3321 matches found
CVE-2020-6771
Loading a DLL through an Uncontrolled Search Path Element in Bosch IP Helper up to and including version 1.00.0008 potentially allows an attacker to execute arbitrary code on a victim's system. A prerequisite is that the victim is tricked into placing a malicious DLL in the same application...
CVE-2021-21349
XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to request data from internal resources that are not publicly available only by manipulating the processed input stream. No user is...
GHSA-XFHP-GMH8-R8V2 printf vulnerable to Regular Expression Denial of Service (ReDoS)
The package printf before 0.6.1 are vulnerable to Regular Expression Denial of Service ReDoS via the regex string regex /%?:\w.+|1-9\d$?0 +-\|\d+?.?|\d+?hlL?%bscdeEfFgGioOuxX/g in lib/printf.js. The vulnerable regular expression has cubic worst-case time complexity...
DEBIAN-CVE-2021-25293
An issue was discovered in Pillow before 8.1.1. There is an out-of-bounds read in SGIRleDecode.c...
USN-4820-1 s-nail vulnerability
It was discovered that S-nail incorrectly handled paths. An attacker could possible use this issue to write arbitrary files and escalate privileges...
UBUNTU-CVE-2020-36277
Leptonica before 1.80.0 allows a denial of service application crash via an incorrect left shift in pixConvert2To8 in pixconv.c...
CVE-2021-27081
Visual Studio Code ESLint Extension Remote Code Execution Vulnerability...
CVE-2021-27063
Windows DNS Server Denial of Service Vulnerability...
CVE-2021-27060
Visual Studio Code Remote Code Execution Vulnerability...
CVE-2021-27070
Windows 10 Update Assistant Elevation of Privilege Vulnerability...
CVE-2021-27053
Microsoft Excel Remote Code Execution Vulnerability...
CVE-2021-26896
Windows DNS Server Denial of Service Vulnerability...
CVE-2021-26890
Application Virtualization Remote Code Execution Vulnerability...
CVE-2021-26863
Windows Win32k Elevation of Privilege Vulnerability...
CVE-2021-26872
Windows Event Tracing Elevation of Privilege Vulnerability...
CVE-2021-24090
Windows Error Reporting Elevation of Privilege Vulnerability...
CVE-2021-24107
Windows Event Tracing Information Disclosure Vulnerability...
CVE-2020-27618
The iconv function in the GNU C Library aka glibc or libc6 2.32 and earlier, when processing invalid multi-byte input sequences in IBM1364, IBM1371, IBM1388, IBM1390, and IBM1399 encodings, fails to advance the input state, which could lead to an infinite loop in applications, resulting in a deni...