Lucene search
+L

41 matches found

CVE
CVE
•added 2023/06/28 12:00 a.m.•101 views

CVE-2023-21201

CVE-2023-21201 involves the Android Bluetooth SDP server: in on_create_record_event of btif_sdp_server.cc there is an out-of-bounds read due to a missing null check. This can lead to a remote denial of service without extra privileges and without user interaction. The issue is tied to Android-13 ...

7.5CVSS7.3AI score0.00472EPSS
SaveExploits0References1Affected Software1
SUSE CVE
SUSE CVE
•added 2023/02/15 3:46 a.m.•6 views

SUSE CVE-2021-21201

Use after free in permissions in Google Chrome prior to 90.0.4430.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

9.6CVSS8.5AI score0.017EPSS
SaveExploits0References4
Circl
Circl
•added 2022/08/06 2:21 a.m.•14 views

CVE-2022-21201

creationtimestamp| type| source ---|---|--- 2022-08-06 02:21:07+00:00| seen| https://t.me/cibsecurity/47667...

8.8CVSS8.1AI score0.00891EPSS
SaveExploits1References1
CVE
CVE
•added 2022/08/05 9:11 p.m.•86 views

CVE-2022-21201

CVE-2022-21201 : Talos reports a stack-based buffer overflow in TCL LinkHub Mesh Wi‑Fi MS1G_00_01.00_14 within the ucloud_add_node_new handling of Protobuffer input. The vulnerability occurs when the serialNumberMd5 field from a parsed ManualNodeInfo is copied into a fixed 0x80-byte buffer using ...

8.8CVSS8.8AI score0.00891EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
•added 2022/08/05 9:11 p.m.•9 views

CVE-2022-21201

A stack-based buffer overflow vulnerability exists in the confers ucloudaddnodenew functionality of TCL LinkHub Mesh Wi-Fi MS1G0001.0014. A specially-crafted network packet can lead to stack-based buffer overflow. An attacker can send a malicious packet to trigger this vulnerability...

8.8CVSS8.8AI score0.00891EPSS
SaveExploits1References1
OSV
OSV
•added 2021/11/26 5:15 p.m.•16 views

CVE-2020-7881

The vulnerability function is enabled when the streamer service related to the AfreecaTV communicated through web socket using 21201 port. A stack-based buffer overflow leading to remote code execution was discovered in strcpy operate by "FanTicket" field. It is because of stored data without...

8.8CVSS6.6AI score0.0144EPSS
SaveExploits0References1
NVD
NVD
•added 2021/11/26 5:15 p.m.•22 views

CVE-2020-7881

The vulnerability function is enabled when the streamer service related to the AfreecaTV communicated through web socket using 21201 port. A stack-based buffer overflow leading to remote code execution was discovered in strcpy operate by "FanTicket" field. It is because of stored data without...

8.8CVSS0.0144EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2021/11/26 4:29 p.m.•29 views

CVE-2020-7881 AfreecaTV streamer service stack-based buffer overflow

The vulnerability function is enabled when the streamer service related to the AfreecaTV communicated through web socket using 21201 port. A stack-based buffer overflow leading to remote code execution was discovered in strcpy operate by "FanTicket" field. It is because of stored data without...

7.5CVSS9.2AI score0.0144EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2021/05/13 12:00 a.m.•77 views

Fedora: Security Advisory for chromium (FEDORA-2021-c3754414e7)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.6CVSS7.1AI score0.84173EPSS
SaveExploits7References4
OpenVAS
OpenVAS
•added 2021/05/01 12:00 a.m.•47 views

openSUSE: Security Advisory for Chromium (openSUSE-SU-2021:0629-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.6CVSS7.1AI score0.84173EPSS
SaveExploits1References4
OpenVAS
OpenVAS
•added 2021/04/30 12:00 a.m.•103 views

Debian: Security Advisory (DSA-4906-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.6CVSS7AI score0.84173EPSS
SaveExploits2References6
ArchLinux
ArchLinux
•added 2021/04/29 12:00 a.m.•276 views

[ASA-202104-2] vivaldi: multiple issues

Arch Linux Security Advisory ASA-202104-2 ========================================= Severity: High Date : 2021-04-29 CVE-ID : CVE-2021-21201 CVE-2021-21202 CVE-2021-21203 CVE-2021-21207 CVE-2021-21209 CVE-2021-21210 CVE-2021-21213 CVE-2021-21214 CVE-2021-21215 CVE-2021-21216 CVE-2021-21217...

9.6CVSS8.1AI score0.34466EPSS
SaveExploits0References57
ArchLinux
ArchLinux
•added 2021/04/29 12:00 a.m.•297 views

[ASA-202104-5] opera: multiple issues

Arch Linux Security Advisory ASA-202104-5 ========================================= Severity: High Date : 2021-04-29 CVE-ID : CVE-2021-21201 CVE-2021-21202 CVE-2021-21203 CVE-2021-21207 CVE-2021-21209 CVE-2021-21210 CVE-2021-21213 CVE-2021-21214 CVE-2021-21215 CVE-2021-21216 CVE-2021-21217...

9.6CVSS8.7AI score0.84173EPSS
SaveExploits1References43
NVD
NVD
•added 2021/04/26 5:15 p.m.•16 views

CVE-2021-21201

Use after free in permissions in Google Chrome prior to 90.0.4430.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

9.6CVSS0.017EPSS
SaveExploits0References7
OSV
OSV
•added 2021/04/26 5:15 p.m.•12 views

CVE-2021-21201

Use after free in permissions in Google Chrome prior to 90.0.4430.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

9.6CVSS9.4AI score
SaveExploits0References7
Debian CVE
Debian CVE
•added 2021/04/26 4:25 p.m.•28 views

CVE-2021-21201

Use after free in permissions in Google Chrome prior to 90.0.4430.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

9.6CVSS8.5AI score0.017EPSS
SaveExploits0
CVE
CVE
•added 2021/04/26 4:25 p.m.•245 views

CVE-2021-21201

CVE-2021-21201: Use-after-free in permissions of Google Chrome prior to 90.0.4430.72 can allow a remote attacker with renderer access to escape the sandbox via a crafted HTML page. Connected advisories (e.g., ASA-202104-2/ASA-202104-5) reiterate sandbox-escape and related issues across Chromium c...

9.6CVSS8.5AI score0.017EPSS
SaveExploits0References7Affected Software1
Microsoft CVE
Microsoft CVE
•added 2021/04/15 6:40 p.m.•65 views

Chromium: CVE-2021-21201 Use after free in permissions

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

9.6CVSS7.7AI score0.017EPSS
SaveExploits0
Google Chrome Security Advisories
Google Chrome Security Advisories
•added 2021/04/14 12:00 a.m.•86 views

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 90 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 90.0.4430.72 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming...

9.6CVSS6.6AI score0.34466EPSS
SaveExploits1Affected Software1
CVE
CVE
•added 2020/04/28 3:07 p.m.•65 views

CVE-2018-21201

CVE-2018-21201 concerns several NETGEAR devices affected by a stack-based buffer overflow susceptible to exploitation by an authenticated user. Affected models and versions include D6100 prior to 1.0.0.57, R6100 prior to 1.0.1.20, R7800 prior to 1.0.2.40, R9000 prior to 1.0.2.52, WNDR3700v4 prior...

6.8CVSS6.7AI score0.00595EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder