Lucene search
+L

1792 matches found

NVD
NVD
•added 2021/06/14 10:15 p.m.•35 views

CVE-2021-34693

net/can/bcm.c in the Linux kernel through 5.12.10 allows local users to obtain sensitive information from kernel stack memory because parts of a data structure are uninitialized...

5.5CVSS0.00472EPSS
SaveExploits1References7
OSV
OSV
•added 2021/06/14 10:15 p.m.•5 views

DEBIAN-CVE-2021-34693

net/can/bcm.c in the Linux kernel through 5.12.10 allows local users to obtain sensitive information from kernel stack memory because parts of a data structure are uninitialized...

5.5CVSS6.5AI score0.00472EPSS
SaveExploits1References1
OSV
OSV
•added 2021/06/14 10:15 p.m.•30 views

AZL-6567 CVE-2021-34693 affecting package kernel for versions less than 5.10.78.1-1

net/can/bcm.c in the Linux kernel through 5.12.10 allows local users to obtain sensitive information from kernel stack memory because parts of a data structure are uninitialized...

5.5CVSS6.5AI score0.00472EPSS
SaveExploits1References1
OSV
OSV
•added 2021/06/14 10:15 p.m.•21 views

UBUNTU-CVE-2021-34693

net/can/bcm.c in the Linux kernel through 5.12.10 allows local users to obtain sensitive information from kernel stack memory because parts of a data structure are uninitialized...

5.5CVSS6.5AI score0.00472EPSS
SaveExploits1References11
attackerkb
attackerkb
•added 2021/06/14 10:15 p.m.•10 views

CVE-2021-34693

net/can/bcm.c in the Linux kernel through 5.12.10 allows local users to obtain sensitive information from kernel stack memory because parts of a data structure are uninitialized...

5.5CVSS6.5AI score0.00472EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/14 12:00 a.m.•6 views

CVE-2021-34693: Missing Initialization of Resource

net/can/bcm.c in the Linux kernel through 5.12.10 allows local users to obtain sensitive information from kernel stack memory because parts of a data structure are uninitialized...

5.5CVSS6AI score0.00472EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/06/13 12:00 a.m.•26 views

PT-2021-4222

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 5.12.10 Description The issue allows local users to obtain sensitive information from kernel stack memory because parts of a data structure are uninitialized. This is due to a lack of initialization of a certain...

5.5CVSS6.7AI score0.00472EPSS
SaveExploits1References406
OSV
OSV
•added 2021/06/11 5:15 p.m.•9 views

CVE-2021-0484

In readVector of IMediaPlayer.cpp, there is a possible read of uninitialized heap data due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9...

5.5CVSS6.2AI score0.00133EPSS
SaveExploits0References1
OSV
OSV
•added 2021/06/11 5:15 p.m.•11 views

CVE-2021-0473

In rwt3tprocesserror of rwt3t.cc, there is a possible double free due to uninitialized data. This could lead to remote code execution over NFC with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11...

8.8CVSS7.8AI score0.00486EPSS
SaveExploits0References1
Prion
Prion
•added 2021/06/11 5:15 p.m.•26 views

Double free

In rwt3tprocesserror of rwt3t.cc, there is a possible double free due to uninitialized data. This could lead to remote code execution over NFC with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11...

8.3CVSS8.7AI score0.00486EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2021/06/11 5:15 p.m.•9 views

CVE-2021-0484

In readVector of IMediaPlayer.cpp, there is a possible read of uninitialized heap data due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9...

5.5CVSS6.1AI score0.00133EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/06/11 5:15 p.m.•8 views

CVE-2021-0495

In memory management driver, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID:...

7.8CVSS7.4AI score0.00132EPSS
SaveExploits0References2
Prion
Prion
•added 2021/06/11 5:15 p.m.•20 views

Out-of-bounds

In memory management driver, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID:...

7.2CVSS7.7AI score0.00132EPSS
SaveExploits0References1
CVE
CVE
•added 2021/06/11 4:42 p.m.•61 views

CVE-2021-0495

CVE-2021-0495 : In Android, a memory management driver has an out-of-bounds write due to uninitialized data, enabling local elevation of privilege. Exploitation is Local with no user interaction required; no explicit exploit details or patch versions are provided in the connected documents.

7.8CVSS7.7AI score0.00132EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2021/06/11 4:42 p.m.•157 views

CVE-2021-0473

CVE-2021-0473 affects Android via a double-free in rw_t3t_process_error in rw_t3t.cc, caused by uninitialized data, enabling remote code execution over NFC with no privileges and no user interaction required. Affected versions include Android-8.1, 9, 10, 11 per the description. The initial docume...

8.8CVSS8.8AI score0.00486EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/06/11 4:42 p.m.•30 views

CVE-2021-0473

In rwt3tprocesserror of rwt3t.cc, there is a possible double free due to uninitialized data. This could lead to remote code execution over NFC with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11...

9AI score0.00486EPSS
SaveExploits0References1
OSV
OSV
•added 2021/06/11 4:15 p.m.•13 views

AZL-6359 CVE-2021-22898 affecting package curl for versions less than 7.76.0-5

curl 7.7 through 7.76.1 suffers from an information disclosure when the -t command line option, known as CURLOPTTELNETOPTIONS in libcurl, is used to send variable=content pairs to TELNET servers. Due to a flaw in the option parser for sending NEWENV variables, libcurl could be made to pass on...

3.1CVSS6.7AI score0.04507EPSS
SaveExploits1References1
OSV
OSV
•added 2021/06/11 4:15 p.m.•9 views

DEBIAN-CVE-2021-22898

curl 7.7 through 7.76.1 suffers from an information disclosure when the -t command line option, known as CURLOPTTELNETOPTIONS in libcurl, is used to send variable=content pairs to TELNET servers. Due to a flaw in the option parser for sending NEWENV variables, libcurl could be made to pass on...

3.1CVSS6.7AI score0.04507EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2021/06/11 4:15 p.m.•10 views

CVE-2021-22898

curl 7.7 through 7.76.1 suffers from an information disclosure when the -t command line option, known as CURLOPTTELNETOPTIONS in libcurl, is used to send variable=content pairs to TELNET servers. Due to a flaw in the option parser for sending NEWENV variables, libcurl could be made to pass on...

3.1CVSS6.7AI score0.04507EPSS
SaveExploits1References18
Prion
Prion
•added 2021/06/11 4:15 p.m.•57 views

Stack overflow

curl 7.7 through 7.76.1 suffers from an information disclosure when the -t command line option, known as CURLOPTTELNETOPTIONS in libcurl, is used to send variable=content pairs to TELNET servers. Due to a flaw in the option parser for sending NEWENV variables, libcurl could be made to pass on...

2.6CVSS5.8AI score0.04507EPSS
SaveExploits1References14Affected Software11
Rows per page
Query Builder