2021-03-12 - CVE Archive

CVE-2021-20231 Mar 12, 19:15 CRITICAL POC PATCH Act Now

A flaw was found in gnutls. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Buffer Overflow Denial Of Service Use After Free Memory Corruption Red Hat +8

NVD

CVSS 3.1

9.8

EPSS

3.8%

CVE-2021-20232 Mar 12, 19:15 CRITICAL PATCH Act Now

A flaw was found in gnutls. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

Buffer Overflow Denial Of Service Use After Free Memory Corruption Red Hat +5

NVD

CVSS 3.1

9.8

EPSS

3.4%

CVE-2021-28305 Mar 12, 09:15 CRITICAL PATCH Act Now

An issue was discovered in the diesel crate before 1.4.6 for Rust. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Use After Free Memory Corruption Diesel

NVD

CVSS 3.1

9.8

EPSS

1.3%

CVE-2021-27647 Mar 12, 07:15 CRITICAL Act Now

Out-of-bounds Read vulnerability in iscsi_snapshot_comm_core in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to execute arbitrary code via crafted web requests. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure Synology Diskstation Manager

NVD

CVSS 3.1

9.8

EPSS

3.1%

CVE-2021-27646 Mar 12, 07:15 CRITICAL Act Now

Use After Free vulnerability in iscsi_snapshot_comm_core in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to execute arbitrary code via crafted web requests. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Denial Of Service Use After Free Memory Corruption Synology +1

NVD

CVSS 3.1

9.8

EPSS

3.8%

CVE-2021-28308 Mar 12, 09:15 CRITICAL PATCH Act Now

An issue was discovered in the fltk crate before 0.15.3 for Rust. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Fltk Fltk Project

NVD

CVSS 3.1

9.1

EPSS

1.3%