3332 matches found
CVE-2021-31174
Microsoft Excel Information Disclosure Vulnerability...
CVE-2021-31180
Microsoft Office Graphics Remote Code Execution Vulnerability...
CVE-2021-28479
Windows CSC Service Information Disclosure Vulnerability...
CVE-2021-31177
Microsoft Office Remote Code Execution Vulnerability...
CVE-2021-31166
HTTP Protocol Stack Remote Code Execution Vulnerability...
@tucows/donejs-carousel-plugin (>=0.1.0 <=3.3.0), @tucows/tucows-carousel-plugin (>=0.1.0 <=0.2.0) +22 more potentially affected by CVE-2021-23429 via transpile (>=0.9.7 <=2.8.0)
transpile NPM version =0.9.7, =0.1.0, =0.1.0, =0.0.1, =0.0.1-0, =1.0.0, =0.5.0, =0.3.0-beta.0, =5.0.0, =0.0.1, =0.0.5 and more Source cves: CVE-2021-23429 Source advisory: SNYK:JS-TRANSPILE-1290774...
GHSA-CF2X-RQC8-GRFQ Regular expression deinal of service in express-validators
All versions of package express-validators are vulnerable to Regular Expression Denial of Service ReDoS when validating specifically-crafted invalid urls...
GHSA-H68Q-55JF-X68W Prototype pollution in chart.js
This affects the package chart.js before 2.9.4. The options parameter is not properly sanitized when it is processed. When the options are processed, the existing options or the defaults options are deeply merged with provided options. However, during this operation, the keys of the object being...
GHSA-662X-FHQG-9P8V Regular Expression Denial of Service in ua-parser-js
The package ua-parser-js before 0.7.22 are vulnerable to Regular Expression Denial of Service ReDoS via the regex for Redmi Phones and Mi Pad Tablets UA...
GHSA-J4RW-X3VG-C8R7 Prototype Pollution in node-oojs
All versions of package node-oojs up to and including version 1.4.0 are vulnerable to Prototype Pollution via the setPath function...
Google Android 输入验证错误漏洞
Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Alliance OHA. an elevation of privilege vulnerability exists in Google Android sqlite3.c. An attacker could exploit this vulnerability to escalate privileges...
Apple watchOS 竞争条件问题漏洞
Apple watchOS is an operating system for smartwatches from Apple, Inc. A vulnerability exists in watchOS due to a Competitive Condition Issue, which originates from a Competitive Condition in the libxpc library. The following products and versions are affected: watchOS: 7.0 18R382, 7.0.1 18R395,...
Jansson Out-of-Bounds Memory Read Vulnerability
Jansson is a C library for encoding, decoding and manipulating JSON data. An out-of-bounds memory read vulnerability exists in Jansson 2.13.1 and earlier versions. The vulnerability stems from a parsing error in jsonloads. No details of the vulnerability are provided at this time...
UBUNTU-CVE-2021-3496
A heap-based buffer overflow was found in jhead in version 3.06 in Get16u in exif.c when processing a crafted file...
Rust Buffer Overflow Vulnerability (CNVD-2021-31914)
Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A buffer overflow vulnerability exists in the Rust standard library prior to version 1.2.0, which stems from the binary heap being in a failure to agree state when comparing generic elements of sift up or...
AZL-6860 CVE-2021-28965 affecting package ruby for versions less than 2.7.4-1
The REXML gem before 3.2.5 in Ruby before 2.6.7, 2.7.x before 2.7.3, and 3.x before 3.0.1 does not properly address XML round-trip issues. An incorrect document can be produced after parsing and serializing...
DEBIAN-CVE-2021-31347
An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxmlparsestr performs incorrect memory handling while parsing crafted XML files writing outside a memory region created by mmap...
CVE-2021-28480
Microsoft Exchange Server Remote Code Execution Vulnerability...