CVE-2021-30726

A malicious application may be able to execute arbitrary code with kernel privileges. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave. An out-of-bounds write issue was addressed with improved bounds checking...

UBUNTU-CVE-2021-30622

Chromium: CVE-2021-30622 Use after free in WebApp Installs...

CVE-2021-38641

Microsoft Edge for Android Spoofing Vulnerability...

UBUNTU-CVE-2021-23434

This affects the package object-path before 0.11.6. A type confusion vulnerability can lead to a bypass of CVE-2020-15256 when the path components used in the path parameter are arrays. In particular, the condition currentPath === 'proto' returns false if currentPath is 'proto'. This is because t...

GHSA-P5W9-856P-8Q4G Assumed memory layout of std::net::SocketAddr

The socket2 crate has assumed std::net::SocketAddrV4 and std::net::SocketAddrV6 have the same memory layout as the system C representation sockaddr. It has simply casted the pointers to convert the socket addresses to the system representation. The standard library does not say anything about the...

DEBIAN-CVE-2021-36690

A segmentation fault can occur in the sqlite3.exe command-line component of SQLite 3.36.0 via the idxGetTableInfo function when there is a crafted SQL query. NOTE: the vendor disputes the relevance of this report because a sqlite3.exe user already has full privileges e.g., is intentionally allowe...

AZL-8484 CVE-2021-36690 affecting package sqlite for versions less than 3.36.0-3

A segmentation fault can occur in the sqlite3.exe command-line component of SQLite 3.36.0 via the idxGetTableInfo function when there is a crafted SQL query. NOTE: the vendor disputes the relevance of this report because a sqlite3.exe user already has full privileges e.g., is intentionally allowe...

USN-5023-1 aspell vulnerability

It was discovered that Aspell incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code or cause a crash...

UBUNTU-CVE-2021-35063

Suricata before 5.0.7 and 6.x before 6.0.3 has a "critical evasion."...

CVE-2021-31206

Microsoft Exchange Server Remote Code Execution Vulnerability...

Siemens JT2GO 缓冲区错误漏洞

Siemens Jt2go and Siemens Teamcenter Visualization are both products of Siemens AG, Germany. Siemens Jt2go is a JT file viewer. Siemens Teamcenter Visualization is a software that provides team collaboration capabilities for designing 2D and 3D scenes. A buffer over-read vulnerability exists in...

OPENSUSE-SU-2021:0940-1 Security update for bouncycastle

This update for bouncycastle fixes the following issues: - CVE-2020-15522: Fixed a timing issue within the EC math library bsc1186328. This update was imported from the SUSE:SLE-15-SP2:Update update project...

UBUNTU-CVE-2021-3532

Rejected reason: This CVE is marked as INVALID and not a bug...

UBUNTU-CVE-2021-3587

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-38208. Reason: This candidate is a reservation duplicate of CVE-2021-38208. Notes: All CVE users should reference CVE-2021-38208 instead of this candidate. All references and descriptions in this candidate have been removed t...

CVE-2021-28438

Windows Console Driver Denial of Service Vulnerability...

CVE-2021-28332

Remote Procedure Call Runtime Remote Code Execution Vulnerability...

UBUNTU-CVE-2021-29939

An issue was discovered in the stackvector crate through 2021-02-19 for Rust. There is an out-of-bounds write in StackVec::extend if sizehint provides certain anomalous data...

GHSA-P43W-G3C5-G5MQ Out of bounds read in Pillow

An issue was discovered in Pillow before 8.1.1. There is an out-of-bounds read in SGIRleDecode.c...

UBUNTU-CVE-2021-23362

The package hosted-git-info before 3.0.8 are vulnerable to Regular Expression Denial of Service ReDoS via regular expression shortcutMatch in the fromUrl function in index.js. The affected regular expression exhibits polynomial worst-case time complexity...

Cesanta Mongoose out-of-bounds write vulnerability (CNVD-2021-12086)

Mongoose is a C/C++ network library. An out-of-bounds write vulnerability exists in the mgtlsinit function in Cesanta Mongoose 7.0, 6.7-6.18. An attacker can exploit this vulnerability via a connection request to cause an out-of-bounds write after the memory pool is exhausted...