Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.9When curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade to TLS security, the server can respond and send back m…EPSS 3.0%Sep 29, 2021
- High7.5A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server ( on the command line or set to or wit…EPSS 4.5%Sep 29, 2021
- Critical9.1When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointer to an already freed memory area and both use t…EPSS 6.7%Sep 23, 2021
- High7.8Apple macOS Unspecified VulnerabilityKEVEPSS 7.0%Sep 8, 2021
- High8.8Apple Multiple Products WebKit Memory Corruption VulnerabilityKEVEPSS 3.7%Sep 8, 2021
- High8.8Apple Multiple Products WebKit Integer Overflow VulnerabilityKEVEPSS 3.5%Sep 8, 2021
- High8.8Apple Multiple Products WebKit Storage Use-After-Free VulnerabilityKEVEPSS 4.5%Sep 8, 2021
- Medium5.5Apple macOS Unspecified VulnerabilityKEVEPSS 68.5%Sep 8, 2021
- High7.5A segmentation fault can occur in the sqlite3.exe command-line component of SQLite 3.36.0 via the idxGetTableInfo function when there is a crafted SQL query.EPSS 3.9%Aug 24, 2021
- High7.5Apple iOS, macOS, watchOS Sandbox Bypass VulnerabilityKEVEPSS 3.7%Aug 24, 2021
- High7.8Apple Multiple Products Integer Overflow or Wraparound VulnerabilityKEVEPSS 7.0%Aug 24, 2021
- High7.8Apple iOS, iPadOS, and macOS Out-of-Bounds Write VulnerabilityKEVEPSS 5.2%Aug 24, 2021
- High7.8Apple Multiple Products Memory Corruption VulnerabilityKEVEPSS 14.7%Aug 24, 2021
- High7.8Apple iOS, iPadOS, and macOS Type Confusion VulnerabilityKEVEPSS 4.1%Aug 24, 2021
- High8.8Apple iOS, iPadOS, macOS Use-After-Free VulnerabilityKEVEPSS 13.4%Aug 24, 2021
- Critical9.8Apple iOS, iPadOS, and macOS WebKit Remote Code Execution VulnerabilityKEVEPSS 7.0%Apr 2, 2021
- Critical9.8Apple iOS, iPadOS, and macOS WebKit Remote Code Execution VulnerabilityKEVEPSS 7.7%Apr 2, 2021
- High8.8Nagios XI OS Command InjectionKEVEPSS 73.6%Feb 15, 2021
- High8.8Nagios XI OS Command InjectionKEVEPSS 56.7%Feb 15, 2021
- High8.8Nagios XI OS Command InjectionKEVEPSS 71.9%Feb 15, 2021
- High7.5An integer underflow was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Certificate List Exact Assertion processing, resulting in denial of service.EPSS 85.0%Jan 26, 2021
- High7.5A flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with the cancel_extop Cancel operation, resulting in denial of service.EPSS 77.2%Jan 26, 2021
- High7.5A flaw was discovered in OpenLDAP before 2.4.57 leading to a double free and slapd crash in the saslAuthzTo processing, resulting in denial of service.EPSS 4.3%Jan 26, 2021
- Medium5.5Apple Multiple Products Memory Initialization VulnerabilityKEVEPSS 16.5%Dec 8, 2020
- High7.8Apple Multiple Products Type Confusion VulnerabilityKEVEPSS 10.3%Dec 8, 2020