579 matches found
USN-5241-1 qtsvg-opensource-src vulnerabilities
It was discovered that QtSvg incorrectly handled certain malformed SVG images. If a user or automated system were tricked into opening a specially crafted image file, a remote attacker could use this issue to cause QtSvg to crash, resulting in a denial of service, or possibly execute arbitrary co...
BELL-CVE-2022-21282 CVE-2022-21282 does not affect BellSoft software
Bulletin has no description...
GHSA-74FJ-2J2H-C42Q Exposure of sensitive information in follow-redirects
follow-redirects is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor...
UBUNTU-CVE-2021-23803
This affects the package latte/latte before 2.10.6. There is a way to bypass allowFunctions that will affect the security of the application. When the template is set to allow/disallow the use of certain functions, adding control characters x00-x08 after the function will bypass these restriction...
CVE-2021-44447
A vulnerability has been identified in JT Utilities All versions V13.0.3.0, JTTK All versions V11.0.3.0. JTTK library in affected products contains a use-after-free vulnerability that could be triggered while parsing specially crafted JT files. An attacker could leverage this vulnerability to...
CVE-2021-25519
An improper access control vulnerability in CPLC prior to SMR Dec-2021 Release 1 allows local attackers to access CPLC information without permission...
CVE-2020-36135
AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component ratehist.c...
USN-5157-1 postorius vulnerability
It was discovered that Postorius mishandled specially crafted input. An attacker could use this vulnerability that obtain sensitive information...
CVE-2021-44033
In Ionic Identity Vault before 5.0.5, the protection mechanism for invalid unlock attempts can be bypassed...
USN-5148-1 hivex vulnerability
It was discovered that hivex incorrectly handled certain input. An attacker could use this vulnerability to cause a crash or obtain sensitive information...
CLSA-2021-1634922551 Fixed CVE-2021-25217 in dhcp
CVE-2021-25217: avoid buffer overrun...
BELL-CVE-2021-35559 CVE-2021-35559 does not affect BellSoft software
Bulletin has no description...
Code injection in Kubernetes Java Client
Loading specially-crafted yaml with the Kubernetes Java Client library can lead to code execution...
CVE-2021-25469
A possible stack-based buffer overflow vulnerability in Widevine trustlet prior to SMR Oct-2021 Release 1 allows arbitrary code execution...
BELL-CVE-2016-20012 CVE-2016-20012 does not affect BellSoft software
Bulletin has no description...
CVE-2021-38646
Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability...
Manage Open Source Software Library Risks
Learn about the growing open source library trend, the pros and cons of using open source code, and how to mitigate associated risks...
7ghost (>=4.11.0 <=4.11.46), @0x18b2ee/parse-server (>=3.10.1 <=3.11.0) +3400 more potentially affected by CVE-2021-23406 via degenerator (>=1.0.4 <=2.2.0)
degenerator NPM version =1.0.4, =4.11.0, =3.10.1, =0.1.0, =0.1.0, =0.0.1, =1.6.1, =0.0.1, =1.4.1, =0.2.2, =0.2.2, =0.0.1, =0.1.2 - @adaptcharm/email =1.1.1 and more Source cves: CVE-2021-23406 Source advisory: OSV:GHSA-9J49-MFVP-VMHM...