Security Vulnerabilities - CVEs Published In September 2021
fig2dev 3.2.7b contains a stack buffer overflow in the bezier_spline function in genepic.c.
CVSS Score
5.5
EPSS Score
0.002
Published
2021-09-16
fig2dev 3.2.7b contains a segmentation fault in the read_objects function in read.c.
CVSS Score
5.5
EPSS Score
0.001
Published
2021-09-16
fig2dev 3.2.7b contains a global buffer overflow in the conv_pattern_index function in gencgm.c.
CVSS Score
5.5
EPSS Score
0.001
Published
2021-09-16
fig2dev 3.2.7b contains a global buffer overflow in the setfigfont function in genepic.c.
CVSS Score
5.5
EPSS Score
0.001
Published
2021-09-16
SQL Injection vulnerability exists in Wuzhi CMS 4.1.0 via the keywords parameter under the coreframe/app/promote/admin/index.php file.
CVSS Score
9.8
EPSS Score
0.003
Published
2021-09-16
SQL Injection vulnerability exists in Wuzhi CMS 4.1.0 via the keywords iparameter under the /coreframe/app/order/admin/card.php file.
CVSS Score
9.8
EPSS Score
0.003
Published
2021-09-16
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 under very specific conditions, could allow a local user to keep running a procedure that could cause the system to run out of memory.and cause a denial of service. IBM X-Force ID: 202267.
CVSS Score
5.1
EPSS Score
0.001
Published
2021-09-16
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) could disclose sensitive information when using ADMIN_CMD with LOAD or BACKUP. IBM X-Force ID: 204470.
CVSS Score
5.9
EPSS Score
0.003
Published
2021-09-16
IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0 and Liberty 17.0.0.3 through 21.0.0.9 could allow a remote user to enumerate usernames due to a difference of responses from valid and invalid login attempts. IBM X-Force ID: 205202.
CVSS Score
3.7
EPSS Score
0.001
Published
2021-09-16
IBM Db2 11.2 and 11.5 contains an information disclosure vulnerability, exposing remote storage credentials to privileged users under specific conditions. IBM X-Fporce ID: 201780.
CVSS Score
4.4
EPSS Score
0.004
Published
2021-09-16