Логотип exploitDog
source:"msrc"
Консоль
Логотип exploitDog

exploitDog

source:"msrc"

Количество 18 769

Количество 18 769

msrc логотип

CVE-2021-2308

почти 5 лет назад

CVSS3: 2.7
EPSS: Низкий
msrc логотип

CVE-2021-2307

почти 5 лет назад

CVSS3: 6.1
EPSS: Низкий
msrc логотип

CVE-2021-2305

почти 5 лет назад

CVSS3: 4.9
EPSS: Низкий
msrc логотип

CVE-2021-2304

почти 5 лет назад

CVSS3: 5.5
EPSS: Низкий
msrc логотип

CVE-2021-2301

почти 5 лет назад

CVSS3: 2.7
EPSS: Низкий
msrc логотип

CVE-2021-23017

больше 4 лет назад

A security issue in nginx resolver was identified which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite resulting in worker process crash or potential other impact.

CVSS3: 7.7
EPSS: Высокий
msrc логотип

CVE-2021-2300

почти 5 лет назад

CVSS3: 4.9
EPSS: Низкий
msrc логотип

CVE-2021-2299

почти 5 лет назад

CVSS3: 4.9
EPSS: Низкий
msrc логотип

CVE-2021-2298

почти 5 лет назад

CVSS3: 6.5
EPSS: Низкий
msrc логотип

CVE-2021-22947

около 4 лет назад

Open Source Curl Remote Code Execution Vulnerability

EPSS: Низкий
msrc логотип

CVE-2021-22946

больше 4 лет назад

A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP POP3 or FTP server (`--ssl-reqd` on the command line or`CURLOPT_USE_SSL` set to `CURLUSESSL_CONTROL` or `CURLUSESSL_ALL` withlibcurl). This requirement could be bypassed if the server would return a properly crafted but perfectly legitimate response.This flaw would then make curl silently continue its operations **withoutTLS** contrary to the instructions and expectations exposing possibly sensitive data in clear text over the network.

CVSS3: 7.5
EPSS: Низкий
msrc логотип

CVE-2021-22945

больше 4 лет назад

When sending data to an MQTT server libcurl <= 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointer to an already freed memory area and both use that again in a subsequent call to send data and also free it *again*.

CVSS3: 9.1
EPSS: Низкий
msrc логотип

CVE-2021-22940

больше 4 лет назад

Node.js before 16.6.1 14.17.5 and 12.22.5 is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption to change process behavior.

CVSS3: 7.5
EPSS: Низкий
msrc логотип

CVE-2021-2293

почти 5 лет назад

CVSS3: 4.9
EPSS: Низкий
msrc логотип

CVE-2021-22939

больше 4 лет назад

If the Node.js https API was used incorrectly and "undefined" was in passed for the "rejectUnauthorized" parameter no error was returned and connections to servers with an expired certificate would have been accepted.

CVSS3: 5.3
EPSS: Низкий
msrc логотип

CVE-2021-22931

больше 4 лет назад

CVSS3: 9.8
EPSS: Низкий
msrc логотип

CVE-2021-22930

около 4 лет назад

Node.js before 16.6.0 14.17.4 and 12.22.4 is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption to change process behavior.

CVSS3: 9.8
EPSS: Низкий
msrc логотип

CVE-2021-22926

больше 4 лет назад

libcurl-using applications can ask for a specific client certificate to be used in a transfer. This is done with the `CURLOPT_SSLCERT` option (`--cert` with the command line tool).When libcurl is built to use the macOS native TLS library Secure Transport an application can ask for the client certificate by name or with a file name - using the same option. If the name exists as a file it will be used instead of by name.If the appliction runs with a current working directory that is writable by other users (like `/tmp`) a malicious user can create a file name with the same name as the app wants to use by name and thereby trick the application to use the file based cert instead of the one referred to by name making libcurl send the wrong client certificate in the TLS connection handshake.

CVSS3: 7.5
EPSS: Низкий
msrc логотип

CVE-2021-22925

больше 4 лет назад

curl supports the `-t` command line option known as `CURLOPT_TELNETOPTIONS`in libcurl. This rarely used option is used to send variable=content pairs toTELNET servers.Due to flaw in the option parser for sending `NEW_ENV` variables libcurlcould be made to pass on uninitialized data from a stack based buffer to theserver. Therefore potentially revealing sensitive internal information to theserver using a clear-text network protocol.This could happen because curl did not call and use sscanf() correctly whenparsing the string provided by the application.

CVSS3: 5.3
EPSS: Низкий
msrc логотип

CVE-2021-22924

больше 4 лет назад

libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse if one of them matches the setup.Due to errors in the logic the config matching function did not take 'issuercert' into account and it compared the involved paths *case insensitively*which could lead to libcurl reusing wrong connections.File paths are or can be case sensitive on many systems but not all and caneven vary depending on used file systems.The comparison also didn't include the 'issuer cert' which a transfer can setto qualify how to verify the server certificate.

CVSS3: 3.7
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
msrc логотип
CVSS3: 2.7
0%
Низкий
почти 5 лет назад
msrc логотип
CVSS3: 6.1
0%
Низкий
почти 5 лет назад
msrc логотип
CVSS3: 4.9
0%
Низкий
почти 5 лет назад
msrc логотип
CVSS3: 5.5
0%
Низкий
почти 5 лет назад
msrc логотип
CVSS3: 2.7
0%
Низкий
почти 5 лет назад
msrc логотип
CVE-2021-23017

A security issue in nginx resolver was identified which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite resulting in worker process crash or potential other impact.

CVSS3: 7.7
73%
Высокий
больше 4 лет назад
msrc логотип
CVSS3: 4.9
0%
Низкий
почти 5 лет назад
msrc логотип
CVSS3: 4.9
0%
Низкий
почти 5 лет назад
msrc логотип
CVSS3: 6.5
1%
Низкий
почти 5 лет назад
msrc логотип
CVE-2021-22947

Open Source Curl Remote Code Execution Vulnerability

0%
Низкий
около 4 лет назад
msrc логотип
CVE-2021-22946

A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP POP3 or FTP server (`--ssl-reqd` on the command line or`CURLOPT_USE_SSL` set to `CURLUSESSL_CONTROL` or `CURLUSESSL_ALL` withlibcurl). This requirement could be bypassed if the server would return a properly crafted but perfectly legitimate response.This flaw would then make curl silently continue its operations **withoutTLS** contrary to the instructions and expectations exposing possibly sensitive data in clear text over the network.

CVSS3: 7.5
0%
Низкий
больше 4 лет назад
msrc логотип
CVE-2021-22945

When sending data to an MQTT server libcurl <= 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointer to an already freed memory area and both use that again in a subsequent call to send data and also free it *again*.

CVSS3: 9.1
0%
Низкий
больше 4 лет назад
msrc логотип
CVE-2021-22940

Node.js before 16.6.1 14.17.5 and 12.22.5 is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption to change process behavior.

CVSS3: 7.5
0%
Низкий
больше 4 лет назад
msrc логотип
CVSS3: 4.9
1%
Низкий
почти 5 лет назад
msrc логотип
CVE-2021-22939

If the Node.js https API was used incorrectly and "undefined" was in passed for the "rejectUnauthorized" parameter no error was returned and connections to servers with an expired certificate would have been accepted.

CVSS3: 5.3
0%
Низкий
больше 4 лет назад
msrc логотип
CVSS3: 9.8
1%
Низкий
больше 4 лет назад
msrc логотип
CVE-2021-22930

Node.js before 16.6.0 14.17.4 and 12.22.4 is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption to change process behavior.

CVSS3: 9.8
0%
Низкий
около 4 лет назад
msrc логотип
CVE-2021-22926

libcurl-using applications can ask for a specific client certificate to be used in a transfer. This is done with the `CURLOPT_SSLCERT` option (`--cert` with the command line tool).When libcurl is built to use the macOS native TLS library Secure Transport an application can ask for the client certificate by name or with a file name - using the same option. If the name exists as a file it will be used instead of by name.If the appliction runs with a current working directory that is writable by other users (like `/tmp`) a malicious user can create a file name with the same name as the app wants to use by name and thereby trick the application to use the file based cert instead of the one referred to by name making libcurl send the wrong client certificate in the TLS connection handshake.

CVSS3: 7.5
1%
Низкий
больше 4 лет назад
msrc логотип
CVE-2021-22925

curl supports the `-t` command line option known as `CURLOPT_TELNETOPTIONS`in libcurl. This rarely used option is used to send variable=content pairs toTELNET servers.Due to flaw in the option parser for sending `NEW_ENV` variables libcurlcould be made to pass on uninitialized data from a stack based buffer to theserver. Therefore potentially revealing sensitive internal information to theserver using a clear-text network protocol.This could happen because curl did not call and use sscanf() correctly whenparsing the string provided by the application.

CVSS3: 5.3
0%
Низкий
больше 4 лет назад
msrc логотип
CVE-2021-22924

libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse if one of them matches the setup.Due to errors in the logic the config matching function did not take 'issuercert' into account and it compared the involved paths *case insensitively*which could lead to libcurl reusing wrong connections.File paths are or can be case sensitive on many systems but not all and caneven vary depending on used file systems.The comparison also didn't include the 'issuer cert' which a transfer can setto qualify how to verify the server certificate.

CVSS3: 3.7
1%
Низкий
больше 4 лет назад

Уязвимостей на страницу