🚨 EUVD-2021-14748 📊 n/a 📝 ssh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few less-common scenarios, such as unconstrained agent-socket access on a legacy operating ... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-14748 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2021-14851 📊 n/a 📝 An issue was discovered in GNOME GLib before 2.66.8. When g_file_replace() is used with G_FILE_CREATE_REPLACE_DESTINATION to replace a path that is a dangling symlink,... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-14851 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2021-0457 📊 n/a 📝 The urllib3 library 1.26.x before 1.26.4 for Python omits SSL certificate validation in some cases involving HTTPS to HTTPS proxies. The initial connection to the HTTPS ... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-0457 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2021-15514 📊 6.5/10 📝 Python 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no protection against multiple (/) at the beginning of URI path which may... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-15514 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2021-18151 📊 7.5/10 📝 An issue found in SQLite SQLite3 v.3.35.4 that allows a remote attacker to cause a denial of service via the appendvfs.c function. 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-18151 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2021-19147 📊 n/a 📝 An issue was discovered in json-c from 20200420 (post 0.14 unreleased code) through 0.15-20200726. A stack-buffer-overflow exists in the auxiliary sample program json_... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-19147 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2021-20005 📊 n/a 📝 In elfutils 0.183, an infinite loop was found in the function handle_symtab in readelf.c .Which allows attackers to cause a denial of service (infinite loop) via craft... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-20005 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2021-20252 📊 7.5/10 📝 Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm, an... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-20252 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2021-20261 📊 n/a 📝 The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free. It may use the notification thread attributes object (passed throu... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-20261 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2021-20332 📊 n/a 📝 When sending malicous data to kernel by ioctl cmd FBIOPUT_VSCREENINFO,kernel will write memory out of bounds. 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-20332 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2021-20582 📊 5.5/10 📝 basic/unit-name.c in systemd prior to 246.15, 247.8, 248.5, and 249.1 has a Memory Allocation with an Excessive Size Value (involving strdupa and alloca for a pathn... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-20582 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-64796 📊 7.5/10 🏢 Super Forms 📝 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Super Forms allows Path Traversal. This issue affects... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-64796 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2021-22577 📊 9.1/10 📝 The wordexp function in the GNU C Library (aka glibc) through 2.33 may crash or read arbitrary memory in parse_param (in posix/wordexp.c) when called with an untrus... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-22577 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2021-22717 📊 n/a 📝 The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from __cil_verify_classpermission and __cil_pre_verify_helper). 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-22717 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2021-22718 📊 n/a 📝 The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from __verify_map_perm_classperms and hashtab_map). 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-22718 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2021-22719 📊 n/a 📝 The CIL compiler in SELinux 3.2 has a use-after-free in cil_reset_classpermission (called from cil_reset_classperms_set and cil_reset_classperms_list). 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-22719 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2021-22720 📊 n/a 📝 The CIL compiler in SELinux 3.2 has a heap-based buffer over-read in ebitmap_match_any (called indirectly from cil_check_neverallow). This occurs because there is some... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-22720 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2021-22842 📊 n/a 📝 ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.4 and 1.19.x before 1.19.2 allows remote attackers to c... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-22842 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2021-23285 📊 n/a 📝 A segmentation fault can occur in the sqlite3.exe command-line component of SQLite 3.36.0 via the idxGetTableInfo function when there is a crafted SQL query. NOTE: the... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-23285 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2021-24158 📊 n/a 📝 An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a larg... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-24158 #cybersecurity #infosec #cve #euvd