1499 matches found
OSV-2021-1228 Heap-buffer-overflow in backup_lpf
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38369 Crash type: Heap-buffer-overflow READ Crash state: backuplpf dav1dlrcopylpf16bpc dav1dfiltersbrowdeblockrows16bpc...
Citrix Applayering Packaging VM boot error 0xC000000F
Application layer packaging VM boot fails with theboot error 0xC000000F The above given error appears on the packaging VM while you create a new application layer/edit an application layer with an OS layer version where the language packs are newly installed, but this boot failure doesn't appear...
GHSA-36XW-HGFV-JWM7 Multiple security issues including data race, buffer overflow, and uninitialized memory drop in arr
arr crate contains multiple security issues. Specifically, 1. It incorrectly implements Sync/Send bounds, which allows to smuggle non-Sync/Send types across the thread boundary. 2. Index and IndexMut implementation does not check the array bound. 3. Array::newfromtemplate drops uninitialized memo...
GHSA-M3WW-7HRP-GW9W Drop of uninitialized memory in Ozone
An issue was discovered in the ozone crate through version 0.1.0 for Rust. Memory safety is violated because of the dropping of uninitialized memory...
SUSE-SU-2021:2796-1 Security update for djvulibre
This update for djvulibre fixes the following issues: - CVE-2021-3630: out-of-bounds write in DJVU:DjVuTXT:decode in DjVuText.cpp bsc1187869...
SDWAN Center: Getting "An internal error has occurred" while trying to fetch Virtual path details using the NITRO API Command
...
CVE-2021-38195
An issue was discovered in the libsecp256k1 crate before 0.5.0 for Rust. It can verify an invalid signature because it allows the R or S parameter to be larger than the curve order, aka an overflow...
Denial Of Service
chromium is vulnerable to denial of service. When the candidate has been publicized, the details for this candidate will be provided...
StoreFront 1912 LTSR - Unable to add favorites
Cannot add app. Getting error when adding the apps/desktop to favorites...
OSV-2021-990 Heap-use-after-free in uhci_handle_td
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36117 Crash type: Heap-use-after-free READ 8 Crash state: uhcihandletd uhciprocessframe uhciframetimer...
OPENSUSE-SU-2021:2292-1 Security update for dbus-1
This update for dbus-1 fixes the following issues: - CVE-2020-35512: Fixed a use-after-free or potential undefined behaviour caused by shared UID's bsc1187105...
CVE-2021-33192
A vulnerability in the HTML pages of Apache Jena Fuseki allows an attacker to execute arbitrary javascript on certain page views. This issue affects Apache Jena Fuseki from version 2.0.0 to version 4.0.0 inclusive...
UVI-2021-1000873 drm: Lock pointer access in drm_master_release()
drm: Lock pointer access in drmmasterrelease This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.195 by commit...
UVI-2021-1000110 virtiofs: fix memory leak in virtio_fs_probe()
virtiofs: fix memory leak in virtiofsprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.20 by commit...
Kubernetes kubectl cp Vulnerable to Symlink Attack
The Kubernetes kubectl cp command in versions 1.1-1.12, and versions prior to 1.13.11, 1.14.7, and 1.15.4 allows a combination of two symlinks provided by tar output of a malicious container to place a file outside of the destination directory specified in the kubectl cp invocation. This could be...
JetBrains TeamCity Plugin Changed Permission Check Implementation Error Vulnerability
TeamCity is a Java-based build management and continuous integration server from JetBrains. A vulnerability exists in JetBrains TeamCity versions prior to 2020.2.2 in the implementation error of permission checking for plugin changes. No detailed vulnerability details are provided at this time...
CVE-2021-32607
An issue was discovered in Smartstore aka SmartStoreNET through 4.1.1. Views/PrivateMessages/View.cshtml does not call HtmlUtils.SanitizeHtml on a private message...
CVE-2020-36326
PHPMailer 6.1.8 through 6.4.0 allows object injection through Phar Deserialization via addAttachment with a UNC pathname. NOTE: this is similar to CVE-2018-19296, but arose because 6.1.8 fixed a functionality problem in which UNC pathnames were always considered unreadable by PHPMailer, even in...
OSV-2021-570 Uncaught exception in com.fasterxml.jackson.databind.deser.std.BaseNodeDeserializer.deserializeObject
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32554 Crash type: Uncaught exception Crash state: com.fasterxml.jackson.databind.deser.std.BaseNodeDeserializer.deserializeObject java.base/java.lang.invoke.MethodHandleNatives.refKindIsField...