CVE-2021-21202

Use after free in extensions in Google Chrome prior to 90.0.4430.72 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension...

Security fix for the ALT Linux 10 package thunderbird version 78.10.0-alt1

April 26, 2021 Andrey Cherepanov 78.10.0-alt1 - New version 78.10.0. - Security fixes: + CVE-2021-23994 Out of bound write due to lazy initialization + CVE-2021-23995 Use-after-free in Responsive Design Mode + CVE-2021-23998 Secure Lock icon could have been spoofed + CVE-2021-23961 More internal...

Security update for MozillaThunderbird (important)

openSUSE Security Update: Security update for MozillaThunderbird Announcement ID: openSUSE-SU-2021:0580-1 Rating: important References: 1177542 1183942 1184536 Cross-References: CVE-2021-23981 CVE-2021-23982 CVE-2021-23984 CVE-2021-23987 CVE-2021-23991 CVE-2021-23992 CVE-2021-23993 CVSS scores:...

openSUSE: Security Advisory for MozillaFirefox (openSUSE-SU-2021:0487-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

PT-2021-4565 · Redmine · Redmine

Name of the Vulnerable Software and Affected Versions: Redmine versions prior to 4.0.9 Redmine versions 4.1.x prior to 4.1.3 Redmine versions 4.2.x prior to 4.2.1 Description: The issue is related to the circumvention of allowed filename extensions for uploaded attachments, potentially allowing a...

Chromium: CVE-2021-21202 Use after free in extensions

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2021-28464

VP9 Video Extensions Remote Code Execution Vulnerability...

Remote code execution

VP9 Video Extensions Remote Code Execution Vulnerability...

CVE-2021-28464

VP9 Video Extensions Remote Code Execution Vulnerability...

CVE-2021-28464 VP9 Video Extensions Remote Code Execution Vulnerability

...

CVE-2021-28464

CVE-2021-28464 is a remote code execution vulnerability in the Windows VP9 Video Extensions. Public sources indicate exploitation requires processing a specially crafted input/file, enabling arbitrary code execution on the affected system. The CVE is listed with a high impact (CVSS v3.1 base scor...

VP9 Video Extensions Remote Code Execution Vulnerability

...

PT-2021-2730 · Unknown · Vp9 Video Extensions

Name of the Vulnerable Software and Affected Versions: VP9 Video Extensions affected versions not specified Description: The issue is related to incorrect code generation management in the VP9 Video Extensions package, which can be exploited by sending a specially crafted request, potentially...

Microsoft Windows Raw Image Extensions Library RCEs (April 2021)

The Windows 'Raw Image Extensions' app installed on the remote host is affected by multiple remote code execution vulnerabilities: - A remote code execution vulnerability exists in the Microsoft Windows Codecs Library Raw Image. An attacker who successfully exploited the vulnerability could execu...

Microsoft VP9 Video Extensions 代码注入漏洞

Microsoft VP9 Video Extensions is a popular video codec from Microsoft. It is used for streaming over the Internet. A code injection vulnerability exists in Microsoft VP9 Video Extensions. An attacker can exploit this vulnerability to remotely execute code...

Microsoft Windows VP9 Video Extensions Library RCE (April 2021)

The Windows 'VP9 Extensions' app installed on the remote host is affected by a remote code execution vulnerability. An attacker who successfully exploited the vulnerability could execute arbitrary code. Exploitation of the vulnerability requires that a program process a specially crafted file. C...

Command Execution Vulnerability in HYBBS

HYBBS is a PHP web program that supports plugin extensions and template extensions. HYBBS has a command execution vulnerability that can be exploited by an attacker to gain control of the web server...

Debian DSA-4886-1 : chromium - security update

Several vulnerabilites have been discovered in the chromium web browser. - CVE-2021-21159 Khalil Zhani discovered a buffer overflow issue in the tab implementation. - CVE-2021-21160 Marcin Noga discovered a buffer overflow issue in WebAudio. - CVE-2021-21161 Khalil Zhani discovered a buffer...

CVE-2021-24171

The WooCommerce Upload Files WordPress plugin before 59.4 ran a single sanitization pass to remove blocked extensions such as .php. It was possible to bypass this and upload a file with a PHP extension by embedding a "blocked" extension within another "blocked" extension in the "wcuffilename"...

CVE-2021-24171

The WooCommerce Upload Files WordPress plugin before 59.4 ran a single sanitization pass to remove blocked extensions such as .php. It was possible to bypass this and upload a file with a PHP extension by embedding a "blocked" extension within another "blocked" extension in the "wcuffilename"...