Cloud Backup

CVEs (349)

• CVE-2020-16599MedDec 9, 2020
  GNU

  Binutils
  risk 0.36cvss 5.5epss 0.01

  A Null Pointer Dereference vulnerability exists in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35, in _bfd_elf_get_symbol_version_string, as demonstrated in nm-new, that can cause a denial of service via a crafted file.

• CVE-2020-16593MedDec 9, 2020
  GNU

  Binutils
  risk 0.36cvss 5.5epss 0.01

  A Null Pointer Dereference vulnerability exists in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35, in scan_unit_for_symbols, as demonstrated in addr2line, that can cause a denial of service via a crafted file.

• CVE-2020-13632MedMay 27, 2020
  SQLite

  SQLite
  risk 0.36cvss 5.5epss 0.01

  ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query.

• CVE-2020-13631MedMay 27, 2020
  SQLite

  SQLite
  risk 0.36cvss 5.5epss 0.01

  SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c.

• CVE-2020-7656MedMay 19, 2020
  jQuery

  jQuery
  risk 0.36cvss 6.1epss 0.06

  jquery prior to 1.9.0 allows Cross-site Scripting attacks via the load method. The load method fails to recognize and remove "", which results in the enclosed script logic to be executed.

• CVE-2020-12771MedMay 9, 2020
  Linux

  Kernel
  risk 0.36cvss 5.5epss 0.01

  An issue was discovered in the Linux kernel through 5.6.11. btree_gc_coalesce in drivers/md/bcache/btree.c has a deadlock if a coalescing operation fails.

• CVE-2020-8832MedApr 10, 2020
  NetApp

  Steelstore Cloud Integrated Storage
  risk 0.36cvss 5.5epss 0.00

  The fix for the Linux kernel in Ubuntu 18.04 LTS for CVE-2019-14615 ("The Linux kernel did not properly clear data structures on context switches for certain Intel graphics processors.") was discovered to be incomplete, meaning that in versions of the kernel before 4.15.0-91.92,…

• CVE-2020-10029MedMar 4, 2020
  GNU

  Glibc
  risk 0.36cvss 5.5epss 0.01

  The GNU C Library (aka glibc or libc6) before 2.32 could overflow an on-stack buffer during range reduction if an input to an 80-bit long double function contains a non-canonical bit pattern, a seen when passing a 0x5d414141414141410000 value to sinl on x86 targets. This is…

• CVE-2020-8992MedFeb 14, 2020
  Linux

  Kernel
  risk 0.36cvss 5.5epss 0.00

  ext4_protect_reserved_inode in fs/ext4/block_validity.c in the Linux kernel through 5.5.3 allows attackers to cause a denial of service (soft lockup) via a crafted journal size.

• CVE-2019-14591MedNov 14, 2019
  Intel

  Graphics Driver
  risk 0.36cvss 5.5epss 0.00

  Improper input validation in the API for Intel(R) Graphics Driver versions before 26.20.100.7209 may allow an authenticated user to potentially enable denial of service via local access.

• CVE-2019-14590MedNov 14, 2019
  Intel

  Graphics Driver
  risk 0.36cvss 5.5epss 0.00

  Improper access control in the API for the Intel(R) Graphics Driver versions before 26.20.100.7209 may allow an authenticated user to potentially enable information disclosure via local access.

• CVE-2019-14574MedNov 14, 2019
  Intel

  Graphics Driver
  risk 0.36cvss 5.5epss 0.00

  Out of bounds read in a subsystem for Intel(R) Graphics Driver versions before 26.20.100.7209 may allow an authenticated user to potentially enable denial of service via local access.

• CVE-2019-11089MedNov 14, 2019
  Intel

  Graphics Driver
  risk 0.36cvss 5.5epss 0.00

  Insufficient input validation in Kernel Mode module for Intel(R) Graphics Driver before version 25.20.100.6519 may allow an authenticated user to potentially enable denial of service via local access.

• CVE-2018-5736MedJan 16, 2019
  Isc

  Bind
  risk 0.36cvss 5.3epss 0.18

  An error in zone database reference counting can lead to an assertion failure if a server which is running an affected version of BIND attempts several transfers of a slave zone in quick succession. This defect could be deliberately exercised by an attacker who is permitted to…

• CVE-2021-25219MedOct 27, 2021
  Isc

  Bind
  risk 0.35cvss 5.3epss 0.08

  In BIND 9.3.0 -> 9.11.35, 9.12.0 -> 9.16.21, and versions 9.9.3-S1 -> 9.11.35-S1 and 9.16.8-S1 -> 9.16.21-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.18 of the BIND 9.17 development branch, exploitation of broken authoritative servers using a…

• CVE-2021-22923MedAug 5, 2021
  Curl

  Curl
  risk 0.35cvss 5.3epss 0.02

  When curl is instructed to get content using the metalink feature, and a user name and password are used to download the metalink XML file, those same credentials are then subsequently passed on to each of the servers from which curl will download or try to download the contents…

• CVE-2021-22897MedJun 11, 2021
  Curl

  Curl
  risk 0.35cvss 5.3epss 0.03

  curl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a mistake in the code for CURLOPT_SSL_CIPHER_LIST when libcurl is built to use the Schannel TLS library. The selected cipher set was stored in a single "static" variable in the library,…

• CVE-2020-14621MedJul 15, 2020
  McAfee

  Epolicy Orchestrator
  risk 0.35cvss 5.3epss 0.04

  Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network…

• CVE-2020-14155MedJun 15, 2020
  Pcre

  Pcre
  risk 0.35cvss 5.3epss 0.04

  libpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C substring.

• CVE-2020-2830MedApr 15, 2020
  Fedoraproject

  Fedora
  risk 0.35cvss 5.3epss 0.05

  Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Easily exploitable vulnerability allows unauthenticated attacker with…