CVE-2021-30594

Use after free in Page Info UI in Google Chrome prior to 92.0.4515.131 allowed a remote attacker to potentially exploit heap corruption via physical access to the device...

CVE-2021-30594

Use after free in Page Info UI in Google Chrome prior to 92.0.4515.131 allowed a remote attacker to potentially exploit heap corruption via physical access to the device...

CVE-2021-30594

CVE-2021-30594 affects Chromium-derived browsers (Page Info UI) with a use-after-free in the Page Info UI component before version 92.0.4515.131. The issue is described in connected advisories as a Chromium engine vulnerability that could allow heap-type corruption via crafted interactions, with ...

CVE-2021-30594

Use after free in Page Info UI in Google Chrome prior to 92.0.4515.131 allowed a remote attacker to potentially exploit heap corruption via physical access to the device...

CVE-2021-30594: Use After Free

Use after free in Page Info UI in Google Chrome prior to 92.0.4515.131 allowed a remote attacker to potentially exploit heap corruption via physical access to the device...

Double free in sys-info

Affected versions of sys-info use a static, global, list to store temporary disk information while running. The function that cleans up this list, DFCleanup, assumes a single threaded environment and will try to free the same memory twice in a multithreaded environment. This results in consistent...

GHSA-2F5J-3MHQ-XV58 Double free in sys-info

Affected versions of sys-info use a static, global, list to store temporary disk information while running. The function that cleans up this list, DFCleanup, assumes a single threaded environment and will try to free the same memory twice in a multithreaded environment. This results in consistent...

bat (0.18.0), buffett-metrics (>=0.1.0, <=0.1.3) +22 more potentially affected by CVE-2020-36434 via sys-info (>=0.4.1, <=0.7.0)

sys-info CARGO version =0.4.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =1.3.0, =2.1.0-beta-0, =0.7.0, =0.7.0, =0.7.0, =0.3.4, =1.0.7, =0.1.0, =0.9.0, =0.11.3 and more Source cves: CVE-2020-36434 Source advisory: OSV:GHSA-2F5J-3MHQ-XV58...

bat (0.18.0), buffett-metrics (>=0.1.0, <=0.1.3) +22 more potentially affected by CVE-2020-36434 via sys-info (>=0.4.1, <=0.7.0)

sys-info CARGO version =0.4.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =1.3.0, =2.1.0-beta-0, =0.7.0, =0.7.0, =0.7.0, =0.3.4, =1.0.7, =0.1.0, =0.9.0, =0.11.3 and more Source cves: CVE-2020-36434 Source advisory: GHSA-2F5J-3MHQ-XV58...

A use-after-free in function hci_sock_bound_ioctl() of the Linux kernel HCI subsystem was found in the way user calls ioct HCIUNBLOCKADDR or other way triggers race condition of the call hci_unregister_dev() together with one of the calls hci_sock_blacklist_add() hci_sock_blacklist_del() hci_get_conn_info() hci_get_auth_info(). A privileged local user could use this flaw to crash the system or escalate their privileges on the system. This flaw affects the Linux kernel versions prior to 5.13-rc5.

...

CVE-2021-31101

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by the CVE program. Notes: none...

CVE-2021-36001

Adobe Character Animator version 4.2 and earlier is affected by an out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose arbitrary memory information in the context of the current user. Exploitation of thi...

CVE-2021-27822

creationtimestamp| type| source ---|---|--- 2021-08-19 18:17:56+00:00| seen| https://t.me/cibsecurity/27594...

CVE-2021-0641

In getAvailableSubscriptionInfoList of SubscriptionController.java, there is a possible disclosure of unique identifiers due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

Information disclosure

In multiple functions of libl3oemcrypto.cpp, there is a possible weakness in the existing obfuscation mechanism due to the way sensitive data is handled. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

CVE-2021-21592

Dell EMC PowerScale OneFS versions 8.2.x - 9.2.x improperly handle an exceptional condition. A remote low privileged user could potentially exploit this vulnerability, leading to unauthorized information disclosure...

CVE-2021-36279

Dell EMC PowerScale OneFS versions 8.2.x - 9.2.x contain an incorrect permission assignment for critical resource vulnerability. This could allow a user with ISIPRIVLOGINSSH or ISIPRIVLOGINCONSOLE to access privileged information about the cluster...

CVE-2021-38712

Affected product: OneNav 0.9.12. Vulnerability: information disclosure of the onenav.db3 contents. The provided documents do not specify the exact root cause or exploited components beyond this disclosure. Impact: exposes database contents; no other impacts are detailed. Remediation / mitigation:...

CVE-2020-18754

The CVE-2020-18754 entry concerns Dut Computer Control Engineering Co.’s PLC MAC1100. Connected sources confirm an information disclosure vulnerability in the MAC1100 PLC, enabling remote access to control code or sensitive information. CNVD/CNNVD describe the impact as the ability for an attacke...

AZL-6574 CVE-2021-3573 affecting package kernel for versions less than 5.10.78.1-1

A use-after-free in function hcisockboundioctl of the Linux kernel HCI subsystem was found in the way user calls ioct HCIUNBLOCKADDR or other way triggers race condition of the call hciunregisterdev together with one of the calls hcisockblacklistadd, hcisockblacklistdel, hcigetconninfo,...