CE
Vendor
CESNET
22
CVEs
0
On KEV
1
New 30D
Products
LI9.8
libyang
CESNET
19 CVEs0 on KEV1 new
PE7.5
Perun
Cesnet
1 CVEs0 on KEV0 new
PR9.8
Proxystatistics
Cesnet
1 CVEs0 on KEV0 new
TH5.5
Theme-cesnet
Cesnet
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-115327 | LI libyang CESNET | 5.3 | Oct 22 | libyang through 6.4.13 Uninitialized Pointer Free in NETCONF RPC Parser |
| CVE-2026-44673 | LI libyang CESNET | 7.5 | May 14 | libyang: lyb_read_string() integer overflow → heap buffer overflow |
| CVE-2023-26917 | LI Libyang Cesnet | 7.5 | Apr 11 | libyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the function lysp_stmt_validate_value at lys_parse_mem.c |
| CVE-2023-26916 | LI Libyang Cesnet | 5.3 | Apr 3 | libyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the function lys_parse_mem at lys_parse_mem.c |
| CVE-2016-15014 | TH Theme-cesnet Cesnet | 5.5 | Jan 7 | A vulnerability has been found in CESNET theme-cesnet up to 1.x on ownCloud and classified as problematic |
| CVE-2021-28906 | LI Libyang Cesnet | 7.5 | May 20 | In function read_yin_leaf() in libyang <= v1.0.225, it doesn't check whether the value of retval->ext[r] is NULL |
| CVE-2021-28905 | LI Libyang Cesnet | 7.5 | May 20 | In function lys_node_free() in libyang <= v1.0.225, it asserts that the value of node->module can't be NULL |
| CVE-2021-28904 | LI Libyang Cesnet | 7.5 | May 20 | In function ext_get_plugin() in libyang <= v1.0.225, it doesn't check whether the value of revision is NULL |
| CVE-2021-28903 | LI Libyang Cesnet | 7.5 | May 20 | A stack overflow in libyang <= v1.0.225 can cause a denial of service through function lyxml_parse_mem() |
| CVE-2021-28902 | LI Libyang Cesnet | 7.5 | May 20 | In function read_yin_container() in libyang <= v1.0.225, it doesn't check whether the value of retval->ext[r] is NULL |
| CVE-2020-5281 | PE Perun Cesnet | 7.5 | Mar 25 | In Perun before version 3.9.1, VO or group manager can modify configuration of the LDAP extSource to retrieve all from Perun LDAP |
| CVE-2019-20398 | LI Libyang Cesnet | 6.5 | Jan 22 | A NULL pointer dereference is present in libyang before v1.0-r3 in the function lys_extension_instances_free() due to a copy of unresolved extensions in lys_restr_dup() |
| CVE-2019-20397 | LI Libyang Cesnet | 8.8 | Jan 22 | A double-free is present in libyang before v1.0-r1 in the function yyparse() when an organization field is not terminated |
| CVE-2019-20396 | LI Libyang Cesnet | 6.5 | Jan 22 | A segmentation fault is present in yyparse in libyang before v1.0-r1 due to a malformed pattern statement value during lys_parse_path parsing |
| CVE-2019-20395 | LI Libyang Cesnet | 6.5 | Jan 22 | A stack consumption issue is present in libyang before v1.0-r1 due to the self-referential union type containing leafrefs |
| CVE-2019-20394 | LI Libyang Cesnet | 8.8 | Jan 22 | A double-free is present in libyang before v1.0-r3 in the function yyparse() when a type statement in used in a notification statement |
| CVE-2019-20393 | LI Libyang Cesnet | 8.8 | Jan 22 | A double-free is present in libyang before v1.0-r1 in the function yyparse() when an empty description is used |
| CVE-2019-20392 | LI Libyang Cesnet | 6.5 | Jan 22 | An invalid memory access flaw is present in libyang before v1.0-r1 in the function resolve_feature_value() when an if-feature statement is used inside a list key node, and the… |
| CVE-2019-20391 | LI Libyang Cesnet | 6.5 | Jan 22 | An invalid memory access flaw is present in libyang before v1.0-r3 in the function resolve_feature_value() when an if-feature statement is used inside a bit |
| CVE-2019-19334 | LI Libyang Cesnet | 9.8 | Dec 6 | In all versions of libyang before 1.0-r5, a stack-based buffer overflow was discovered in the way libyang parses YANG files with a leaf of type "identityref" |
| CVE-2019-19333 | LI Libyang Cesnet | 9.8 | Dec 6 | In all versions of libyang before 1.0-r5, a stack-based buffer overflow was discovered in the way libyang parses YANG files with a leaf of type "bits" |
| CVE-2019-15537 | PR Proxystatistics Cesnet | 9.8 | Aug 23 | The proxystatistics module before 3.1.0 for SimpleSAMLphp allows SQL Injection in lib/Auth/Process/DatabaseCommand.php |