CVE-2021-22354

There is an Information Disclosure Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause out-of-bounds read...

CVE-2021-22323

There is an Integer Overflow Vulnerability in Huawei Smartphone. Successful exploitation of these vulnerabilities may escalate the permission to that of the root user...

Samsung libsdffextractor library input validation error vulnerability (CNVD-2025-02731)

The Samsung libsdffextractor library is a component for Samsung Samsung mobile devices. The Samsung libsdffextractor library suffers from an input validation error vulnerability that stems from faulty input validation logic in sdfffdparsechunkFVER in the libsapeextractor library, which can be...

The vulnerability of the libwebp library regarding the encoding and decoding of WebP images, which involves reading beyond the buffer in memory, allows attackers to access confidential information.

The vulnerability of the libwebp library for encoding and decoding WebP images is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to gain access to confidential information by creating a specially crafted file...

Vulnerability of the DAOpenFile or DAOpenFileReadOnly function implementation in the PDF handling library. The Quick PDF Library allows unauthorized access to protected information or causes service failures.

The vulnerability of the DAOpenFile or DAOpenFileReadOnly functions in the PDF handling library of the Quick PDF Library lies in the issue of the operation going beyond the buffer in memory when processing xref entries. Exploiting this vulnerability could allow an attacker to gain unauthorized...

The vulnerability of the GJSON library in Aurora Application Software lies in the insufficient validation of input data, which allows a perpetrator to trigger a service failure.

The vulnerability of the GJSON library used in Avora software applications is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to trigger a service failure by sending a specially crafted request containing JSON data...

The vulnerability of the ksys2.dll library in the KOMPAS-3D 3D modeling system, which is related to the execution of operations outside the buffer in memory, allows a hacker to cause a service failure.

The vulnerability of the ksys2.dll library in the KOMPAS-3D three-dimensional modeling system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially crafted CDW format file...

The vulnerability of the Aurora Center’s application software library lies in the uncontrolled modification of object prototypes’ attributes, allowing attackers to execute “prototype pollution” attacks.

The vulnerability of the Aurora Application Library is related to uncontrolled changes to object prototypes’ attributes. Exploiting this vulnerability allows a remote attacker to execute an “infection of the prototype” attack...

CVE-2021-31967

VP9 Video Extensions Remote Code Execution Vulnerability...

CVE-2021-33741

Microsoft Edge Chromium-based Elevation of Privilege Vulnerability...

CVE-2021-31978

Microsoft Defender Denial of Service Vulnerability...

CVE-2021-31956

Windows NTFS Elevation of Privilege Vulnerability...

@apim/auth0-lock-redux (>=1.0.0 <=1.0.2), @brudi-toolbox/id (>=1.4.5-next.1 <=2.0.4-next.2) +36 more potentially affected by CVE-2021-32641 via auth0-lock (>=10.14.0 <=11.28.1)

auth0-lock NPM version =10.14.0, =1.0.0, =1.4.5-next.1, =2.2.0, =1.0.0, =0.1.0, =0.3.0, =0.0.1, =1.0.0, =0.1.0, =0.5.3, =0.1.13, =1.0.0, =0.0.1, =0.0.5 - auth0-react-sample =1.0.0 and more Source cves: CVE-2021-32641 Source advisory: OSV:GHSA-JR3J-WHM4-9WWM...

libtpms 缓冲区错误漏洞

libtpms is an application. Library that provides software emulation of trusted platform modules TPM 1.2 and TPM 2.0. libtpms has a security vulnerability that stems from a stack corruption bug that could lead to SIGBUS bad memory access and termination of swtpm. No detailed vulnerability details...

The vulnerability of the libxml2 library, related to insufficient validation of input data, allows attackers to trigger a denial-of-service condition.

The vulnerability of the libxml2 library is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure by sending specially crafted input data to the application...

at.porscheinformatik.zanata:common (>=4.7.0 <=4.7.8), at.porscheinformatik.zanata:stub-server (>=4.7.0 <=4.7.8) +1348 more potentially affected by CVE-2020-10688 via org.jboss.resteasy:resteasy-jaxrs (>=3.0-beta-1 <=3.11.0.Final)

org.jboss.resteasy:resteasy-jaxrs MAVEN version =3.0-beta-1, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =1.0.0, =1.1.9, =1.1.10 and more Source cves: CVE-2020-10688 Source advisory: SNYK:JAVA-ORGJBOSSRESTEASY-8706731...

UBUNTU-CVE-2021-30470

A flaw was found in PoDoFo 0.9.7. An uncontrolled recursive call among PdfTokenizer::ReadArray, PdfTokenizer::GetNextVariant and PdfTokenizer::ReadDataType functions can lead to a stack overflow...

CVE-2021-25944

Prototype pollution vulnerability in 'deep-defaults' versions 1.0.0 through 1.0.5 allows attacker to cause a denial of service and may lead to remote code execution...

CVE-2020-25409

Projectsworlds College Management System Php 1.0 is vulnerable to SQL injection issues over multiple parameters...

abmarl (>=0.1.1 <=0.1.3), agrothon (>=1.1.5 <=1.3.2) +92 more potentially affected by CVE-2021-29600 via tensorflow (>=2.4.0 <=2.4.1)

tensorflow PYPI version =2.4.0, =0.1.1, =1.1.5, =2.1.0, =0.0.1, =0.0.6, =0.1.0, =1.4.0, =1.2.2, =20210221.0.0, =0.7.2, =0.0.0, =0.0.0.post0 and more Source cves: CVE-2021-29600 Source advisory: OSV:GHSA-J8QH-3XRQ-C825...