8948 matches found
CVE-2021-43082
Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in the stats-over-http plugin of Apache Traffic Server allows an attacker to overwrite memory. This issue affects Apache Traffic Server 9.1.0...
Cisco Firepower Threat Defense CLI Command Execution
The vulnerability of the command-line interface CLI of Cisco Firepower Threat Defense software-related microprogramming systems lies in insufficient checking of arguments passed in commands. Exploiting this vulnerability allows an attacker to execute arbitrary commands with root privileges...
SUSE: Security Advisory (SUSE-SU-2020:2879-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mediatek audio buffer overflow vulnerability
Mediatek audio is an audio component of a chip from China's MediaTek Mediatek. A security vulnerability exists in the Mediatek audio DSP that stems from a possible out-of-bounds write in the audio DSP due to incorrect boundary checking. An attacker could exploit the vulnerability to cause a local...
Nextcloud Deck Access Control Error Vulnerability (CNVD-2021-102877)
Nextcloud is an open source set of self-hosted file synchronization and sharing communication applications platform from Germany-based Nextcloud. Nextcloud Deck is vulnerable to an access control error in versions prior to 1.2.9, 1.4.5 and 1.5.3. The vulnerability stems from a lack of permission...
NewStart CGSL CORE 5.05 / MAIN 5.05 : ovmf Multiple Vulnerabilities (NS-SA-2021-0180)
The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has ovmf packages installed that are affected by multiple vulnerabilities: - Buffer overflow in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege and/or denial of service vi...
Mediatek audio buffer error vulnerability
Mediatek audio is an audio component of a chip from China's MediaTek Mediatek. A security vulnerability exists in the Mediatek audio DSP that stems from a possible out-of-bounds write in the audio DSP due to incorrect boundary checking. An attacker could exploit the vulnerability to cause a local...
MediaTek ASF extractor buffer error vulnerability
MediaTek asf extractor is a chipset from China's MediaTek Mediatek. MediaTek asf extractor suffers from a buffer error vulnerability that stems from incorrect boundary checking, where an out-of-bounds read may occur. This could result in the disclosure of local information without additional...
Mediatek audio buffer error vulnerability
Mediatek audio is an audio component of a chip from China's MediaTek Mediatek. A security vulnerability exists in the Mediatek audio DSP that stems from a possible out-of-bounds write in the audio DSP due to incorrect boundary checking. An attacker could exploit the vulnerability to cause a local...
About the security content of macOS Monterey 12.0.1
About the security content of macOS Monterey 12.0.1 This document describes the security content of macOS Monterey 12.0.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...
WordPress cross-site scripting vulnerabilities
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress plugin The Formidable Form Builder prio...
MediaTek flv extractor buffer error vulnerability
MediaTek flv extractor is a chipset from Mediatek, a Chinese company. MediaTek flv extractor suffers from a buffer error vulnerability that stems from a lack of bounds checking, which could result in an out-of-bounds read. This could lead to the disclosure of local information without additional...
CVE-2021-42739
The firewire subsystem in the Linux kernel through 5.14.13 has a buffer overflow related to drivers/media/firewire/firedtv-avc.c and drivers/media/firewire/firedtv-ci.c, because avccapmt mishandles bounds checking...
CVE-2021-42739
The firewire subsystem in the Linux kernel through 5.14.13 has a buffer overflow related to drivers/media/firewire/firedtv-avc.c and drivers/media/firewire/firedtv-ci.c, because avccapmt mishandles bounds checking...
CVE-2021-42739
The firewire subsystem in the Linux kernel through 5.14.13 has a buffer overflow related to drivers/media/firewire/firedtv-avc.c and drivers/media/firewire/firedtv-ci.c, because avccapmt mishandles bounds checking...
CVE-2021-42739
The firewire subsystem in the Linux kernel through 5.14.13 has a buffer overflow related to drivers/media/firewire/firedtv-avc.c and drivers/media/firewire/firedtv-ci.c, because avccapmt mishandles bounds checking...
GSD-2021-1001710 ext4: add error checking to ext4_ext_replay_set_iblocks()
ext4: add error checking to ext4extreplaysetiblocks This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.10 by commit...
UVI-2021-1001710 ext4: add error checking to ext4_ext_replay_set_iblocks()
ext4: add error checking to ext4extreplaysetiblocks This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.10 by commit...
UVI-2021-1001638 ext4: add error checking to ext4_ext_replay_set_iblocks()
ext4: add error checking to ext4extreplaysetiblocks This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.71 by commit...
GSD-2021-1001638 ext4: add error checking to ext4_ext_replay_set_iblocks()
ext4: add error checking to ext4extreplaysetiblocks This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.71 by commit...