In Long Range Zip (aka lrzip) 0.631, there is a use-after-free in the ucompthread function (stream.c). Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Memory Corruption
Denial Of Service
Use After Free
Long Range Zip
Debian Linux
NVD
GitHub
CVSS 3.1
5.5
EPSS
1.3%
The Neon app 1.6.14 iOS does not verify X.509 certificates from SSL servers, which allows remote attackers to spoof servers and obtain sensitive information via a crafted certificate. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.
Information Disclosure
Apple
Neon
NVD
GitHub
CVSS 3.0
5.9
EPSS
0.9%