| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-44489 | 5.0 | An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can cause an integer underflow of the size of calls to memset in op_fnj3 in sr_port/op_fnj3.c in order to cause a segmentation fault and crash the applicati | 2022-04-22 18:07:00 | 2022-04-15 18:15:00 |
| CVE-2021-44487 | 5.0 | An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of NULL checks in calls to ious_open in sr_unix/ious_open.c allows attackers to crash the application by dereferencing a NULL pointer. | 2022-04-22 18:01:00 | 2022-04-15 18:15:00 |
| CVE-2021-44486 | 7.5 | An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can manipulate the value of a function pointer used in op_write in sr_port/op_write.c in order to gain control of the flow of execution. | 2022-04-22 18:00:00 | 2022-04-15 18:15:00 |
| CVE-2022-24853 | 2.6 | Metabase is an open source business intelligence and analytics application. Metabase has a proxy to load arbitrary URLs for JSON maps as part of our GeoJSON support. While we do validation to not return contents of arbitrary URLs, there is a case whe | 2022-04-22 17:41:00 | 2022-04-14 22:15:00 |
| CVE-2021-44492 | 5.0 | An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, attackers can cause a type to be incorrectly initialized in the function f_incr in sr_port/f_incr.c and cause a crash due to a NULL poin | 2022-04-22 17:35:00 | 2022-04-15 18:15:00 |
| CVE-2021-44507 | 5.0 | An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). A lack of parameter validation in calls to memcpy in str_tok in sr_unix/ztimeoutroutines.c allows attackers to attempt to read from a NULL pointer. | 2022-04-22 17:33:00 | 2022-04-15 18:15:00 |
| CVE-2021-44504 | 5.0 | An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can cause a size variable, stored as an signed int, to equal an extremely large value, which is interpreted as a negative value | 2022-04-22 17:32:00 | 2022-04-15 18:15:00 |
| CVE-2021-44503 | 5.0 | An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can cause a call to va_arg on an empty variadic parameter list, most likely causing a memory segmentation fault. | 2022-04-22 17:32:00 | 2022-04-15 18:15:00 |
| CVE-2021-44501 | 5.0 | An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can cause calls to ZRead to crash due to a NULL pointer dereference. | 2022-04-22 17:32:00 | 2022-04-15 18:15:00 |
| CVE-2021-44495 | 5.0 | An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, an attacker can cause a NULL pointer dereference after calls to ZPrint. | 2022-04-22 17:31:00 | 2022-04-15 18:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: