CVE-2021-2356 affecting package mysql for versions less than 8.0.28-1

CVE-2021-2356 affecting package mysql for versions less than 8.0.28-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-44573

Removed by vendor...

CVE-2021-44568

Two heap-overflow vulnerabilities exist in openSUSE/libsolv libsolv through 13 Dec 2020 in the decisionmap variable via the resolvedependencies function at src/solver.c line 1940 & line 1995, which could cause a remote Denial of Service...

DEBIAN-CVE-2021-44568

Two heap-overflow vulnerabilities exist in openSUSE/libsolv libsolv through 13 Dec 2020 in the decisionmap variable via the resolvedependencies function at src/solver.c line 1940 & line 1995, which could cause a remote Denial of Service...

UBUNTU-CVE-2021-44568

Two heap-overflow vulnerabilities exist in openSUSE/libsolv libsolv through 13 Dec 2020 in the decisionmap variable via the resolvedependencies function at src/solver.c line 1940 & line 1995, which could cause a remote Denial of Service...

libsolv 缓冲区错误漏洞

libsolv is a library for checking package dependencies. libsolv suffers from a buffer overflow vulnerability that stems from two heap overflow vulnerabilities in the resolvedependencies function in src/solver.c in the decision mapping variable, which can be exploited by an attacker to cause a...

2022-02 Cumulative Update for Windows 11 for x64-based Systems (KB5010386)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

Null pointer dereference in Exiv2::Internal::resolveLens0x8ff

...

Null pointer dereference in Exiv2::Internal::resolveLens0x319

...

Denial of service due to FPE in Exiv2::Internal::resolveLens0xffff

...

2022-01 Cumulative Update for Microsoft server operating system version 21H2 for x64-based Systems (KB5009555)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

Blackmagic Design DaVinci Resolve Buffer Overflow Vulnerability

Blackmagic Design DaVinci Resolve is an all-in-one software tool for editing, color correction, visual effects, motion graphics and audio post-production.Blackmagic Design DaVinci Resolve 17.3.1.0005 is vulnerable to a buffer overflow vulnerability that could be exploited by attackers to execute...

Blackmagic Design DaVinci Resolve Code Execution Vulnerability

Blackmagic Design DaVinci Resolve is an all-in-one software tool for editing, color correction, visual effects, motion graphics and audio post-production.A code execution vulnerability exists in Blackmagic Design DaVinci Resolve, which could be exploited by attackers to execute arbitrary code in...

Vulnerability Spotlight: Vulnerabilities in DaVinci Resolve video editing software could lead to code execution

A Cisco Talos team member discovered these vulnerabilities. Blog by Jon Munshaw. Cisco Talos recently discovered two vulnerabilities in the DaVinci Resolve video editing software that could allow an adversary to execute code in the context of the application. DaVinci Resolve is a... This is only...

Blackmagic Design DaVinci Resolve 安全漏洞

Blackmagic Design DaVinci Resolve is an all-in-one software tool for editing, color correction, visual effects, motion graphics and audio post-production.A code execution vulnerability exists in Blackmagic Design DaVinci Resolve, which could be exploited by attackers to execute arbitrary code in...

Blackmagic Design DaVinci Resolve 输入验证错误漏洞

Blackmagic Design DaVinci Resolve is an all-in-one software tool for editing, color correction, visual effects, motion graphics and audio post-production.Blackmagic Design DaVinci Resolve 17.3.1.0005 is vulnerable to a buffer overflow vulnerability that could be exploited by attackers to execute...

Blackmagic Design DaVinci Resolve R3D DPDecoder Service frame decoding heap-based buffer overflow vulnerability

Summary When parsing a file that is submitted to the DPDecoder service as a job, the service will use the combination of decoding parameters that were submitted with the job along with fields that were parsed for the submitted video by the R3D SDK to calculate the size of a heap buffer. Due to an...

CVE-2021-37713

A flaw was found in the npm package "tar" aka node-tar. On Windows systems, when extracting tar files that contained a path that was not an absolute path, but specified a drive letter different from the extraction target, the result of path.resolveextractionDirectory, entryPath would resolve...

2021-11 Cumulative Update for Windows Server, version 20H2 for x64-based Systems (KB5007186)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

UBUNTU-CVE-2021-39904

An Improper Access Control vulnerability in the GraphQL API in all versions of GitLab CE/EE starting from 13.1 before 14.2.6, all versions starting from 14.3 before 14.3.4, and all versions starting from 14.4 before 14.4.1 allows a Merge Request creator to resolve discussions and apply suggestion...