Skip to content
Fencer Intel

All · julia

Newest first, late arrivals on top. Also a feed.

  1. 5.3
    CVE-2023-22742 libgit2 fails to verify SSH keys by default
    crates.iojulia
  2. 7.8
    CVE-2022-47021 A null pointer dereference issue was discovered in functions op_get_data and op_open1 in opusfile.c in xiph opusfile 0.9 thru 0.12 allows a…
    julia
  3. 7.5
    CVE-2023-22499 Interactive permission prompt spoofing in Deno
    crates.iojulia
  4. 4.7
    CVE-2021-36647 Use of a Broken or Risky Cryptographic Algorithm in the function `mbedtls_mpi_exp_mod()` in lignum.c...
    julia
  5. 7.5
    CVE-2022-4743 A potential memory leak issue was discovered in SDL2 in GLES_CreateTexture() function in SDL_render_gles.c.
    julia
    EPSS 1.4% chance of exploitation in 30 days, percentile 72%
  6. 9.8
    CVE-2022-3515 A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser
    julia
    EPSS 1.8% chance of exploitation in 30 days, percentile 78%
  7. 5.3
    CVE-2022-3341 A null pointer dereference issue was discovered in 'FFmpeg' in `decode_main_header()` function of...
    julia
  8. 7.8
    CVE-2022-46456 NASM v2.16 was discovered to contain a global buffer overflow in the component dbgdbg_typevalue at /output/outdbg.c.
    julia
  9. 8.8
    CVE-2022-42898 PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code executio…
    julia
    EPSS 6.9% chance of exploitation in 30 days, percentile 94%
  10. 7.5
    CVE-2022-43551 A vulnerability exists in curl <7.87.0 HSTS check that could be bypassed to trick it to keep using HTTP.
    julia
    EPSS 16.6% chance of exploitation in 30 days, percentile 97%
  11. 9.8
    CVE-2022-47629 Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser.
    julia
    EPSS 1.7% chance of exploitation in 30 days, percentile 77%
  12. 7.5
    CVE-2022-3109 An issue was discovered in the FFmpeg package, where `vp3_decode_frame` in `libavcodec/vp3.c` lacks...
    julia
    EPSS 1.6% chance of exploitation in 30 days, percentile 75%
  13. 9.8
    CVE-2022-46393 An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0
    julia
    EPSS 1.3% chance of exploitation in 30 days, percentile 69%
  14. 5.3
    CVE-2022-46392 An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0
    julia
  15. 6.5
    CVE-2022-35260 curl can be told to parse a `.netrc` file for credentials.
    julia
    EPSS 2.7% chance of exploitation in 30 days, percentile 86%
  16. 9.8
    CVE-2022-32221 When doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when t…
    julia
    EPSS 5.1% chance of exploitation in 30 days, percentile 92%
  17. 5.4
    CVE-2022-46149 Cap'n Proto vulnerable to out-of-bounds read due to logic error handling list-of-list.
    crates.iojulia
  18. 7.8
    CVE-2022-40304 An issue was discovered in libxml2 before 2.10.3
    julia
    EPSS 5.8% chance of exploitation in 30 days, percentile 93%
  19. 7.5
    CVE-2022-40303 An issue was discovered in libxml2 before 2.10.3
    julia
    EPSS 41.4% chance of exploitation in 30 days, percentile 98%
  20. 9.8
    CVE-2022-36227 In libarchive before 3.6.2, the software does not check for an error after calling calloc function...
    julia
    EPSS 2.5% chance of exploitation in 30 days, percentile 84%
  21. 8.8
    CVE-2021-33621 HTTP response splitting in CGI
    rubygemsbitnamijulia
    EPSS 2.5% chance of exploitation in 30 days, percentile 84%
  22. 6.3
    CVE-2022-3970 LibTIFF tif_getimage.c TIFFReadRGBATileExt integer overflow
    julia
    EPSS 1.7% chance of exploitation in 30 days, percentile 77%
  23. 4.3
    CVE-2022-3964 ffmpeg QuickTime RPZA Video Encoder rpzaenc.c out-of-bounds
    julia
    EPSS 4.7% chance of exploitation in 30 days, percentile 91%
  24. 9.1
    CVE-2022-42905 In wolfSSL before 5.5.2, if callback functions are enabled (via the WOLFSSL_CALLBACKS flag), then a malicious TLS 1.3 client or network att…
    julia
    EPSS 2.5% chance of exploitation in 30 days, percentile 84%
  25. 8.8
    CVE-2022-44638 In libpixman in Pixman before 0.42.2, there is an out-of-bounds write (aka heap-based buffer overflow) in rasterize_edges_8 due to an integ…
    julia
    EPSS 1.9% chance of exploitation in 30 days, percentile 80%
  26. 7.5
    CVE-2022-42916 In curl before 7.86.0, the HSTS check could be bypassed to trick it into staying with HTTP.
    julia
    EPSS 2.5% chance of exploitation in 30 days, percentile 85%
  27. 8.1
    CVE-2022-42915 curl before 7.86.0 has a double free.
    julia
    EPSS 3.7% chance of exploitation in 30 days, percentile 89%
  28. 7.5
    CVE-2022-43680 In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD...
    julia
    EPSS 3.2% chance of exploitation in 30 days, percentile 88%
  29. 5.5
    CVE-2022-3627 LibTIFF 4.4.0 has an out-of-bounds write in `_TIFFmemcpy` in `libtiff/tif_unix.c:346` when called...
    julia
    EPSS 1.4% chance of exploitation in 30 days, percentile 72%
  30. 5.5
    CVE-2022-3626 LibTIFF 4.4.0 has an out-of-bounds write in `_TIFFmemset` in `libtiff/tif_unix.c:340` when called...
    julia
    EPSS 1.3% chance of exploitation in 30 days, percentile 70%