Android notifyProfileAdded notifyProfileRemoved Disclosure

The vulnerability of the notifyProfileAdded and notifyProfileRemoved functions in the SipService.java file of the Android operating system is related to authentication errors. Exploiting this vulnerability can allow attackers to disclose sensitive information that is protected by these functions...

Google Chrome V8 Engine Code Execution

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to type mixing errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created website...

CSZ CMS Unlink File Deletion

The vulnerability of the unlink function in the CSZ CMS content management system is related to errors in resource release. Exploiting this vulnerability could allow a remote attacker to delete arbitrary files...

WebAudio Component Code Execution

The vulnerability of Google Chrome’s WebAudio component is caused by synchronization errors when using a shared resource. Exploiting this vulnerability allows a malicious actor to execute arbitrary code jargon: “runaway” through a specially created web page...

CVE-2021-22256: Incorrect Authorization

Improper authorization in GitLab CE/EE affecting all versions since 12.6 allowed guest users to create issues for Sentry errors and track their status...

Google Chrome Animation Unauthorized Access

The vulnerability of Google Chrome web browser’s animation implementation is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information by opening a specially created...

PT-2021-18929 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 15 iPadOS versions prior to 15 Description: A logic issue existed in the handling of document loads, which was addressed with improved state management. Previewing an html file attached to a note may unexpectedly contact...

DEBIAN-CVE-2021-3694

LedgerSMB does not sufficiently HTML-encode error messages sent to the browser. By sending a specially crafted URL to an authenticated user, this flaw can be abused for remote code execution and information disclosure...

PT-2021-6600 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab EE versions 12.2 and later Description: A verbose error message in GitLab EE could disclose the private email address of a user invited to a group. This issue affects all versions since 12.2 and allows a remote attacker to access...

SUSE-SU-2021:2802-1 Security update for libmspack

This update for libmspack fixes the following issues: - CVE-2018-14681: Bad KWAJ file header extensions could cause a one or two byte overwrite. bsc1103032 - CVE-2018-14682: There is an off-by-one error in the TOLOWER macro for CHM decompression. bsc1103032 - CVE-2018-14679: There is an off-by-on...

Bash Pointer Arithmetic DoS

The vulnerability of the Bash command shell is related to errors due to incorrect command sequencing. Exploiting this vulnerability allows a remote attacker to compromise data integrity and cause service failures...

CmpGateway Component DoS

The vulnerability of the CmpGateway component in the Codesys V3 Runtime System software suite is related to pointer assignment errors. Exploiting this vulnerability could allow a malicious actor to trigger a service failure using a specially crafted TCP packet...

Microsoft Exchange Server Privilege Escalation

The vulnerability of Microsoft Exchange Server is related to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

Microsoft Exchange Server Code Execution

The vulnerability of Microsoft Exchange Server is related to errors in code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

qemu security update

15:4.2.1-11.el7 - pvrdma: Fix the ring init error flow CVE-2021-3608 Marcel Apfelbaum Orabug: 33120142 CVE-2021-3608 - pvrdma: Ensure correct input on ring init CVE-2021-3607 Marcel Apfelbaum Orabug: 33120146 CVE-2021-3607 - hw/rdma: Fix possible mremap overflow in the pvrdma device CVE-2021-3582...

Google TensorFlow code issue vulnerability (CNVD-2021-64531)

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. A security vulnerability exists in Google TensorFlow, which stems from the fact that the SVDF implementation in TFLite is vulnerable to a null pointer error in the affected version. An attacker could...

Adobe Reader DC Continuous Security Update (APSB21-51) - Mac OS X

The host is missing an important security update according to Adobe August update. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Adobe Acrobat DC Continuous Security Update (APSB21-51) - Mac OS X

The host is missing an important security update according to Adobe August update. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Adobe Reader Classic 2020 Security Update (APSB21-51) - Mac OS X

The host is missing an important security update according to Adobe August update. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Adobe InDesign RCE Vulnerabilities (APSB21-22) - Windows

The host is missing an important security update according to Adobe August update. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...