Advisory ROSA-SA-2021-1943

Software: p11-kit 0.23.5 OS: Cobalt 7.9 CVE-ID: CVE-2020-29361 CVE-Crit: HIGH CVE-DESC: A problem was found in p11-kit 0.21.1 to 0.23.21. Multiple integer overflows were found in array allocation in the p11-kit library and the p11-kit list command, where overflow checks are missing before calling...

Advisory ROSA-SA-2021-1901

Software: libvorbis 1.3.3 OS: Cobalt 7.9 CVE-ID: CVE-2020-20412 CVE-Crit: MEDIUM CVE-DESC: lib / codebook.c in libvorbis before 1.3.6, which was used in StepMania 5.0.12 and other products, has insufficient array bounds checking with the created OGG file. CVE-STATUS: default CVE-REV: default...

Unspecified Vulnerability in Red Hat Enterprise Linux

Red Hat Enterprise Linux is a Linux operating system for business users from Red Hat. A security vulnerability exists in Red Hat Enterprise Linux. The vulnerability stems from an incorrectly formatted input file may cause a segment error due to an out-of-range array access in...

CVE-2021-22374

There is an Improper Validation of Array Index Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause stability risks...

CVE-2021-22374

There is an Improper Validation of Array Index Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause stability risks...

CVE-2021-22374

There is an Improper Validation of Array Index Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause stability risks...

CVE-2021-22374

CVE-2021-22374 involves an improper validation of an array index in Huawei smartphones. Available documents identify the affected product as Huawei smartphones and describe the root cause as index validation failure, with the practical impact noted as potential stability risks upon successful exp...

CVE-2021-22374

There is an Improper Validation of Array Index Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause stability risks...

华为智能手机输入验证错误漏洞

Huawei phones are smartphones from Huawei, a Chinese company. A security vulnerability exists in Huawei smartphones that stems from an improper array index validation vulnerability in Huawei smartphones, the successful exploitation of which may result in a stability risk...

An Out-of-Bounds Read was discovered in arch/arm/mach-footbridge/personal-pci.c in the Linux kernel through 5.12.11 because of the lack of a check for a value that shouldn't be negative e.g. access to element -2 of an array aka CID-298a58e165e4.

...

Cross-Site Scripting (XSS)

striptags is vulnerable to cross-site scripting XSS. A type-confusion vulnerability occurs when concatenating unsanitized strings when an array-like object is passed in as the html parameter. An attacker who is able to control the shape of their input can abuse this behavior to inject and execute...

PT-2021-4173 · Sunhillo · Sunhillo Sureline

Content removed...

CVE-2021-32696

The npm package "striptags" is an implementation of PHP's striptags in Typescript. In striptags before version 3.2.0, a type-confusion vulnerability can cause striptags to concatenate unsanitized strings when an array-like object is passed in as the html parameter. This can be abused by an attack...

Type confusion

The npm package "striptags" is an implementation of PHP's striptags in Typescript. In striptags before version 3.2.0, a type-confusion vulnerability can cause striptags to concatenate unsanitized strings when an array-like object is passed in as the html parameter. This can be abused by an attack...

GHSA-QXG5-2QFF-P49R Passing in a non-string 'html' argument can lead to unsanitized output

A type-confusion vulnerability can cause striptags to concatenate unsanitized strings when an array-like object is passed in as the html parameter. This can be abused by an attacker who can control the shape of their input, e.g. if query parameters are passed directly into the function. Impact XS...

striptags 安全漏洞

striptags is a software package. A security vulnerability exists in striptags that stems from a type confusion vulnerability in striptags prior to version 3.2.0 that causes striptags to concatenate unprocessed strings when an array-like object is passed as an html parameter. An attacker can explo...

CVE-2021-32078

An Out-of-Bounds Read was discovered in arch/arm/mach-footbridge/personal-pci.c in the Linux kernel through 5.12.11 because of the lack of a check for a value that shouldn't be negative, e.g., access to element -2 of an array, aka CID-298a58e165e4...

Design/Logic Flaw

An Out-of-Bounds Read was discovered in arch/arm/mach-footbridge/personal-pci.c in the Linux kernel through 5.12.11 because of the lack of a check for a value that shouldn't be negative, e.g., access to element -2 of an array, aka CID-298a58e165e4...

Netapp E-Series SANtricity OS Controller Software Remote Code Execution Vulnerability

Netapp E-Series SANtricity OS Controller Software is a disk array OS control software from NetApp, Inc. A security vulnerability exists that could be exploited by a privileged attacker to execute arbitrary code...

Unspecified Vulnerability in NetApp E-Series SANtricity OS Controller Software

Netapp E-Series SANtricity OS Controller Software is a disk array OS control software from American NetApp Netapp. A security vulnerability exists in E-Series SANtricity OS Controller Software versions 11.x through 11.70.1, which can be exploited by attackers to obtain sensitive information...