Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.
  • 7.5

    HIGH
    CVE-2021-44507

    An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). A lack of parameter validation in calls to memcpy in str_tok in sr_unix/ztimeoutroutines.c allows attackers to attempt to read from a NULL pointer.... Read more

    Affected Products : gt.m
    • Published: Apr. 15, 2022
    • Modified: Nov. 21, 2024
  • 7.5

    HIGH
    CVE-2021-44506

    An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). A lack of input validation in calls to do_verify in sr_unix/do_verify.c allows attackers to attempt to jump to a NULL pointer by corrupting a function pointer.... Read more

    Affected Products : gt.m
    • Published: Apr. 15, 2022
    • Modified: Nov. 21, 2024
  • 7.5

    HIGH
    CVE-2021-44505

    An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can cause a NULL pointer dereference after calls to ZPrint.... Read more

    Affected Products : gt.m
    • Published: Apr. 15, 2022
    • Modified: Nov. 21, 2024
  • 7.5

    HIGH
    CVE-2021-44504

    An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can cause a size variable, stored as an signed int, to equal an extremely large value, which is interpreted as a negative value durin... Read more

    Affected Products : gt.m
    • Published: Apr. 15, 2022
    • Modified: Nov. 21, 2024
  • 7.5

    HIGH
    CVE-2021-44503

    An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can cause a call to va_arg on an empty variadic parameter list, most likely causing a memory segmentation fault.... Read more

    Affected Products : gt.m
    • Published: Apr. 15, 2022
    • Modified: Nov. 21, 2024
  • 7.5

    HIGH
    CVE-2021-44502

    An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can control the size of a memset that occurs in calls to util_format in sr_unix/util_output.c.... Read more

    Affected Products : gt.m
    • Published: Apr. 15, 2022
    • Modified: Nov. 21, 2024
  • 7.5

    HIGH
    CVE-2021-44501

    An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can cause calls to ZRead to crash due to a NULL pointer dereference.... Read more

    Affected Products : gt.m
    • Published: Apr. 15, 2022
    • Modified: Nov. 21, 2024
  • 7.5

    HIGH
    CVE-2021-44500

    An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). A lack of input validation in calls to eb_div in sr_port/eb_muldiv.c allows attackers to crash the application by performing a divide by zero.... Read more

    Affected Products : gt.m
    • Published: Apr. 15, 2022
    • Modified: Nov. 21, 2024
  • 7.5

    HIGH
    CVE-2021-44499

    An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can cause a call to $Extract to force an signed integer holding the size of a buffer to take on a large negative number, which is the... Read more

    Affected Products : gt.m
    • Published: Apr. 15, 2022
    • Modified: Nov. 21, 2024
  • 7.5

    HIGH
    CVE-2021-44498

    An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, attackers can cause a type to be incorrectly initialized in the function f_incr in sr_port/f_incr.c and cause a crash due to a NULL pointer deref... Read more

    Affected Products : gt.m
    • Published: Apr. 15, 2022
    • Modified: Nov. 21, 2024
  • 7.5

    HIGH
    CVE-2021-44497

    An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, can cause the bounds of a for loop to be miscalculated, which leads to a use after free condition a pointer is pushed into previously free memory... Read more

    Affected Products : gt.m
    • Published: Apr. 15, 2022
    • Modified: Nov. 21, 2024
  • 9.8

    CRITICAL
    CVE-2021-44496

    An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can control the size variable and buffer that is passed to a call to memcpy. An attacker can use this to overwrite key data structure... Read more

    Affected Products : gt.m
    • Published: Apr. 15, 2022
    • Modified: Nov. 21, 2024
  • 7.5

    HIGH
    CVE-2021-44495

    An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, an attacker can cause a NULL pointer dereference after calls to ZPrint.... Read more

    Affected Products : yottadb gt.m
    • Published: Apr. 15, 2022
    • Modified: Nov. 21, 2024
  • 7.5

    HIGH
    CVE-2021-44494

    An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, an attacker can cause calls to ZRead to crash due to a NULL pointer dereference.... Read more

    Affected Products : yottadb gt.m
    • Published: Apr. 15, 2022
    • Modified: Nov. 21, 2024
  • 7.5

    HIGH
    CVE-2021-44493

    An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, an attacker can cause a call to $Extract to force an signed integer holding the size of a buffer to take on a large negative number, which is... Read more

    Affected Products : yottadb gt.m
    • Published: Apr. 15, 2022
    • Modified: Nov. 21, 2024
  • 7.5

    HIGH
    CVE-2021-44492

    An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, attackers can cause a type to be incorrectly initialized in the function f_incr in sr_port/f_incr.c and cause a crash due to a NULL pointer d... Read more

    Affected Products : yottadb gt.m
    • Published: Apr. 15, 2022
    • Modified: Nov. 21, 2024
  • 7.5

    HIGH
    CVE-2021-44491

    An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can cause a calculation of the size of calls to memset in op_fnj3 in sr_port/op_fnj3.c to result in an extremely large value in order to cause a segmentation fau... Read more

    Affected Products : yottadb gt.m
    • Published: Apr. 15, 2022
    • Modified: Nov. 21, 2024
  • 7.5

    HIGH
    CVE-2021-44490

    An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can cause a calculation of the size of calls to memset in op_fnj3 in sr_port/op_fnj3.c to result in an extremely large value in order to cause a segmentation fau... Read more

    Affected Products : yottadb gt.m
    • Published: Apr. 15, 2022
    • Modified: Nov. 21, 2024
  • 7.5

    HIGH
    CVE-2021-44489

    An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can cause an integer underflow of the size of calls to memset in op_fnj3 in sr_port/op_fnj3.c in order to cause a segmentation fault and crash the application. T... Read more

    Affected Products : yottadb gt.m
    • Published: Apr. 15, 2022
    • Modified: Nov. 21, 2024
  • 9.1

    CRITICAL
    CVE-2021-44488

    An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can control the size and input to calls to memcpy in op_fnfnumber in sr_port/op_fnfnumber.c in order to corrupt memory or crash the application.... Read more

    Affected Products : yottadb gt.m
    • Published: Apr. 15, 2022
    • Modified: Nov. 21, 2024
Showing 20 of 293612 Results