CVE-2021-23414: Improper Neutralization of Input During Web Page Generation

This affects the package video.js before 7.14.3. The src attribute of track tag allows to bypass HTML escaping and execute arbitrary code...

PT-2021-15503 · Video.Js +1 · Video.Js +1

Name of the Vulnerable Software and Affected Versions: video.js versions prior to 7.14.3 Description: The issue allows bypassing HTML escaping and executing arbitrary code through the src attribute of the track tag. Recommendations: For versions prior to 7.14.3, update to version 7.14.3 or later ...

Design/Logic Flaw

A Divide-by-zero vulnerability exists in JasPer Image Coding Toolkit 2.0 in jasper/src/libjasper/jpc/jpcenc.c...

CVE-2021-27845

A Divide-by-zero vulnerability exists in JasPer Image Coding Toolkit 2.0 in jasper/src/libjasper/jpc/jpcenc.c...

WS-2021-0342

OpenSC in versions 0.12.2-rc1 to 0.22.0-rc2 is vulnerable to Stack-buffer-overflow WRITE and related to src/libopensc/card-piv.c...

CVE-2021-27845: Divide By Zero

A Divide-by-zero vulnerability exists in JasPer Image Coding Toolkit 2.0 in jasper/src/libjasper/jpc/jpcenc.c...

CVE-2012-2666

golang/go in 1.0.2 fixes all.bash on shared machines. dotest in src/pkg/debug/gosym/pclntabtest.go creates a temporary file with predicable name and executes it as shell script...

CVE-2012-2666: Insecure Temporary File

golang/go in 1.0.2 fixes all.bash on shared machines. dotest in src/pkg/debug/gosym/pclntabtest.go creates a temporary file with predicable name and executes it as shell script...

PT-2021-25394

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.128 Description: A memory leak issue exists in the ip mc add1 src function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v5.4.128,...

PT-2021-29534

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v4.9 through v5.12.12 Description A memory leak issue exists in the ip mc add1 src function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v4.9 through...

PT-2021-29453

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.9 through 5.10.45 Description A memory leak issue exists in the ip mc add1 src function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 4.9 through 5.10.45,...

PT-2021-29388

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.128 Description A memory leak issue exists in the ip mc add1 src function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.4.128,...

PT-2021-25459

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 4.9 through 5.10.45 Description: A memory leak issue exists in the ip mc add1 src function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions 4.9 through...

PT-2021-25540

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v4.9 through v5.12.12 Description: A memory leak issue exists in the ip mc add1 src function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions v4.9 through...

PT-2024-11246 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak vulnerability has been resolved in the Linux kernel. The issue is related to the ip mc add1 src function, where an unreferenced object is created, leading to a memory lea...

CVE-2021-3588

CVE-2021-3588 affects BlueZ (BlueZ Bluetooth stack). The issue is in cli_feat_read_cb() in src/gatt-database.c where bounds checks on offset are missing before indexing an array, potentially exposing memory contents. Multiple advisories indicate downstream risk and mitigation via upgrading BlueZ ...

CVE-2021-3588

The clifeatreadcb function in src/gatt-database.c does not perform bounds checks on the 'offset' variable before using it as an index into an array for reading...

CVE-2021-3588: Access of Memory Location After End of Buffer

The clifeatreadcb function in src/gatt-database.c does not perform bounds checks on the 'offset' variable before using it as an index into an array for reading...

PT-2021-4915

Name of the Vulnerable Software and Affected Versions BlueZ affected versions not specified Description The issue is related to the cli feat read cb function in the src/gatt-database.c file of the Bluetooth protocol stack for Linux. It does not perform bounds checks on the offset variable before...

CVE-2021-31855: Cleartext Storage of Sensitive Information

KDE Messagelib through 5.17.0 reveals cleartext of encrypted messages in some situations. Deleting an attachment of a decrypted encrypted message stored on a remote server e.g., an IMAP server causes KMail to upload the decrypted content of the message to the remote server. With a crafted message...