Skip to content
Noroxi

CESNET records

20 published records for vendor cesnet.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
100%
Median publish → KEV
No record has entered KEV

Records by year

  1. 19
  2. 20
  3. 21
  4. 23

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

20 records
  • CVE-2019-19334
    40Plan

    In all versions of libyang before 1.0-r5, a stack-based buffer overflow was discovered in the way libyang parses YANG files with a leaf of t

    CriticalCVSS 9.8No exploitEPSS 4%

    cesnet · libyangDec 6, 2019

  • CVE-2019-19333
    40Plan

    In all versions of libyang before 1.0-r5, a stack-based buffer overflow was discovered in the way libyang parses YANG files with a leaf of t

    CriticalCVSS 9.8No exploitEPSS 4%

    cesnet · libyangDec 6, 2019

  • CVE-2019-15537
    39Monitor

    The proxystatistics module before 3.1.0 for SimpleSAMLphp allows SQL Injection in lib/Auth/Process/DatabaseCommand.php.

    CriticalCVSS 9.8No exploitEPSS 2%

    cesnet · proxystatisticsAug 23, 2019

  • CVE-2019-20393
    36Monitor

    A double-free is present in libyang before v1.0-r1 in the function yyparse() when an empty description is used.

    HighCVSS 8.8No exploitEPSS 3%

    cesnet · libyangJan 22, 2020

  • CVE-2019-20394
    36Monitor

    A double-free is present in libyang before v1.0-r3 in the function yyparse() when a type statement in used in a notification statement.

    HighCVSS 8.8No exploitEPSS 3%

    cesnet · libyangJan 22, 2020

  • CVE-2019-20397
    36Monitor

    A double-free is present in libyang before v1.0-r1 in the function yyparse() when an organization field is not terminated.

    HighCVSS 8.8No exploitEPSS 3%

    cesnet · libyangJan 22, 2020

  • CVE-2021-28903
    31Monitor

    A stack overflow in libyang <= v1.0.225 can cause a denial of service through function lyxml_parse_mem().

    HighCVSS 7.5No exploitEPSS 2%

    cesnet · libyangMay 20, 2021

  • CVE-2021-28906
    30Monitor

    In function read_yin_leaf() in libyang <= v1.0.225, it doesn't check whether the value of retval->ext[r] is NULL.

    HighCVSS 7.5No exploitEPSS 2%

    cesnet · libyangMay 20, 2021

  • CVE-2021-28902
    30Monitor

    In function read_yin_container() in libyang <= v1.0.225, it doesn't check whether the value of retval->ext[r] is NULL.

    HighCVSS 7.5No exploitEPSS 2%

    cesnet · libyangMay 20, 2021

  • CVE-2021-28905
    30Monitor

    In function lys_node_free() in libyang <= v1.0.225, it asserts that the value of node->module can't be NULL.

    HighCVSS 7.5No exploitEPSS 1%

    cesnet · libyangMay 20, 2021

  • CVE-2021-28904
    30Monitor

    In function ext_get_plugin() in libyang <= v1.0.225, it doesn't check whether the value of revision is NULL.

    HighCVSS 7.5No exploitEPSS 1%

    cesnet · libyangMay 20, 2021

  • CVE-2020-5281
    30Monitor

    LDAP connector injection in Perun

    HighCVSS 7.5No exploitEPSS 1%

    cesnet · perunMar 25, 2020

  • CVE-2023-26917
    30Monitor

    libyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the function lysp_stmt_validate_value at lys_parse

    HighCVSS 7.5No exploitEPSS 1%

    cesnet · libyangApr 11, 2023

  • CVE-2019-20396
    27Monitor

    A segmentation fault is present in yyparse in libyang before v1.0-r1 due to a malformed pattern statement value during lys_parse_path parsin

    MediumCVSS 6.5No exploitEPSS 2%

    cesnet · libyangJan 22, 2020

  • CVE-2019-20392
    27Monitor

    An invalid memory access flaw is present in libyang before v1.0-r1 in the function resolve_feature_value() when an if-feature statement is u

    MediumCVSS 6.5No exploitEPSS 2%

    cesnet · libyangJan 22, 2020

  • CVE-2019-20391
    27Monitor

    An invalid memory access flaw is present in libyang before v1.0-r3 in the function resolve_feature_value() when an if-feature statement is u

    MediumCVSS 6.5No exploitEPSS 2%

    cesnet · libyangJan 22, 2020

  • CVE-2019-20395
    27Monitor

    A stack consumption issue is present in libyang before v1.0-r1 due to the self-referential union type containing leafrefs.

    MediumCVSS 6.5No exploitEPSS 2%

    cesnet · libyangJan 22, 2020

  • CVE-2019-20398
    27Monitor

    A NULL pointer dereference is present in libyang before v1.0-r3 in the function lys_extension_instances_free() due to a copy of unresolved e

    MediumCVSS 6.5No exploitEPSS 2%

    cesnet · libyangJan 22, 2020

  • CVE-2016-15014
    22Monitor

    CESNET theme-cesnet resetpassword.php insufficiently protected credentials

    MediumCVSS 5.5No exploitEPSS 0%

    cesnet · theme-cesnetJan 7, 2023

  • CVE-2023-26916
    21Monitor

    libyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the function lys_parse_mem at lys_parse_mem.c.

    MediumCVSS 5.3No exploitEPSS 1%

    cesnet · libyangApr 3, 2023