- EPSS 0.3%
- Veröffentlicht 20.10.2021 11:16:18
- Zuletzt bearbeitet 21.11.2024 06:03:12
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple prot...
CVE-2021-22946
- EPSS 0.07%
- Veröffentlicht 29.09.2021 20:15:08
- Zuletzt bearbeitet 21.11.2024 05:50:59
A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server (`--ssl-reqd` on the command line or`CURLOPT_USE_SSL` set to `CURLUSESSL_CONTROL` or `CURLUSESSL_ALL` withlibcurl). This ...
CVE-2021-3711
- EPSS 2.75%
- Veröffentlicht 24.08.2021 15:15:09
- Zuletzt bearbeitet 21.11.2024 06:22:12
In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this function twice. The first time, on entry, the "out" parameter can be NULL and, on exit, the "outlen...
CVE-2021-22931
- EPSS 0.74%
- Veröffentlicht 16.08.2021 19:15:13
- Zuletzt bearbeitet 21.11.2024 05:50:57
Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to Remote Code Execution, XSS, Application crashes due to missing input validation of host names returned by Domain Name Servers in Node.js dns library which can lead to output of wrong hostna...
CVE-2021-22926
- EPSS 0.51%
- Veröffentlicht 05.08.2021 21:15:11
- Zuletzt bearbeitet 21.11.2024 05:50:56
libcurl-using applications can ask for a specific client certificate to be used in a transfer. This is done with the `CURLOPT_SSLCERT` option (`--cert` with the command line tool).When libcurl is built to use the macOS native TLS library Secure Trans...
CVE-2021-36222
- EPSS 4.66%
- Veröffentlicht 22.07.2021 18:15:23
- Zuletzt bearbeitet 21.11.2024 06:13:20
ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.4 and 1.19.x before 1.19.2 allows remote attackers to cause a NULL pointer dereference and daemon crash. This occurs because a return valu...
CVE-2021-2389
- EPSS 0.49%
- Veröffentlicht 21.07.2021 15:15:41
- Zuletzt bearbeitet 21.11.2024 06:03:01
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.34 and prior and 8.0.25 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via ...
CVE-2021-2385
- EPSS 0.4%
- Veröffentlicht 21.07.2021 15:15:39
- Zuletzt bearbeitet 21.11.2024 06:03:00
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 5.7.34 and prior and 8.0.25 and prior. Difficult to exploit vulnerability allows high privileged attacker with networ...
CVE-2021-2372
- EPSS 0.23%
- Veröffentlicht 21.07.2021 15:15:32
- Zuletzt bearbeitet 21.11.2024 06:02:59
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.34 and prior and 8.0.25 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via ...
- EPSS 0.44%
- Veröffentlicht 21.07.2021 15:15:18
- Zuletzt bearbeitet 21.11.2024 06:02:55
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.7.34 and prior and 8.0.25 and prior. Easily exploitable vulnerability allows high privileged attacker with network ac...