Enterprise Operations Monitor

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-43396 Nov 04, 20:15 HIGH POC PATCH This Week

In iconvdata/iso-2022-jp-3.c in the GNU C Library (aka glibc) 2.34, remote attackers can force iconv() to emit a spurious '\0' character via crafted ISO-2022-JP-3 data that is accompanied by an. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Information Disclosure Oracle Glibc Communications Cloud Native Core Security Edge Protection Proxy Communications Cloud Native Core Unified Data Repository +5

NVD VulDB

CVSS 3.1

7.5

EPSS

3.1%

CVE-2021-38604 Aug 12, 16:15 HIGH POC PATCH This Week

In librt in the GNU C Library (aka glibc) through 2.34, sysdeps/unix/sysv/linux/mq_notify.c mishandles certain NOTIFY_REMOVED data, leading to a NULL pointer dereference. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Denial Of Service Null Pointer Dereference Oracle Fedora Glibc +8

NVD VulDB

CVSS 3.1

7.5

EPSS

3.0%

CVE-2021-43396

EPSS 3% CVSS 7.5

HIGH POC PATCH This Week

Information Disclosure Oracle Glibc +7

NVD VulDB

CVE-2021-38604

EPSS 3% CVSS 7.5

HIGH POC PATCH This Week

Denial Of Service Null Pointer Dereference Oracle +10

NVD VulDB