CVE-2021-2483

Vulnerability in the Oracle Content Manager product of Oracle E-Business Suite component: Content Item Manager. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Content Manager...

Microsoft Visio Memory Use After Free

The vulnerability in Microsoft Visio’s vector graphic editors, diagram editors, and block diagrams relates to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...

CamaleonCMS security vulnerabilities

CamaleonCMS is a RubyonRails-based advanced dynamic content management system CMS from the Camaleon CMS team.A denial-of-service vulnerability exists in Camaleon CMS versions 2.0.1 through 2.6.0, which stems from a vulnerability to uncaught exceptions in Camaleon CMS. An attacker with low privile...

GSD-2021-1001686 i40e: Fix freeing of uninitialized misc IRQ vector

i40e: Fix freeing of uninitialized misc IRQ vector This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.12 by commit...

UVI-2021-1001579 i40e: Fix freeing of uninitialized misc IRQ vector

i40e: Fix freeing of uninitialized misc IRQ vector This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.153 by commit...

GSD-2021-1001549 i40e: Fix freeing of uninitialized misc IRQ vector

i40e: Fix freeing of uninitialized misc IRQ vector This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.211 by commit...

PT-2021-26049

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.153 Description The issue is related to the freeing of an uninitialized misc IRQ vector in the i40e driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...

PT-2021-30151

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.12 Description The issue is related to the freeing of an uninitialized misc IRQ vector in the i40e driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...

PT-2021-30088

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.73 Description The issue is related to the freeing of an uninitialized misc IRQ vector in the i40e driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...

PT-2021-26156

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.12 Description The issue is related to the freeing of an uninitialized misc IRQ vector in the i40e driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...

PT-2021-26093

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.73 Description The issue is related to the freeing of an uninitialized misc IRQ vector in the i40e driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...

PT-2021-30044

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.153 Description The issue is related to the freeing of an uninitialized misc IRQ vector in the i40e driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...

PT-2021-30014

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.211 Description The issue concerns the freeing of an uninitialized misc IRQ vector in the i40e driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-26019

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.211 Description The issue is related to the freeing of an uninitialized misc IRQ vector in the i40e driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kern...

Vim buffer error vulnerability

Vim is a UNIX-based editor. Vim is vulnerable to a buffer overflow vulnerability that can be exploited by attackers to cause a heap buffer overflow...

CVE-2021-23449

The CVE-2021-23449 entry concerns the Node.js vm2 package (pre-3.9.4). A Prototype Pollution flaw allows an attacker to modify Object.prototype via proto /constructor payloads, which can lead to sandbox escape and execution of arbitrary code on the host. Impact is described as remote code executi...

Command injection

LedgerSMB does not set the 'Secure' attribute on the session authorization cookie when the client uses HTTPS and the LedgerSMB server is behind a reverse proxy. By tricking a user to use an unencrypted connection HTTP, an attacker may be able to obtain the authentication data by capturing network...

Juniper Networks Junos OS security vulnerabilities

Juniper Networks Junos OS is a network operating system from Juniper Networks, Inc. for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. Juniper Networks Junos OS is vulnerable to an access control error, which results from a specific...

CVE-2021-40499

Client-side printing services SAP Cloud Print Manager and SAPSprint for SAP NetWeaver Application Server for ABAP - versions 7.70, 7.70 PI, 7.70 BYD, allow an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application...

Libqt buffer error vulnerability

Libqt is an open source software package. A buffer error vulnerability exists in Libqt that originates when rendering and displaying carefully crafted Scalable Vector Graphics SVG files; this flaw could lead to unauthorized memory access. The greatest threat of this vulnerability is data...