Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2021-28691 |
|
Use-After-Free in netapp (CVE-2021-28691)
vulnerability in netapp (CVE-2021-28691). Successful exploitation can lead to full system takeover.
|
| CVE-2021-23134 |
|
Use-After-Free in netapp (CVE-2021-23134)
vulnerability in netapp (CVE-2021-23134). Successful exploitation can lead to full system takeover.
|
| CVE-2021-23133 |
|
Vulnerability in c (CVE-2021-23133)
vulnerability in c (CVE-2021-23133). Successful exploitation can lead to full system takeover.
|
| CVE-2021-27364 |
|
Out-of-Bounds Read in c (CVE-2021-27364)
vulnerability in c (CVE-2021-27364). Confidential information can be exposed externally.
|
| CVE-2021-27365 |
|
Out-of-Bounds Write in netapp (CVE-2021-27365)
out-of-bounds write in netapp (CVE-2021-27365). Successful exploitation can lead to full system takeover.
|
| CVE-2021-40438 KEV |
|
[KEV] SSRF (Server-Side Request Forgery) in Apache resf (CVE-2021-40438)
SSRF in Apache resf (CVE-2021-40438). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2021-41864 |
|
Vulnerability in c (CVE-2021-41864)
vulnerability in c (CVE-2021-41864). Successful exploitation can lead to full system takeover.
|
| CVE-2021-22897 |
|
Vulnerability in haxx (CVE-2021-22897)
vulnerability in haxx (CVE-2021-22897). Risk of unauthorized operations or information disclosure. Exploitable via ``CURLOPT_SSL_CIPHER_LIST``.
|
| CVE-2021-3483 |
|
Use-After-Free in linux (CVE-2021-3483)
vulnerability in linux (CVE-2021-3483). Successful exploitation can lead to full system takeover.
|
| CVE-2021-3501 |
|
Out-of-Bounds Write in linux (CVE-2021-3501)
out-of-bounds write in linux (CVE-2021-3501). Data can be tampered with by attackers.
|
| CVE-2020-36183 |
|
Unsafe Deserialization in apache (CVE-2020-36183)
vulnerability in apache (CVE-2020-36183). Successful exploitation can lead to full system takeover.
|
| CVE-2020-36179 |
|
Unsafe Deserialization in apache (CVE-2020-36179)
vulnerability in apache (CVE-2020-36179). Successful exploitation can lead to full system takeover.
|
| CVE-2020-36180 |
|
Unsafe Deserialization in apache (CVE-2020-36180)
vulnerability in apache (CVE-2020-36180). Successful exploitation can lead to full system takeover.
|
| CVE-2020-36182 |
|
Unsafe Deserialization in apache (CVE-2020-36182)
vulnerability in apache (CVE-2020-36182). Successful exploitation can lead to full system takeover.
|
| CVE-2020-36184 |
|
Unsafe Deserialization in apache (CVE-2020-36184)
vulnerability in apache (CVE-2020-36184). Successful exploitation can lead to full system takeover.
|
| CVE-2020-36185 |
|
Unsafe Deserialization in apache (CVE-2020-36185)
vulnerability in apache (CVE-2020-36185). Successful exploitation can lead to full system takeover.
|
| CVE-2020-36186 |
|
Unsafe Deserialization in apache (CVE-2020-36186)
vulnerability in apache (CVE-2020-36186). Successful exploitation can lead to full system takeover.
|
| CVE-2020-36187 |
|
Unsafe Deserialization in apache (CVE-2020-36187)
vulnerability in apache (CVE-2020-36187). Successful exploitation can lead to full system takeover.
|
| CVE-2020-36188 |
|
Unsafe Deserialization in fasterxml (CVE-2020-36188)
vulnerability in fasterxml (CVE-2020-36188). Successful exploitation can lead to full system takeover.
|
| CVE-2020-36189 |
|
Unsafe Deserialization in fasterxml (CVE-2020-36189)
vulnerability in fasterxml (CVE-2020-36189). Successful exploitation can lead to full system takeover.
|
| CVE-2019-13118 |
|
Vulnerability in nokogiri (CVE-2019-13118)
vulnerability in nokogiri (CVE-2019-13118). Confidential information can be exposed externally. Exploitable via ``numbers.c``. Mitigation: upgrade to `1.10.5` or later.
|
| CVE-2019-7317 |
|
Use-After-Free in c (CVE-2019-7317)
vulnerability in c (CVE-2019-7317). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-15906 |
|
Vulnerability in c (CVE-2017-15906)
vulnerability in c (CVE-2017-15906). Risk of unauthorized operations or information disclosure.
|