CVE-2021-22940
- EPSS 13.86%
- Veröffentlicht 16.08.2021 19:15:13
- Zuletzt bearbeitet 21.11.2024 05:50:58
Node.js before 16.6.1, 14.17.5, and 12.22.5 is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change process behavior.
CVE-2021-37695
- EPSS 1.32%
- Veröffentlicht 13.08.2021 00:15:07
- Zuletzt bearbeitet 21.11.2024 06:15:43
ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEditor 4 [Fake Objects](https://ckeditor.com/cke4/addon/fakeobjects) package. The vulnerability allowed to inject malformed F...
CVE-2021-32808
- EPSS 1.19%
- Veröffentlicht 12.08.2021 17:15:08
- Zuletzt bearbeitet 21.11.2024 06:07:47
ckeditor is an open source WYSIWYG HTML editor with rich content support. A vulnerability has been discovered in the clipboard Widget plugin if used alongside the undo feature. The vulnerability allows a user to abuse undo functionality using malform...
CVE-2021-32809
- EPSS 1.19%
- Veröffentlicht 12.08.2021 17:15:08
- Zuletzt bearbeitet 21.11.2024 06:07:47
ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEditor 4 [Clipboard](https://ckeditor.com/cke4/addon/clipboard) package. The vulnerability allowed to abuse paste functionali...
CVE-2021-22924
- EPSS 6.27%
- Veröffentlicht 05.08.2021 21:15:11
- Zuletzt bearbeitet 09.06.2025 15:15:24
libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches the setup.Due to errors in the logic, the config matching function did not take 'issuercert' into account and it compared the invo...
CVE-2021-22925
- EPSS 4.93%
- Veröffentlicht 05.08.2021 21:15:11
- Zuletzt bearbeitet 16.04.2026 17:16:52
curl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl. This rarely used option is used to send variable=content pairs toTELNET servers.Due to flaw in the option parser for sending `NEW_ENV` variables, libcurlcould be ...
CVE-2021-22926
- EPSS 9.82%
- Veröffentlicht 05.08.2021 21:15:11
- Zuletzt bearbeitet 28.05.2026 21:16:27
libcurl-using applications can ask for a specific client certificate to be used in a transfer. This is done with the `CURLOPT_SSLCERT` option (`--cert` with the command line tool).When libcurl is built to use the macOS native TLS library Secure Trans...
- EPSS 1.22%
- Veröffentlicht 21.07.2021 15:15:51
- Zuletzt bearbeitet 21.11.2024 06:03:03
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.57, 8.58 and 8.59. Easily exploitable vulnerability allows unauthenticated attacker with network acces...
- EPSS 0.67%
- Veröffentlicht 21.07.2021 15:15:35
- Zuletzt bearbeitet 21.11.2024 06:02:59
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). Supported versions that are affected are 8.57, 8.58 and 8.59. Easily exploitable vulnerability allows low privileged attacker with network access vi...
CVE-2021-2351
- EPSS 2.5%
- Veröffentlicht 21.07.2021 15:15:21
- Zuletzt bearbeitet 25.08.2026 16:28:27
Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracl...