Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-27 21:43Z
2021-05-19
2021-05-19 14:15Z
HIGH

CVE-2021-3517 — Xmlsoft Libxml2: An attacker who is able to supply a crafted file to be processed by

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-3517

There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker who is able to supply a crafted file to be processed by an application linked with the affected functionality of libxml2 could trigger an out-of-bounds read. The most likely impact of this flaw is to application availability, with some potential impact to confidentiality and integrity if an attacker is able to use memory information to further exploit the application. CVSSv3.1 8.6 (HIGH) · EPSS 97th percentile

CWECWE 125CWECWE 787VNDFedoraprojectVNDXmlsoftTYPVulnerability
8.6
CVSS v3.1
98
Edit Score
2021-05-19
2021-05-19 14:15Z
HIGH

CVE-2017-17677 — Bmc Remedy_mid-tier: Remedy 9.1SP3 is affected by authenticated code execution.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-17677

BMC Remedy 9.1SP3 is affected by authenticated code execution. Authenticated users that have the right to create reports can use BIRT templates to run code. CVSSv3.1 8.8 (HIGH) · EPSS 68th percentile

CWECWE 732VNDBmcTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2021-05-19
2021-05-19 14:15Z
CRIT

CVE-2017-17674 — Bmc Remedy_mid-tier: Due to the lack of restrictions on what can be targeted, the system can

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-17674

BMC Remedy Mid Tier 9.1SP3 is affected by remote and local file inclusion. Due to the lack of restrictions on what can be targeted, the system can be vulnerable to attacks such as system fingerprinting, internal port scanning, Server Side Request Forgery (SSRF), or remote code execution (RCE). CVSSv3.1 9.8 (CRITICAL) · EPSS 83th percentile

CWECWE 918VNDBmcTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2021-05-18
2021-05-18 12:15Z
HIGH

CVE-2021-3518 — Xmlsoft Libxml2: An attacker who is able to submit a crafted file to be processed by

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-3518

There's a flaw in libxml2 in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by an application linked with libxml2 could trigger a use-after-free. The greatest impact from this flaw is to confidentiality, integrity, and availability. CVSSv3.1 8.8 (HIGH) · EPSS 98th percentile

CWECWE 416VNDXmlsoftTYPVulnerability
8.8
CVSS v3.1
100
Edit Score
2021-05-17
2021-05-17 22:15Z
HIGH

CVE-2020-21844 — Gnu Libredwg: The impact is: execute arbitrary code (remote).

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2020-21844

GNU LibreDWG 0.10 is affected by: memcpy-param-overlap. The impact is: execute arbitrary code (remote). The component is: read_2004_section_header ../../src/decode.c:2580. CVSSv3.1 8.8 (HIGH) · EPSS 72th percentile

VNDGnuTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2021-05-17
2021-05-17 22:15Z
HIGH

CVE-2020-21843 — Gnu Libredwg: A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via bit_read_RC ../../src/bits.c:318.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2020-21843

A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via bit_read_RC ../../src/bits.c:318. CVSSv3.1 8.8 (HIGH) · EPSS 65th percentile

CWECWE 787VNDGnuTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2021-05-17
2021-05-17 22:15Z
HIGH

CVE-2020-21842 — Gnu Libredwg: A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_section_revhistory ../../src/decode.c:3051.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2020-21842

A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_section_revhistory ../../src/decode.c:3051. CVSSv3.1 8.8 (HIGH) · EPSS 65th percentile

CWECWE 787VNDGnuTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
728 × 90 / responsive · programmatic ad slot
2021-05-17
2021-05-17 22:15Z
HIGH

CVE-2020-21831 — Gnu Libredwg: A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_section_handles ../../src/decode.c:2637.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2020-21831

A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_section_handles ../../src/decode.c:2637. CVSSv3.1 8.8 (HIGH) · EPSS 65th percentile

CWECWE 787VNDGnuTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2021-05-17
2021-05-17 21:15Z
HIGH

CVE-2020-21841 — Gnu Libredwg: A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via bit_read_B ../../src/bits.c:135.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2020-21841

A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via bit_read_B ../../src/bits.c:135. CVSSv3.1 8.8 (HIGH) · EPSS 69th percentile

CWECWE 787VNDGnuTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2021-05-17
2021-05-17 21:15Z
HIGH

CVE-2020-21840 — Gnu Libredwg: A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via bit_search_sentinel ../../src/bits.c:1985.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2020-21840

A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via bit_search_sentinel ../../src/bits.c:1985. CVSSv3.1 8.8 (HIGH) · EPSS 69th percentile

CWECWE 787VNDGnuTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2021-05-17
2021-05-17 21:15Z
HIGH

CVE-2020-21838 — Gnu Libredwg: A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via: read_2004_section_appinfo ../../src/decode.c:2842.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2020-21838

A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via: read_2004_section_appinfo ../../src/decode.c:2842. CVSSv3.1 8.8 (HIGH) · EPSS 69th percentile

CWECWE 787VNDGnuTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2021-05-17
2021-05-17 21:15Z
HIGH

CVE-2020-21836 — Gnu Libredwg: A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_section_preview ../../src/decode.c:3175.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2020-21836

A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_section_preview ../../src/decode.c:3175. CVSSv3.1 8.8 (HIGH) · EPSS 63th percentile

CWECWE 787VNDGnuTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2021-05-17
2021-05-17 21:15Z
HIGH

CVE-2020-21833 — Gnu Libredwg: A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via: read_2004_section_classes ../../src/decode.c:2440.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2020-21833

A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via: read_2004_section_classes ../../src/decode.c:2440. CVSSv3.1 8.8 (HIGH) · EPSS 70th percentile

CWECWE 787VNDGnuTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2021-05-17
2021-05-17 21:15Z
HIGH

CVE-2020-21832 — Gnu Libredwg: A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_compressed_section ../../src/decode.c:2417.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2020-21832

A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_compressed_section ../../src/decode.c:2417. CVSSv3.1 8.8 (HIGH) · EPSS 65th percentile

CWECWE 787VNDGnuTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2021-05-17
2021-05-17 21:15Z
HIGH

CVE-2020-21830 — Gnu Libredwg: A heap based buffer overflow vulneraibility exists in GNU LibreDWG 0.10 via bit_calc_CRC ../../src/bits.c:2213.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2020-21830

A heap based buffer overflow vulneraibility exists in GNU LibreDWG 0.10 via bit_calc_CRC ../../src/bits.c:2213. CVSSv3.1 8.8 (HIGH) · EPSS 65th percentile

CWECWE 787VNDGnuTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2021-05-17
2021-05-17 19:15Z
HIGH

CVE-2020-21819 — Gnu Libredwg: A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10.2641via htmlescape ../../programs/escape.c:51.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2020-21819

A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10.2641via htmlescape ../../programs/escape.c:51. CVSSv3.1 8.8 (HIGH) · EPSS 65th percentile

CWECWE 787VNDGnuTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2021-05-17
2021-05-17 19:15Z
HIGH

CVE-2020-21818 — Gnu Libredwg: A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10.2641 via htmlescape ../../programs/escape.c:48.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2020-21818

A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10.2641 via htmlescape ../../programs/escape.c:48. CVSSv3.1 8.8 (HIGH) · EPSS 65th percentile

CWECWE 787VNDGnuTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2021-05-17
2021-05-17 19:15Z
HIGH

CVE-2020-21816 — Gnu Libredwg: A heab based buffer overflow issue exists in GNU LibreDWG 0.10.2641 via htmlescape ../../programs/escape.c:46.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2020-21816

A heab based buffer overflow issue exists in GNU LibreDWG 0.10.2641 via htmlescape ../../programs/escape.c:46. CVSSv3.1 8.8 (HIGH) · EPSS 65th percentile

CWECWE 787VNDGnuTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2021-05-17
2021-05-17 19:15Z
HIGH

CVE-2020-21814 — Gnu Libredwg: A heap based buffer overflow issue exists in GNU LibreDWG 0.10.2641 via htmlwescape ../../programs/escape.c:97.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2020-21814

A heap based buffer overflow issue exists in GNU LibreDWG 0.10.2641 via htmlwescape ../../programs/escape.c:97. CVSSv3.1 8.8 (HIGH) · EPSS 63th percentile

CWECWE 787VNDGnuTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2021-05-17
2021-05-17 11:15Z
HIGH

CVE-2021-29053 — Liferay Dxp: Multiple SQL injection vulnerabilities in Liferay Portal 7.3.5 and Liferay DXP 7.3 before fix

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-29053

Multiple SQL injection vulnerabilities in Liferay Portal 7.3.5 and Liferay DXP 7.3 before fix pack 1 allow remote authenticated users to execute arbitrary SQL commands via the classPKField parameter to (1) CommerceChannelRelFinder.countByC_C, or (2) CommerceChannelRelFinder.findByC_C. CVSSv3.1 8.8 (HIGH) · EPSS 64th percentile

CWECWE 89VNDLiferayTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2021-05-12
2021-05-12 14:15Z
CRIT

CVE-2021-27384 — Siemens Simatic_wincc_runtime_advanced: SmartVNC has an out-of-bounds memory access vulnerability in the device layout handler, represented by

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-27384

A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI Comfort Panels V15 4\" - 22\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Panels V16 4\" - 22\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI KTP Mobile Panels V15 CVSSv3.1 9.8 (CRITICAL) · EPSS 81th percentile

CWECWE 788VNDSiemensTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2021-05-06
2021-05-06 13:15Z
CRIT

CVE-2021-29921 — Python Python: This (in some situations) allows attackers to bypass access control that is based on

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-29921

In Python before 3,9,5, the ipaddress library mishandles leading zero characters in the octets of an IP address string. This (in some situations) allows attackers to bypass access control that is based on IP addresses. CVSSv3.1 9.8 (CRITICAL) · EPSS 94th percentile

VNDOracleTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2021-05-03
2021-05-03 12:15Z
CRIT

CVE-2021-28860 — Adaltas Mixme: This will put the availability of the program at risk causing a potential denial

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-28860

In Node.js mixme, prior to v0.5.1, an attacker can add or alter properties of an object via '__proto__' through the mutate() and merge() functions. The polluted attribute will be directly assigned to every object in the program. This will put the availability of the program at risk causing a potential denial of service (DoS). CVSSv3.1 9.1 (CRITICAL) · EPSS 78th percentile

CWECWE 1321VNDAdaltasTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2021-04-29
2021-04-29 18:15Z
HIGH

CVE-2021-1504 — Cisco Secure_firewall_threat_defense: Multiple vulnerabilities in Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD)

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-1504

Multiple vulnerabilities in Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. These vulnerabilities are due to lack of proper input validation of the HTTPS request. An attacker could exploit these vulnerabilities by sending a crafted HTTPS request to an affected device. A successful exploit could allow the attacker to c CVSSv3.1 8.6 (HIGH) · EPSS 74th percentile

CWECWE 787VNDCiscoTYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2021-04-29
2021-04-29 18:15Z
HIGH

CVE-2021-1501 — Cisco Secure_firewall_threat_defense: A vulnerability in the SIP inspection engine of Cisco Adaptive Security Appliance (ASA) Software

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-1501

A vulnerability in the SIP inspection engine of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a crash and reload of an affected device, resulting in a denial of service (DoS) condition.The vulnerability is due to a crash that occurs during a hash lookup for a SIP pinhole connection. An attacker could exploit this vulnerability by sending crafted SIP traffic through an CVSSv3.1 8.6 (HIGH) · EPSS 69th percentile

CWECWE 613VNDCiscoVNDSipTYPVulnerability
8.6
CVSS v3.1
93
Edit Score