GHSA-5RWJ-J5M3-3CHJ Missing Release of Memory after Effective Lifetime in detect-character-encoding

Impact In detect-character-encoding v0.3.0 and earlier, allocated memory is not released. Patches The problem has been patched in detect-character-encoding v0.3.1. CVSS score CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/RL:O/RC:C Base Score: 7.5 High Temporal Score: 7.2 High Since...

UBUNTU-CVE-2021-36050

XMP Toolkit SDK version 2020.1 and earlier is affected by a buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file...

kea (>=0.1.0, <=0.1.3) potentially affected by CVE-2020-35885 via alpm-rs (0.1.24)

alpm-rs CARGO version 0.1.24 is affected by a known vulnerability. The following packages have a transitive dependency on alpm-rs and may be impacted: - kea =0.1.0, =0.1.3 Source cves: CVE-2020-35885 Source advisory: OSV:GHSA-QC4M-GC8R-MG8M...

UBUNTU-CVE-2021-23432

This affects all versions of package mootools. This is due to the ability to pass untrusted input to Object.merge...

Design/Logic Flaw

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to request data from internal resources that are not publicly available only by manipulating the processed input stream with a Java runtime version 14 to 8. ...

libyal libpff 资源管理错误漏洞

libyal libpff is an open source library for accessing Personal Folder File PFF and Offline Folder File OFF formats. A security vulnerability exists in the libpffitemtreecreatenode function in versions prior to libyal libpff 20180623, which could allow an attacker to cause a denial of service DOS ...

UBUNTU-CVE-2021-21837

Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that...

The vulnerability of the libxcb library in operating systems such as ALT Linux, ROSA Linux, and MSVSphere allows attackers to cause service failures.

The vulnerability of the libxcb library in ALT Linux, ROSA Linux, and MSVSphere operating systems is related to the lack of checks for the correctness of input parameters for the export function xcbgetpropertyvalueend. Exploiting this vulnerability can allow attackers to cause failures in...

GPAC 输入验证错误漏洞

GPAC Project on Advanced Content is an open source cross-platform library that implements the MPEG-4 system standard and provides tools for media playback, vector graphics, and 3D rendering.The MPEG-4 decoding feature of GPAC Project on Advanced Content library 1.0.1 suffers from an integer...

CVE-2021-28121

Virtual Robots.txt before 1.10 does not block HTML tags in the robots.txt field...

CVE-2021-36927

Windows Digital TV Tuner device registration application Elevation of Privilege Vulnerability...

CVE-2021-34530

Windows Graphics Component Remote Code Execution Vulnerability...

CVE-2021-26429

Azure Sphere Elevation of Privilege Vulnerability...

CVE-2021-26424

Windows TCP/IP Remote Code Execution Vulnerability...

CVE-2021-34471

Microsoft Windows Defender Elevation of Privilege Vulnerability...

CVE-2021-26430

Azure Sphere Denial of Service Vulnerability...

CVE-2021-26428

Azure Sphere Information Disclosure Vulnerability...

The vulnerability of the library for EXIF-file grammar analysis in libexif, related to the use of memory after its release, allows a perpetrator to access confidential data and also causes service failure.

The vulnerability of the library for EXIF file parsing in libexif is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to gain access to confidential data, as well as cause service failures...

PT-2021-8089 · Intel +2 · Tianocore Edk2 +2

Name of the Vulnerable Software and Affected Versions: Tianocore edk2 affected versions not specified Description: The issue concerns a BIOS bug and a library vulnerability. The BIOS bug affects the Platform authorization value, leaving it empty, which can lead to the permanent bricking of the TP...

PT-2021-23373 · Dcmtk +5 · Dcmtk +5

Name of the Vulnerable Software and Affected Versions: DCMTK versions 3.6.6 and earlier Description: The issue is related to a memory leak in the DCMTK library, which occurs when the program allocates heap memory for parsing data but fails to free it in case of parsing errors. This can be exploit...