Lucene search
+L

1923 matches found

OSV
OSV
•added 2021/06/11 5:15 p.m.•11 views

CVE-2021-0484

In readVector of IMediaPlayer.cpp, there is a possible read of uninitialized heap data due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9...

5.5CVSS6.2AI score0.00133EPSS
SaveExploits0References1
Prion
Prion
•added 2021/06/11 5:15 p.m.•26 views

Double free

In rwt3tprocesserror of rwt3t.cc, there is a possible double free due to uninitialized data. This could lead to remote code execution over NFC with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11...

8.3CVSS8.7AI score0.00486EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2021/06/11 5:15 p.m.•20 views

Out-of-bounds

In memory management driver, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID:...

7.2CVSS7.7AI score0.00132EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/06/11 5:15 p.m.•11 views

CVE-2021-0495

In memory management driver, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID:...

7.8CVSS7.4AI score0.00132EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/06/11 5:15 p.m.•10 views

CVE-2021-0484

In readVector of IMediaPlayer.cpp, there is a possible read of uninitialized heap data due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9...

5.5CVSS6.1AI score0.00133EPSS
SaveExploits0References2
CVE
CVE
•added 2021/06/11 4:42 p.m.•63 views

CVE-2021-0495

CVE-2021-0495 : In Android, a memory management driver has an out-of-bounds write due to uninitialized data, enabling local elevation of privilege. Exploitation is Local with no user interaction required; no explicit exploit details or patch versions are provided in the connected documents.

7.8CVSS7.7AI score0.00132EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/06/11 4:42 p.m.•33 views

CVE-2021-0473

In rwt3tprocesserror of rwt3t.cc, there is a possible double free due to uninitialized data. This could lead to remote code execution over NFC with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11...

9AI score0.00486EPSS
SaveExploits0References1
CVE
CVE
•added 2021/06/11 4:42 p.m.•159 views

CVE-2021-0473

CVE-2021-0473 affects Android via a double-free in rw_t3t_process_error in rw_t3t.cc, caused by uninitialized data, enabling remote code execution over NFC with no privileges and no user interaction required. Affected versions include Android-8.1, 9, 10, 11 per the description. The initial docume...

8.8CVSS8.8AI score0.00486EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2021/06/11 4:15 p.m.•10 views

DEBIAN-CVE-2021-22898

curl 7.7 through 7.76.1 suffers from an information disclosure when the -t command line option, known as CURLOPTTELNETOPTIONS in libcurl, is used to send variable=content pairs to TELNET servers. Due to a flaw in the option parser for sending NEWENV variables, libcurl could be made to pass on...

3.1CVSS6.7AI score0.04507EPSS
SaveExploits1References1
OSV
OSV
•added 2021/06/11 4:15 p.m.•13 views

AZL-6359 CVE-2021-22898 affecting package curl for versions less than 7.76.0-5

curl 7.7 through 7.76.1 suffers from an information disclosure when the -t command line option, known as CURLOPTTELNETOPTIONS in libcurl, is used to send variable=content pairs to TELNET servers. Due to a flaw in the option parser for sending NEWENV variables, libcurl could be made to pass on...

3.1CVSS6.7AI score0.04507EPSS
SaveExploits1References1
Prion
Prion
•added 2021/06/11 4:15 p.m.•57 views

Stack overflow

curl 7.7 through 7.76.1 suffers from an information disclosure when the -t command line option, known as CURLOPTTELNETOPTIONS in libcurl, is used to send variable=content pairs to TELNET servers. Due to a flaw in the option parser for sending NEWENV variables, libcurl could be made to pass on...

2.6CVSS5.8AI score0.04507EPSS
SaveExploits1References14Affected Software11
attackerkb
attackerkb
•added 2021/06/11 4:15 p.m.•13 views

CVE-2021-22898

curl 7.7 through 7.76.1 suffers from an information disclosure when the -t command line option, known as CURLOPTTELNETOPTIONS in libcurl, is used to send variable=content pairs to TELNET servers. Due to a flaw in the option parser for sending NEWENV variables, libcurl could be made to pass on...

3.1CVSS6.7AI score0.04507EPSS
SaveExploits1References18
OSV
OSV
•added 2021/06/11 3:15 p.m.•11 views

ALPINE-CVE-2021-28687

HVM soft-reset crashes toolstack libxl requires all data structures passed across its public interface to be initialized before use and disposed of afterwards by calling a specific set of functions. Many internal data structures also require this initialize / dispose discipline, but not all of...

5.5CVSS7AI score0.00314EPSS
SaveExploits0References1
OSV
OSV
•added 2021/06/11 3:15 p.m.•7 views

DEBIAN-CVE-2021-28687

HVM soft-reset crashes toolstack libxl requires all data structures passed across its public interface to be initialized before use and disposed of afterwards by calling a specific set of functions. Many internal data structures also require this initialize / dispose discipline, but not all of...

5.5CVSS7.1AI score0.00314EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2021/06/11 3:15 p.m.•55 views

CVE-2021-28687

HVM soft-reset crashes toolstack libxl requires all data structures passed across its public interface to be initialized before use and disposed of afterwards by calling a specific set of functions. Many internal data structures also require this initialize / dispose discipline, but not all of...

5.5CVSS6.8AI score0.00314EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
•added 2021/06/11 3:15 p.m.•71 views

CVE-2021-28687

HVM soft-reset crashes toolstack libxl requires all data structures passed across its public interface to be initialized before use and disposed of afterwards by calling a specific set of functions. Many internal data structures also require this initialize / dispose discipline, but not all of...

5.5CVSS6.2AI score0.00314EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/06/11 2:54 p.m.•74 views

CVE-2021-28687

HVM soft-reset crashes toolstack libxl requires all data structures passed across its public interface to be initialized before use and disposed of afterwards by calling a specific set of functions. Many internal data structures also require this initialize / dispose discipline, but not all of...

5.5CVSS1.1AI score0.00314EPSS
SaveExploits0
Cvelist
Cvelist
•added 2021/06/11 2:54 p.m.•74 views

CVE-2021-28687

HVM soft-reset crashes toolstack libxl requires all data structures passed across its public interface to be initialized before use and disposed of afterwards by calling a specific set of functions. Many internal data structures also require this initialize / dispose discipline, but not all of...

6AI score0.00314EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/11 12:00 a.m.•5 views

CVE-2021-28687: Missing Initialization of Resource

HVM soft-reset crashes toolstack libxl requires all data structures passed across its public interface to be initialized before use and disposed of afterwards by calling a specific set of functions. Many internal data structures also require this initialize / dispose discipline, but not all of...

5.5CVSS5.7AI score0.00314EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/11 12:00 a.m.•5 views

CVE-2021-0495: Use of Uninitialized Resource

In memory management driver, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID:...

7.8CVSS5.9AI score0.00132EPSS
SaveExploits0References2
Rows per page
Query Builder