3331 matches found
CVE-2021-1644
HEVC Video Extensions Remote Code Execution Vulnerability...
CVE-2021-1649
Active Template Library Elevation of Privilege Vulnerability...
PYSEC-2021-422
Bot Framework SDK Information Disclosure Vulnerability...
CVE-2021-1650 Windows Runtime C++ Template Library Elevation of Privilege Vulnerability
...
PT-2021-7613 · Cgal +1 · Cgal +1
Name of the Vulnerable Software and Affected Versions: CGAL versions prior to 5.1.1 Description: The issue is related to unverified array indexing in the SNC io parser::read sface function of the CGAL library, specifically in the Nef S2/SNC io parser.h component. This can be exploited by a remote...
CVE-2018-11008
An Incorrect Access Control issue was discovered in K7Computing K7AntiVirus Premium 15.01.00.53...
USN-4688-1: JasPer vulnerabilities
It was discovered that Jasper incorrectly certain files. An attacker could possibly use this issue to cause a crash. CVE-2018-18873 It was discovered that Jasper incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service. CVE-2018-19542 It was...
PT-2021-11584 · X/Text +7 · X/Text +7
Name of the Vulnerable Software and Affected Versions: x/text versions 1.15.4 Description: An "index out of range" panic occurs in language.ParseAcceptLanguage while parsing the -u- extension. The x/text/language package is supposed to be able to parse an HTTP Accept-Language header...
Design/Logic Flaw
URI.js is a javascript URL mutation library npm package urijs. In URI.js before version 1.19.4, the hostname can be spoofed by using a backslash \ character followed by an at @ character. If the hostname is used in security decisions, the decision may be incorrect. Depending on library usage and...
Rust futures-util crate security vulnerability
Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in futures-util crate before 0.3.2 for Rust, which stems from the fact that FuturesUnordered may result in data corruption due to improper synchronization handling...
Prototype Pollution
Overview gsap is a GSAP is a JavaScript library for building high-performance animations that work in every major browser. Animate CSS, SVG, canvas, React, Vue, WebGL, colors, strings, motion paths, generic objects...anything JavaScript can touch! The ScrollTrigger plug Affected versions of this...
03-three_basic (=1.0.0), 3d-configurator-test (>=0.1.0 <=0.4.0) +2279 more potentially affected by CVE-2020-28478 via gsap (>=3.0.4 <=3.5.1)
gsap NPM version =3.0.4, =0.1.0, =0.0.2, =0.1.1, =1.0.0, =0.0.1, =8.0.1-para-beta.0, =13.351.0, =13.351.3, =7.10.0, =7.10.0, =0.0.2, =0.3.9 and more Source cves: CVE-2020-28478 Source advisory: SNYK:JS-GSAP-1054614...
GHSA-R92X-F52R-X54G regular expression denial of service (ReDoS)
date-and-time is an npm package for manipulating date and time. In date-and-time before version 0.14.2, there a regular expression involved in parsing which can be exploited to to cause a denial of service. This is fixed in version 0.14.2...
CVE-2020-20299
WeiPHP 5.0 does not properly restrict access to pages, related to using POST...
CVE-2020-35133
irfanView 4.56 contains an error processing parsing files of type .pcx. Which leads to out-of-bounds writing at iview32+0xdb60...
ALPINE-CVE-2020-29362
An issue was discovered in p11-kit 0.21.1 through 0.23.21. A heap-based buffer over-read has been discovered in the RPC protocol used by thep11-kit server/remote commands and the client library. When the remote entity supplies a byte array through a serialized PKCS11 function call, the receiving...
CVE-2020-17128
Microsoft Excel Remote Code Execution Vulnerability...
CVE-2020-17129
Microsoft Excel Remote Code Execution Vulnerability...