12106 matches found
CVE-2021-32078
An Out-of-Bounds Read was discovered in arch/arm/mach-footbridge/personal-pci.c in the Linux kernel through 5.12.11 because of the lack of a check for a value that shouldn't be negative, e.g., access to element -2 of an array, aka CID-298a58e165e4...
Design/Logic Flaw
An Out-of-Bounds Read was discovered in arch/arm/mach-footbridge/personal-pci.c in the Linux kernel through 5.12.11 because of the lack of a check for a value that shouldn't be negative, e.g., access to element -2 of an array, aka CID-298a58e165e4...
CVE-2021-32078
Summary (CVE-2021-32078) An out-of-bounds read was found in the Linux kernel code path arch/arm/mach-footbridge/personal-pci.c, due to a missing check for a value that should not be negative (example: accessing element -2 of an array). The issue affects kernels up to at least 5.12.11. The descrip...
Linux kernel 缓冲区错误漏洞
The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. An out-of-bounds read vulnerability exists in arch/arm/mach-footbridge/personal-pci.c of the Linux kernel, which stems from a lack of checking for values that should not be negative. No details of th...
Fedora: Security Advisory for redis (FEDORA-2021-0ad4bec5b1)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Unchecked return value from ERC20
Handle cmichel Vulnerability details Vulnerability Details The ERC20.transfer and ERC20.transferFrom functions return a boolean value indicating success. This parameter needs to be checked for success. According to the standard the return value must be checked for true, otherwise the transfer wil...
UBUNTU-CVE-2021-33622
Sylabs Singularity 3.5.x and 3.6.x, and SingularityPRO before 3.5-8, has an Incorrect Check of a Function's Return Value...
CVE-2021-33622
Sylabs Singularity 3.5.x and 3.6.x, and SingularityPRO before 3.5-8, has an Incorrect Check of a Function's Return Value...
Platform Update: Akamai Boosts Edge Application Power, Expanding Possibilities for Developers
Welcome to the Akamai Platform Update -- two days of new capabilities and innovations across our edge technology and security product portfolios. Today, we look at our edge technology products, which include edge computing, edge delivery CDN, and other complementary products and services that hel...
OSV-2021-858 Use-of-uninitialized-value in jxl::N_SCALAR::Epf0Row
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35234 Crash type: Use-of-uninitialized-value Crash state: jxl::NSCALAR::Epf0Row jxl::FilterPipeline::ApplyFiltersRow jxl::FinalizeImageRect...
Unbreakable Enterprise kernel-container security update
4.14.35-2047.504.2.el7 - md/raid1: properly indicate failure when ending a failed write request Paul Clements Orabug: 32887159 - video: hypervfb: Add ratelimit on error message Michael Kelley Orabug: 32856879 - Drivers: hv: vmbus: Initialize unloadevent statically Andrea Parri Microsoft Orabug:...
CentOS: Security Advisory for qt5-qtimageformats (CESA-2021:2328)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2021-24355
In the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4, the lack of capability checks and insufficient nonce check on the AJAX actions, simple301redirects/admin/getwildcard and simple301redirects/admin/wildcard, made it possible for authenticated users to retrieve and update the...
CentOS 7 : qt5-qtimageformats (RHSA-2021:2328)
The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2328 advisory. - A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in PutLE16. CVE-2018-25011 - A use of uninitialized value was found in...
[SECURITY] Fedora 33 Update: redis-6.0.14-1.fc33
Redis is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing se...
[SECURITY] Fedora 34 Update: redis-6.2.4-1.fc34
Redis is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing se...
CVE-2021-34555
OpenDMARC 1.4.1 and 1.4.1.1 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a multi-value From header field...
CVE-2021-34555
OpenDMARC 1.4.1 and 1.4.1.1 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a multi-value From header field...