CVE-2021-44447

A vulnerability has been identified in JT Utilities All versions V13.0.3.0, JTTK All versions V11.0.3.0. JTTK library in affected products contains a use-after-free vulnerability that could be triggered while parsing specially crafted JT files. An attacker could leverage this vulnerability to...

CVE-2021-25519

An improper access control vulnerability in CPLC prior to SMR Dec-2021 Release 1 allows local attackers to access CPLC information without permission...

CVE-2020-36135

AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component ratehist.c...

USN-5157-1 postorius vulnerability

It was discovered that Postorius mishandled specially crafted input. An attacker could use this vulnerability that obtain sensitive information...

CVE-2021-44033

In Ionic Identity Vault before 5.0.5, the protection mechanism for invalid unlock attempts can be bypassed...

USN-5148-1 hivex vulnerability

It was discovered that hivex incorrectly handled certain input. An attacker could use this vulnerability to cause a crash or obtain sensitive information...

CLSA-2021-1634922551 Fixed CVE-2021-25217 in dhcp

CVE-2021-25217: avoid buffer overrun...

BELL-CVE-2021-35559 CVE-2021-35559 does not affect BellSoft software

Bulletin has no description...

Code injection in Kubernetes Java Client

Loading specially-crafted yaml with the Kubernetes Java Client library can lead to code execution...

CVE-2021-25469

A possible stack-based buffer overflow vulnerability in Widevine trustlet prior to SMR Oct-2021 Release 1 allows arbitrary code execution...

BELL-CVE-2016-20012 CVE-2016-20012 does not affect BellSoft software

Bulletin has no description...

CVE-2021-38646

Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability...

Manage Open Source Software Library Risks

Learn about the growing open source library trend, the pros and cons of using open source code, and how to mitigate associated risks...

CVE-2021-34511

Windows Installer Elevation of Privilege Vulnerability...

CVE-2021-34383

Bootloader contains a vulnerability in NVIDIA MB2 where a potential heap overflow might lead to denial of service or escalation of privileges...

CVE-2021-31662

RIOT-OS 2021.01 before commit 07f1254d8537497552e7dce80364aaead9266bbe contains a buffer overflow which could allow attackers to obtain sensitive information...

CVE-2021-32940

An out-of-bounds read issue exists in the DWG file-recovering procedure in the Drawings SDK All versions prior to 2022.5 resulting from the lack of proper validation of user-supplied data. This can result in a read past the end of an allocated buffer and allow attackers to cause a denial-of-servi...

GHSA-4Q97-FH3F-J294 Prototype Pollution in tiny-conf

All versions of package tiny-conf up to and including version 1.1.0 are vulnerable to Prototype Pollution via the set function...

GHSA-6FW4-HR69-G3RV Prototype Pollution in property-expr

The package property-expr before 2.0.3 are vulnerable to Prototype Pollution via the setter function...

cumulative-distribution-function 输入验证错误漏洞

cumulative-distribution-function is a software application. Computes a statistical cumulative distribution function from an array of x-valued data. A security vulnerability exists in cumulative-distribution-function versions prior to 2.0.0, which stems from the fact that an application using this...