| Bug | Description | Note |
|---|
| CVE-2017-2910 | An exploitable Out-of-bounds Write vulnerability exists in the xls_add ... | check |
| CVE-2018-16494 | In VOS and overly permissive "umask" may allow for authorized users of ... | check |
| CVE-2018-16495 | In VOS user session identifier (authentication token) is issued to the ... | check |
| CVE-2018-16499 | In VOS compromised, an attacker at network endpoints can possibly view ... | check |
| CVE-2019-9475 | In /proc/net of the kernel filesystem, there is a possible information ... | check |
| CVE-2019-18351 | An issue was discovered in channels/chan_sip.c in Sangoma Asterisk thr ... | check with MITRE if CVE-2019-18351 simply should be dropped |
| CVE-2020-0478 | In extend_frame_lowbd of restoration.c, there is a possible out of bou ... | check if ebba9c769be2c99d5396d0018901e9a4af5e2d2c is the needed commit |
| CVE-2020-3702 | u'Specifically timed and handcrafted traffic can cause internal errors ... | check, it might affect src:linux as pointed out in https://lore.kernel.org/linux-wireless/CABvG-CVvPF++0vuGzCrBj8+s=Bcx1GwWfiW1_Somu_GVncTAcQ@mail.gmail.com/ |
| CVE-2020-7860 | UnEGG v0.5 and eariler versions have a Integer overflow vulnerability, ... | check |
| CVE-2020-8492 | Python 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 ... | check, upload of pypy/7.3.5+dfsg-1 to experimental claims this affects src:pypy |
| CVE-2020-8670 | Race condition in the firmware for some Intel(R) Processors may allow ... | check |
| CVE-2020-8700 | Improper input validation in the firmware for some Intel(R) Processors ... | check |
| CVE-2020-8702 | Uncontrolled search path element in the Intel(R) Processor Diagnostic ... | check |
| CVE-2020-8703 | Improper buffer restrictions in a subsystem in the Intel(R) CSME versi ... | check |
| CVE-2020-8704 | Race condition in a subsystem in the Intel(R) LMS versions before 2039 ... | check |
| CVE-2020-12288 | Protection mechanism failure in some Intel(R) Thunderbolt(TM) controll ... | check |
| CVE-2020-12289 | Out-of-bounds write in some Intel(R) Thunderbolt(TM) controllers may a ... | check |
| CVE-2020-12290 | Improper access control in some Intel(R) Thunderbolt(TM) controllers m ... | check |
| CVE-2020-12291 | Uncontrolled resource consumption in some Intel(R) Thunderbolt(TM) con ... | check |
| CVE-2020-12292 | Improper conditions check in some Intel(R) Thunderbolt(TM) controllers ... | check |
| CVE-2020-12293 | Improper control of a resource through its lifetime in some Intel(R) T ... | check |
| CVE-2020-12294 | Insufficient control flow management in some Intel(R) Thunderbolt(TM) ... | check |
| CVE-2020-12295 | Improper input validation in some Intel(R) Thunderbolt(TM) controllers ... | check |
| CVE-2020-12296 | Uncontrolled resource consumption in some Intel(R) Thunderbolt(TM) con ... | check |
| CVE-2020-12357 | Improper initialization in the firmware for some Intel(R) Processors m ... | check |
| CVE-2020-12358 | Out of bounds write in the firmware for some Intel(R) Processors may a ... | check |
| CVE-2020-12359 | Insufficient control flow management in the firmware for some Intel(R) ... | check |
| CVE-2020-12360 | Out of bounds read in the firmware for some Intel(R) Processors may al ... | check |
| CVE-2020-13668 | RESERVED | check, instead in MITRE CVE-2020-13688 is for sa-core-2020-009, CNA contacted |
| CVE-2020-13688 | Cross-site scripting vulnerability in l Drupal Core allows an attacker ... | check, drupal advisory references CVE-2020-13668 instead, CNA contacted |
| CVE-2020-13950 | Apache HTTP Server versions 2.4.41 to 2.4.46 mod_proxy_http can be mad ... | check why this only a problem starting in 2.4.41 |
| CVE-2020-15377 | Webtools in Brocade SANnav before version 2.1.1 allows unauthenticated ... | check |
| CVE-2020-15378 | The OVA version of Brocade SANnav before version 2.1.1 installation wi ... | check |
| CVE-2020-15379 | Brocade SANnav before v.2.1.0a could allow remote attackers cause a de ... | check |
| CVE-2020-15380 | Brocade SANnav before version 2.1.1 logs account credentials at the &# ... | check |
| CVE-2020-15381 | Brocade SANnav before version 2.1.1 contains an Improper Authenticatio ... | check |
| CVE-2020-15382 | Brocade SANnav before version 2.1.1 uses a hard-coded administrator ac ... | check |
| CVE-2020-15383 | Running security scans against the SAN switch can cause config and sec ... | check |
| CVE-2020-15384 | Brocade SANNav before version 2.1.1 contains an information disclosure ... | check |
| CVE-2020-15385 | Brocade SANnav before version 2.1.1 allows an authenticated attacker t ... | check |
| CVE-2020-15386 | Brocade Fabric OS prior to v9.0.1a and 8.2.3a and after v9.0.0 and 8.2 ... | check |
| CVE-2020-15387 | The host SSH servers of Brocade Fabric OS before Brocade Fabric OS v7. ... | check |
| CVE-2020-20178 | A flaw was found in OpenLDAP. This flaw allows an attacker who can sen ... | wait for cleanup, CVE is wrongly associated |
| CVE-2020-23302 | There is a heap-use-after-free at ecma-helpers-string.c:772 in ecma_re ... | check |
| CVE-2020-23303 | There is a heap-buffer-overflow at jmem-poolman.c:165 in jmem_pools_co ... | check |
| CVE-2020-23306 | There is a stack-overflow at ecma-regexp-object.c:535 in ecma_regexp_m ... | check |
| CVE-2020-23308 | There is an Assertion 'context_p->stack_top_uint8 == LEXER_EXPRESSI ... | check |
| CVE-2020-23309 | There is an Assertion 'context_p->stack_depth == context_p->cont ... | check |
| CVE-2020-23310 | There is an Assertion 'context_p->next_scanner_info_p->type == S ... | check |
| CVE-2020-23311 | There is an Assertion 'context_p->token.type == LEXER_RIGHT_BRACE | ... | check |
| CVE-2020-23312 | There is an Assertion 'context.status_flags & PARSER_SCANNING_SUCC ... | check |
| CVE-2020-23313 | There is an Assertion 'scope_stack_p > context_p->scope_stack_p' ... | check |
| CVE-2020-23314 | There is an Assertion 'block_found' failed at js-parser-statm.c:2003 p ... | check |
| CVE-2020-23319 | There is an Assertion in '(flags >> CBC_STACK_ADJUST_SHIFT) > ... | check |
| CVE-2020-23320 | There is an Assertion in 'context_p->next_scanner_info_p->type = ... | check |
| CVE-2020-23321 | There is a heap-buffer-overflow at lit-strings.c:431 in lit_read_code_ ... | check |
| CVE-2020-23322 | There is an Assertion in 'context_p->token.type == LEXER_RIGHT_BRAC ... | check |
| CVE-2020-23323 | There is a heap-buffer-overflow at re-parser.c in re_parse_char_escape ... | check |
| CVE-2020-23914 | An issue was discovered in cpp-peglib through v0.1.12. A NULL pointer ... | retroarch and salmon embed peglib, check if it's actually a security issue |
| CVE-2020-23915 | An issue was discovered in cpp-peglib through v0.1.12. peg::resolve_es ... | retroarch and salmon embed peglib, check if it's actually a security issue |
| CVE-2020-24473 | Out of bounds write in the BMC firmware for some Intel(R) Server Board ... | check |
| CVE-2020-24474 | Buffer overflow in the BMC firmware for some Intel(R) Server Boards, S ... | check |
| CVE-2020-24475 | Improper initialization in the BMC firmware for some Intel(R) Server B ... | check |
| CVE-2020-24486 | Improper input validation in the firmware for some Intel(R) Processors ... | check |
| CVE-2020-24506 | Out of bound read in a subsystem in the Intel(R) CSME versions before ... | check |
| CVE-2020-24507 | Improper initialization in a subsystem in the Intel(R) CSME versions b ... | check |
| CVE-2020-24509 | Insufficient control flow management in subsystem in Intel(R) SPS vers ... | check |
| CVE-2020-24662 | SmartStream Transaction Lifecycle Management (TLM) Reconciliation Prem ... | check |
| CVE-2020-25467 | A null pointer dereference was discovered lzo_decompress_buf in stream ... | check fixing commit |
| CVE-2020-25646 | A flaw was found in Ansible Collection community.crypto. openssl_priva ... | check |
| CVE-2020-26515 | An insufficiently protected credentials issue was discovered in Intlan ... | check |
| CVE-2020-26516 | A CSRF issue was discovered in Intland codeBeamer ALM 10.x through 10. ... | check |
| CVE-2020-26517 | A cross-site scripting (XSS) issue was discovered in Intland codeBeame ... | check |
| CVE-2020-27383 | Battle.net.exe in Battle.Net 1.27.1.12428 suffers from an elevation of ... | check |
| CVE-2020-28600 | An out-of-bounds write vulnerability exists in the import_stl.cc:impor ... | cheick, maybe fixed already in 2021.01-1 |
| CVE-2020-28713 | Incorrect access control in push notification service in Night Owl Sma ... | check |
| CVE-2020-35875 | An issue was discovered in the tokio-rustls crate before 0.13.1 for Ru ... | check |
| CVE-2020-35922 | An issue was discovered in the mio crate before 0.7.6 for Rust. It has ... | check |
| CVE-2021-0086 | Improper permissions in the installer for the Intel(R) Brand Verificat ... | check |
| CVE-2021-3013 | ripgrep before 13 allows attackers to trigger execution of arbitrary p ... | check |
| CVE-2021-3256 | KuaiFanCMS V5.x contains an arbitrary file read vulnerability in the h ... | check |
| CVE-2021-3283 | HashiCorp Nomad and Nomad Enterprise up to 0.12.9 exec and java task d ... | check details |
| CVE-2021-3426 | There's a flaw in Python 3's pydoc. A local or adjacent attacker who d ... | check, upload of pypy/7.3.5+dfsg-1 to experimental claims this affects src:pypy |
| CVE-2021-3556 | RESERVED | cleanup after official reject |
| CVE-2021-3563 | | scarce details on it if there are upstream references, try to get more information |
| CVE-2021-3583 | Template Injection through yaml multi-line strings with ansible facts used in template | scarce information, check later |
| CVE-2021-3597 | | check, lack of details |
| CVE-2021-20206 | An improper limitation of path name flaw was found in containernetwork ... | check details, impact on docker.io? |
| CVE-2021-20220 | A flaw was found in Undertow. A regression in the fix for CVE-2020-106 ... | CVE for incomplete fix for CVE-2020-10687 but not clear if affected any Debian released version |
| CVE-2021-20291 | A deadlock vulnerability was found in 'github.com/containers/storage' ... | check golang-github-containers-buildah, docker.io |
| CVE-2021-20329 | Specific cstrings input may not be properly validated in the MongoDB G ... | check |
| CVE-2021-21382 | Restund is an open source NAT traversal server. The restund TURN serve ... | check |
| CVE-2021-21391 | CKEditor 5 provides a WYSIWYG editing solution. This CVE affects the f ... | check |
| CVE-2021-22118 | In Spring Framework, versions 5.2.x prior to 5.2.15 and versions 5.3.x ... | check |
| CVE-2021-22175 | When requests to the internal network for webhooks are enabled, a serv ... | check |
| CVE-2021-22212 | ntpkeygen can generate keys that ntpd fails to parse. NTPsec 1.2.0 all ... | check details |
| CVE-2021-22213 | A cross-site leak vulnerability in the OAuth flow of all versions of G ... | check |
| CVE-2021-22214 | When requests to the internal network for webhooks are enabled, a serv ... | check |
| CVE-2021-22215 | An information disclosure vulnerability in GitLab EE versions 13.11 an ... | check |
| CVE-2021-22216 | A denial of service vulnerability in all versions of GitLab CE/EE befo ... | check |
| CVE-2021-22217 | A denial of service vulnerability in all versions of GitLab CE/EE befo ... | check |
| CVE-2021-22218 | All versions of GitLab CE/EE starting with 12.8 were affected by an is ... | check |
| CVE-2021-22219 | GitLab CE/EE since version 9.5 allows a high privilege user to obtain ... | check |
| CVE-2021-22220 | An issue has been discovered in GitLab affecting all versions starting ... | check |
| CVE-2021-22221 | An issue has been discovered in GitLab affecting all versions starting ... | check |
| CVE-2021-22548 | An attacker can change the pointer to untrusted memory to point to tru ... | check |
| CVE-2021-22549 | An attacker can modify the address to point to trusted memory to overw ... | check |
| CVE-2021-22550 | An attacker can modify the pointers in enclave memory to overwrite arb ... | check |
| CVE-2021-22769 | A CWE-269: Improper Privilege Management vulnerability exists in Enerl ... | check |
| CVE-2021-22895 | Nextcloud Desktop Client before 3.3.1 is vulnerable to improper certif ... | check |
| CVE-2021-22896 | Nextcloud Mail before 1.9.5 suffers from improper access control due t ... | check |
| CVE-2021-22906 | Nextcloud End-to-End Encryption before 1.5.3, 1.6.3 and 1.7.1 suffers ... | check |
| CVE-2021-22912 | Nextcloud iOS before 3.4.2 suffers from an information disclosure vuln ... | check |
| CVE-2021-23024 | On version 8.0.x before 8.0.0.1, and all 6.x and 7.x versions, the BIG ... | check |
| CVE-2021-23215 | An integer overflow leading to a heap-buffer overflow was found in the ... | check details |
| CVE-2021-23230 | A SQL Injection vulnerability in the OPCUA interface of Gallagher Comm ... | check |
| CVE-2021-23391 | This affects all versions of package calipso. It is possible for a mal ... | check |
| CVE-2021-23392 | The package locutus before 2.0.15 are vulnerable to Regular Expression ... | check |
| CVE-2021-23393 | This affects the package Flask-Unchained before 0.9.0. When using the ... | check |
| CVE-2021-23394 | The package studio-42/elfinder before 2.1.58 are vulnerable to Remote ... | check |
| CVE-2021-25322 | A UNIX Symbolic Link (Symlink) Following vulnerability in python-Hyper ... | check |
| CVE-2021-25948 | Prototype pollution vulnerability in ‘expand-hash’ version ... | check |
| CVE-2021-25949 | Prototype pollution vulnerability in ‘set-getter’ version ... | check |
| CVE-2021-26194 | An issue was discovered in JerryScript 2.4.0. There is a heap-use-afte ... | check |
| CVE-2021-26195 | An issue was discovered in JerryScript 2.4.0. There is a heap-buffer-o ... | check |
| CVE-2021-26197 | An issue was discovered in JerryScript 2.4.0. There is a SEGV in main_ ... | check |
| CVE-2021-26198 | An issue was discovered in JerryScript 2.4.0. There is a SEVG in ecma_ ... | check |
| CVE-2021-26199 | An issue was discovered in JerryScript 2.4.0. There is a heap-use-afte ... | check |
| CVE-2021-26260 | An integer overflow leading to a heap-buffer overflow was found in the ... | check details |
| CVE-2021-26314 | Potential floating point value injection in all supported CPU products ... | check |
| CVE-2021-26945 | An integer overflow leading to a heap-buffer overflow was found in Ope ... | check details |
| CVE-2021-27345 | A null pointer dereference was discovered in ucompthread in stream.c i ... | check fixing commit |
| CVE-2021-27347 | Use after free in lzma_decompress_buf function in stream.c in Irzip 0. ... | check fixing commit |
| CVE-2021-28213 | Example EDK2 encrypted private key in the IpSecDxe.efi present potenti ... | check |
| CVE-2021-29499 | SIF is an open source implementation of the Singularity Container Imag ... | check |
| CVE-2021-30535 | Double free in ICU in Google Chrome prior to 91.0.4472.77 allowed a re ... | check src:icu |
| CVE-2021-31347 | An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezx ... | check |
| CVE-2021-31348 | An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezx ... | check |
| CVE-2021-31598 | An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezx ... | check |
| CVE-2021-33194 | golang.org/x/net before v0.0.0-20210520170846-37e1c6afe023 allows atta ... | check completeness |
| CVE-2021-34555 | OpenDMARC 1.4.1 and 1.4.1.1 allows remote attackers to cause a denial ... | check |
| TEMP-0000000-DD73A0 | Unexpected database bindings via requests (follow-up) | check php-illuminate-database and CVE assignment |