SUSE: Security Advisory (SUSE-SU-2021:2006-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

1-click-bom (>=1.3.0 <=1.3.1), 25uikit (>=1.2.7 <=1.2.10) +2742 more potentially affected by CVE-2021-32014 via xlsx (>=0.10.3 <=0.16.9)

xlsx NPM version =0.10.3, =1.3.0, =1.2.7, =1.0.6, =0.0.1, =0.0.1, =0.0.3, =0.10.22, =0.0.2, =1.9.2, =1.0.1, =1.0.0, =1.0.1 - @aarongray.org/xlsx-workbook =0.0.1 - @abcum/ember-sheetjs =0.1.0 and more Source cves: CVE-2021-32014 Source advisory: SNYK:JS-XLSX-1311139...

CVE-2021-32948

An out-of-bounds write issue exists in the DWG file-reading procedure in the Drawings SDK All versions prior to 2022.4 resulting from the lack of proper validation of user-supplied data. This can result in a write past the end of an allocated buffer and allow attackers to cause a denial-of-servic...

CVE-2021-32938

Drawings SDK All versions prior to 2022.4 are vulnerable to an out-of-bounds read due to parsing of DWG files resulting from the lack of proper validation of user-supplied data. This can result in a read past the end of an allocated buffer and allows attackers to cause a denial-of service conditi...

PT-2021-19983 · Unknown · Drawings Sdk

Name of the Vulnerable Software and Affected Versions: Drawings SDK versions prior to 2022.4 Description: The issue is due to the parsing of DWG files resulting from the lack of proper validation of user-supplied data, which can cause an out-of-bounds read. This allows attackers to cause a...

PT-2021-19994 · Unknown · Drawings Sdk

Name of the Vulnerable Software and Affected Versions: Drawings SDK versions prior to 2022.4 Description: An out-of-bounds read issue exists within the parsing of DXF files in the Drawings SDK, resulting from the lack of proper validation of user-supplied data. This can result in a read past the...

[SECURITY] Fedora 34 Update: vmaf-2.1.1-1.fc34

VMAF is a perceptual video quality assessment algorithm developed by Netflix. VMAF Development Kit VDK is a software package that contains the VMAF algorithm implementation, as well as a set of tools that allows a user to train and test a custom VMAF model. For an overview, read this tech blog...

Accusoft ImageGear Memory Corruption Vulnerability

Accusoft ImageGear is a software development kit SDK for image processing from Accusoft, U.S. A memory corruption vulnerability exists in the PNG pngpaletteprocess function in Accusoft ImageGear version 19.9. An attacker can exploit the vulnerability to cause a heap buffer overflow via specially...

CVE-2021-27408

The affected product is vulnerable to an out-of-bounds read, which can cause information leakage leading to arbitrary code execution if chained to the out-of-bounds write vulnerability on the Welch Allyn medical device management tools Welch Allyn Service Tool: versions prior to v1.10, Welch Ally...

DEBIAN-CVE-2021-28211

A heap overflow in LzmaUefiDecompressGetInfo function in EDK II...

CVE-2021-25417

Improper authorization in SDP SDK prior to SMR JUN-2021 Release 1 allows access to internal storage...

CVE-2021-0056

Insecure inherited permissions for the IntelR NUC M15 Laptop Kit Driver Pack software before updated version 1.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-0058

Incorrect default permissions in the IntelR NUC M15 Laptop Kit Driver Pack software before updated version 1.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-0058

Incorrect default permissions in the IntelR NUC M15 Laptop Kit Driver Pack software before updated version 1.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-0057

Uncontrolled search path in the IntelR NUC M15 Laptop Kit Driver Pack software before updated version 1.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-0058

The CVE-2021-0058 issue affects the Intel NUC M15 Laptop Kit Driver Pack prior to version 1.1. The root cause is incorrect default permissions in the driver software, which may allow an authenticated local user to escalate privileges. The advisory (Intel SA-00507) and related Red Hat/NVD records ...

CVE-2021-0057

CVE-2021-0057 is an issue in the Intel® NUC M15 Laptop Kit Driver Pack software (before 1.1) that allows an authenticated local user to potentially escalate privileges due to an uncontrolled search path. Red Hat/NVD/NVDA sources corroborate the same description. The Intel advisory (intel-sa-00507...

CVE-2021-0057

Uncontrolled search path in the IntelR NUC M15 Laptop Kit Driver Pack software before updated version 1.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-0056

CVE-2021-0056 affects Intel® NUC M15 Laptop Kit Driver Pack prior to version 1.1. The issue is insecure inherited permissions in the Driver Pack software that may allow an authenticated user to escalate privileges via local access. Intel and RH Red Hat advisories confirm the affected product and ...

Intel NUC Kit 权限许可和访问控制问题漏洞

The Intel NUC Kit is a small desktop computer from Intel Corporation USA. The Intel NUC Kit is vulnerable to a privilege-granting and access-control issue, which arises from an insecure inheritance of privileges that could allow an authenticated user to potentially enable privilege escalation via...