CVE-2021-32614

A flaw was found in dmg2img through 20170502. fillmishblk does not check the length of the read buffer, and copy 0xCC bytes from it. The length of the buffer is controlled by an attacker. By providing a length smaller than 0xCC, memcpy reaches out of the malloc'ed bound. This possibly leads to...

OPENSUSE-SU-2021:0788-1 Security update for mpv

This update for mpv fixes the following issues: - CVE-2021-30145: Fixed format string vulnerability allows user-assisted remote attackers to achieve code execution via a crafted m3u playlist file boo1186230...

Extreme CMS suffers from a code execution vulnerability (CNVD-2021-39004)

Extreme CMS is developed by Langfang Extreme Networks Technology Co., Ltd. using php an open source web content management system. Extreme CMS has a code execution vulnerability that can be exploited by attackers to execute arbitrary code...

JetBrains Code With Me Code Execution Vulnerability

JetBrains Code With Me is a plug-in application from the Czech company JetBrains that provides code co-editing for the IntelliJ IDE. A code execution vulnerability exists in JetBrains Code With Me versions prior to 2021.1. An attacker can exploit the vulnerability to execute code in read-only mod...

Foxit Reader 远程代码执行漏洞（CVE-2021-31473）

...

CVE-2021-31198 Microsoft Exchange Server Remote Code Execution Vulnerability

...

End of support for Office 2016 and Office 2019

None None...

Foxit Reader Code Execution Vulnerability (CNVD-2021-36654)

Foxit Reader old name: Foxit PDF Reader is a set of software used to read PDF format files, by Fujian Foxit Software developed by Foxit Reader is a set of free to use the software, the operating system is mainly based on Microsoft Windows, and as long as there is a Win32 implementation of the...

Foxit Reader 资源管理错误漏洞

Foxit Reader old name: Foxit PDF Reader is a set of software used to read PDF format files, by Fujian Foxit Software developed by Foxit Reader is a set of free to use the software, the operating system is mainly based on Microsoft Windows, and as long as there is a Win32 implementation of the...

Code Execution Vulnerability in EmpireCMS v7.5 Backend

EmpireCMS is an open source software program that runs on a PHP MySQL database. A code execution vulnerability exists in the EmpireCMS v7.5 backend, which can be exploited by an attacker to upload Trojan horse files and execute system commands...

Huawei EulerOS: Security Advisory for e2fsprogs (EulerOS-SA-2021-1777)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-28959

Zoho ManageEngine Eventlog Analyzer through 12147 is vulnerable to unauthenticated directory traversal via an entry in a ZIP archive. This leads to remote code execution...

Micro Focus Application Performance Management Code Execution Vulnerability

Micro Focus Application Performance Management is a comprehensive monitoring system from infrastructure to applications from Micro Focus UK. A code execution vulnerability exists in Micro Focus Application Performance Management versions 9.40, 9.50, and 9.51, which can be exploited by an attacker...

VulnCheck KEV: CVE-2021-30661

Apple iOS, iPadOS, macOS, tvOS, watchOS, and Safari WebKit Storage contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and...

OPENSUSE-SU-2021:0618-1 Security update for nim

This update for nim fixes the following issues: num was updated to version 1.2.12: Fixed GC crash resulting from inlining of the memory allocation procs Fixed “incorrect raises effect for $NimNode” 17454 From version 1.2.10: Fixed “JS backend doesn’t handle float-int type conversion “ 8404 Fixed...

Code execution vulnerability at hybbs 2.3.2 plugin

hybbs is a PHP web program that supports plugin extensions and template extensions. A code execution vulnerability exists in the hybbs 2.3.2 plugin, which can be exploited by an attacker to gain control of the web server...

SUSE: Security Advisory (SUSE-SU-2020:0331-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WP Super Cache Plugin for WordPress < 1.7.2 Remote Code Execution

The WordPress WP Super Cache Plugin installed on the remote host is affected by an authenticated remote code execution vulnerability. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source data...

Microsoft Visual Studio Code Execution Vulnerability (CNVD-2021-29995)

Microsoft Visual Studio Code is an open source code editor from Microsoft USA. A code execution vulnerability exists in Microsoft Visual Studio, which can be exploited by an attacker to execute arbitrary code on a system with the privileges of the victim...

Microsoft Exchange Server Remote Code Execution Vulnerability (CNVD-2021-29060)

Microsoft Exchange Server is a mail server and calendar server developed by Microsoft. A remote code execution vulnerability exists in Microsoft Exchange Server, which can be exploited by an attacker to achieve remote code execution...