SI
Product
Sinec Infrastructure Network Services
67
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 9High 34Medium 20Low 4
Watch
Add Sinec Infrastructure Network Services to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-22922 | 6.5 | Aug 5 | When curl is instructed to download content using the metalink feature, thecontents is verified against a hash provided in the metalink XML file.The metalink XML file points out… Affected: before 1.0.1.1 |
| CVE-2021-25214 | 6.5 | Apr 29 | In BIND 9.8.5 -> 9.8.8, 9.9.3 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.9.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND 9 Supported Preview Edition, as well as… Affected: before 1.0.1.1 |
| CVE-2020-8287 | 6.5 | Jan 6 | Node.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 allow two copies of a header field in an HTTP request (for example, two Transfer-Encoding header fields) Affected: before 1.0.1.1 |
| CVE-2021-22947 | 5.9 | Sep 29 | When curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade to TLS security, the server can respond and send back multiple… Affected: before 1.0.1.1 |
| CVE-2020-1971 | 5.9 | Dec 8 | The X.509 GeneralName type is a generic type for representing different types of names Affected: before 1.0.1.1 |
| CVE-2019-19242 | 5.9 | Nov 25 | SQLite 3.30.1 mishandles pExpr->y.pTab, as demonstrated by the TK_COLUMN case in sqlite3ExprCodeTarget in expr.c Affected: before 1.0.1.1 |
| CVE-2021-3672 | 5.6 | Nov 23 | A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS (Domain Name Servers) can lead to output of wrong hostnames which might… Affected: before 1.0.1.1 |
| CVE-2020-15358 | 5.5 | Jun 27 | In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant… Affected: before 1.0.1.1 |
| CVE-2020-13631 | 5.5 | May 27 | SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c Affected: before 1.0.1.1 |
| CVE-2020-13632 | 5.5 | May 27 | ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query Affected: before 1.0.1.1 |
| CVE-2019-19645 | 5.5 | Dec 9 | alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements Affected: before 1.0.1.1 |
| CVE-2021-25219 | 5.3 | Oct 27 | In BIND 9.3.0 -> 9.11.35, 9.12.0 -> 9.16.21, and versions 9.9.3-S1 -> 9.11.35-S1 and 9.16.8-S1 -> 9.16.21-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0… Affected: before 1.0.1.1 |
| CVE-2021-22939 | 5.3 | Aug 16 | If the Node.js https API was used incorrectly and "undefined" was in passed for the "rejectUnauthorized" parameter, no error was returned and connections to servers with an… Affected: before 1.0.1.1 |
| CVE-2021-22923 | 5.3 | Aug 5 | When curl is instructed to get content using the metalink feature, and a user name and password are used to download the metalink XML file, those same credentials are then… Affected: before 1.0.1.1 |
| CVE-2021-22925 | 5.3 | Aug 5 | curl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl Affected: before 1.0.1.1 |
| CVE-2021-22918 | 5.3 | Jul 12 | Node.js before 16.4.1, 14.17.2, 12.22.2 is vulnerable to an out-of-bounds read when uv__idna_toascii() is used to convert strings to ASCII Affected: before 1.0.1.1 |
| CVE-2021-22897 | 5.3 | Jun 11 | curl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a mistake in the code for CURLOPT_SSL_CIPHER_LIST when libcurl is built to use the… Affected: before 1.0.1.1 |
| CVE-2021-22876 | 5.3 | Apr 1 | curl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information to an Unauthorized Actor" by leaking credentials in the HTTP Referer: header Affected: before 1.0.1.1 |
| CVE-2021-23362 | 5.3 | Mar 23 | The package hosted-git-info before 3.0.8 are vulnerable to Regular Expression Denial of Service (ReDoS) via regular expression shortcutMatch in the fromUrl function in index.js Affected: before 1.0.1.1 |
| CVE-2019-19924 | 5.3 | Dec 24 | SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window.c Affected: before 1.0.1.1 |
Showing 20