PT-2021-6878

Name of the Vulnerable Software and Affected Versions CKEditor 4 versions prior to 4.16 Description The issue is related to the inclusion of features from an untrusted controlled area in the Advanced Tab for Dialogs plugin of the CKEditor WYSIWYG editor. Exploitation of this issue could allow a...

PT-2021-6879

Name of the Vulnerable Software and Affected Versions CKEditor 4 versions prior to 4.16 Description The issue is related to the Autolink plugin in CKEditor 4, where it is possible to execute a ReDoS-type attack by persuading a victim to paste crafted URL-like text into the editor and then press...

CVE-2021-26272: Inclusion of Functionality from Untrusted Control Sphere

It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted URL-like text into the editor, and then press Enter or Space in the Autolink plugin...

PT-2021-28026

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-use-after-free READ 4 crash type. The crash state includes functions such as DatasetAdd, DetectDatasetBufferMatch, and...

OSV-2021-229 Heap-buffer-overflow in cram_xpack_decode_init

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29827 Crash type: Heap-buffer-overflow WRITE 4 Crash state: cramxpackdecodeinit cramdecoderinit cramdecodecompressionheader...

OSV-2021-223 Heap-buffer-overflow in fdilate_1_56

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29819 Crash type: Heap-buffer-overflow READ 4 Crash state: fdilate156 fmorphopgenlow1 pixFMorphopGen1...

OSV-2021-221 Heap-buffer-overflow in blosc_d

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29816 Crash type: Heap-buffer-overflow READ 4 Crash state: bloscd bloscgetitem bloscgetitem...

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel update (USN-4689-4)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4689-4 advisory. USN-4689-3 fixed vulnerabilities in the NVIDIA server graphics drivers. This update provides the corresponding updates for the NVIDIA Linux...

[SECURITY] Fedora 32 Update: python-cairosvg-2.4.2-4.fc32

CairoSVG is a SVG 1.1 to PNG, PDF, PS and SVG converter which can also be u sed as a Python library...

Remote code execution

An insecure unserialize vulnerability was discovered in ThinkAdmin versions 4.x through 6.x in app/admin/controller/api/Update.php and app/wechat/controller/api/Push.php, which may lead to arbitrary remote code execution...

OSV-2017-22 Heap-buffer-overflow in opj_tcd_mct_decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3331 Crash type: Heap-buffer-overflow READ 4 Crash state: opjtcdmctdecode opjtcddecodetile opjj2kdecodetile...

OSV-2018-170 Heap-use-after-free in yr_re_ast_split_at_chaining_point

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11752 Crash type: Heap-use-after-free READ 4 Crash state: yrreastsplitatchainingpoint yrparserreducestringdeclaration yarayyparse...

OSV-2018-162 Heap-buffer-overflow in BEInt<unsigned int, 4>::operator unsigned int

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10948 Crash type: Heap-buffer-overflow READ 1 Crash state: BEInt::operator unsigned int OT::OffsetTo , OT::IntTypeunsigned i AAT::KerxSubTableFormat1::drivercontextt::drivercontextt...

OSV-2018-149 Heap-buffer-overflow in BEInt<unsigned int, 4>::operator unsigned int

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11033 Crash type: Heap-buffer-overflow READ 1 Crash state: BEInt::operator unsigned int AAT::KerxSubTableFormat2::sanitize hbsanitizecontextt::returnt AAT::KerxTable::dispatch...

OSV-2017-5 Heap-buffer-overflow in opj_dwt_interleave_partial_v

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3115 Crash type: Heap-buffer-overflow READ 4 Crash state: opjdwtinterleavepartialv opjdwtdecodepartialtile opjtcddwtdecode...

PT-2021-27464

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ. The crash state involves several functions, including BEInt::operator int, hb kern machine t::kern,...

PT-2021-27455

Name of the Vulnerable Software and Affected Versions: rawspeed affected versions not specified Description: The issue is related to a crash type known as Use-after-poison WRITE 2. It occurs in the rawspeed::LJpegDecompressor::decodeN function, which is part of the...

PT-2021-27640

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, as indicated by the crash type. The crash state involves several function calls, including...

PT-2021-27469

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap buffer overflow read issue is identified, associated with a crash type. The crash state involves the BEInt::operator unsigned int and...

PT-2021-27480

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by an unknown read. The crash occurs in the BEInt::operator int function, specifically when calling...