CVE-2021-25900

An issue was discovered in the smallvec crate before 0.6.14 and 1.x before 1.6.1 for Rust. There is a heap-based buffer overflow in SmallVec::insertmany...

CVE-2021-25900

An issue was discovered in the smallvec crate before 0.6.14 and 1.x before 1.6.1 for Rust. There is a heap-based buffer overflow in SmallVec::insertmany...

Rust Buffer Error Vulnerability

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A buffer error vulnerability exists in Rust smallvec crate before 0.6.14 and 1.x before 1.6.1, which stems from a heap-based buffer overflow in SmallVec::insert many...

PT-2021-18546

Name of the Vulnerable Software and Affected Versions insert many crate through 2021-01-26 Description An issue in the insert many crate for Rust may cause elements to be dropped twice if the next method of an iterator panics. This occurs because affected versions of insert many used ptr::copy to...

CVE-2021-2048

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.22 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of...

CVE-2021-2040

Vulnerability in the Oracle Argus Safety product of Oracle Health Sciences Applications component: Case Form, Local Affiliate Form. The supported version that is affected is 8.2.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2021-2000

CVE-2021-2000 affects Oracle Database Server’s Unified Audit component. Affected: 12.1.0.2, 12.2.0.1, 18c, 19c. Root cause described as a vulnerability in the Unified Audit data handling that a high-privilege SYS user with network access via Oracle Net could exploit to perform unauthorized update...

CVE-2021-1998

Removed by vendor...

PT-2021-1889

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.9 Description The issue is related to insufficient input validation in the APIs component of Oracle Installed Base, allowing an...

PT-2021-27544

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read issue is reported, which can cause a crash. The crash state involves functions such as loop and ftp pl insert finfo. No...

PT-2021-27506

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow WRITE crash has been reported, involving functions such as ofpbuf insert, nx put raw, and nx put match. Recommendations: At the...

Description of the security update for Office Online Server: January 12, 2021

None None...

PT-2021-1735

Name of the Vulnerable Software and Affected Versions: Oracle Financial Services Revenue Management and Billing versions 2.9.0.0 through 2.9.0.1 Description: The issue is related to inadequate access control in the On Demand Billing component, allowing a low-privileged attacker with network acces...

RUSTSEC-2021-0003 Buffer overflow in SmallVec::insert_many

A bug in the SmallVec::insertmany method caused it to allocate a buffer that was smaller than needed. It then wrote past the end of the buffer, causing a buffer overflow and memory corruption on the heap. This bug was only triggered if the iterator passed to insertmany yielded more items than the...

PT-2021-16831

Name of the Vulnerable Software and Affected Versions smallvec versions 0.6.13 and earlier smallvec versions 1.x prior to 1.6.1 Description A heap-based buffer overflow issue exists due to a bug in the SmallVec::insert many method. This method allocated a buffer that was smaller than needed and...

CVE-2019-7726

CVE-2019-7726 affects NukeViet prior to 4.3.04. The affected code path is in modules/banners/funcs/click.php, where a SQL INSERT statement incorporates raw header data from HTTP requests (e.g., Referer and User-Agent). The underlying issue is SQL injection risk due to unsanitized header input bei...

CVE-2019-7726: Improper Neutralization of Special Elements used in an SQL Command

modules/banners/funcs/click.php in NukeViet before 4.3.04 has a SQL INSERT statement with raw header data from an HTTP request e.g., Referer and User-Agent...

WordPress Total Upkeep Unauthenticated Backup Downloader

This module exploits an unauthenticated database backup vulnerability in WordPress plugin 'Boldgrid-Backup' also known as 'Total Upkeep' version use auxiliary/scanner/http/wp/totalupkeepdownloader msf undefinedtotalupkeepdownloader show actions ...actions... msf undefinedtotalupkeepdownloader set...

TIBCO Security Advisory: December 15, 2020 - TIBCOPartnerExpress

TIBCO PartnerExpress REST API Original release date: December 15, 2020 Last revised: CVE-2020-27147 Source: TIBCO SoftwareInc. TIBCO PartnerExpress REST API Original release date: December 15, 2020 Last revised: --- Source: TIBCO Software Inc. Systems Affected TIBCO PartnerExpress version 6.2.0 T...

PT-2020-22182

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A crash has been reported, identified as a Stack-use-after-return READ 1 type. The crash state involves several functions: insert pin, detect idkey, and sc...