CVE-2021-22459

A component of the HarmonyOS has a NULL Pointer Dereference vulnerability. Local attackers may exploit this vulnerability to cause System functions which are unavailable...

Null pointer dereference

A component of the HarmonyOS has a NULL Pointer Dereference vulnerability. Local attackers may exploit this vulnerability to cause System functions which are unavailable...

CVE-2021-22459

A component of the HarmonyOS has a NULL Pointer Dereference vulnerability. Local attackers may exploit this vulnerability to cause System functions which are unavailable...

F5 Networks BIG-IP : OpenSSL vulnerability (K24624116)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.4.6 / 15.1.5.1 / 16.1.2.2 / 17.0.0. It is, therefore, affected by a vulnerability as referenced in the K24624116 advisory. Calls to EVPCipherUpdate, EVPEncryptUpdate and EVPDecryptUpdate may overflow the output length...

PT-2021-15075

Name of the Vulnerable Software and Affected Versions: HarmonyOS affected versions not specified Description: A component of the HarmonyOS has a NULL Pointer Dereference vulnerability. Local attackers may exploit this vulnerability to cause System functions which are unavailable. Recommendations:...

CVE-2021-38463

The affected product does not properly control the allocation of resources. A user may be able to allocate unlimited memory buffers using API functions...

CVE-2021-38477

There are multiple API function codes that permit reading and writing data to or from files and directories, which could lead to the manipulation and/or the deletion of files...

CVE-2021-38453

Some API functions allow interaction with the registry, which includes reading values as well as data modification...

CVE-2021-38463

The affected product does not properly control the allocation of resources. A user may be able to allocate unlimited memory buffers using API functions...

CVE-2021-38479

Many API function codes receive raw pointers remotely from the user and trust these pointers as valid in-bound memory regions. An attacker can manipulate API functions by writing arbitrary data into the resolved address of a raw pointer...

CVE-2021-38449

Some API functions permit by-design writing or copying data into a given buffer. Since the client controls these parameters, an attacker could rewrite the memory in any location of the affected product...

Input validation

Some API functions allow interaction with the registry, which includes reading values as well as data modification...

Design/Logic Flaw

There are multiple API function codes that permit data writing to any file, which may allow an attacker to modify existing files or create new files...

Design/Logic Flaw

There are multiple API function codes that permit reading and writing data to or from files and directories, which could lead to the manipulation and/or the deletion of files...

Code injection

Some API functions permit by-design writing or copying data into a given buffer. Since the client controls these parameters, an attacker could rewrite the memory in any location of the affected product...

Design/Logic Flaw

The affected product does not properly control the allocation of resources. A user may be able to allocate unlimited memory buffers using API functions...

CVE-2021-38449

CVE-2021-38449 affects AUVESY Versiondog. The vulnerability stems from by-design writing or copying data into a buffer controlled by the client, enabling memory rewrite in the affected product. It is rated CVSS v3.1 base 9.8 (NETWORK, LOWATTACK, NONE privileges, HIGH confidentiality/integrity/ava...

CVE-2021-38463 AUVESY Versiondog

The affected product does not properly control the allocation of resources. A user may be able to allocate unlimited memory buffers using API functions...

PT-2021-22153

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue involves API function codes that receive raw pointers remotely from the user and trust these pointers as valid in-bound memory regions. An...

PT-2021-22130

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue concerns some API functions that allow interaction with the registry. This interaction includes reading values as well as modifying data. No...