TI-2021-02645 CVE-2021-3711 · GHSA-5ww6-px42-wc85
SM2 Decryption Buffer Overflow
Priority CRITICAL 91
In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt().
RHSA-2021:4618
Red Hat Advanced Cluster Management 2.4 images and security updates
Released 2021-11-11 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8 rhacm2/acm-grafana-rhel8, rhacm2/acm-must-gather-rhel8, rhacm2/acm-operator-bundle +47
Fixes 15 records
TI-2021-05876 CVE-2021-23017 · GHSA-83p9-mcpm-374v
A security issue in nginx resolver was identified, which might allow an attacker who is…
Priority HIGH 66
A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other…
TI-2021-02646 CVE-2021-3712 · GHSA-q9wj-f4qw-6vfj
Read buffer overruns processing ASN.1 strings
Priority MEDIUM 63
ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length.
Priority MEDIUM 55
Redis is an open source, in-memory database that persists on disk.
TI-2021-12469 CVE-2021-32804 · GHSA-3jfq-g458-7qm9
Arbitrary File Creation/Overwrite due to insufficient absolute path sanitization
Priority MEDIUM 51
The npm package "tar" (aka node-tar) before versions 6.1.1, 5.0.6, 4.4.14, and 3.3.2 has a arbitrary File Creation/Overwrite vulnerability due to insufficient absolute path sanitization.
TI-2021-12343 CVE-2021-32675
DoS vulnerability in Redis
Priority MEDIUM 49
Redis is an open source, in-memory database that persists on disk.
TI-2021-12297 CVE-2021-32628
Vulnerability in handling large ziplists
Priority MEDIUM 48
Redis is an open source, in-memory database that persists on disk.
TI-2021-12468 CVE-2021-32803 · GHSA-r628-mhmh-qjhw
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning
Priority MEDIUM 46
The npm package "tar" (aka node-tar) before versions 6.1.2, 5.0.7, 4.4.15, and 3.2.3 has an arbitrary File Creation/Overwrite vulnerability via insufficient symlink protection.
TI-2021-02682 CVE-2021-3749 · GHSA-cph5-m8f7-6c5x
Inefficient Regular Expression Complexity in axios/axios
Priority MEDIUM 44
axios is vulnerable to Inefficient Regular Expression Complexity
TI-2021-12358 CVE-2021-32690 · GHSA-56hp-xqp3-w2jf
Repository credentials passed to alternate domain
Priority MEDIUM 40
Helm is a tool for managing Charts (packages of pre-configured Kubernetes resources).
TI-2021-12355 CVE-2021-32687
Integer overflow issue with intsets in Redis
Priority MEDIUM 40
Redis is an open source, in-memory database that persists on disk.
TI-2021-12296 CVE-2021-32627
Integer overflow issue with Streams in Redis
Priority MEDIUM 40
Redis is an open source, in-memory database that persists on disk.
TI-2021-17941 CVE-2021-41099
Integer overflow issue with strings in Redis
Priority LOW 39
Redis is an open source, in-memory database that persists on disk.
TI-2021-12998 CVE-2021-33623 · GHSA-7p7h-4mm5-852v
The trim-newlines package before 3.0.1 and 4.x before 4.0.1 for Node.js has an issue…
Priority LOW 38
The trim-newlines package before 3.0.1 and 4.x before 4.0.1 for Node.js has an issue related to regular expression denial-of-service (ReDoS) for the .end() method.
TI-2021-12340 CVE-2021-32672
Vulnerability in Lua Debugger in Redis
Priority LOW 27
Redis is an open source, in-memory database that persists on disk.