Integer overflow

An issue was discovered in the bam crate before 0.1.3 for Rust. There is an integer underflow and out-of-bounds write during the loading of a bgzip block...

CVE-2021-28027

An issue was discovered in the bam crate before 0.1.3 for Rust. There is an integer underflow and out-of-bounds write during the loading of a bgzip block...

The installers of E START products may insecurely load Dynamic Link Libraries

Overview The installers of E START products by GMO INSIGHT Inc. contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries in the folder specified by the TEMP environment variable or where the installer resides CWE-427, CVE-2015-9267, and CVE-2015-9268...

PT-2021-2254 · Cisco · Cisco Sd-Wan

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN Software versions affected versions not specified Description: A vulnerability in the Image Signature Verification feature could allow an authenticated, remote attacker with Administrator-level credentials to install a malicious...

Magento Commerce Code Execution

The vulnerability of the Magento Commerce software platform for developing and managing online stores is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Deserialization of Untrusted Data

Overview parlai is an Unified platform for dialogue research. Affected versions of this package are vulnerable to Deserialization of Untrusted Data caused by unsafe loading. PoC import os os.system'pip3 install parlai' from parlai.chatservice.utils import config exploit =...

Fedora: Security Advisory for gdk-pixbuf2 (FEDORA-2021-2e59756cbe)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 33 Update: gdk-pixbuf2-2.42.2-2.fc33

gdk-pixbuf is an image loading library that can be extended by loadable modules for new image formats. It is used by toolkits such as GTK+ or clutter...

Code Injection in jeikeilim/kindle

Description Kindle is an easy model build package for PyTorch. Building a deep learning model became so simple that almost all model can be made by copy and paste from other existing model codes, which is vulnerable to Arbitary Code Execution. Vulnerability Vulnerable to YAML deserialization atta...

CVE-2021-27375

Traefik before 2.4.5 allows the loading of IFRAME elements from other domains...

CVE-2021-27375

Traefik before 2.4.5 allows the loading of IFRAME elements from other domains...

CVE-2021-27375: Improper Restriction of Rendered UI Layers or Frames

Traefik before 2.4.5 allows the loading of IFRAME elements from other domains...

CVE-2021-20066

JSDom improperly allows the loading of local resources, which allows for local files to be manipulated by a malicious web page when script execution is enabled...

kmod bug fix and enhancement update

The kmod packages provide various programs needed for automatic loading and unloading of modules under 2.6, 3.x, and later kernels, as well as other module management programs. Bug Fixes and Enhancements: Symbolic links are not created after applying an errata kernel BZ1915253...

ALBA-2021:0561 kmod bug fix and enhancement update

The kmod packages provide various programs needed for automatic loading and unloading of modules under 2.6, 3.x, and later kernels, as well as other module management programs. Bug Fixes and Enhancements: Symbolic links are not created after applying an errata kernel BZ1915253...

PT-2021-13744 · Jsdom · Jsdom

Name of the Vulnerable Software and Affected Versions: JSDom affected versions not specified Description: JSDom improperly allows the loading of local resources, which allows for local files to be manipulated by a malicious web page when script execution is enabled. Recommendations: At the moment...

CVE-2021-22980

In Edge Client version 7.2.x before 7.2.1.1, 7.1.9.x before 7.1.9.8, and 7.1.x-7.1.8.x before 7.1.8.5, an untrusted search path vulnerability in the BIG-IP APM Client Troubleshooting Utility CTU for Windows could allow an attacker to load a malicious DLL library from its current directory. User...

CVE-2021-22980

In Edge Client version 7.2.x before 7.2.1.1, 7.1.9.x before 7.1.9.8, and 7.1.x-7.1.8.x before 7.1.8.5, an untrusted search path vulnerability in the BIG-IP APM Client Troubleshooting Utility CTU for Windows could allow an attacker to load a malicious DLL library from its current directory. User...

PT-2021-15313

Name of the Vulnerable Software and Affected Versions Edge Client versions 7.1.x through 7.1.8.5 Edge Client versions 7.1.9.x through 7.1.9.8 Edge Client versions 7.2.x through 7.2.1.1 Description An untrusted search path issue in the BIG-IP APM Client Troubleshooting Utility CTU for Windows coul...

gdk-pixbuf:stream_fuzzer: Heap-buffer-overflow in OneLine4

Project: https://gitlab.gnome.org/GNOME/gdk-pixbuf.git Detailed Report: https://oss-fuzz.com/testcase?key=5749918016864256 Project: gdk-pixbuf Fuzzing Engine: libFuzzer Fuzz Target: streamfuzzer Job Type: libfuzzerasangdk-pixbuf Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...