CVE-2021-22406

There is an Uncaught Exception vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause the app to exit unexpectedly...

The vulnerability of the gaussianblur component in the Ffmpeg library, which is related to writing beyond buffer boundaries, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the gaussianblur component in the Ffmpeg library is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, and even cause service failures...

CVE-2021-42538

The affected product is vulnerable to a parameter injection via passphrase, which enables the attacker to supply uncontrolled input...

CVE-2021-42536

The affected product is vulnerable to a disclosure of peer username and password by allowing all users access to read global variables...

CVE-2021-42542

The affected product is vulnerable to directory traversal due to mishandling of provided backup folder structure...

Improper sanitization of target names

Impact The tough library, prior to 0.12.0, does not properly sanitize target names when caching a repository, or when saving specific targets to an output directory. When targets are cached or saved, files could be overwritten with arbitrary content anywhere on the system. AWS would like to thank...

UBUNTU-CVE-2021-3872

vim is vulnerable to Heap-based Buffer Overflow...

PT-2021-7886

Name of the Vulnerable Software and Affected Versions Java SE versions 8u301, 11.0.12, 17 Oracle GraalVM Enterprise Edition versions 20.3.3 and 21.2.0 Description The issue is related to a vulnerability in the Libraries component of Oracle Java SE and Oracle GraalVM Enterprise Edition, which can ...

UBUNTU-CVE-2021-3875

vim is vulnerable to Heap-based Buffer Overflow...

CVE-2021-41354

Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...

CVE-2021-41352

SCOM Information Disclosure Vulnerability...

CVE-2021-41334

Windows Desktop Bridge Elevation of Privilege Vulnerability...

CVE-2021-41330

Microsoft Windows Media Foundation Remote Code Execution Vulnerability...

CVE-2021-40480

Microsoft Office Visio Remote Code Execution Vulnerability...

CVE-2021-26427

Microsoft Exchange Server Remote Code Execution Vulnerability...

CVE-2021-40460

Windows Remote Procedure Call Runtime Security Feature Bypass Vulnerability...

Jenkins < 2.303.2, < 2.315 HTTP Library Vulnerability - Linux

Jenkins is prone to a vulnerability in the bundled version of commons-httpclient library. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later Th...

CVE-2021-31986

User controlled parameters related to SMTP notifications are not correctly validated. This can lead to a buffer overflow resulting in crashes and data leakage...

The vulnerability of the library used for software emulation of the Trusted Platform Module’s libtpms module involves an operation that goes beyond the buffer boundaries in memory. This allows a malicious actor to trigger a service failure.

The vulnerability of the library used for software emulation of the Trusted Platform Module’s libtpms module is related to a stack corruption error during data decryption using RSA. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge browsers allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge relates to operations performed outside of the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code through a specially created web page...