 31, 2002
- Modified: Apr. 03, 2025
-
5.5
MEDIUMCVE-2021-29650
An issue was discovered in the Linux kernel before 5.11.11. The netfilter subsystem allows attackers to cause a denial of service (panic) because net/netfilter/x_tables.c and include/linux/netfilter/x_tables.h lack a full memory barrier upon the assignmen... Read more
- EPSS Score: %0.02
- Published: Mar. 30, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-29648
An issue was discovered in the Linux kernel before 5.11.11. The BPF subsystem does not properly consider that resolved_ids and resolved_sizes are intentionally uninitialized in the vmlinux BPF Type Format (BTF), which can cause a system crash upon an unex... Read more
- EPSS Score: %0.05
- Published: Mar. 30, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-29646
An issue was discovered in the Linux kernel before 5.11.11. tipc_nl_retrieve_key in net/tipc/node.c does not properly validate certain data sizes, aka CID-0217ed2848e8.... Read more
- EPSS Score: %0.08
- Published: Mar. 30, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-28950
An issue was discovered in fs/fuse/fuse_i.h in the Linux kernel before 5.11.8. A "stall on CPU" can occur because a retry loop continually finds the same bad inode, aka CID-775c5033a0d1.... Read more
- EPSS Score: %0.02
- Published: Mar. 20, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-23215
An integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEXR in versions before 3.0.1. An attacker could use this flaw to crash an application compiled with OpenEXR.... Read more
- EPSS Score: %0.09
- Published: Jun. 08, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2001-1391
Off-by-one vulnerability in CPIA driver of Linux kernel before 2.2.19 allows users to modify kernel memory.... Read more
- EPSS Score: %0.09
- Published: Apr. 17, 2001
- Modified: Apr. 03, 2025
-
5.5
MEDIUMCVE-2021-20255
A stack overflow via an infinite recursion vulnerability was found in the eepro100 i8255x device emulator of QEMU. This issue occurs while processing controller commands due to a DMA reentry issue. This flaw allows a guest user or process to consume CPU c... Read more
- EPSS Score: %0.04
- Published: Mar. 09, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-20219
A denial of service vulnerability was found in n_tty_receive_char_special in drivers/tty/n_tty.c of the Linux kernel. In this flaw a local attacker with a normal user privilege could delay the loop (due to a changing ldata->read_head, and a missing sanity... Read more
Affected Products : linux_kernel- EPSS Score: %0.05
- Published: Mar. 23, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-26805
Buffer Overflow in tsMuxer 2.6.16 allows attackers to cause a Denial of Service (DoS) by running the application with a malicious WAV file.... Read more
Affected Products : tsmuxer- EPSS Score: %0.19
- Published: Apr. 14, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-20176
A divide-by-zero flaw was found in ImageMagick 6.9.11-57 and 7.0.10-57 in gem.c. This flaw allows an attacker who submits a crafted file that is processed by ImageMagick to trigger undefined behavior through a division by zero. The highest threat from thi... Read more
- EPSS Score: %0.07
- Published: Feb. 06, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-1998
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocol... Read more
Affected Products : fedora active_iq_unified_manager mysql oncommand_insight oncommand_workflow_automation snapcenter mysql_server- EPSS Score: %0.35
- Published: Jan. 20, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2000-1178
Joe text editor follows symbolic links when creating a rescue copy called DEADJOE during an abnormal exit, which allows local users to overwrite the files of other users whose joe session crashes.... Read more
- EPSS Score: %0.14
- Published: Jan. 09, 2001
- Modified: Apr. 03, 2025
-
5.5
MEDIUMCVE-2021-26254
Out of bounds read for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially enable denial of service via local access.... Read more
Affected Products : wi-fi_6_ax201_firmware wi-fi_6_ax200_firmware killer_ac_1550_firmware killer_wi-fi_6_ax1650_firmware killer_wi-fi_6e_ax1675_firmware proset_wi-fi_6e_ax210_firmware killer_wi-fi_6e_ax1690_firmware wi-fi_6e_ax411_firmware wi-fi_6e_ax211_firmware killer_wi-fi_6e_ax1675 +8 more products- EPSS Score: %0.13
- Published: Aug. 18, 2022
- Modified: May. 05, 2025
-
5.5
MEDIUMCVE-2020-36691
An issue was discovered in the Linux kernel before 5.8. lib/nlattr.c allows attackers to cause a denial of service (unbounded recursion) via a nested Netlink policy with a back reference.... Read more
Affected Products : linux_kernel- EPSS Score: %0.01
- Published: Mar. 24, 2023
- Modified: Feb. 21, 2025
-
5.5
MEDIUMCVE-2020-35534
In LibRaw, there is a memory corruption vulnerability within the "crxFreeSubbandData()" function (libraw\src\decoders\crx.cpp) when processing cr3 files.... Read more
Affected Products : libraw- EPSS Score: %0.03
- Published: Sep. 01, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2020-35507
There's a flaw in bfd_pef_parse_function_stubs of bfd/pef.c in binutils in versions prior to 2.34 which could allow an attacker who is able to submit a crafted file to be processed by objdump to cause a NULL pointer dereference. The greatest threat of thi... Read more
- EPSS Score: %0.08
- Published: Jan. 04, 2021
- Modified: Nov. 21, 2024