584 matches found
CVE-2021-40058
There is a heap-based buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability may affect availability...
CVE-2021-40054
There is an integer underflow vulnerability in the atcmdserver module. Successful exploitation of this vulnerability may affect integrity...
Apache POI 资源管理错误漏洞
Apache POI is the United States Apache Apache Foundation of an open source library, which provides APIs to Java programs can read and write Microsoft Office format files. A resource management error vulnerability exists in Apache POI that stems from the product's failure to effectively determine...
USN-5303-1 php7.4, php8.0 vulnerability
It was discovered that PHP incorrectly handled certain scripts. An attacker could possibly use this issue to cause a denial of service, or possibly execute arbitrary code...
alwakeupword (=1.0.0), armadillin (>=0.0.2 <=0.53.0) +42 more potentially affected by CVE-2022-21735 via tensorflow (>=2.6.0 <=2.6.2)
tensorflow PYPI version =2.6.0, =0.0.2, =1.0.1, =0.0.9, =0.2.0, =4.4.0, =1.1.2, =0.2.0, =0.0.1, =1.0.0, =1.1.2 - imgtovar =0.8.5 and more Source cves: CVE-2022-21735 Source advisory: OSV:GHSA-87V6-CRGM-2GFJ...
USN-5241-1 qtsvg-opensource-src vulnerabilities
It was discovered that QtSvg incorrectly handled certain malformed SVG images. If a user or automated system were tricked into opening a specially crafted image file, a remote attacker could use this issue to cause QtSvg to crash, resulting in a denial of service, or possibly execute arbitrary co...
BELL-CVE-2022-21282 CVE-2022-21282 does not affect BellSoft software
Bulletin has no description...
GHSA-74FJ-2J2H-C42Q Exposure of sensitive information in follow-redirects
follow-redirects is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor...
UBUNTU-CVE-2021-23803
This affects the package latte/latte before 2.10.6. There is a way to bypass allowFunctions that will affect the security of the application. When the template is set to allow/disallow the use of certain functions, adding control characters x00-x08 after the function will bypass these restriction...
CVE-2021-44447
A vulnerability has been identified in JT Utilities All versions V13.0.3.0, JTTK All versions V11.0.3.0. JTTK library in affected products contains a use-after-free vulnerability that could be triggered while parsing specially crafted JT files. An attacker could leverage this vulnerability to...
CVE-2021-25519
An improper access control vulnerability in CPLC prior to SMR Dec-2021 Release 1 allows local attackers to access CPLC information without permission...
CVE-2020-36135
AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component ratehist.c...
USN-5157-1 postorius vulnerability
It was discovered that Postorius mishandled specially crafted input. An attacker could use this vulnerability that obtain sensitive information...
CVE-2021-44033
In Ionic Identity Vault before 5.0.5, the protection mechanism for invalid unlock attempts can be bypassed...
USN-5148-1 hivex vulnerability
It was discovered that hivex incorrectly handled certain input. An attacker could use this vulnerability to cause a crash or obtain sensitive information...
CLSA-2021-1634922551 Fixed CVE-2021-25217 in dhcp
CVE-2021-25217: avoid buffer overrun...
BELL-CVE-2021-35559 CVE-2021-35559 does not affect BellSoft software
Bulletin has no description...
Code injection in Kubernetes Java Client
Loading specially-crafted yaml with the Kubernetes Java Client library can lead to code execution...