Fisglobal
Fisglobal Gt.m: vulnerabilidades y CVE
Fisglobal Gt.m tiene 28 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 3 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE28
Últimos 12 meses0
Críticas3
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2021-44510 | Alta (7.5) | 1.7% | — | 15 abr 2022 | An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, attackers can cause a calculation of the size of calls to memset in op_fnj3 in sr_port/op_fnj3.c to result in… |
| CVE-2021-44509 | Alta (7.5) | 1.7% | — | 15 abr 2022 | An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, attackers can cause an integer underflow of the size of calls to memset in op_fnj3 in sr_port/op_fnj3.c in… |
| CVE-2021-44508 | Alta (7.5) | 1.7% | — | 15 abr 2022 | An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). A lack of NULL checks in calls to ious_open in sr_unix/ious_open.c allows attackers to crash the application by dereferencing a… |
| CVE-2021-44507 | Alta (7.5) | 1.6% | — | 15 abr 2022 | An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). A lack of parameter validation in calls to memcpy in str_tok in sr_unix/ztimeoutroutines.c allows attackers to attempt to read… |
| CVE-2021-44504 | Alta (7.5) | 1.6% | — | 15 abr 2022 | An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can cause a size variable, stored as an signed int, to equal an extremely large value, which is… |
| CVE-2021-44503 | Alta (7.5) | 1.6% | — | 15 abr 2022 | An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can cause a call to va_arg on an empty variadic parameter list, most likely causing a memory… |
| CVE-2021-44502 | Alta (7.5) | 1.7% | — | 15 abr 2022 | An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can control the size of a memset that occurs in calls to util_format in sr_unix/util_output.c. |
| CVE-2021-44501 | Alta (7.5) | 1.6% | — | 15 abr 2022 | An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can cause calls to ZRead to crash due to a NULL pointer dereference. |
| CVE-2021-44500 | Alta (7.5) | 1.7% | — | 15 abr 2022 | An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). A lack of input validation in calls to eb_div in sr_port/eb_muldiv.c allows attackers to crash the application by performing a… |
| CVE-2021-44499 | Alta (7.5) | 1.7% | — | 15 abr 2022 | An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can cause a call to $Extract to force an signed integer holding the size of a buffer to take on a… |
| CVE-2021-44498 | Alta (7.5) | 1.7% | — | 15 abr 2022 | An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, attackers can cause a type to be incorrectly initialized in the function f_incr in sr_port/f_incr.c and cause… |
| CVE-2021-44497 | Alta (7.5) | 1.5% | — | 15 abr 2022 | An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, can cause the bounds of a for loop to be miscalculated, which leads to a use after free condition a pointer… |
| CVE-2021-44496 | Crítica (9.8) | 2.1% | — | 15 abr 2022 | An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can control the size variable and buffer that is passed to a call to memcpy. An attacker can use… |
| CVE-2021-44495 | Alta (7.5) | 1.6% | — | 15 abr 2022 | An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, an attacker can cause a NULL pointer dereference after calls to ZPrint. |
| CVE-2021-44494 | Alta (7.5) | 1.6% | — | 15 abr 2022 | An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, an attacker can cause calls to ZRead to crash due to a NULL pointer dereference. |
| CVE-2021-44493 | Alta (7.5) | 1.7% | — | 15 abr 2022 | An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, an attacker can cause a call to $Extract to force an signed integer holding the size of a buffer to take… |
| CVE-2021-44492 | Alta (7.5) | 1.7% | — | 15 abr 2022 | An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, attackers can cause a type to be incorrectly initialized in the function f_incr in sr_port/f_incr.c and… |
| CVE-2021-44491 | Alta (7.5) | 1.0% | — | 15 abr 2022 | An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can cause a calculation of the size of calls to memset in op_fnj3 in sr_port/op_fnj3.c to result in an extremely large value… |
| CVE-2021-44490 | Alta (7.5) | 1.0% | — | 15 abr 2022 | An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can cause a calculation of the size of calls to memset in op_fnj3 in sr_port/op_fnj3.c to result in an extremely large value… |
| CVE-2021-44489 | Alta (7.5) | 1.0% | — | 15 abr 2022 | An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can cause an integer underflow of the size of calls to memset in op_fnj3 in sr_port/op_fnj3.c in order to cause a… |
| CVE-2021-44488 | Crítica (9.1) | 1.0% | — | 15 abr 2022 | An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can control the size and input to calls to memcpy in op_fnfnumber in sr_port/op_fnfnumber.c in order to corrupt memory or… |
| CVE-2021-44487 | Alta (7.5) | 1.2% | — | 15 abr 2022 | An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of NULL checks in calls to ious_open in sr_unix/ious_open.c allows attackers to crash the application by dereferencing a NULL pointer. |
| CVE-2021-44486 | Crítica (9.8) | 2.0% | — | 15 abr 2022 | An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can manipulate the value of a function pointer used in op_write in sr_port/op_write.c in order to gain control of the flow of… |
| CVE-2021-44485 | Alta (7.5) | 1.2% | — | 15 abr 2022 | An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of NULL checks in trip_gen in sr_port/emit_code.c allows attackers to crash the application by dereferencing a NULL pointer. |
| CVE-2021-44484 | Alta (7.5) | 1.2% | — | 15 abr 2022 | An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of NULL checks in calls to emit_trip in sr_port/emit_code.c allows attackers to crash the application by dereferencing a NULL pointer. |
| CVE-2021-44483 | Alta (7.5) | 1.2% | — | 15 abr 2022 | An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of input validation in calls to eb_div in sr_port/eb_muldiv.c allows attackers to crash the application by performing a divide by zero. |
| CVE-2021-44482 | Alta (7.5) | 1.0% | — | 15 abr 2022 | An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of input validation in calls to do_verify in sr_unix/do_verify.c allows attackers to attempt to jump to a NULL pointer by corrupting a function… |
| CVE-2021-44481 | Alta (7.5) | 1.1% | — | 15 abr 2022 | An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of parameter validation in calls to memcpy in check_and_set_timeout in sr_unix/ztimeoutroutines.c allows attackers to attempt to read from a NULL… |