PT-2021-24319

Name of the Vulnerable Software and Affected Versions: Wasm3 version 0.5.0 Description: The issue is related to an out-of-bounds write in the CompileBlock function, which is also called from CompileElseBlock and Compile If. Recommendations: For Wasm3 version 0.5.0, at the moment, there is no...

PT-2021-21859

Name of the Vulnerable Software and Affected Versions: Grandstream HT801 versions prior to 1.0.29 Description: The issue is related to multiple buffer overflows in the limited configuration shell /sbin/gs config that allow remote authenticated users to execute arbitrary code as root via a crafted...

Similar Posts < 3.1.6 - Admin+ Arbitrary PHP Code Execution

The plugin allow high privilege users to execute arbitrary PHP code in an hardened environment ie with DISALLOWFILEEDIT, DISALLOWFILEMODS and DISALLOWUNFILTEREDHTML set to true via the 'widgetrrmsimilarpostscondition' widget setting of the plugin. Vendor was notified in July 2021, the issue was...

PYSEC-2021-327

Apprise is an open source library which allows you to send a notification to almost all of the most popular notification services available. In affected versions users who use Apprise granting them access to the IFTTT plugin which just comes out of the box are subject to a denial of service attac...

PT-2021-27673

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN WRITE, with details on the crash state including CompileBlock, CompileElseBlock, and Compile If. No...

Exploit for CVE-2021-36934

CVE-2021-36934 Fix for...

Unbreakable Enterprise kernel-container security update

4.14.35-2047.504.2.el7 - md/raid1: properly indicate failure when ending a failed write request Paul Clements Orabug: 32887159 - video: hypervfb: Add ratelimit on error message Michael Kelley Orabug: 32856879 - Drivers: hv: vmbus: Initialize unloadevent statically Andrea Parri Microsoft Orabug:...

GSD-2021-1000380 memory: renesas-rpc-if: fix possible NULL pointer dereference of resource

memory: renesas-rpc-if: fix possible NULL pointer dereference of resource This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.37 by commit...

UVI-2021-1000281 memory: renesas-rpc-if: fix possible NULL pointer dereference of resource

memory: renesas-rpc-if: fix possible NULL pointer dereference of resource This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

GSD-2021-1000281 memory: renesas-rpc-if: fix possible NULL pointer dereference of resource

memory: renesas-rpc-if: fix possible NULL pointer dereference of resource This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

UVI-2021-1000380 memory: renesas-rpc-if: fix possible NULL pointer dereference of resource

memory: renesas-rpc-if: fix possible NULL pointer dereference of resource This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.37 by commit...

PT-2021-28746

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.4 Description The issue concerns a possible NULL pointer dereference of resource in the renesas-rpc-if memory component. This problem was introduced in version v5.9 and is fixed in Linux Kernel version...

PT-2021-28845

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.37 Description The issue concerns a possible NULL pointer dereference of resource in the renesas-rpc-if memory component. This problem was introduced in version v5.9 and is fixed in Linux Kernel version...

libyang: invalid memory access when if-feature statement is used inside a list key node

An invalid memory access flaw was discovered in libyang in the function resolvefeaturevalue when an if-feature statement is used inside a list key node and the feature used is not defined. Applications that use libyang to process untrusted input YANG files may crash...

libyang: invalid memory access in resolve_feature_value() when a if-feature is used inside a bit

An invalid memory access flaw occurs in libyang in the function resolvefeaturevalue when an if-feature statement is used inside a bit. Applications that use libyang to process untrusted input YANG files may crash...

Identical if-else branches

Handle paulius.eth Vulnerability details Impact identical if-else branches redundant code: ifiPOOLSPOOLS.isAssetiSYNTHsynth.TOKEN uint adjustedReserve = iROUTERROUTER.getUSDVAmountreserveVADER + reserveUSDV; // Aggregrate reserves return iUTILSUTILS.calcShareweight, totalWeight, adjustedReserve /...

wasm3:fuzzer: Crash in AcquireCodePageWithCapacity

Project: https://github.com/wasm3/wasm3.git Detailed Report: https://oss-fuzz.com/testcase?key=6238214638665728 Project: wasm3 Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzermsanwasm3 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000002988 Crash State:...

ALPINE-CVE-2021-26720

avahi-daemon-check-dns.sh in the Debian avahi package through 0.8-4 is executed as root via /etc/network/if-up.d/avahi-daemon, and allows a local attacker to cause a denial of service or create arbitrary empty files via a symlink attack on files under /run/avahi-daemon. NOTE: this only affects th...

CVE-2021-26720

avahi-daemon-check-dns.sh in the Debian avahi package through 0.8-4 is executed as root via /etc/network/if-up.d/avahi-daemon, and allows a local attacker to cause a denial of service or create arbitrary empty files via a symlink attack on files under /run/avahi-daemon. NOTE: this only affects th...

PT-2021-7394 · Debian +2 · Avahi +2

Name of the Vulnerable Software and Affected Versions: avahi-daemon-check-dns.sh in the Debian avahi package through 0.8-4 Description: The issue is related to the execution of avahi-daemon-check-dns.sh as root via /etc/network/if-up.d/avahi-daemon, allowing a local attacker to cause a denial of...