CVE-2021-44542

A memory leak vulnerability was found in Privoxy when handling errors...

CVE-2021-40338

Hitachi Energy LinkOne product, has a vulnerability due to a web server misconfiguration, that enables debug mode and reveals the full path of the filesystem directory when an attacker generates errors during a query operation. This issue affects: Hitachi Energy LinkOne 3.20; 3.22; 3.23; 3.24;...

GPAC null pointer dereference vulnerability (CNVD-2022-03618)

GPAC is an open source multimedia framework. gfsgvrmlmfalloc function in GPAC version 1.1.0 has a null pointer dereference vulnerability that can be exploited by attackers to cause segmentation errors and application crashes...

GPAC null pointer dereference vulnerability (CNVD-2022-03616)

GPAC is an open source multimedia framework. gfsvggetattributename function in GPAC version 1.1.0 has a null pointer dereference vulnerability that can be exploited by attackers to cause segmentation errors and application crashes...

GPAC null pointer dereference vulnerability (CNVD-2022-03620)

GPAC is an open source multimedia framework. gfnodegetfield function in GPAC version 1.1.0 is vulnerable to a null pointer dereference, which can be exploited by attackers to cause segmentation errors and application crashes...

GPAC null pointer dereference vulnerability (CNVD-2022-03622)

GPAC is an open source multimedia framework. gfisomparsemovieboxesinternal function in GPAC version 1.1.0 has a null pointer dereference vulnerability that can be exploited by attackers to cause segmentation errors and application crashes...

GPAC null pointer dereference vulnerability (CNVD-2022-03619)

GPAC is an open source multimedia framework. gfnodegettag function in GPAC version 1.1.0 has a null pointer dereference vulnerability that can be exploited by attackers to cause segmentation errors and application crashes...

GPAC null pointer dereference vulnerability (CNVD-2022-03623)

GPAC is an open source multimedia framework. gfdumpvrmldynfield.isra function in GPAC version 1.1.0 is vulnerable to a null pointer dereference, which can be exploited by attackers to cause segmentation errors and application crashes...

GPAC null pointer dereference vulnerability (CNVD-2022-03624)

GPAC is an open source multimedia framework. version 1.1.0 of GPAC contains a null pointer dereference vulnerability in the dumpodtosaf.isra function, which can be exploited by attackers to cause segmentation errors and application crashes...

GPAC null pointer dereference vulnerability (CNVD-2022-03625)

GPAC is an open source multimedia framework. version 1.1.0 of GPAC has a null pointer dereference vulnerability in the BDCheckSFTimeOffset function, which can be exploited by attackers to cause segmentation errors and application crashes...

WISE-4060 Ethernet module Session Management Unauthorized Access

The vulnerability of the WISE-4060 Ethernet module’s microprogramming software is related to session management errors. Exploiting this vulnerability could allow an attacker to gain unauthorized access to the device remotely...

Pimcore cross-site scripting vulnerabilities

Pimcore is an open source Web content management platform for creating and managing Web applications from the Austrian company Pimcore. The platform integrates Web content management, e-commerce frameworks and product information management applications. pimcore suffers from a cross-site scriptin...

PT-2022-3658 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The netback driver vulnerability in the Linux kernel is related to resource release errors. Exploitation of this issue may allow an attacker to cause a denial of service...

PT-2022-4510 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a driver vulnerability in the Linux kernel's netback component, which is associated with resource release errors. Exploitation of this issue could allow an...

Microsoft Edge Google Chrome Code Execution

The vulnerability of the Loader components in Microsoft Edge and Google Chrome is related to type conversion errors. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code or cause a service failure through a specially created malicious web page...

WebKitGTK WebKit Type Mixing Code Execution

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit is related to type mixing errors. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

GSD-2021-1002582 serial: liteuart: fix minor-number leak on probe errors

serial: liteuart: fix minor-number leak on probe errors This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.7 by commit...

PT-2021-27050

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.11 through v5.15.6 Description A minor-number leak on probe errors was discovered. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v5.11 through v5.15.6,...

UBUNTU-CVE-2021-34141

An incomplete string comparison in the numpy.core component in NumPy before 1.22.0 allows attackers to trigger slightly incorrect copying by constructing specific string objects. NOTE: the vendor states that this reported code behavior is "completely harmless."...

YetiForceCrm processing logic error vulnerability

YetiForceCrm is an open source crm system from the Polish company YetiForce. Yetiforcecrm suffers from a processing logic error vulnerability, which stems from Yetiforcecrm being vulnerable to business logic errors. No detailed vulnerability details are currently available...