Skip to main content
CVE-2021-45911 Dec 28, 01:15 HIGH POC This Week

An issue was discovered in gif2apng 1.9. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Debian Debian Linux Gif2Apng +1
NVD
CVSS 3.1
7.8
EPSS
0.9%
CVE-2021-45910 Dec 28, 01:15 HIGH POC This Week

An issue was discovered in gif2apng 1.9. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Debian Debian Linux Gif2Apng +1
NVD
CVSS 3.1
7.8
EPSS
0.9%
CVE-2021-45909 Dec 28, 01:15 HIGH POC This Week

An issue was discovered in gif2apng 1.9. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Debian Debian Linux Gif2Apng +1
NVD
CVSS 3.1
7.8
EPSS
0.9%
CVE-2021-45908 Dec 28, 01:15 HIGH POC This Week

An issue was discovered in gif2apng 1.9. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Gif2Apng Gif2Apng Project
NVD
CVSS 3.1
7.8
EPSS
0.7%
CVE-2021-45907 Dec 28, 01:15 HIGH POC This Week

An issue was discovered in gif2apng 1.9. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Gif2Apng Gif2Apng Project
NVD
CVSS 3.1
7.8
EPSS
0.7%
CVE-2021-20873 Dec 28, 02:15 HIGH This Week

Yappli is an application development platform which provides the function to access a requested URL using Custom URL Scheme. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Google Yappli
NVD
CVSS 3.1
8.1
EPSS
0.8%
CVE-2021-35031 Dec 28, 11:15 HIGH PATCH This Week

A vulnerability in the TFTP client of Zyxel GS1900 series firmware, XGS1210 series firmware, and XGS1250 series firmware, which could allow an authenticated LAN user to execute arbitrary OS commands. Rated high severity (CVSS 8.0), this vulnerability is low attack complexity. This OS Command Injection vulnerability could allow attackers to execute arbitrary operating system commands on the host.

Command Injection Zyxel Gs1900 10Hp Firmware Gs1900 8 Firmware Gs1900 24 Firmware +11
NVD
CVSS 3.1
8.0
EPSS
0.5%
CVE-2021-43556 Dec 28, 19:15 HIGH This Week

FATEK WinProladder Versions 3.30_24518 and prior are vulnerable to a stack-based buffer overflow while processing project files, which may allow an attacker to execute arbitrary code. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Stack Overflow Winproladder Fatek
NVD
CVSS 3.1
7.8
EPSS
2.1%
CVE-2021-43554 Dec 28, 19:15 HIGH This Week

FATEK WinProladder Versions 3.30_24518 and prior are vulnerable to an out-of-bounds write while processing project files, which may allow an attacker to execute arbitrary code. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption Winproladder Fatek
NVD
CVSS 3.1
7.8
EPSS
1.9%
CVE-2021-35032 Dec 28, 11:15 HIGH PATCH This Week

A vulnerability in the 'libsal.so' of the Zyxel GS1900 series firmware version 2.60 could allow an authenticated local user to execute arbitrary OS commands via a crafted function call. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This OS Command Injection vulnerability could allow attackers to execute arbitrary operating system commands on the host.

Command Injection Zyxel Gs1900 10Hp Firmware Gs1900 8 Firmware Gs1900 24 Firmware +9
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2021-42583 Dec 28, 19:15 HIGH PATCH This Week

A Broken or Risky Cryptographic Algorithm exists in Max Mazurov Maddy before 0.5.2, which is an unnecessary risk that may result in the exposure of sensitive information. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Maddy
NVD GitHub
CVSS 3.1
7.5
EPSS
0.7%

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy