9927 matches found
PT-2021-19321
Name of the Vulnerable Software and Affected Versions Foxit Reader version 10.1.1.37576 Description This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The flaw...
PT-2021-19352
Name of the Vulnerable Software and Affected Versions Foxit Reader version 10.1.1.37576 Description This issue allows remote attackers to disclose sensitive information on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file...
CVE-2021-31444: Out-of-bounds Read
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...
Mozilla Rust Competitive Conditions Issue Vulnerability
Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A contention condition issue vulnerability exists in the standard library in versions of Rust prior to 1.19.0, which stems from a synchronization issue with MutexGuard objects that allows memory safety issues to...
CVE-2020-8562
A security issue was discovered in Kubernetes where an authorized user may be able to access private networks on the Kubernetes control plane components. Kubernetes clusters are only affected if an untrusted user can create or modify Node objects and proxy to them, or an untrusted user can create...
CVE-2021-22547
In IoT Devices SDK, there is an implementation of calloc that doesn't have a length check. An attacker could pass in memory objects larger than the buffer and wrap around to have a smaller buffer than required, allowing the attacker access to the other parts of the heap. We recommend upgrading th...
Buffer overflow
In IoT Devices SDK, there is an implementation of calloc that doesn't have a length check. An attacker could pass in memory objects larger than the buffer and wrap around to have a smaller buffer than required, allowing the attacker access to the other parts of the heap. We recommend upgrading th...
Kubernetes security vulnerabilities
Kubernetes is an open source Docker container cluster management system from the Linux Foundation. The system provides resource scheduling, deployment operations, service discovery, and scaling up and down for containerized applications. Kubernetes suffers from a security vulnerability that stems...
Directory Traversal
babel is vulnerable to directory traversal. The vulnerability allows an attacker to load arbitrary locale .dat files which contain serialized Python objects. This can potentially lead to arbitrary code execution If an attacker is able to load a malicious local .dat file through Babel.Locale...
Bypass of Kubernetes API Server proxy TOCTOU
CVSS Rating: Low CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N A security issue was discovered in Kubernetes where an authorized user may be able to access private networks on the Kubernetes control plane components. Kubernetes clusters are only affected if an untrusted user can create or modify...
Remote Code Execution (RCE)
openmage/magento-lts is vulnerable to remote code execution. An attacker is able to upload malicious code via the callbackOptions array due to the lack of validation of the uploaded classes are of Zend3 feature objects...
python-psutil: Double free because of refcount mishandling
A double free issue has been discovered in python-psutil because of the mishandling of refcounts while converting system data into Python objects in functions like psutildiskpartitions, psutilusers, psutilnetifaddrs, and others. In particular cases, a local attacker may be able to get code...
How to scan and encrypt objects in S3 buckets
This article explains how to scan objects in S3 buckets against malware and keep your objects encrypted with SSE-KMS...
PT-2021-5755
Name of the Vulnerable Software and Affected Versions fig2dev version 3.2.8a Description A flaw was found in the read objects function of fig2dev, related to an out of bounds operation in memory. This could allow an attacker to provide crafted malicious input, causing the application to crash or...
SUSE: Security Advisory (SUSE-SU-2019:1477-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
UBUNTU-CVE-2021-23995
When Responsive Design Mode was enabled, it used references to objects that were previously freed. We presume that with enough effort this could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR 78.10, Thunderbird 78.10, and Firefox 88...
SUSE: Security Advisory (SUSE-SU-2019:1480-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GO-2021-0059 Panic due to improper input validation in Get in github.com/tidwall/gjson
Due to improper bounds checking, maliciously crafted JSON objects can cause an out-of-bounds panic. If parsing user input, this may be used as a denial of service vector...
GO-2021-0057 Panic due to improper input validation in github.com/buger/jsonparser
Due to improper bounds checking, maliciously crafted JSON objects can cause an out-of-bounds panic. If parsing user input, this may be used as a denial of service vector...
Lenovo Power Management security vulnerability
Lenovo Power Management is an application from the Chinese company Lenovo. A windows driver. A security vulnerability exists in Lenovo Power Management Driver prior to version 1.67.17.54, which originates from allowing unauthorized access to the driver's device objects...