PT-2021-26666

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15 Description: The issue concerns out of bound writes from debugfs in the drm/amdgpu component. It was introduced in version v5.10 and fixed in version v5.15. The actual impact and attack plausibility have n...

PT-2021-26598

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.16 Description The issue concerns out of bound writes from debugfs in the drm/amdgpu component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

CVE-2021-31884

A vulnerability has been identified in APOGEE MBC PPC BACnet All versions, APOGEE MBC PPC P2 Ethernet All versions, APOGEE MEC PPC BACnet All versions, APOGEE MEC PPC P2 Ethernet All versions, APOGEE PXC Compact BACnet All versions = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and...

CVE-2021-31884

A vulnerability has been identified in APOGEE MBC PPC BACnet All versions, APOGEE MBC PPC P2 Ethernet All versions, APOGEE MEC PPC BACnet All versions, APOGEE MEC PPC P2 Ethernet All versions, APOGEE PXC Compact BACnet All versions = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and...

Huawei HarmonyOS component incorrect input validation vulnerability

Huawei HarmonyOS is an operating system from Huawei, China. The Huawei HarmonyOS component is vulnerable to incorrect input validation, which could be exploited by local attackers to cause out-of-bounds writes...

多款Qualcomm产品缓冲区错误漏洞

Qualcomm MDM9206 and others are products of Qualcomm Incorporated Qualcomm.MDM9206 is a central processing unit CPU product.MDM9607 is a central processing unit CPU product.MDM9640 is a central processing unit CPU product.MDM9640 is a central processing unit CPU product.MDM9640 is a central...

CVE-2021-22457

A component of the HarmonyOS has a Improper Input Validation vulnerability. Local attackers may exploit this vulnerability to cause out-of-bounds write...

Huawei HarmonyOS 输入验证错误漏洞

Huawei HarmonyOS is an operating system from Huawei, China. The Huawei HarmonyOS component is vulnerable to incorrect input validation, which could be exploited by local attackers to cause out-of-bounds writes...

The vulnerability of the ati_2d_blt() subroutine in the QEMU hardware emulation software, related to integer overflow, allows a hacker to cause a system failure.

The vulnerability of the ati2dblt subroutine in the QEMU hardware emulation software is related to integer overflow during MMIO write operations. Exploiting this vulnerability can allow an attacker to cause a system failure...

CVE-2021-42556

Rasa X before 0.42.4 allows Directory Traversal during archive extraction. In the functionality that allows a user to load a trained model archive, an attacker has arbitrary write capability within specific directories via a crafted archive file...

CVE-2021-42556

Rasa X before 0.42.4 allows Directory Traversal during archive extraction. In the functionality that allows a user to load a trained model archive, an attacker has arbitrary write capability within specific directories via a crafted archive file...

CVE-2021-38449

Some API functions permit by-design writing or copying data into a given buffer. Since the client controls these parameters, an attacker could rewrite the memory in any location of the affected product...

CVE-2021-38479

Many API function codes receive raw pointers remotely from the user and trust these pointers as valid in-bound memory regions. An attacker can manipulate API functions by writing arbitrary data into the resolved address of a raw pointer...

Rasa 路径遍历漏洞

Rasa is an open source machine learning framework for automating text- and speech-based conversations. Rasa X A security vulnerability exists in Rasa X before 0.42.4 that allows traversing directories during archive extraction. An attacker can exploit the vulnerability to have arbitrary write...

CVE-2021-41160

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. In affected versions a malicious server might trigger out of bound writes in a connected client. Connections using GDI or SurfaceCommands to send graphics updates to the client might send 0...

CVE-2021-41160

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. In affected versions a malicious server might trigger out of bound writes in a connected client. Connections using GDI or SurfaceCommands to send graphics updates to the client might send 0...

CVE-2021-41160

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. In affected versions a malicious server might trigger out of bound writes in a connected client. Connections using GDI or SurfaceCommands to send graphics updates to the client might send 0...

CVE-2021-41160

CVE-2021-41160 concerns FreeRDP: a vulnerability where a malicious server can trigger out-of-bounds writes in a connected client by sending graphics updates via GDI or SurfaceCommands . If updates contain a width/height of 0 or out-of-bounds rectangles, missing bounds checks allow writing to memo...

CVE-2021-41160

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. In affected versions a malicious server might trigger out of bound writes in a connected client. Connections using GDI or SurfaceCommands to send graphics updates to the client might send 0...

Schneider Electric IGSS 代码问题漏洞

Schneider Electric IGSS is a multi-player collaborative application from the French company Schneider Electric. A code issue vulnerability exists in Schneider Electric IGSS, which can be exploited by an attacker to write arbitrary files to a folder in the context of a DC module, resulting in remo...