478 matches found
Virtuozzo Hybrid Infrastructure 4.5 Update 2
This update provides bug fixes and improvements. Vulnerability id: VSTOR-44043 With backup storage geo-replication, promotion to the primary cluster fails with the error: "name 'payload' is not defined." Vulnerability id: VSTOR-43126 A deadlock is possible between atomic and non-atomic commands i...
MGASA-2021-0298 Updated java-openjdk packages fix security vulnerabilities
For java-1.8.0 Security fixes - JDK-8227467: Better class method invocations - JDK-8244473: Contextualize registration for JNDI - JDK-8244543: Enhanced handling of abstract classes - JDK-8249906, CVE-2021-2163: Enhance opening JARs - JDK-8250568, CVE-2021-2161: Less ambiguous processing -...
CVE-2021-28575
Adobe Animate version 21.0.5 and earlier is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose sensitive information in the context of the current user. Exploitation of this issue require...
Check that marketLockingTime >= marketOpeningTime
Handle pauliax Vulnerability details Impact There is no check that timestamps1 marketLockingTime = timestamps0 marketOpeningTime. I think that should be enforced just in case to prevent market locking before opening. Recommended Mitigation Steps Add in Factory createMarket: require timestamps1 =...
PYSEC-2021-93
An issue was discovered in Pillow before 8.2.0. For EPS data, the readline implementation used in EPSImageFile has to deal with any combination of \r and \n as line endings. It used an accidentally quadratic method of accumulating lines while looking for a line ending. A malicious EPS file could...
CVE-2021-31900
In JetBrains Code With Me bundled to the compatible IDE versions before 2021.1, a client could open a browser on a host...
OESA-2021-1150 rubygem-mini_magick security update
A ruby wrapper for ImageMagick command line. Using MiniMagick the ruby processes memory remains small it spawns ImageMagick's command line program mogrify which takes up some memory as well, but is much smaller compared to RMagick. Security Fixes: In lib/minimagick/image.rb in MiniMagick before...
CVE-2021-31804
LeoCAD before 21.03 sometimes allows a use-after-free during the opening of a new document...
DEBIAN-CVE-2021-31804
LeoCAD before 21.03 sometimes allows a use-after-free during the opening of a new document...
Double free
LeoCAD before 21.03 sometimes allows a use-after-free during the opening of a new document...
CVE-2021-31804
LeoCAD before 21.03 sometimes allows a use-after-free during the opening of a new document...
CVE-2021-31804
LeoCAD before 21.03 sometimes allows a use-after-free during the opening of a new document...
CVE-2021-31804
LeoCAD before 21.03 sometimes allows a use-after-free during the opening of a new document...
leocad 资源管理错误漏洞
leocad is a software application. CAD program for creating virtual LEGOR models. A resource management error vulnerability exists in LeoCAD before 21.03, which allows the use of a post-free use when opening a new document...
UBUNTU-CVE-2021-29266
An issue was discovered in the Linux kernel before 5.11.9. drivers/vhost/vdpa.c has a use-after-free because v-configctx has an invalid value upon re-opening a character device, aka CID-f6bbf0010ba0...
PT-2021-4624 · Pillow +9 · Pillow +9
Name of the Vulnerable Software and Affected Versions: Pillow versions prior to 8.2.0 Description: The issue is related to the readline implementation in the EPSImageFile component of the Pillow library. It uses a quadratic method to accumulate lines while searching for a line ending, which can b...
CVE-2021-21320
matrix-react-sdk is an npm package which is a Matrix SDK for React Javascript. In matrix-react-sdk before version 3.15.0, the user content sandbox can be abused to trick users into opening unexpected documents. The content is opened with a blob origin that cannot access Matrix user data, so...
CVE-2021-3271
PressBooks 5.17.3 contains a cross-site scripting XSS. Stored XSS can be submitted via the Book Info's Long Description Body, and all actions to open or preview the books page will result in the triggering the stored XSS...