PT-2021-8000

Name of the Vulnerable Software and Affected Versions jsonpointer versions prior to 5.0.0 Description A type confusion issue in the jsonpointer package can lead to a bypass of a previous Prototype Pollution fix when the pointer components are arrays. This can potentially allow a remote attacker t...

CVE-2021-36998

There is an Improper verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may allow attempts to read an array that is out of bounds...

Design/Logic Flaw

There is an Improper verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may allow attempts to read an array that is out of bounds...

CVE-2021-36998

CVE-2021-36998 is reported as an Improper verification vulnerability in Huawei Smartphones that may allow an out-of-bounds read. Affected software is described as Huawei Smartphone/EMUI/Magic UI in various sources. The NVD entry provides CVSS v2/v3 scores (5.0/5.3 MEDIUM) and notes network-based,...

Huawei Smartphone security vulnerabilities

Huawei Emui is a mobile operating system developed based on Android.Magic Ui is a mobile operating system developed based on Android. A security vulnerability exists in Huawei Emui and Magic UI, which can be exploited by an attacker to attempt to read an out-of-range array...

CVE-2021-3896

An improper validation of an array index and out of bounds memory read in the Linux kernel's Integrated Services Digital Network ISDN functionality was found in the way users call ioctl CMTPCONNADD. A local user could use this flaw to crash the system or starve the resources causing denial of...

SUSE SLED12: postgresql10 / postgresql10-contrib / postgresql10-devel / etc (SUSE-SU-2021:3481-1)

The remote SUSE Linux SLED12 / SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3481-1 advisory. - Fix for build with llvm12 on s390x. bsc1185952 - Re-enable 'icu' for PostgreSQL 10. bsc1179945 - Add...

Oracle MySQL Cluster Data Node Improper Validation of Array Index Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oracle MySQL Cluster. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of Data Node jobs. The issue results from the lack of proper...

Oracle MySQL Cluster Data Node Improper Validation of Array Index Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oracle MySQL Cluster. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of Data Node jobs. The issue results from the lack of proper...

Oracle MySQL Cluster Data Node Improper Validation of Array Index Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oracle MySQL Cluster. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of Data Node jobs. The issue results from the lack of proper...

x-assign Security Vulnerabilities

X-assign is an Object.assign package. It is used to merge nested objects and concatenate arrays. A security vulnerability exists in x-assign, which stems from the fact that the software's global prototype object can be contaminated by the proto prototype object...

CVE-2021-35598: Improper Validation of Array Index

Vulnerability in the MySQL Cluster product of Oracle MySQL component: Cluster: General. Supported versions that are affected are 7.4.33 and prior, 7.5.23 and prior, 7.6.19 and prior and 8.0.26 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physica...

CVE-2021-35592: Improper Validation of Array Index

Vulnerability in the MySQL Cluster product of Oracle MySQL component: Cluster: General. Supported versions that are affected are 7.5.23 and prior, 7.6.19 and prior and 8.0.26 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication...

CVE-2021-35594: Improper Validation of Array Index

Vulnerability in the MySQL Cluster product of Oracle MySQL component: Cluster: General. Supported versions that are affected are 7.4.33 and prior, 7.5.23 and prior, 7.6.19 and prior and 8.0.26 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physica...

CVE-2021-32765

An integer overflow flaw when parsing array replies was found in hiredis, which leads to a buffer overflow and subsequent code execution. This flaw allows a remote attacker to execute arbitrary commands and craft a malicious payload to execute commands on the system. The highest threat from this...

Cross-site Scripting in teddy

Teddy is a readable and easy to learn templating language. This affects the package teddy before 0.5.9. A type confusion vulnerability can be used to bypass input sanitization when the model content is an array instead of a string...

WS-2021-0397

An array underflow in unicode parsing issue was found in the Monero project before v0.16.0.3...

PT-2021-8097

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.15.0-rc2+ Description The vulnerability is related to an array index out of bounds bug in the cmtp add connection function of the isdn component in the Linux kernel. This bug can be triggered when the detach ca...

Type confusion

This affects the package teddy before 0.5.9. A type confusion vulnerability can be used to bypass input sanitization when the model content is an array instead of a string...

CVE-2021-23447 Cross-site Scripting (XSS)

This affects the package teddy before 0.5.9. A type confusion vulnerability can be used to bypass input sanitization when the model content is an array instead of a string...