3358 matches found
CVE-2021-41370
NTFS Elevation of Privilege Vulnerability...
CVE-2021-41366
Credential Security Support Provider Protocol CredSSP Elevation of Privilege Vulnerability...
CVE-2021-41367
NTFS Elevation of Privilege Vulnerability...
CVE-2021-41368
Microsoft Access Remote Code Execution Vulnerability...
CVE-2021-40442
Microsoft Excel Remote Code Execution Vulnerability...
CVE-2021-26444
Azure RTOS Information Disclosure Vulnerability...
exiv2: DoS due to quadratic complexity in ProcessUTF8Portion
There's a flaw in the xmpsdk component shipped with exiv2. An attacker who is able to submit a crafted file to be processed by an application linked with the exiv2 library could cause an excessive consumption of resources, potentially leading to denial of service. The greatest impact of this flaw...
CVE-2021-42543
The affected application uses specific functions that could be abused through a crafted project file, which could lead to code execution, system reboot, and system shutdown...
UBUNTU-CVE-2021-3928
vim is vulnerable to Use of Uninitialized Variable...
DEBIAN-CVE-2021-43396
In iconvdata/iso-2022-jp-3.c in the GNU C Library aka glibc 2.34, remote attackers can force iconv to emit a spurious '\0' character via crafted ISO-2022-JP-3 data that is accompanied by an internal state reset. This may affect data integrity in certain iconv use cases. NOTE: the vendor states "t...
CVE-2020-26707
An issue was discovered in the add function in Shenzhim AAPTJS 1.3.1 which allows attackers to execute arbitrary code via the filePath parameter...
CVE-2021-22406
There is an Uncaught Exception vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause the app to exit unexpectedly...
The vulnerability of the gaussianblur component in the Ffmpeg library, which is related to writing beyond buffer boundaries, allows attackers to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the gaussianblur component in the Ffmpeg library is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, and even cause service failures...
CVE-2021-42538
The affected product is vulnerable to a parameter injection via passphrase, which enables the attacker to supply uncontrolled input...
CVE-2021-42542
The affected product is vulnerable to directory traversal due to mishandling of provided backup folder structure...
CVE-2021-42536
The affected product is vulnerable to a disclosure of peer username and password by allowing all users access to read global variables...
Improper sanitization of target names
Impact The tough library, prior to 0.12.0, does not properly sanitize target names when caching a repository, or when saving specific targets to an output directory. When targets are cached or saved, files could be overwritten with arbitrary content anywhere on the system. AWS would like to thank...
UBUNTU-CVE-2021-3872
vim is vulnerable to Heap-based Buffer Overflow...
PT-2021-7886
Name of the Vulnerable Software and Affected Versions Java SE versions 8u301, 11.0.12, 17 Oracle GraalVM Enterprise Edition versions 20.3.3 and 21.2.0 Description The issue is related to a vulnerability in the Libraries component of Oracle Java SE and Oracle GraalVM Enterprise Edition, which can ...