CVE-2021-3631
- EPSS 0.04%
- Published 02.03.2022 23:15:08
- Last modified 21.11.2024 06:22:01
A flaw was found in libvirt while it generates SELinux MCS category pairs for VMs' dynamic labels. This flaw allows one exploited guest to access files labeled for another guest, resulting in the breaking out of sVirt confinement. The highest threat ...
CVE-2021-3667
- EPSS 0.28%
- Published 02.03.2022 23:15:08
- Last modified 10.02.2025 13:10:12
An improper locking issue was found in the virStoragePoolLookupByTargetPath API of libvirt. It occurs in the storagePoolLookupByTargetPath function where a locked virStoragePoolObj object is not properly released on ACL permission failure. Clients co...
CVE-2022-23308
- EPSS 0.06%
- Published 26.02.2022 05:15:08
- Last modified 05.05.2025 17:17:56
valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.
CVE-2022-24407
- EPSS 0.74%
- Published 24.02.2022 15:15:29
- Last modified 21.11.2024 06:50:21
In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement.
CVE-2022-0563
- EPSS 0.03%
- Published 21.02.2022 19:15:08
- Last modified 09.06.2025 16:15:33
A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an "INPUTRC" environment variable to get a path to the library config file. When the library cannot parse the specified file, it...
CVE-2021-45346
- EPSS 0.24%
- Published 14.02.2022 19:15:07
- Last modified 21.11.2024 06:32:07
A Memory Leak vulnerability exists in SQLite Project SQLite3 3.35.1 and 3.37.0 via maliciously crafted SQL Queries (made via editing the Database File), it is possible to query a record, and leak subsequent bytes of memory that extend beyond the reco...
CVE-2022-0561
- EPSS 0.1%
- Published 11.02.2022 18:15:11
- Last modified 21.11.2024 06:38:55
Null source pointer passed as an argument to memcpy() function within TIFFFetchStripThing() in tif_dirread.c in libtiff versions from 3.9.0 to 4.3.0 could lead to Denial of Service via crafted TIFF file. For users that compile libtiff from sources, t...
CVE-2022-0562
- EPSS 0.06%
- Published 11.02.2022 18:15:11
- Last modified 21.11.2024 06:38:55
Null source pointer passed as an argument to memcpy() function within TIFFReadDirectory() in tif_dirread.c in libtiff versions from 4.0 to 4.3.0 could lead to Denial of Service via crafted TIFF file. For users that compile libtiff from sources, a fix...
CVE-2022-0391
- EPSS 0.95%
- Published 09.02.2022 23:15:16
- Last modified 21.11.2024 06:38:31
A flaw was found in Python, specifically within the urllib.parse module. This module helps break Uniform Resource Locator (URL) strings into components. The issue involves how the urlparse method does not sanitize input and allows characters like '\r...
CVE-2022-22844
- EPSS 0.09%
- Published 10.01.2022 14:12:58
- Last modified 21.11.2024 06:47:33
LibTIFF 4.3.0 has an out-of-bounds read in _TIFFmemcpy in tif_unix.c in certain situations involving a custom tag and 0x0200 as the second word of the DE field.