8717 matches found
Memory corruption
In Dekart Private Disk 2.15, invalid use of the Type3 user buffer for IOCTL codes using METHODNEITHER results in arbitrary memory dereferencing...
CVE-2021-27203
In Dekart Private Disk 2.15, invalid use of the Type3 user buffer for IOCTL codes using METHODNEITHER results in arbitrary memory dereferencing...
CVE-2021-27203
CVE-2021-27203 affects Dekart Private Disk 2.15, where invalid use of the Type3 user buffer for IOCTL codes using METHOD_NEITHER leads to arbitrary memory dereferencing. The description notes a memory corruption type vulnerability with local impact (attack vector likely local). The Connected docu...
Unpatched Android App with 1B Downloads Allows RCE
An Android app that’s been downloaded more than 1 billion times is riddled with flaws that can let attackers hijack app features or overwrite existing files to execute malicious code, or launch man-in-the-disk MiTD attacks on people’s devices, researchers discovered. The flaws exist in an app...
Unpatched ShareIT Android App Flaw Could Let Hackers Inject Malware
Multiple unpatched vulnerabilities have been discovered in SHAREit, a popular app with over one billion downloads, that could be abused to leak a user's sensitive data, execute arbitrary code, and possibly lead to remote code execution. The findings come from cybersecurity firm Trend Micro's...
CVE-2021-27203: NULL Pointer Dereference
In Dekart Private Disk 2.15, invalid use of the Type3 user buffer for IOCTL codes using METHODNEITHER results in arbitrary memory dereferencing...
Dekart Private Disk Code Issue Vulnerability
Dekart Private Disk is an automated mail processing software from Dekart USA. provides the best AES 256-bit data encryption software for Windows. A code issue vulnerability exists in Dekart Private Disk that originates when a networked system or product performs an operation in memory without...
BIG-IP APM 资源管理错误漏洞
F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A resource management error vulnerability exists in the BIG-IP APM, which arises from mismanagement of system resources e.g.,...
Openvswitch Resource Management Error Vulnerability
A resource management error vulnerability exists in Openvswitch that arises from mismanagement of system resources e.g., memory, disk space, files, etc. by a network system or product...
CVE-2021-21137
Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to obtain potentially sensitive information from disk via a crafted HTML page...
UBUNTU-CVE-2021-21137
Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to obtain potentially sensitive information from disk via a crafted HTML page...
CVE-2021-21137
Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to obtain potentially sensitive information from disk via a crafted HTML page...
CVE-2021-21137
Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to obtain potentially sensitive information from disk via a crafted HTML page...
CVE-2021-21137
Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to obtain potentially sensitive information from disk via a crafted HTML page...
DEBIAN-CVE-2021-21290
Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In Netty before version 4.1.59.Final there is a vulnerability on Unix-like systems involving an insecure temp file. When netty's...
Netty Security Vulnerabilities
Netty is a non-blocking I/O client-server framework from the Netty community that is primarily used to develop Java web applications such as protocol servers and clients. A security vulnerability exists in Netty versions prior to 4.1.59, which stems from the fact that local information can be mad...
FreeDiskSpace OS Command Injection Vulnerability
FreeDiskSpace is a codebase by the individual developer of FreeDiskSpace that can display disk space based on Javascript. A security vulnerability exists in all versions of FreeDiskSpace, which stems from an improper neutralization of a parameter in freediskspace.js at line 71...
CentOS 8 : edk2 (CESA-2019:0968)
The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2019:0968 advisory. - edk2: Buffer Overflow in BlockIo service for RAM disk CVE-2018-12180 Note that Nessus has not tested for this issue but has instead relied only on the...
Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.6.13 bug fix and security update
Red Hat OpenShift Container Platform release 4.6.13 is now available with updates to packages and images that fix several bugs. This release also includes a security update for Red Hat OpenShift Container Platform 4.6. Red Hat Product Security has rated this update as having a security impact of...
CVE-2021-20196
A NULL pointer dereference flaw was found in the floppy disk emulator of QEMU. This issue occurs while processing read/write ioport commands if the selected floppy drive is not initialized with a block device. This flaw allows a privileged guest user to crash the QEMU process on the host, resulti...