🚨 EUVD-2021-20332 📊 n/a 📝 When sending malicous data to kernel by ioctl cmd FBIOPUT_VSCREENINFO,kernel will write memory out of bounds. 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-20332 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2021-20582 📊 5.5/10 📝 basic/unit-name.c in systemd prior to 246.15, 247.8, 248.5, and 249.1 has a Memory Allocation with an Excessive Size Value (involving strdupa and alloca for a pathn... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-20582 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-64796 📊 7.5/10 🏢 Super Forms 📝 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Super Forms allows Path Traversal. This issue affects... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-64796 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2021-22577 📊 9.1/10 📝 The wordexp function in the GNU C Library (aka glibc) through 2.33 may crash or read arbitrary memory in parse_param (in posix/wordexp.c) when called with an untrus... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-22577 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2021-22717 📊 n/a 📝 The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from __cil_verify_classpermission and __cil_pre_verify_helper). 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-22717 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2021-22718 📊 n/a 📝 The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from __verify_map_perm_classperms and hashtab_map). 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-22718 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2021-22719 📊 n/a 📝 The CIL compiler in SELinux 3.2 has a use-after-free in cil_reset_classpermission (called from cil_reset_classperms_set and cil_reset_classperms_list). 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-22719 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2021-22720 📊 n/a 📝 The CIL compiler in SELinux 3.2 has a heap-based buffer over-read in ebitmap_match_any (called indirectly from cil_check_neverallow). This occurs because there is some... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-22720 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2021-22842 📊 n/a 📝 ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.4 and 1.19.x before 1.19.2 allows remote attackers to c... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-22842 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2021-23285 📊 n/a 📝 A segmentation fault can occur in the sqlite3.exe command-line component of SQLite 3.36.0 via the idxGetTableInfo function when there is a crafted SQL query. NOTE: the... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-23285 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2021-24158 📊 n/a 📝 An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a larg... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-24158 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2021-24231 📊 n/a 📝 The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1.19.3 has a NULL pointer dereference in kdc/do_tgs_req.c via a FAST inn... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-24231 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2021-24660 📊 n/a 📝 fs/nfsd/trace.h in the Linux kernel before 5.13.4 might allow remote attackers to cause a denial of service (out-of-bounds read in strlen) by sending NFS traffic when ... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-24660 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2021-25044 📊 7.5/10 📝 In librt in the GNU C Library (aka glibc) through 2.34, sysdeps/unix/sysv/linux/mq_notify.c mishandles certain NOTIFY_REMOVED data, leading to a NULL pointer derefe... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-25044 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2021-28630 📊 n/a 📝 sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initializ... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-28630 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2021-30331 📊 n/a 📝 In iconvdata/iso-2022-jp-3.c in the GNU C Library (aka glibc) 2.34, remote attackers can force iconv() to emit a spurious '\0' character via crafted ISO-2022-JP-3 data... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-30331 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2021-30531 📊 n/a 📝 GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segme... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-30531 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2023-60713 📊 6.9/10 🏢 frappe 📝 Frappe 14.x before 14.45.0 contains an information disclosure vulnerability that allows users with error log access to view secrets stored in local variabl... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-60713 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2021-31680 📊 n/a 📝 In gc_data_segment in fs/f2fs/gc.c in the Linux kernel before 5.16.3, special files are not considered, leading to a move_data_page NULL pointer dereference. 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-31680 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2023-60718 📊 7.1/10 🏢 frappe 📝 Frappe before 13.46.3 and 14.x before 14.21.1 contains an improper access control vulnerability in Email Template permissions that allows any authenticated... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-60718 #cybersecurity #infosec #cve #euvd