389 matches found
CVE-2021-22471
A component of the HarmonyOS has a NULL Pointer Dereference vulnerability. Local attackers may exploit this vulnerability to cause nearby process crash...
CVE-2021-22465
A component of the HarmonyOS has a Heap-based Buffer Overflow vulnerability. Local attackers may exploit this vulnerability to cause Kernel System unavailable...
CVE-2021-22460
A component of the HarmonyOS has a Insufficient Verification of Data Authenticity vulnerability. Local attackers may exploit this vulnerability to bypass the control mechanism...
CVE-2021-40483
Microsoft SharePoint Server Spoofing Vulnerability...
CVE-2021-40484
Microsoft SharePoint Server Spoofing Vulnerability...
CLSA-2021-1632261963 Fix of CVE: CVE-2021-33909
ELS-130: netfilter: xtables: add missing tables zeroing - CLKRN-800: CVE-2021-33909: seqfile: disallow extremely large seq buffer allocation...
The vulnerability of the Library component of the Java SE software platform and the Oracle GraalVM Enterprise Edition virtual machine allows attackers to modify data.
The vulnerability of the Library component of the Java SE software platform and the Oracle GraalVM Enterprise Edition virtual machine exists due to insufficient testing of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to modify, add, or delete...
Security Bulletin: Multiple vulnerabilities may affect IBM® SDK, Java™ Technology Edition
Summary Java SE issues disclosed in the Oracle July 2021 Critical Patch Update, minus CVE-2021-2341. CVE-2021-2341 will be covered in an additional bulletin. Vulnerability Details CVEID: CVE-2021-2388 DESCRIPTION: An unspecified vulnerability in Java SE related to the VM component could allow an...
CVE-2021-22417
A component of the HarmonyOS has a Data Processing Errors vulnerability. Local attackers may exploit this vulnerability to cause Kernel Memory Leakage...
Remote Code Execution (RCE)
Oracle Java SE is vulnerable to remote code execution. A flaw was found in the way the Library component of OpenJDK handled JAR files containing multiple MANIFEST.MF files. Such JAR files could cause signature verification process to return an incorrect result, possibly allowing tampering with...
[ASA-202107-53] jdk11-openjdk: multiple issues
Arch Linux Security Advisory ASA-202107-53 ========================================== Severity: High Date : 2021-07-21 CVE-ID : CVE-2021-2341 CVE-2021-2369 CVE-2021-2388 Package : jdk11-openjdk Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-2189 Summary ======= The...
CVE-2021-34449
Win32k Elevation of Privilege Vulnerability...
CVE-2021-34514
Windows Kernel Elevation of Privilege Vulnerability...
CVE-2021-34504
Windows Address Book Remote Code Execution Vulnerability...
CVE-2021-34468
Microsoft SharePoint Server Remote Code Execution Vulnerability...
CVE-2021-25416
Assuming EL1 is compromised, an improper address validation in RKP prior to SMR JUN-2021 Release 1 allows local attackers to create executable kernel page outside code area...
USN-4978-1 firefox vulnerabilities
Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, re-enable camera devices without an additional permission prompt, spoof the browser UI, or execute...
CVE-2021-28440
Windows Installer Elevation of Privilege Vulnerability...
The vulnerability of the libqpdf.a component of the command-line utility for converting PDF documents, QPDF, allows a attacker to cause a service failure.
The vulnerability of the libqpdf.a component of the command-line utility for converting PDF documents, QPDF, is related to the infinite execution of a loop. Exploiting this vulnerability could allow an attacker to cause service interruptions...